last executing test programs: 4.753257289s ago: executing program 3 (id=4887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) r1 = dup3(r0, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2000}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4be}, 0x1c) listen(r0, 0x0) futex(0x0, 0x109, 0x1, 0x0, 0x0, 0x49) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000100)=0x7, 0x4) 4.71600446s ago: executing program 3 (id=4889): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x11, r1) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000002180)) write$selinux_load(r2, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "79a413031fc007619cc2a25c749126cb43a1c463a36aeb7126c9c9435aa2b32268b091608e103fc1a5d738496954d6f9b102a1c57c86ffc9679d816c"}, 0x4c) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000002140)=0x5) 4.71536375s ago: executing program 3 (id=4890): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001800)={'syztnl2\x00', &(0x7f0000001780)={'ip6tnl0\x00', 0x0, 0x2b, 0x1, 0x3, 0x164c, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x700, 0x1, 0x800, 0xfffff834}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r4 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000400)=ANY=[], 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r5, &(0x7f0000000240)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x385041, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000380)={&(0x7f0000000140)=@l2, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/7, 0x7}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000280)=""/147, 0x93}, {&(0x7f0000000200)}], 0x4, &(0x7f0000000400)=""/183, 0xb7}, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x2) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000740)={0x2, 0x12c, @pic={0x0, 0x2, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}) syz_usb_ep_write(r4, 0x4, 0x1b, &(0x7f0000000000)="214e84f9f0e47775a29e6b6a3cfdecb2e48db6a11be2f7a1c43ac3") 4.171275348s ago: executing program 3 (id=4897): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0x40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x0, &(0x7f00000000c0)={{0xffffffff}, {0xffffffff}}, 0x0) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syslog(0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x0, 0xe, 0x4, "52b16000"}, 0x0, 0x0, 0x0, 0x0}) write$UHID_INPUT(r0, &(0x7f0000000400)={0x8, {"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", 0xffffffffffffffba}}, 0x100c) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="500100001a00130429bd7000000000000000000000000000000000000000000020010000000000000000000000000000000000004e2400000a0000203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a0101020000000000000000000000000000000032000000e00000010000000000000000000009000000000000000000feffffffffffffff0000000000000000000000000000000008000000000000000000ee000000000081000000000000000000000000000000030000000000000005000000000000000400000000000000060000040000000000000000f9ffffff20000800000000000000000002000481680000000000000060001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8d6a0000000"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 3.832582753s ago: executing program 0 (id=4904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1ac, 0x17, 0xa, 0x204, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x905}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, 0x1ac}}, 0x44000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x130, 0x1, 0x2, 0x500, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0xe8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x39}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x20}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8000}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xb9}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x80}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x5c5, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x24000805) r2 = dup3(r0, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6gre0\x00', r1, 0x4, 0x72, 0xc, 0x739c06e4, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x20, 0x7800, 0x80000000, 0x200}}) r4 = accept$inet6(r2, &(0x7f00000006c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000700)=0x1c) sendto$inet6(r4, &(0x7f0000000740)="68775ab553821e88087285d09e6185debe25add434a78cec2de0414ee6771663a4c77c82a88bd9fe0530b1875cda6e849700666d7ec34f5dcc86ee3673879fcc2863adf98340e3241424e692399fa1c864b5a3187ccf4b196855b0de7f68c89152982267f19d21252ce6d492ff800c24846e708e48baf80e8f3cba4b4af2e1eb8e398100916d14426689", 0x8a, 0x10, 0x0, 0x0) r5 = accept4$packet(r2, 0x0, &(0x7f0000000800), 0x800) sendto$packet(r5, &(0x7f0000000840)="5bf5bf9f8e14e485d9501461c2aba0f053e50b74c85a5bf68fb8e113b965293e32c6fd3ccc5cc27a4f8154977595a23d996de2d920da2d6b16bdb980134eca051988c5f0ba657ab71abc79c11c5d8377acc93eaf53d5d7146bdbac9afb194fae1591a42636dae70ee436b74de625ed3039d9b9ef84fe242b9b041c109f23fb16c9978e051ae209ddd2c388ae0f0a25a75ff8d5fa418d4c4fa3467a8e12d9336fb2b64c72453ba70bb17ce69f68e845", 0xaf, 0x48010, &(0x7f0000000900)={0x11, 0x15, r3, 0x1, 0x81, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x2}, 0x18) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f00000009c0)=0x2, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r2) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000a40)=@req={0x40, 0x8, 0x7, 0x80000001}, 0x10) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)={0x40, 0x9, 0xb6, {0xb6, 0x7, "50287dacc84fb9662497b2be41c56f9b3d1542db5fdcbeb40d9ae06e9babd5679d3160486aa3814bdebf24bca781e4a5856e87f30f75efd8a095006430862ae3e48ed30a5aa661f058d28900cad6dbbc965d5e349b6ea8db6d16775714db487fa017885b33bdae09aefd2ef6c647ae62b063b1566fbe8e7672b3a9eac11c8a7d84d66162e850a64b8e5d9eef54c3a335f0552bb21e5b4eda7f9c77d5cfa55e023a547d64115107890b2f0451536c520922f58770"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "c9db91af60e31e2af86e357ec572b5b308c3e39816d0854133b4"}}, &(0x7f0000000c00)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x1, 0x200}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x40, 0x4, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x4, 0x6, 0x1}]}}, &(0x7f0000000c40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x1, 0x8, "f14c50f8", "62e65f5c"}}, &(0x7f0000000c80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x18, 0x80, 0x14, 0x3, 0x1, 0x1, 0x2}}}, &(0x7f0000001140)={0x84, &(0x7f0000000d00)={0x40, 0x5, 0x67, "a46cd2e0aa1f7794bdfbe029b83f832639057ec9b41dd2ac7fe402a9d6cd271ddcf0fa29daba4113ea629aff4b41a1d21252864394b4762b74602999a156eefb4ee539beb6d18bdee75beda03411ee8b47f93a33280c101c73842c7f4c01c891610f43659ae01b"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x5, 0x3}}, &(0x7f0000000e40)={0x20, 0x0, 0x8, {0x0, 0x1, [0x78]}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000ec0)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000000f00)={0x40, 0xb, 0x2, 'qf'}, &(0x7f0000000f40)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001000)={0x40, 0x19, 0x2, '\"u'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0xa}, &(0x7f00000010c0)={0x40, 0x1e, 0x1, 0x3a}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0x1}}) lsetxattr$trusted_overlay_origin(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240), &(0x7f0000001280), 0x2, 0x1) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000012c0), 0x460000, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001340), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x30, r8, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x9, 0x8001, 0x14cb}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000001440)={'syzkaller0\x00', 0x400}) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000005880)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005840)={&(0x7f00000014c0)={0x4364, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x40}, @void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2144, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2130, 0x4, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xb6, 0x2, "7b70a3c8c964a0284939b15e466320d32b8d254d04393a6eb8b22ee19e2540e24f52c82b618267a6b5a85d4a60610fdfdecd21d6ce42038af0107268e0710121103cb557ef15916f589a5d15d829165276d482b701ec3e62e448bd7d8558c18fd3befc4a7acf3dce798935dedf39e5772b40401b74dc9148350b686eac7e4de1ea536cb6128ae4bf4c82dc5d28e2c5bb16a151708221727227956bb489086224fd006793f02bebf3ce3ecda7f57fff2a1c5c"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}]}, {0x2064, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x1004, 0x2, "daf5e97406f597254383f58c103ebd46b2d917fec3e0ccaa6790367701d8609db94215c27ceb1052c9acd1b934be8e65f2a7cd6037d961d2677da4e7c3b3c9aad59f139292206d7536f78b5fa4364abe6004a39257c7a6f0b6ac045346f2716adb6ea86373500097d9284f1211b3f61b97a201160e3a55da00f2358b274bdc1cb666fe7c60da2f6630a79725b7c25c6f263a32d9a0b45dfb5acaa51faca8a61885fc5e0b07e8574af4ab3fd03887edb0663bedc6c849185db9c36d5f5e3e8d76ea29ac0313f680c0c0ecb1753b8fea1ac12c05d11c7e9961d05d03c58e2672a93a9abed958fae742fc6d1ba1d2c8a9c91b5db69f82228e47d6a75e16d7bd94f1a087ab69a1cae871c0099df9476af5496e23184f9dacf8226fa63f9628c6c217e11b072a0e380166615f531d3523338366b9f53e16477fa89747d70783050cd8c4f1c42dbafeb1ac9082d6400c02ebf9305c53830380523d5331804a14a2ed48cc7248eb363ea8700070555d22cb0de47674166f10ff61f4e87d958439b1bd500fdf46b8f59b452995b47877ed62f0dd43697cc52fdc4bd22ef90b384e00fb0dcd6c9d52accb4183485e03df8e645ad5fa24229eee573b1f75562ea777ee2f4afac69cfda5a6173a34870570e94e4f00decb9bae2524333517b00242e4942a482f9a551b2393521c19d14a4128736f3027bff280682cb9e48c763d59704b51dfa8fb979b16ae63ce634a83f05f0cc9fd5f4c06f94a8c1d5428d39482b894edd1a69706dd0ab44e4993f1c8b108505c2ecc6a236a4e0b3868f9518a3e100461002b5b38f46833a475501e2a9d1e689414818d4a0dbbc73274f87ff3eacd5971c5ee1ad159789ba696c149bd9189d2e8a021e3710ccc02e8100037e756368368c7268c36925a20522ba0b936ca42c817b0f8dc3f7d92566eaca63a9c3b2ab70cc67c56fb0fe69d5281caba58b06f99be5b1270fff51a53bbf8304db14ad2ffcf3543a38795efefef1548c569405a6d0ac7ecfcdcab37fa80172c69122dbcc66b0567dd48fc89548a63ddafd5b904410350826273f5d0818face6bef0f6e9ce8cf42d85cbfa69bf76ae90cc4775e05dfbb71a95c15fe42f0c1c91d1a9e22eec82b4270c5019efca4cde41d949cf11a3aeaffdac68225ba4151fa796b757d87bfa96c88b437c64364d35d615f35c07bace7d5ee1fabb17f67b7a1caf35015bb359359c2df6ebd7a439f37e95783a55c2a2e0e907696e0671bd153c00dfe6584ce9cabb290d7f44cd68496f53551d796a07ce811ccb4ddad9c9e97277c1bacf4ea1dba2bc0afa7b4402fe2e7d7aa93e15b03d22cfdafe9039dba6b24a056d535ce28ace5b5b3533c3c4bc6986aad415e0e346aa5a12989550e3d792dd49a3f118be19a633b5d1467c2316cca5e1008fada3ae6ee4a377d9d427b95de9e724b9004ed0bd1fb51fc11205d80bea9e7e5b44a486194f24b952a5dfec04be73be6410a8f67eb7926605fc6a40a4974193307eed617fc3ba753e2300638e431c2d643cebde4953c88cb6aec02ef0f1d8dfca47ac2155bb0baca91e1bdaab136e63a8589a7678f57c116a7bc5dec4a0a0940e24b0b982a2264077f4f962c7131830cf42944977efe4742255ba510705b2e837b47bb635df935c8b7c36629bfa926522db6a322aba1133817e4e19089d15e02264632369ecc9c6c2aeb9fb7d22674802afdb9f57f428539a36cf9cef70db8f3f3cfd036e406728381cd3c5f450dce1587da709d3e1ec6cb9e77c8391c9a78b6b08c9b6f6e6b04728b529ca5068e10bb79b731f056af389142b55f174b59956bd785c6041bc14d0737d0a3525bc34717d2b7ae729a1e513a941ba27b16efece2c6ed794f25b62ca61861397aab7c4fe599b83543ec7bf44c9c887de1264fc216f678c6d41bc48980e455aa7ede1e8c2ae563cd9a721b6746c20ccaba7f2894fc0a410b40b3a556141769857af6e82ce8191d9d8c5d2bc150bc3d33a3b10e229d47df191f6e0124019387461e7bf5c8a64314a4341795bf892d8b20c778f579920f058c9142475282afcf96bc93d9f70937c99ff5060d8a06afca23891f65dbc0aa590c5a7c1622fc4584c0c9dcf5633dc2906b82c7bc0abf6a0664319496e564b5f4c28269e2ec74682d1effb528377da0ce46b7200e12c8c2bb35847cb111f2168d896efdf6983c3efd1083b7a22ecb39f032bbc9df24893373a73bbd0904951617124413c397b648c194d04fb11f0e7ea887ec8a72da946849cdf3c8bb754abfc4af238e13e9818f082e4c7fa89b621bd38498cf6db0aab131e65918c60430753dd5529ccda08194b0cd16a1bb1ed5f689a8e6c9ea05a5eabb63ceff101b34d6ef2589b8047fa390c27627e583e4665bf5c3ae5be6dc9eeda666553c09f27d11052a0ff4d260416adb35d20e5f2fff2ba66d1be9136e0a4f0dbbd0b69d1ad9444351ba276a04f95635e694ba9272cff9eee07b48c3684847ea954124fb78ee857df3c98c0d74b272c03023dabaf9032b69276e237d2af45959cd98c1032a6db3d2f4d583bc6a3db4526317aae1314cffd08308a183203ba938bc178170a6229b0a3716b23c52a6467fc2ec498b2e9c7f86a45052ea8f362e110aa16ac867cf8b0a07e6478ef555e704fed481d976fef1e1c4f5d2b6b52c46ee1f6996051472e7e1e7906a1c64f87b5494322c6fede6e813a07f60fe0844ad473be3f69e9dd5c37fd8deacf6802e1714361f3b4ef5a4fd1c231205bc410c3c0ea3ac77b79adaef22d9df62d577b0f498154463b834e7e0eeafac1b5c19225e3595a50a934b3a3026f720b13f277563c478b2b8e38533e6e1cfbed5e8cac13699e9a792dd3fbaaf030e4e8c7cc4fbcf8e090146fd91cbf329b21b5f3b86a24da387a929445cf808b80a69b5860fdac3e0066162b80c623753d80ad30dc30a07e7db828d76b1eba5fc2aff2ec47f65b079f2990cf4be68b2f69d0ec2ccebbcbcbaa157832effd48142191e334f5ef7634d00bfd9a236189dd1c137f45a57c8012c896b95a3db9d7c8b50c2fc6af2f4296771d71bc4d04e732a9da16f8e95a86c2290513b30f4f3fe0a57c43308a4510632177b95159d1c7e4b5c6341778af867d517fecab089a5799c4fa135ef4dd0145a4b13450329b6be63cba94d238028f2daf13e1a77f8aa15b6313c69cbedade32b4c3750197941c3e91db10ac6e50230d79377d2d4185c131c6b87c3559c5b93bcb1cf2b87438bb062b16a35590bb29235e3451b396ab2c12d39a6edbf8ce18d837586085933789e65c3e37d13804ed88fc0cd0e8d9150a5991dff64e807194fee7c8614f036abda867773c2971cc75045bb178475d343e6b6c0190c477f6e7cecee7c128c321b4db8b03c8b6e33b84130d5c1b3040ff9eb92a744f45e981c1a7444345cd6f0cb7e0f93f2461ca69c2ce57ef357b1e76b58aa315fedb234ec183f0ed9ec59cd748aa25aaabec23ed26200d382440cd52816863193e246dd71fd66b9a9d841af7b974e921267fb1b84ce33c3e128697611a8a60425b5a21c0b8d970d2d9df85ee0bdc625922a62008ae51f0f42d5fdff3cc1acb7baa79ae4fc2666e6deb6c8891578362e61441451c86a37592986c65232be8a42243fad1a005ab78a470d50214b9170c9450306e1eb2713288029538373af85867522a498f413513289b083c178327547f3d83fb93da329861f6344aad5bee8d4f3f08782ec556956f2051631d67da8d21f5492e9cd02048607b06f743ac3482265c28b3907a857a24889cf66374dc39d8a52b7689ff3f5f6c1bb0ec296c7990eb2c6c58257062f7e7bf8161aaa61e5b9041cc97ee196c9869208dc3e5eb693b09dea1db9a21f62c0ad247a1572f9d7ce25fe4a0ede9e86c24f4db3df2c06e8119e8d5aef34ec300adfb608a7e93c365763b45b4a882e1de8485e82fc4cfb159a68aadeb316bd0c9aa458630a6d881e00092232835cd14e65b18f307e02b1b7e7645081e47622a55aae2ca08d00a67a238f57cfd61cdb5be5a4cef5fa3701c2ad3310e0a4c506735a88999295575ccd46913c17b6c9dba6c9055dd8efd484ae0d0b49748b4cea64f8b196b6d05b4870431a5cfc4a251238ae723b7fd902f3a75fbfdee1846740879a8e50f3e812a0873baf8952ca01877924a0d61b101bc05bb3027259d0a87e608c1bb1f1aa9d2d3f1cc159d39cd2acc146f2e1cb5a015121fec54b9c27fbce7535a92e3af78c0766d03bfc2dd60ad2f53483b134640115a12cb27486662952d2cb2f263e7f4d3b9ada57ab23f70c1a6b336281ad63f0936d863525e93762b72cf7c4921bf786ff45b0492ad9a12527908edeb13d9b20f3b9b1f25fffa480b38ae84e033ebc154143ca5f5f7c16b2a9e6968307a2b225b6aa9fe93173cb53a3e87973ad1de6b7fd3764d7a5116b99e405b6208698cf57041477ee2c1103ed30b2757fdde6ee581ab30f411fab3ce584439e7f77f8e98ed59a9482c776fc94ecac8fabc25ccb6a73ccfc52b6c0ccab8a7907b3d1d46787a8270c6e441246dd52b9f2d53497935281185f9b322b9783d2048fef506cd76985f2330d58dcbfe23bf3c35c192391c7aa2341535835593a00547cf6089275bad429cc92c725357e62853dce43176bb1c4b32b7f79ed165a2f59a4762de8c546e63a5d912d3d8afd3b98d72b78ac47d5d64c61a2fe94cade2c4dcef0a0d06abe1aafe3aa66d48bc087e84da348c6b084f8b1dfa04c6ede331785da35f1e26ac2fd52e247ba4ea102e2b4b64c8baf8bee5c0e0e54347bfbe9719c20c806996ad1cd87900fa6583828967eba1e9380f64775041daa10bf6de53b967404b05be9900002176fd304115f9adee1bb20050990090929fc429d83d7f0c2414ea1cc83dd3d20f00d436b95c31ed501a146773bc454eeb838760aec12842bcf50be146c27f08e23990fcd6881e8cab616a630b81fd9d91c90099301d21ada65fecbe236956f09e32034dcaca9b19ae2cde9f0b516420fd955f58136bce7972603e963233c1d87b59dd95a9584caab656667d885e27602fba774ba0027ce728bc8e6d2bda907d501bd3f2690994361e6ed3b985c7214faebdfd83cef6eb5cc6bfed7bcd7c62625745426a2983115d2a50074712f965dd7ba9d7ba14acb6e261747e9ffa01f5be233343d6beeb3166950c2d40e206a278dd0bae9577d5fc9155d6b5c2ea1f9f127066da9b540116013e477437c612ae3da5176dbe9c6bb462151e95dd22ab03aa8e25b600df127b06a45ee5c8874810491f8951ebf0579d8d505883a15de3fd8cccce45989f82cd4f9ab9d379c7c86db0fdf43344cb2fcc5774a3e0f9fbf9dba7e5bd4070637ee7e9a86384b875cba525b5ca9e0f1782722b95ec4a251885d3d5e7e2d783c6e9976ea7c5aab7cb5a4546d12f7c960de67894a9ab5c33f420be4b910448424ac4c1b81cea4fc889a57cc493859f2986090edc067ff8fb14320abe19da3050dbb51e3e39abf06437e9c795194ee313cfcb78aba48d2e939b815c0bb78e7caf6ae865445419fe431c5865bcd9531d8f83a1af0d569f1934ebc3b0a0b28379f7518053806c8a6320cb3aaabd0c742dc87f857a74a59d659ae3f6e8dc6220bb58cfcb9600c7ded98e9c086be48fd26d76bf762b3e1225c87c76a321894a1aefd46d7abf882f3a919306d4343f676ed93b76f23b3590e5be9112c7c88f26fa24755ac4dcbb7326a33192fc8a6d46aae618aee28b0cfd927f4df6489db5258a00576c4970c246aa53bee25dd4bf586e"}, @NL80211_PKTPAT_MASK={0x58, 0x1, "63b2a7f1794a632780622b531e2c7324f6140e68b5f1be4f15919e79606b72681709a97231e0951bf696d369f42123bc09e51e044c79530753783344bbaa2e909f77412398f8c143eff6e48d6c1b762e010b0bb6"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "da1db1e6cf8e00e386291dacd6b6d8ac46869818d7cd7c29589efb0d135f5daf0648ed3ddd1a405a05309d2d9d02024fde564c90e3a4c4ace4789449d3638539dad00485adf874467dd38f92c68f17d2a82b61f0dcc14a4066aa82181cff95f9b067aa6a0c145fe4fd7bb2a6e7a4a6420a2d3d8df4797d041c84a4c0056da793b8c0e00e27f2d90904c5dc96a61992fcabc62b29e8306be35b06960692bd3f7775f1ae09d6c11bc94bb1a1e0eaa18d9e06e108133ec50d372b6eb9e7fa601bb4a6f782ea84e7c7d70d0a629098a30d550201f847551acb9cc21e3dd6064be595a6ebec664db8a8540a3689204e3ae92bfcfa2d5318d5564a2e0c7edd3f93736b8df273e5b020da5e3effd7b10e73900f7124e1739eec794fab10cf9a71693c77d5cc90a7f5dd4d75246dd005cb2c3a8e00e2fd0b7b16c531be3c1a65c3b651e663ae21c43c8832f3407ffaf0558bf201e945b86aca01127389992cf54e9fe335622ccc11fe32616374516e33b8ce820ff002e8fdea789ec205c8b65c63f419d30a89b3b7019917e39f007a8c9d678e62ec888b770fefd0b398a1ce487b35ebff736a3c5668fb55335fd1aab890ddd82e4ce36b6d9205fbac5c5185d61f510f67da7dd44348cfabccc83d368177215a402900bc5fa5f80e6b08a007ecfdde4ef36eb0e4835452ad4aeab867db8c2bd6e6ec12345d299363fc12ed935de0a7a92cb142e959a77c87fd3ba756e104bff59fbeab1fe709a634e9c6f4f1950123052e89d29053dcb6f522c2dcf065b568ff0fe1c9eeb363fec26b7971e7240c1fa56dd2bc8c2c9c1b8d06545635dca9b2ad3573cfca97f33e933daa3342dc7c1cbacc1e9b2b88f9cae4989da64602ac264c29bbfa45a4df7a5cba02705e8292167e8957de3fc5172ad2a3f2a2f6535f6643f8295619965cc646fb5c33494ef022a16932f00e397083354d87283395d79307942bd45a1818b23bbbdee1e9c6b725d68896f64d7781f1eaf8280ef76d7bc5941995170ac8bdc6d4c8516cfe3bef1eb513010a0fe3527f021231e436ad0590dbf9ba99dacdb4bf35085181bef998cba34bd89b1c0b1f445daeadb4cd7efe6d45af0eb956281eb5b3b36bf58f51421f739c964196a3ced17e41f4298489390e7907308119e56ea752b74100b3f6b19bfda6fbcd303c6c0b53cda20391365ef64aa268000fa501f266bb12d233756f1c1d3b27e7b47bb8ce9cd23d82e451500d2b2cf0000eca74721a8fa96d41b76be89d22f64ba13a812cf08128d3762aaecda47e6b54e9bbdcdc5b91e00d07b90ab04ca6a74a1b561e8fba867b56239ed9e2248aaeeb5bd83a82f7bee7b31d8134bac869c0f8e6584b7916b00d4d14a2953935c78b7ef437f01fb3efc1de6b5b6194989ea348cf0c62d5a973c8ccf99ba37e80a19c8d811ed322339ab3ff2db2e2f08f4e64f6f042c809f294d9fc394ed771f9f02e4309af111bf1b900338aecd00ed51f2de2fd9ef7ca817cf1a17706729d5f9d9d52a03c9cdc3d86e2fb1582688802e7b814056e371bf23d6fa8db3f228782e9b92f2b59d0cf0765ba366171de0722fbe45159b72189efa16369b4373465bbdce646cebe21ecb863c62e18e575553cb5fe8054ea806994dc6c9ad3f61f6bf87fece5ff053944986af20ff78249543a773af88086d669e3b0e716e9b06bb8e5c07671e20f94b2cd64babd33a0ba94ae4325d97354a21f1b95652db5caa881e48364069cc5d3a83318216ccfa7b813c38ca5ca440c62c3c3a691b731cac1a48dc2f5bddf2cd3a8d005a6121be9be44e7b392aac6f2a20870bac2e6940445ea84bb23bf0f08f504c5d176c3c3f074adfa90e77bbb8aa0fb1419c8f8a005b264286a3737abbb65cb92d3e9efdd672427b161a7ad36f2bc9eee6e6b19a81a124482bc8093e1b92d6d2444be2da2740ac6d25a85d53a4a9e2d7eb51987b460df23b730b43a79786cd53c5a97f3baf757a802521d7dea9d90a02eac8c4bb851f4ee5d6c361866c292d320d5dc1f9184921c11f44d1c216c118c113a6d8446557993f6a3774a9d82783d25f5831b8b59cd89f30ca82bec9add31840ae69e0e83aee6c09f4334a4e7c6bcafc402a6e421b346a3dacf06401ef2c3295beb97967e745d922fe18f8520e8be54a4b499703c7a0e4b340c1113fdbb8d2f4b5ccab1f4cce2cf959eed8200749ac7586ee068c9be0d5445b30a175a810cb5d31e8a65582aaa75850edbb3abaa54ead5f83453019a4a02cbb307430d900e3e5b9fe38b80e5a4c84dee29cb0915ef39a26e98cb8b0ba293e6b271d6aac32002fd40f87c79e504b7019d8e844c658fe67fe8a474846fb543e413b2d97142ee522efc0ef92d94b7469fa4bdb98679cd2610a8a2cd21daf6d616803c869dde85108f7eb75fb30c1406ca237876f13b19f1cc70cff5245d9b8fdbf4d001bf0c68de895f3853c0bf8966da5377e90e8795954b39fe8484d9ea9bbe20971f24515b991b5ed69d048cacc590c0cf0c7a628a2d1c6be21adfd2afd4cd2762155c8acb6f3cba9d4adcf460cec1a5ef21a7b088f1e9098f6b6c897b25f56f124125208f2f2d8524ab104ba391b94b4fcfeb03b424d63fed311d6cee361a5052e7166e6efb7c8c29fe15a6270cf888923316b56113e56dbacd49c5cc585af7b41b6e1286aafc88039d1076905db6a5c179ccae89f178c103e9f127e0949e7d591925477aa9af7788aa26e8971f7b1bbe6d3e3cd4c13c1dd9751d544618ed4cdab07625683c922950bde0655cb257a962f5b30b02c9cfbd202c697adf6e8ca05ec3141fbace0b53242fd54814cc44166d486d9549c2767c1a2faa69c1db83573d147aaeb5422196f15078723756d2d6865ab1f77131753bef5b30219ea012ace13b1d0674c49ba0b1389373c9524b17c4e58d99b0c1f25746f71866e86d77ec928afed93493d88818131952491b692a13fa08e2cf5432d46a455e56ee7d61c08c6ec1af2c100f6ed56ba57aff1d17a9d573d0d5c213af16fd667923f15b190a9c90efa3e5ac6faf1eaf992c9562f7487ab59008dade18dcf1cc5c1ecad511c1bd1cfad8645c1003265c149b9c65a37a3004c47a324fa1e3cb894470eb63d2825fcbfd4d7b2f601fa95a5bc21d93061718e4c6655f0bab2bf4dcc882f84265c8800cb9d30d000ac73a9a126e31e10c1a25aa29a40539b6afc7a99f8a8cf9dff6f0de8a5be777bf847647c462af607f4111c48e48d5c6eac464122b6f494dd70e5c2439370801af2d9aa367452768c48b22d37736f841356b95d5952f03a5461c1884f1f5783a212aaa06b6a1ccc2c0eed6a111946e80ccd70c9ced03ee083c0149384b637beab208726fd20a1b7f3e30cc07d14cdd487bf288b53e554fcc457abe32fd9c44fece4d60d95ad9f2b301092b44407895ceb6ff1a8a3814528ad1098a9fd51f3807643d880117ffaf83216190a91faffc3b9cfd3444c802d2b6b5f56247733275aedccbe1e02f6c7de4eb64b676815e60609d1becf320271b778bbb3386f74c0f5b94aec8055259e0afe826414cbb42c586c10eb12cc1f203d05e66334bf2a34db4b03e59ee9236aa07159d632e1b5f1d239599fa939b0a7b9dad5af287eaf78467ef3b8144788721a0f7390410303b00d7bfd059041e47b3b309234e37f2310404955a9a6b1daafc48bbb46486193ab8eeb63b59556f787c501afe03504fc7d79016bd28850f2459c0dec25cfb2fbd95f025a263a29070ab2e2b1f6ce90d451079e82d2b1c2907a79be3095f4cccae5e3656144479404246699f94942a1d750b6e56ce1333dd8230bbb4e5049281a4736bdccf82e657067d1144aecf52584cc00ca97268dabfc720ea608b68321c364625c5d9315b0321c897ee88f4a61a660bd010bbca851fb58912bf0571c38fd12a2838857a24231d2ef170a6433c24209fd589e76ac5c75d57a64a8f6af7c524f2ee987cc89e5e7d997c8a7469617c978f7d433ef35556b89d82b4c53fb8ed4a022f92e41849c670ca86687746bde43d3c0b9ff96a6c735028c0ce2fcd77dcf86bbab45d033af5a9a3db3eab93efe100b178732d821eb81fd9fc922cc39198258dc2547ad053f5587231cf3be7953238bf441ec046cbe7b8d86fb94ef3e420068746e47e02c04b2daceeb7fb8d504245e87f61011bfb1a0c0507587635a6bf8bf5d845636b0037cb8a6cbdfe1d50f6fc8f26734e3e55f17385bb4210b5a09e35953cff3228a7300e9365641ebe66cf6035147225b38c34f5d4c9a11acc351eaf35c1d02a46039a72405b1c4aa446e2c8d98f66c0869223d3a15052014f63ec205b3cd3be2b32c89a140d9bacd6de2a3ad3ceb9795cf70adc6185e141eaeabfdcf72c993032137d7130283de74c3604fda596de5aea6aa2a720b2adaac40200aac4fd1951252c5e76208626027abf1b29ad1cf90e4b95709fb1b879a2daae4ffe2447116ec01d2833bc865684b3ae891d8c7dfdd5bf48da17f96a6bd34c17d133107e1578c565129b6ce2920786e615240a1ca07fe9206b477568a21c81a78bfa339fbabb568b74965d1f055bc6846d971c0b956de97b25918c682f19f94d0e8bedb4c9d7f1cec59ca1b1dbaefac3e6afaf7d692a4e51aed7a9776fc46b8a142d978b28b79ff3ce7b5f745d3544e9aa2a1e8c90e35e2385ca2ef54020dd26ea5633b55ee9a7de99a0e5e5ff2254a7b0ac2d05ae3b99eafae884749804dff214706098a8ebd55f19d274500dd6e70451caad08e863b652c90684f02eaeaadc072f26de1b587f0e87d1989159f1e6e822a07f4de58316ed8ab51c6a1591fa3fe40e184598c1acaa130a1c3b2de3035646de7c688505c317d6c6b5714c953da1f88b4d1f62151f86b9a49e62e1b19130550d3eb0787fe438b53a5c3a11607f62df81dfbe79a3b9dfca0f23b313350c63a83d73a7cc3cd90faa4d92ef4cc9ed5fa9fb59708666c1ded497c25ba416ae2b85cdd00c7510a2d9869e0c5a00ce921ac96df593fc6beb9a7e5bc56173fd14adcffcadf88c43b3b900d482b7ea93dc04759f0263effbe396ee0f36ebf35d71d3237a7da7049c3e98511f5b27f5b4c3f3dd45e82c37d6e3c9f98e4ee993566bae534a85d2be5b770a55ed9c166ada0b06b4878c7d332e6650c40961a03ad3f58da5e0bf8c9fa2eba2e12922eb92a855d3097edc520b11b6df879fc3b716ec70247ab7ddd2bff4b9b7867590fe7c18cec2333e0b1598b819418906eff35999cb429e9e222b7a4c80c12dd9574b0ca6b492da1a0b57019dac42aed5c1833c8b209b8c8c9dd8ccc4392a7f7bc89d56eee45b62cc8484158d5a014267d4e9740077767c3679564545ae9bf6cd012d2ff02e805e954ce5843a75b574f3809e6286b5a83fd48a9512e68b56e2f4c3687ef5a4a0a8039c68b3e3ce274f5df48812b0184a9b91ab98d1d97608277b786504ecaa7f5f102f467ff56b0335f3d036d6ef77a9a28cc35156862891a0a305bdadfee17fdcead5ad8a5d4f4685b461fa4bafc3b531d2131c619251ec1bf2fea2c117f9e0e4d9961d7546808443c60e210de750057f37838a8ea4fcb1c70c135bbcf6de8595da4f85bd9454d289fbc59ed4641d1f8de046f3794e0ae2470df61da20476d372c47c3e84f95b0893c56bb13df38ed7325a67f0db178b36f8ca3fd71536cb04a9a5d2369a796e4c349bb6f58059442a3adf350a89d9a430c7f8d8207eb1a16f01c956db6c64cb6740942fe3dfc021848d9d45c46568722af0d12d92ffe2e9942a1e930339cbc5566506a7d69e"}]}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x110, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xd4, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x2}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x1a, 0x6, "4f1a086b4b8d28b3395534360318442840fb52def1ff"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x84, 0x6, "9abab3ded2a39fee04d5d1da2d4a6863bb61716df63f16f5a7b227a432cf1bac0de0359fa9bf26113078e06ad1a6195e7921e09fceeba9ae31f097911bb431501be06f9c3c31b5b1fe5993c698550fad730291f613d5bb8256c3855b45bb8677922a5330f5c2c599330e4e1c786845f5cdc2a21a2e37b6eb31ba4af33f0d24f4"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0xb}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x8}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x2c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x63c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x61c, 0x4, 0x0, 0x1, [{0x328, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3d36}, @NL80211_PKTPAT_MASK={0x4d, 0x1, "15a12e32a54998049aafce836d5f6254b519f29646c06566ad0f917efca5724ecb00cd08dc8e4d4fbc74b8e3ddaab24b2d89a7009025b713c574d6c4f44d7a7cba0ebaba4289030e99"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_MASK={0x7f, 0x1, "245e21205de03c969ba4ba35bf0b73ccbbc1e94c6f48e97775f44a4ec66160f4e00340d7bfe5a99846cfd99a3b18ff42be1fe9173f4ca20af11f0b0b35267f25baf187636e972b6ea959af396e1ccc85623b2dd48d35301e65048a6278ca83f5babfad491d2f186a86560689cf5eed48a4eb40896aa1e924261af4"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_MASK={0x5a, 0x1, "2db86a4a73e23878554f99b7ac43156f424785f5c72f2fc1130b5d7c0952f7c71513b4de9340503b68a8a567fe6b9ffe0a42866d0dc6ac4070608197233939da48fa4fe37e0b68b742cd32cc9a95d9ee3893913596f5"}, @NL80211_PKTPAT_MASK={0x103, 0x1, "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"}, @NL80211_PKTPAT_PATTERN={0x94, 0x2, "4f999fe0ca6ba09891eb0dccfaa4fd7a34c59c973e47a434430d73c19569ca9f43212cefc7a7fa3dfd964e79dae72da5bf486854f7e240ec9de39add5283703cc682b9f6557e335b7e75762e3154f80c55b638fb0b3c92f169eed884b0948ec7a9b6375e0e72f17fd503831de6ea870602609818e59ea2cff87734ce1b765d5a5859a7ae9c3c401de51b08a3dc47c467"}, @NL80211_PKTPAT_MASK={0x40, 0x1, "8099303f918ba3141f0877ade3effbef4eebb9c7ada70bc51e0953e8535de11cdbc69ffe38fa51170495e0a61f55b3cd25d1fec3ea459a8dfc045140"}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xb1, 0x1, "d6595e3803d51fbb2238d06601f2e2a59b1e91f850d297559e141d140d3abc11c7089bd18e5f3072e46cedb01046c1ee8f388639164560ce108b7fabf50df55fc3c1b9102f1359dce77aaf4ddaab0bde6094740d26b02ff39b07175bbf94ba87b3b52f27f5a2c674bcaf250d1e697e2fb640bb03cefb19aed154fa7e897d98d64689a80c5131e3368a9d516cbfe1ea3cb4a0092d86391b8aa4337df1868f79049c7c185173b0e52c8ed16e7d8c"}]}, {0x104, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xff, 0x1, "dbb46e13b602ef9548d674c6b6abf5c04f242debb32f2bec188026e934994214d5c3d5fb1a04a63272d1f0a621c22f38565af6df93eefa4df496c224edf4a5cbe6a185647a7741ac5206c1fe6caff4f0a8d9b436854e703905adf5b9cdcf4fc61cea02e562ec2ad7edd31d0d0bb482450ad8b47bad313c0771da2f14b4bbb2f497942b0838d0d2ea942be63fa9bd26ce7afadfe687fdb59baad2bb3b248e01116a92597e0f564886ff8fd1c0224e72a1247561a9287c362b6cf5ccd944e4864ebb0c1d25b322c8e34773a9d10b9c6edce41a71ec8b69964a927a4404ddd2eec8227e2fd2947932a280a57f404d4fb228e2319f717a87d40954ebc9"}]}, {0x134, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xf, 0x2, "602724ceebf3204a7fee9a"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x800}, @NL80211_PKTPAT_MASK={0xf4, 0x1, "cb8bb61e54a207af9dac0fee92ebd0a12247b554d11e87c3185d58f7a8815b481df4fcc5d80a23c9696bf31c7c469c536723e2a249957fe48899ca28459c40413ae4594d66c4e0fbdd19cdfd317ab23fc10b38ee9f2a9ad2e3b2f12761f408df2627b37a1aac69375989dec5f55adb07a864bafc07fcbb18852227eb91e9704ec21b7cb4c95fad62720431f33ef9adbd34a363c07f0139ee211d20ca11f5e5c83f399375b7633848f374919e67a414f83328facd36f9e4b7727ffae3e750fd3dec70991ce2995ef50d54345433f02bcbb09d2d7dac4085100314198c66fe7fa6c3e949fa300e425bbc091af117796051"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xb}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8000}]}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x38, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x18, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @empty}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x11c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x110, 0x4, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xa4, 0x1, "f3b441a6f36ba923228946591a98ac8d5e31339e08e479e259bfa3a00d1f7737cb562119983509c8c99058e33502965e0a1b3dd3f4c684a0d5d53cdad99fa31c24927276673aae5188e35fd69dc81c5edeb2e7ffa45826ca83e0b2935d227db7dc92dfd0e95a57caa85423aec1177399a93b729d10d90deae37e048c27f4e98ce4c7402eb06aec7629b64d43475e4496a5ab6eda794354773f6e396f41bb93d0"}, @NL80211_PKTPAT_MASK={0x5a, 0x1, "f064897e7dedb92b291c1c8624af84414ea58cf195ec6715b0d0b8ebd9727909756afbcb029445d8495237e2e0518dde64c9c038291355ee8de58bd012caf32d30a7e86f6731dbc714fe81c4b8c6e33676ccdd65ef78"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1940, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1c, 0x12, 0x0, 0x1, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x220, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x9e, 0xb, "49d5afaf2d22e3274a03eb96fb4458ace9e1e35bcaa5c466c803909a0eed51f975792fdf67abfefd8714da8cc710c726e8b22221dc220370e5030bcdb8d3d6dff74e700c26f5911bcdc7a4991fd1ca8287e3b9d01e641e355d7f09de26392458f3d9896ebb40aa6552cb3ed4a593f93f645b3cc8a68c5cc96661f3c25a06955ec73a0a05690ae1a5375bfbccae38b5b13500d8182ab1b8b08b4a"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast2}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xeb, 0xb, "2e076944a28f6b2d7bce8f414a78dbb37acfdefc6307fed018de34176e4d541f9032c6501c4ce5ae7d1f9bd8e4e96ff7e0e0cea119c7f7cb6fd97ccf81d7673fb0bc9fe0d6682a8358e4b6825a1a7a0a10ccf8805d125b9a6ec28777451933a427ccec1e7b6cb142d290f1413d4059d34fab2a80649c972359758c4af2c55d3e23656807d52207d2da4373130daf39a7313c57e0bc1771ead22c04fadc78a6c1b2f7404bbea2aeeadc6648555e891e5dafd8f1f16a8fc0f7fe84b2812b3bdf9aa244d1c8bba1869603cb0428dc33e1386494cd1313e2b26d4fcf6bdc74344ab28a0b60568e55dc"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x7b, 0x6, "a4f67c93c02fe87eba3f6354e4248caf442d8f691ff220cc05e99de803e5e894a2e62071ad8457fecdb8874902f33fc68bc7813f6b65cb6378b7ce8904b7a79177c3bf1a5c355a95f59638e66000ec65c24d38b8190ae2f70854dc563fec47c2ae080e282023d1bb9e7c29051d9d7d65909046e876bb71"}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x10, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x56}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x16dc, 0x4, 0x0, 0x1, [{0x1328, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_MASK={0xe, 0x1, "1322b0c172b8a38ec622"}, @NL80211_PKTPAT_PATTERN={0x7a, 0x2, "a344107e5fe718e56c7be70a870a93e475872864546d2ad91d2101c485cf2f1b56fd7f38347e66f9c5e4d1be7bb19655985e186ee4cc2ff6b128b57dd0c897014db269fda5d97555ffb9503f75c99e269d89b4af09e6dbd55fd84b7c38970e729294ee9227ea1ce100751ebd7d697df8f4d5ff45f24d"}, @NL80211_PKTPAT_PATTERN={0xc1, 0x2, "8698fd41f3d2003cc650fd9efa93c5a5540b4c6672de6744cf10bcac5020c3136d012b0c79092101ac21a4eeadc4eb0ad678440d64c498d2b8d0c299d579a7ced408c0a6e1e71ea791a6aad1ffdf597f88aa2f5710268b0ce960cc516efbdded67da3f6f71bdba14dc388e1b67ecab1cd0394dbc5ff35667c3ba67efa32c0a1acad654cd138c0539e39b48d392a082606f42312de172143a2c40979fe949207a85cbb954da76ec4f50e6375bf41cdd17778769f20502bcb5f894844785"}, @NL80211_PKTPAT_PATTERN={0xea, 0x2, "d5e0379ad0f79e392d44b7aecb646b6bfd268f265caf080b4d3ecc18aa43a434141587e7cc55ae162972f1b6d6e29366906c742dd63266b6d641e9bed2935eb9a27a7e2b8a81973152180a139a72a08564c620bc62a8f5981badc8d19ab8ef16e5e02d3d6258896927caf3a24152036003ecad2879f1cd87303d5eba2f162f56ea958aa4122d12061473f69a937af88f6c192f148008803d91dc8eb8aae2c0d217cfa60b11c1bdf385363feab3ae35f5b68a89ebb11d185d48f7b1d9d8cec3f2b39a45d463c3518807578ba9d34a6a1d5741bb395f42807df3bf7f8d12897c1d20484583cedb"}, @NL80211_PKTPAT_PATTERN={0xe2, 0x2, "065b06017fb4f2ced5252aaf735a98422a3e29fd336a0066bb78db09ddb6fc49a2b892bcf9f790f90c889a2cff4f0aa6aa218de10e41370e8644c7ee77c925d79fb4d688a99c3deb3b397f88334a74b63ca512afbd8eecad6255985f7bbb13a73a842ab3510092ec1056b18ee27bce88e36209a1d317301e623b1d4a98d5fd0747635616b46e95dd4748335ec9001570dad86075f398db4050640eae87a65c1c389894284abf94cf96600be2f6e9d9b3212b7839823f196bdad1061f3724a2340cb52e2745f636ebdb217d6943a6fa5357b4da426fc0ac8a98d2c2060b0c"}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x800}, @NL80211_PKTPAT_PATTERN={0xdf, 0x2, "0b10ff3e5f63cb05ed517cd218ff15bcb8d32d46d3526d2fa722e678424b46e19b75723c6e07aa0db446165f05b412638be55d26c0672a75dfcbac09c11614780d60cf86fdcadca7d16dbfa0d16a16ed52bac38155713ac6db67d8c1e9a05d6b6d2b6220888d3c2271db7d4f288b2ec30f04b4c04aa1a5f6d9e0e481c97533eb6aff94889b63e3ae90ded29a299aec4fce07c8623e8ccd6a476b8964eda74aeb976b2b3b566233f65f5cd1bbb7eb536e3ff1e168c6b272b61ae5ef71652faf965137a2c8eb1e512e915efa00fd7425c1b1dc00a3fb7c14d06922cc"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7a32}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_MASK={0xed, 0x1, "267c6559f24469c711d2dea7fd67e11b46449f39995e541b92d4766b782a2e52df6b4c437f2e0b8bc2e1d68fd0a3d452e5132a222c592662f5fa7bd75100fb282024c36bfc3dc839de83d6563e80a2fa232a7bfee72237b394607e9664a18bc05c0d5d25c52c3f2de4f3920b73030905244c0c3e58cc359ff0fc636cece055ef5db267d2e435159253ca57c1426eb42606198100b797e1cb6c2dc6a864f72482a7ec7ddb902edc41d4bb7931dd48ff71c4d09459be34af3c8d5c217341076927929bb37e92a74671f391651dfc7fcd1628070b1696a003189fb3da4aa33735b5fb7502bc74d9c888e0"}]}, {0x1c4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x36, 0x1, "1b01f7c9073d9f431280839d517ae177c354a549a8231406cf08760a5d398a8a13e198a086ffa96707f1bdfbb1b2a650812f"}, @NL80211_PKTPAT_MASK={0x50, 0x1, "b0eeb7449a2db0726b7aa3d13f97780ffdd5c6dac02e06909366d35379baa9d4be4612ad86c0f2e6ca76081f83e82f97a8adb6b4ba8757af675d68219131706b8f95a200ee8c62fbafa29845"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_MASK={0x28, 0x1, "d00f80e6d297d9df294e5c996a66ade8443bcaa5b6563d1f692f1c517cf94cacc058f8df"}, @NL80211_PKTPAT_MASK={0xf8, 0x1, "ef5e4fbdea9a30004657c20e34f45e9e70ab8aacfb317f1e509af8c94cd66290f663b50d8efbe2d0d2a0b6a16ad2bcc96fbc1ee0ebfb176a784c8a1ed9de2cd39998aa05e18f0e02637530a5362be732bc8fc8ff9da466e471512937af3dbcd9ff847040d4950f5c35fb9254f8b1713cbccff0a56f0352fdd03696fb9ea9baa81903e037ae7c3080ac2dfd7029b091b3c0aefd1a94377a9a0d2c9345230549fa7304939135c79d1c8f2014beb3ed63fbd302254bd90fe0d03055c7d6940f8fd1fafe269049c5b183b465a8dbe3bac4f5e05ad8a57addad23081f19317c090d0dbc6e9c7620884a33057b62a9e8d9da516f805dd6"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xef}]}]}]}]}, 0x4364}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) r9 = signalfd4(r5, &(0x7f00000058c0)={[0x3]}, 0x8, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000005900)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000005a00)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000005a40)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0xcd, 0x4e20, 0x0, 0xa, 0x20, 0x20, 0x2, r3, r10}, {0xc0, 0xffffffffffffffff, 0x6, 0x100000000, 0x6, 0x4, 0x2, 0x401}, {0xbfc, 0x3, 0x9, 0x6}, 0x9, 0x0, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d2, 0x2b}, 0x2, @in=@remote, 0x3505, 0x1, 0x1, 0x11, 0x1, 0x3, 0x6}}, 0xe8) close(r2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000005c00)={&(0x7f0000005b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005bc0)={&(0x7f0000005b80)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40001) setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000005c40)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 1.094921404s ago: executing program 2 (id=4934): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r0, &(0x7f00000003c0)=""/4135, 0x1027) (fail_nth: 15) 800.123188ms ago: executing program 2 (id=4935): mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x17) 792.419618ms ago: executing program 3 (id=4936): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x82b2, @private2, 0x4004}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x8000000000000001, 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x6, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, 0x7], 0xeeee0000, 0x28bc0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040)=0x5, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c000180070001"], 0xa4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r8, 0x2007ffb) copy_file_range(r7, 0x0, r6, 0x0, 0x4, 0x700000000000000) listen(r0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB="6673636f6e7466696e652c0063b9c241afc3e92965ce00990cebcbc3d7794b861ed1de67697a3747af767d15733ac62e8dc54e4a0d286c3aea29f6b466fa56c572074d5b49a09d15ed2622e591301494a8d7743b2d02dfde2c348c4232f620c970b371503f84d4844007f5e0032ba2085184482448b5fa96ba9e36d984c006820c586d7044c1a2abda939c5222af03f9edb17e0a85"]) 746.656179ms ago: executing program 2 (id=4937): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000200)) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x0, 0x5001) ptrace(0x10, r1) ptrace$peek(0x1, r2, 0x0) mmap(&(0x7f0000049000/0x4000)=nil, 0x4000, 0x7, 0x2010, 0xffffffffffffffff, 0xfdef9000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0000000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000800000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a0002007000000000000000"], 0xf0}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="240000001a005f0214f9df07000904000a000000fe000058dbef0fee76", 0x1d) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x7f) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x0) r6 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x80000006, 0x48002) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r7, 0x4001af72, &(0x7f0000000000)=0x2) 746.346569ms ago: executing program 2 (id=4938): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e21, @remote}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x6a, {0x2, 0x4e21, @multicast1}, 'virt_wifi0\x00'}) sendto$inet(r0, &(0x7f0000000080)="a0f3f493f2c55eee239265a28e4064e605209b89746930b8472b4efaa31518e35c0aab16f1f0d9aa3f573776f4ed08200f6c988037197c8e2008347571b4326a5bb2c3fa8b81a96c8e63220f794ddc1deda54ecfdaca621b9d6be7485275aafc98822d0909d098920fdd46bba7e1427923374d331df75d0c000000d377ae04a3aefc2c3594eea0f3c51a89438eb0989089c0e59a901d89736e27419a761dee6c07df869e860e3c4fa0630e32a70e2ee9041dcf65aa903f14f02e83faf6f61ef1cb31f0f178cc60699f00f6ec17027ad0d60296", 0xd3, 0x20000050, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) 746.051289ms ago: executing program 2 (id=4939): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (rerun: 32) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r3]) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r3]) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0xd, 0xee, 0x8, 0x2, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x0) 681.63228ms ago: executing program 3 (id=4940): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x1) r1 = syz_usb_connect$cdc_ecm(0x2, 0x5f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x1c, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x12, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "8aeb8267d0cb"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x0, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x8001, 0x0, 0x0, 0x71, 0x81}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@random={'security.', '\x00'}, &(0x7f0000000200)=""/190, 0xbe) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$mouse(&(0x7f00000002c0), 0x4, 0x591040) write$selinux_load(r3, &(0x7f0000000340)={0xf97cff8c, 0x8, 'SE Linux', "40e672075cd767284e9c2973649328917b51c658ccf878a8782885a88a0806d0d7b658c7a8c4bc60aaf77bcdd14ceefa3d245b6d7068c101dca3d0"}, 0x4b) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) 606.147361ms ago: executing program 0 (id=4941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000140)=0x0, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000001c0)=@v3={0x3000000, [{0x7}, {0x10, 0x401}], r1}, 0x18, 0x1) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000040)={0x80a0000, 0x1000, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) close(0x4) pwritev2(r9, &(0x7f0000000340)=[{&(0x7f00000002c0)="ab1c3f709704f7e5d6907c53e82a64855e39ce"}], 0x2, 0x8, 0x8, 0x9) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "b4d86031516f6eae", "5ef15dd33ee298c12963f95524a21aba", "e96e3875", "d1e9de22a32d722c"}, 0x28) r10 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r10, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r10, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r4, &(0x7f0000000200)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000540)=""/4096) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000240)={0xfffffefd, 0x6}, 0x8) 562.630582ms ago: executing program 2 (id=4942): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = userfaultfd(0x801) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x10, r4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ftruncate(r3, 0x4) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000104000/0x1000)=nil, 0x1000}, 0x1}) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x18, 0x81}, 0x4c800) recvmmsg(r6, &(0x7f00000089c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}, 0x80}], 0x1, 0x2, 0x0) 547.869022ms ago: executing program 0 (id=4947): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000580)=[{{&(0x7f0000000500)=@xdp={0x2c, 0x300, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) (fail_nth: 5) 532.268592ms ago: executing program 1 (id=4948): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) lseek(r3, 0x9, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x6, 0x4, 0x2}]}, 0x20}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) setxattr$security_capability(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000800)=ANY=[@ANYBLOB='1-'], 0x31) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x8, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000180)='xfrm0\x00') ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000140)={{r6}, "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"}) 478.549723ms ago: executing program 1 (id=4949): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='ma%x=00000000000017777777777,\x00']) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r1 = dup(r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x200, 0x8, 0x40, 0x9, 0x11, "71feaf33c32ed6fe90107884be157e88b3e578"}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000000000000000ac1e0101000000000000000000000000fe8000003c00000000000000000000bb00"/64, @ANYRES16=r0, @ANYRES32=0x0, @ANYRESHEX], 0x184}}, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xfe) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x30000, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)={0xa, 0x0, [{0x83b, 0x0, 0x101}, {0x1de, 0x0, 0x6}, {0xb1f, 0x0, 0x7}, {0xdb1, 0x0, 0x7}, {0x9e3, 0x0, 0xc2b5}, {0xbc9, 0x0, 0x80000001}, {0x9dd, 0x0, 0x9}, {0x939, 0x0, 0xd7}, {0x2da, 0x0, 0x1}, {0xb33, 0x0, 0x3}]}) syz_open_procfs(r8, &(0x7f0000000180)='net/psched\x00') ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x11, 0x0}) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) 478.053573ms ago: executing program 1 (id=4950): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000900)=[{{0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x4, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) read$FUSE(r2, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000040), 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 477.882163ms ago: executing program 1 (id=4951): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) r1 = gettid() ptrace$setopts(0x4206, r1, 0x80, 0x100021) 471.599013ms ago: executing program 1 (id=4952): socket$inet_icmp(0x2, 0x2, 0x1) (async) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0x890b, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) 376.387614ms ago: executing program 1 (id=4953): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x24, 0x1, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000240)=0x43, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902120001000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="14800400000076001371a3385f8333777e1ef45ef7799cb4cacc3c99a283cdc8273d88e265a099f0f8c9f29771d507a1458efd3c3362c6342e51fbedbecd86d85e0deb8b680054994b696b457abb6a3a605bc939efdd29cfb393290e773bc5c7188596ea5226043c91711d40037764d90bf411ab81f9c08f77d1d720dea49e0c950a045ce5667c43fc3e58e600560b7af0e721d1314a5e5cedc4e32b561cdaa85e726ddbda6c6379cd3670009c7dd761691f4c9741b11fe2b1af1867ec46b82b12456972123b2d5d7613237fe38ca205305d0c33f3dbe4ac7df10a1e0f14c14c3b8993db473d4ede599568f0524f4add80fc545a356fd069"], 0x0, 0x0, 0x0, 0x0, 0x0}) 376.028434ms ago: executing program 0 (id=4954): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000640)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) ioctl$TUNGETFEATURES(r3, 0x5452, &(0x7f0000001740)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r4, 0x29, 0x18, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010024bd7000000000001700b5d44eff9e265d554a7a00ef1b0300000000000000b0127dc0757bd70fd7b31e45afa80fb58885aee95b0fa128e0e48d7be843b88f874c8138813998c0ff377136c051980bf6765bb4225e8eb5f44e5990777f9fcec4135ad936297d4167ac61f6d5d218591562f7fd17c0d2bf61235ed92fe03a80c8bf5406aed21b23"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000140)={0x1, 0x7, 0x9}) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001740)=ANY=[@ANYBLOB="1400000001010103000000004654f622643b29b0"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x24000000) 2.7156ms ago: executing program 0 (id=4955): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0x4, 0x8) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, &(0x7f00000003c0)=0x3e) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="5f62c94056be49d02cd321c8633d302d44936976d10cad2928f8bf4fbe", 0x1d}], 0x1, 0xd) 0s ago: executing program 0 (id=4963): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}, @enter_looper, @decrefs], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): w USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.860937][ T4608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.868928][ T4608] usb 4-1: Product: syz [ 284.873113][ T4608] usb 4-1: Manufacturer: syz [ 284.877731][ T4608] usb 4-1: SerialNumber: syz [ 285.309451][ T9] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 285.336293][ T360] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 285.346329][ T360] asix 1-1:0.0: probe with driver asix failed with error -71 [ 285.354662][ T360] usb 1-1: USB disconnect, device number 90 [ 285.460874][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 285.468926][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 285.477376][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.487586][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 285.496798][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 285.509250][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.518360][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.526816][ T9] usb 3-1: Product: syz [ 285.531804][ T9] usb 3-1: Manufacturer: syz [ 285.536567][ T9] usb 3-1: SerialNumber: syz [ 285.745996][ T9] usb 3-1: 0:2 : does not exist [ 285.750991][ T9] usb 3-1: unit 6 not found! [ 285.757647][ T9] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 285.767041][ T9] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 285.776367][ T9] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 285.786313][ T9] usb 3-1: USB disconnect, device number 97 [ 285.909163][ T4608] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 285.915652][ T4608] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 285.960174][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 286.110256][ T4608] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 286.314034][ T36] audit: type=1400 audit(1750480979.973:703): avc: granted { setsecparam } for pid=10741 comm="syz.3.3966" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 286.336068][ T4608] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 286.350657][ T4608] usb 4-1: USB disconnect, device number 77 [ 286.356880][ T4608] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 286.499509][ T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 286.651866][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 286.661006][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.668981][ T9] usb 3-1: Product: syz [ 286.673179][ T9] usb 3-1: Manufacturer: syz [ 286.677765][ T9] usb 3-1: SerialNumber: syz [ 286.684063][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 286.690339][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 286.717427][ T36] audit: type=1400 audit(1750480980.373:704): avc: denied { write } for pid=10841 comm="syz.0.3995" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 287.099740][ T378] r8152-cfgselector 3-1: USB disconnect, device number 98 [ 287.189529][ T307] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 287.340749][ T307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 287.348774][ T307] usb 4-1: not running at top speed; connect to a high speed hub [ 287.357228][ T307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.367459][ T307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.376339][ T307] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 287.387115][ T307] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.396177][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.404192][ T307] usb 4-1: Product: syz [ 287.408342][ T307] usb 4-1: Manufacturer: syz [ 287.412945][ T307] usb 4-1: SerialNumber: syz [ 287.621748][ T307] usb 4-1: 0:2 : does not exist [ 287.626745][ T307] usb 4-1: unit 6 not found! [ 287.633376][ T307] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 287.646265][ T307] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 287.656072][ T307] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 287.666266][ T307] usb 4-1: USB disconnect, device number 78 [ 287.687220][ T36] audit: type=1400 audit(1750480981.343:705): avc: denied { append } for pid=10877 comm="syz.2.4009" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 287.772234][T10882] batadv_slave_0: entered promiscuous mode [ 287.821680][T10880] batadv_slave_0: left promiscuous mode [ 287.831797][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 287.904881][T10886] fuse: Unknown parameter 'f!000000000000000000040000000000000000000001777777777777777777777' [ 288.239490][ T378] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 288.334334][T10900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4016'. [ 288.386046][T10903] input: syz1 as /devices/virtual/input/input58 [ 288.392614][ T378] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 288.403267][ T378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.411403][ T378] usb 3-1: Product: syz [ 288.415713][ T378] usb 3-1: Manufacturer: syz [ 288.423312][ T378] usb 3-1: SerialNumber: syz [ 288.433633][ T378] r8152-cfgselector 3-1: Unknown version 0x0000 [ 288.441830][T10907] FAULT_INJECTION: forcing a failure. [ 288.441830][T10907] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 288.451029][ T378] r8152-cfgselector 3-1: config 0 descriptor?? [ 288.455280][T10907] CPU: 0 UID: 0 PID: 10907 Comm: syz.3.4019 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 288.455308][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.455319][T10907] Call Trace: [ 288.455326][T10907] [ 288.455334][T10907] __dump_stack+0x21/0x30 [ 288.455357][T10907] dump_stack_lvl+0x10c/0x190 [ 288.455376][T10907] ? __cfi_dump_stack_lvl+0x10/0x10 [ 288.455395][T10907] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 288.455416][T10907] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 288.455436][T10907] dump_stack+0x19/0x20 [ 288.455452][T10907] should_fail_ex+0x3d9/0x530 [ 288.455471][T10907] should_fail_alloc_page+0xeb/0x110 [ 288.455493][T10907] __alloc_pages_noprof+0x19d/0x6c0 [ 288.455510][T10907] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 288.455526][T10907] ? kasan_save_alloc_info+0x40/0x50 [ 288.455542][T10907] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 288.455559][T10907] ? inode_init_always_gfp+0x756/0x9e0 [ 288.455580][T10907] ? alloc_inode+0xc5/0x270 [ 288.455600][T10907] ? new_inode+0x25/0x1e0 [ 288.455620][T10907] ? proc_pident_instantiate+0x6d/0x2c0 [ 288.455641][T10907] ? __x64_sys_openat+0x13a/0x170 [ 288.455656][T10907] ? x64_sys_call+0xe69/0x2ee0 [ 288.455676][T10907] ? do_syscall_64+0x58/0xf0 [ 288.455695][T10907] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 288.455718][T10907] __pud_alloc+0xb3/0x900 [ 288.455738][T10907] ? avc_has_perm_noaudit+0x268/0x360 [ 288.455755][T10907] ? __cfi___pud_alloc+0x10/0x10 [ 288.455781][T10907] ? avc_has_perm_noaudit+0x286/0x360 [ 288.455799][T10907] handle_mm_fault+0x1885/0x1b90 [ 288.455820][T10907] ? __cfi_mt_find+0x10/0x10 [ 288.455838][T10907] ? selinux_file_open+0x457/0x610 [ 288.455860][T10907] ? __cfi_handle_mm_fault+0x10/0x10 [ 288.455883][T10907] ? lock_mm_and_find_vma+0xb8/0x3a0 [ 288.455903][T10907] do_user_addr_fault+0x4ca/0x1200 [ 288.455925][T10907] exc_page_fault+0x59/0xc0 [ 288.455941][T10907] asm_exc_page_fault+0x2b/0x30 [ 288.455962][T10907] RIP: 0010:rep_movs_alternative+0x13/0xa0 [ 288.455981][T10907] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 288.455995][T10907] RSP: 0018:ffffc90002227b08 EFLAGS: 00050202 [ 288.456012][T10907] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 0000000000000004 [ 288.456024][T10907] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90002227bc0 [ 288.456035][T10907] RBP: ffffc90002227b30 R08: 0000000000000003 R09: 0000000000000004 [ 288.456046][T10907] R10: dffffc0000000000 R11: fffff52000444f78 R12: 0000200000000000 [ 288.456059][T10907] R13: 0000000000000015 R14: ffffc90002227bc0 R15: 0000200000000000 [ 288.456074][T10907] ? _copy_from_user+0x71/0xb0 [ 288.456095][T10907] do_ip_setsockopt+0x3cb/0x29e0 [ 288.456119][T10907] ? __cfi_do_ip_setsockopt+0x10/0x10 [ 288.456141][T10907] ? selinux_socket_setsockopt+0x2ea/0x390 [ 288.456160][T10907] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 288.456180][T10907] ip_setsockopt+0x63/0x100 [ 288.456202][T10907] raw_setsockopt+0xf4/0x1a0 [ 288.456220][T10907] sock_common_setsockopt+0xb5/0xd0 [ 288.456238][T10907] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 288.456256][T10907] do_sock_setsockopt+0x26a/0x400 [ 288.456278][T10907] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 288.456305][T10907] __x64_sys_setsockopt+0x1b8/0x250 [ 288.456327][T10907] x64_sys_call+0x2adc/0x2ee0 [ 288.456346][T10907] do_syscall_64+0x58/0xf0 [ 288.456365][T10907] ? clear_bhb_loop+0x35/0x90 [ 288.456386][T10907] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 288.456407][T10907] RIP: 0033:0x7fa6e698e929 [ 288.456421][T10907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.456433][T10907] RSP: 002b:00007fa6e778c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 288.456449][T10907] RAX: ffffffffffffffda RBX: 00007fa6e6bb5fa0 RCX: 00007fa6e698e929 [ 288.456462][T10907] RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000003 [ 288.456472][T10907] RBP: 00007fa6e778c090 R08: 0000000000000004 R09: 0000000000000000 [ 288.456482][T10907] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.456493][T10907] R13: 0000000000000000 R14: 00007fa6e6bb5fa0 R15: 00007ffd3c4cc9b8 [ 288.456507][T10907] [ 288.469197][T10909] FAULT_INJECTION: forcing a failure. [ 288.469197][T10909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.879992][ T378] r8152-cfgselector 3-1: USB disconnect, device number 99 [ 288.882850][T10909] CPU: 0 UID: 0 PID: 10909 Comm: syz.3.4020 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 288.882878][T10909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.882889][T10909] Call Trace: [ 288.882895][T10909] [ 288.882902][T10909] __dump_stack+0x21/0x30 [ 288.882927][T10909] dump_stack_lvl+0x10c/0x190 [ 288.882946][T10909] ? __cfi_dump_stack_lvl+0x10/0x10 [ 288.882965][T10909] dump_stack+0x19/0x20 [ 288.882982][T10909] should_fail_ex+0x3d9/0x530 [ 288.883001][T10909] should_fail+0xf/0x20 [ 288.883016][T10909] should_fail_usercopy+0x1e/0x30 [ 288.883035][T10909] _copy_from_user+0x22/0xb0 [ 288.883055][T10909] proc_control+0x9b/0x120 [ 288.883077][T10909] ? destroy_async+0x210/0x210 [ 288.883098][T10909] ? mutex_lock+0x92/0x1c0 [ 288.883114][T10909] ? __cfi_vfs_write+0x10/0x10 [ 288.883134][T10909] usbdev_ioctl+0xc5b/0x20a0 [ 288.883156][T10909] ? __cfi_usbdev_ioctl+0x10/0x10 [ 288.883176][T10909] ? __fget_files+0x2c5/0x340 [ 288.883197][T10909] ? bpf_lsm_file_ioctl+0xd/0x20 [ 288.883214][T10909] ? security_file_ioctl+0x34/0xd0 [ 288.883235][T10909] ? __cfi_usbdev_ioctl+0x10/0x10 [ 288.883255][T10909] __se_sys_ioctl+0x132/0x1b0 [ 288.883275][T10909] __x64_sys_ioctl+0x7f/0xa0 [ 288.883295][T10909] x64_sys_call+0x1878/0x2ee0 [ 288.883315][T10909] do_syscall_64+0x58/0xf0 [ 288.883334][T10909] ? clear_bhb_loop+0x35/0x90 [ 288.883357][T10909] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 288.883378][T10909] RIP: 0033:0x7fa6e698e929 [ 288.883392][T10909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.883406][T10909] RSP: 002b:00007fa6e778c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.883426][T10909] RAX: ffffffffffffffda RBX: 00007fa6e6bb5fa0 RCX: 00007fa6e698e929 [ 288.883440][T10909] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003 [ 288.883453][T10909] RBP: 00007fa6e778c090 R08: 0000000000000000 R09: 0000000000000000 [ 288.883464][T10909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.883474][T10909] R13: 0000000000000000 R14: 00007fa6e6bb5fa0 R15: 00007ffd3c4cc9b8 [ 288.883489][T10909] [ 289.399512][ T48] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 289.550806][ T48] usb 1-1: unable to get BOS descriptor or descriptor too short [ 289.558915][ T48] usb 1-1: not running at top speed; connect to a high speed hub [ 289.567393][ T48] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.577512][ T48] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.587873][ T48] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.596957][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.604963][ T48] usb 1-1: Product: syz [ 289.609118][ T48] usb 1-1: Manufacturer: syz [ 289.613733][ T48] usb 1-1: SerialNumber: syz [ 289.822598][ T48] usb 1-1: 0:2 : does not exist [ 289.829110][ T48] usb 1-1: USB disconnect, device number 91 [ 289.837185][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 290.038452][T10955] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4038'. [ 290.049362][T10955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10955 comm=syz.3.4038 [ 290.117365][T10961] fuse: Bad value for 'fd' [ 290.194084][ T36] audit: type=1326 audit(1750480983.853:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10965 comm="syz.1.4043" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f251538e929 code=0x0 [ 290.309494][ T48] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 290.460519][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.471505][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.481270][ T48] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 290.492810][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.501403][ T48] usb 4-1: config 0 descriptor?? [ 290.569454][ T378] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 290.721786][ T378] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 290.730963][ T378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.738945][ T378] usb 1-1: Product: syz [ 290.743335][ T378] usb 1-1: Manufacturer: syz [ 290.747944][ T378] usb 1-1: SerialNumber: syz [ 290.754286][ T378] r8152-cfgselector 1-1: Unknown version 0x0000 [ 290.760637][ T378] r8152-cfgselector 1-1: config 0 descriptor?? [ 291.043346][T10979] 9pnet_fd: p9_fd_create_tcp (10979): problem connecting socket to 127.0.0.1 [ 291.063906][T10984] fuse: Bad value for 'fd' [ 291.065462][ T36] audit: type=1326 audit(1750480984.723:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10983 comm="syz.2.4051" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefc518e929 code=0x0 [ 291.170822][ T307] r8152-cfgselector 1-1: USB disconnect, device number 92 [ 291.509638][ T48] uclogic 0003:256C:006D.0038: failed retrieving string descriptor #100: -71 [ 291.518507][ T48] uclogic 0003:256C:006D.0038: failed retrieving pen parameters: -71 [ 291.526631][ T48] uclogic 0003:256C:006D.0038: failed probing pen v1 parameters: -71 [ 291.534749][ T48] uclogic 0003:256C:006D.0038: failed probing parameters: -71 [ 291.542260][ T48] uclogic 0003:256C:006D.0038: probe with driver uclogic failed with error -71 [ 291.552319][ T48] usb 4-1: USB disconnect, device number 79 [ 291.649139][T11009] fuse: Bad value for 'fd' [ 292.086554][T11030] input: syz0 as /devices/virtual/input/input59 [ 292.182359][ T36] audit: type=1400 audit(1750480985.843:708): avc: denied { setattr } for pid=11041 comm="syz.1.4075" name="KEY" dev="sockfs" ino=84898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 292.239478][ T48] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 292.349508][ T378] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 292.389457][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 292.395669][ T48] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 292.403960][ T48] usb 3-1: config 0 has no interface number 0 [ 292.410080][ T48] usb 3-1: config 0 interface 67 has no altsetting 0 [ 292.418114][ T48] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 292.427296][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.435419][ T48] usb 3-1: Product: syz [ 292.439597][ T48] usb 3-1: Manufacturer: syz [ 292.444191][ T48] usb 3-1: SerialNumber: syz [ 292.449347][ T48] usb 3-1: config 0 descriptor?? [ 292.455036][ T48] smsc95xx v2.0.0 [ 292.511916][ T378] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 292.521068][ T378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.529063][ T378] usb 4-1: Product: syz [ 292.533276][ T378] usb 4-1: Manufacturer: syz [ 292.537885][ T378] usb 4-1: SerialNumber: syz [ 292.544151][ T378] r8152-cfgselector 4-1: Unknown version 0x0000 [ 292.550457][ T378] r8152-cfgselector 4-1: config 0 descriptor?? [ 292.789792][T11070] cgroup: Unknown subsys name '#' [ 292.855961][ T48] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 292.859472][ T4608] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 292.866788][ T48] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 292.958775][ T378] r8152-cfgselector 4-1: USB disconnect, device number 80 [ 293.020858][ T4608] usb 1-1: unable to get BOS descriptor or descriptor too short [ 293.028961][ T4608] usb 1-1: not running at top speed; connect to a high speed hub [ 293.037445][ T4608] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.047582][ T4608] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.057832][ T4608] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.066960][ T4608] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.075107][ T4608] usb 1-1: Product: syz [ 293.079279][ T4608] usb 1-1: Manufacturer: syz [ 293.083917][ T4608] usb 1-1: SerialNumber: syz [ 293.084401][ T48] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 293.099399][ T48] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 293.293652][ T4608] usb 1-1: 0:2 : does not exist [ 293.298539][ T4608] usb 1-1: unit 0 not found! [ 293.305848][ T4608] usb 1-1: USB disconnect, device number 93 [ 293.313821][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 293.475764][T11074] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4090'. [ 293.574969][T11082] SELinux: Context system_u:object_r:sshd_key_t:s0 is not valid (left unmapped). [ 293.584713][ T36] audit: type=1400 audit(1750480987.243:709): avc: denied { relabelto } for pid=11079 comm="syz.3.4093" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:sshd_key_t:s0" [ 293.585381][T11080] binder: Unknown parameter 'cgroup' [ 293.611883][ T36] audit: type=1400 audit(1750480987.243:710): avc: denied { associate } for pid=11079 comm="syz.3.4093" name="udmabuf" dev="devtmpfs" ino=83 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sshd_key_t:s0" [ 294.099619][ T378] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 294.251953][ T378] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 294.261258][ T378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.269340][ T378] usb 1-1: Product: syz [ 294.273680][ T378] usb 1-1: Manufacturer: syz [ 294.278338][ T378] usb 1-1: SerialNumber: syz [ 294.291252][ T378] r8152-cfgselector 1-1: Unknown version 0x0000 [ 294.303454][ T378] r8152-cfgselector 1-1: config 0 descriptor?? [ 294.593619][T11120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 294.593643][T11120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:735 [ 294.603251][T11120] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 294.612594][T11120] rust_binder: Read failure Err(EFAULT) in pid:735 [ 294.716431][ T4608] r8152-cfgselector 1-1: USB disconnect, device number 94 [ 294.761821][ T36] audit: type=1400 audit(1750480988.423:711): avc: denied { create } for pid=11136 comm="syz.3.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 295.056304][ T36] audit: type=1326 audit(1750480988.713:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11141 comm="syz.1.4116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f251538e929 code=0x0 [ 295.232391][ T4608] usb 3-1: USB disconnect, device number 100 [ 295.251833][T11149] rust_binder: Error while translating object. [ 295.251862][T11149] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 295.258133][T11149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1245 [ 295.298772][T11157] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 295.539461][ T307] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 295.649532][ T4608] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 295.700868][ T307] usb 1-1: unable to get BOS descriptor or descriptor too short [ 295.708972][ T307] usb 1-1: not running at top speed; connect to a high speed hub [ 295.717509][ T307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.727721][ T307] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.738215][ T307] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.747294][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.755337][ T307] usb 1-1: Product: syz [ 295.759544][ T307] usb 1-1: Manufacturer: syz [ 295.764133][ T307] usb 1-1: SerialNumber: syz [ 295.796644][T11177] overlayfs: missing 'workdir' [ 295.811960][ T4608] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 295.821122][ T4608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.829182][ T4608] usb 3-1: Product: syz [ 295.831277][T11183] fuse: Bad value for 'fd' [ 295.833571][ T4608] usb 3-1: Manufacturer: syz [ 295.843165][ T4608] usb 3-1: SerialNumber: syz [ 295.851229][ T4608] r8152-cfgselector 3-1: Unknown version 0x0000 [ 295.857612][ T4608] r8152-cfgselector 3-1: config 0 descriptor?? [ 295.973615][ T307] usb 1-1: 0:2 : does not exist [ 295.978527][ T307] usb 1-1: unit 0 not found! [ 295.985137][ T307] usb 1-1: USB disconnect, device number 95 [ 295.993571][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 296.267212][ T378] r8152-cfgselector 3-1: USB disconnect, device number 101 [ 296.701635][T11202] fuse: Bad value for 'fd' [ 296.759473][ T378] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 296.889471][ T378] usb 1-1: device descriptor read/64, error -71 [ 297.129464][ T378] usb 1-1: device descriptor read/64, error -71 [ 297.369480][ T378] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 297.457961][T11227] tmpfs: Bad value for 'size' [ 297.471159][T11229] fuse: Bad value for 'fd' [ 297.499473][ T378] usb 1-1: device descriptor read/64, error -71 [ 297.631966][ T36] audit: type=1400 audit(1750480991.293:713): avc: denied { getopt } for pid=11238 comm="syz.2.4158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 297.739497][ T378] usb 1-1: device descriptor read/64, error -71 [ 297.849688][ T378] usb usb1-port1: attempt power cycle [ 297.969497][ T4608] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 298.086970][T11281] overlayfs: failed to clone lowerpath [ 298.120781][ T4608] usb 4-1: unable to get BOS descriptor or descriptor too short [ 298.128886][ T4608] usb 4-1: not running at top speed; connect to a high speed hub [ 298.137385][ T4608] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.147565][ T4608] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.158126][ T4608] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.167211][ T4608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.175226][ T4608] usb 4-1: Product: syz [ 298.179378][ T4608] usb 4-1: Manufacturer: syz [ 298.184039][ T4608] usb 4-1: SerialNumber: syz [ 298.199489][ T378] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 298.220549][ T378] usb 1-1: device descriptor read/8, error -71 [ 298.350465][ T378] usb 1-1: device descriptor read/8, error -71 [ 298.392686][ T4608] usb 4-1: 0:2 : does not exist [ 298.397572][ T4608] usb 4-1: unit 6 not found! [ 298.404353][ T4608] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 298.413695][ T4608] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 298.423874][ T4608] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 298.433326][ T4608] usb 4-1: USB disconnect, device number 81 [ 298.442208][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 298.589472][ T378] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 298.610411][ T378] usb 1-1: device descriptor read/8, error -71 [ 298.647960][T11293] overlayfs: failed to clone upperpath [ 298.647961][T11294] overlayfs: failed to clone upperpath [ 298.740618][ T378] usb 1-1: device descriptor read/8, error -71 [ 298.850097][ T378] usb usb1-port1: unable to enumerate USB device [ 298.913361][ T7461] cgroup: fork rejected by pids controller in /syz3 [ 299.161130][ T4582] bridge_slave_1: left allmulticast mode [ 299.166799][ T4582] bridge_slave_1: left promiscuous mode [ 299.172616][ T4582] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.180641][ T4582] bridge_slave_0: left allmulticast mode [ 299.186482][ T4582] bridge_slave_0: left promiscuous mode [ 299.192193][ T4582] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.307725][ T36] audit: type=1326 audit(1750480992.963:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11330 comm="syz.2.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc518e929 code=0x7fc00000 [ 299.348701][T11329] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.366028][T11329] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.379703][T11329] bridge_slave_0: entered allmulticast mode [ 299.386153][T11329] bridge_slave_0: entered promiscuous mode [ 299.393808][ T4582] veth1_macvtap: left promiscuous mode [ 299.399715][ T4582] veth0_vlan: left promiscuous mode [ 299.455437][T11329] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.465905][T11329] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.473569][T11329] bridge_slave_1: entered allmulticast mode [ 299.480521][T11329] bridge_slave_1: entered promiscuous mode [ 299.570262][T11329] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.577352][T11329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.584678][T11329] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.591724][T11329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.628798][ T4580] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.637982][ T4580] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.653073][ T4583] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.660159][ T4583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.667921][ T4583] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.674985][ T4583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.708183][T11329] veth0_vlan: entered promiscuous mode [ 299.724639][T11329] veth1_macvtap: entered promiscuous mode [ 299.889654][ T9] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 300.023095][ T36] audit: type=1326 audit(1750480993.683:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11330 comm="syz.2.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fefc512ab19 code=0x7fc00000 [ 300.059537][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 300.067916][ T36] audit: type=1326 audit(1750480993.683:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11330 comm="syz.2.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fefc512abdf code=0x7fc00000 [ 300.091830][ T36] audit: type=1326 audit(1750480993.683:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11330 comm="syz.2.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fefc518e929 code=0x7fc00000 [ 300.115824][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 300.124921][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 300.133793][ T9] usb 1-1: Product: syz [ 300.137953][ T9] usb 1-1: Manufacturer: syz [ 300.142793][ T9] usb 1-1: SerialNumber: syz [ 300.147875][ T9] usb 1-1: config 0 descriptor?? [ 300.429479][ T306] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 300.561635][T11346] binder: Unknown parameter 'coyBLV"i5ntext' [ 300.573106][ T9] usb 1-1: USB disconnect, device number 100 [ 300.582517][ T306] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 300.592023][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.592031][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 300.615886][ T306] usb 3-1: Product: syz [ 300.620118][ T306] usb 3-1: Manufacturer: syz [ 300.624720][ T306] usb 3-1: SerialNumber: syz [ 300.631558][ T306] r8152-cfgselector 3-1: Unknown version 0x0000 [ 300.637827][ T306] r8152-cfgselector 3-1: config 0 descriptor?? [ 300.644096][ T36] audit: type=1400 audit(1750480994.303:718): avc: denied { map } for pid=11377 comm="syz.3.4213" path="/dev/hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 301.070112][ T306] r8152-cfgselector 3-1: USB disconnect, device number 102 [ 301.082316][T11401] rust_binder: Error while translating object. [ 301.082341][T11401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 301.088537][T11401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:477 [ 301.098414][T11402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.114343][T11403] rust_binder: Error while translating object. [ 301.114370][T11403] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 301.120722][T11403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:477 [ 301.150449][ T36] audit: type=1400 audit(1750480994.813:719): avc: denied { write } for pid=11406 comm="syz.0.4226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 301.415919][T11416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 301.672074][T11440] netlink: 'syz.3.4241': attribute type 3 has an invalid length. [ 301.979618][ T378] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 302.131666][ T378] usb 4-1: unable to get BOS descriptor or descriptor too short [ 302.140412][ T378] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 302.147969][ T378] usb 4-1: can't read configurations, error -71 [ 302.233936][T11475] netlink: 'syz.0.4254': attribute type 12 has an invalid length. [ 302.242722][T11475] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 302.242740][T11475] rust_binder: Error while translating object. [ 302.253409][T11475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 302.259670][T11475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:503 [ 302.547924][T11489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4261'. [ 302.979484][ T9] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 302.979484][ T378] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 303.129448][ T378] usb 4-1: Using ep0 maxpacket: 32 [ 303.135609][ T378] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 303.143754][ T378] usb 4-1: config 0 has no interface number 0 [ 303.149892][ T378] usb 4-1: config 0 interface 2 has no altsetting 0 [ 303.151999][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 303.157956][ T378] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 303.165884][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.174917][ T378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.183307][ T9] usb 3-1: Product: syz [ 303.190973][ T378] usb 4-1: Product: syz [ 303.195268][ T9] usb 3-1: Manufacturer: syz [ 303.199215][ T378] usb 4-1: Manufacturer: syz [ 303.204058][ T9] usb 3-1: SerialNumber: syz [ 303.208612][ T378] usb 4-1: SerialNumber: syz [ 303.218741][ T378] usb 4-1: config 0 descriptor?? [ 303.219921][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 303.230342][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 303.432038][ T378] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 303.443238][ T378] usb 4-1: USB disconnect, device number 84 [ 303.451142][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 303.645957][ T378] r8152-cfgselector 3-1: USB disconnect, device number 103 [ 303.872076][T11517] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.894895][T11522] syzkaller0: entered promiscuous mode [ 303.906924][T11522] syzkaller0: entered allmulticast mode [ 303.985422][T11526] syzkaller0: entered promiscuous mode [ 303.990963][T11526] syzkaller0: entered allmulticast mode [ 303.997102][T11526] FAULT_INJECTION: forcing a failure. [ 303.997102][T11526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.010176][T11526] CPU: 0 UID: 0 PID: 11526 Comm: syz.0.4276 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 304.010202][T11526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.010214][T11526] Call Trace: [ 304.010218][T11526] [ 304.010225][T11526] __dump_stack+0x21/0x30 [ 304.010248][T11526] dump_stack_lvl+0x10c/0x190 [ 304.010265][T11526] ? __cfi_dump_stack_lvl+0x10/0x10 [ 304.010290][T11526] ? __cfi_avc_has_perm+0x10/0x10 [ 304.010313][T11526] dump_stack+0x19/0x20 [ 304.010331][T11526] should_fail_ex+0x3d9/0x530 [ 304.010350][T11526] should_fail+0xf/0x20 [ 304.010367][T11526] should_fail_usercopy+0x1e/0x30 [ 304.010387][T11526] _copy_from_iter+0x1a3/0x14b0 [ 304.010410][T11526] ? __cfi__copy_from_iter+0x10/0x10 [ 304.010432][T11526] tun_get_user+0x40b/0x3450 [ 304.010450][T11526] ? unwind_get_return_address+0x51/0x90 [ 304.010469][T11526] ? _parse_integer_limit+0x195/0x1e0 [ 304.010486][T11526] ? ptr_ring_consume+0x430/0x430 [ 304.010504][T11526] ? _parse_integer+0x2e/0x40 [ 304.010520][T11526] ? kstrtoull+0x13b/0x1e0 [ 304.010535][T11526] ? __kasan_check_write+0x18/0x20 [ 304.010552][T11526] ? ref_tracker_alloc+0x308/0x540 [ 304.010567][T11526] ? __x64_sys_openat+0x13a/0x170 [ 304.010584][T11526] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 304.010603][T11526] ? selinux_file_permission+0x309/0xb30 [ 304.010628][T11526] ? __kasan_check_write+0x18/0x20 [ 304.010646][T11526] tun_chr_write_iter+0x1fc/0x310 [ 304.010665][T11526] vfs_write+0x694/0xe80 [ 304.010684][T11526] ? __cfi_tun_chr_write_iter+0x10/0x10 [ 304.010701][T11526] ? __cfi_vfs_write+0x10/0x10 [ 304.010722][T11526] ksys_write+0x141/0x250 [ 304.010739][T11526] ? __cfi_ksys_write+0x10/0x10 [ 304.010759][T11526] ? __kasan_check_read+0x15/0x20 [ 304.010777][T11526] __x64_sys_write+0x7f/0x90 [ 304.010795][T11526] x64_sys_call+0x271c/0x2ee0 [ 304.010816][T11526] do_syscall_64+0x58/0xf0 [ 304.010836][T11526] ? clear_bhb_loop+0x35/0x90 [ 304.010859][T11526] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 304.010887][T11526] RIP: 0033:0x7f38c2b8e929 [ 304.010902][T11526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.010917][T11526] RSP: 002b:00007f38c3931038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.010935][T11526] RAX: ffffffffffffffda RBX: 00007f38c2db5fa0 RCX: 00007f38c2b8e929 [ 304.010949][T11526] RDX: 000000000000ffdd RSI: 0000200000000a00 RDI: 0000000000000003 [ 304.010962][T11526] RBP: 00007f38c3931090 R08: 0000000000000000 R09: 0000000000000000 [ 304.010974][T11526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.010986][T11526] R13: 0000000000000000 R14: 00007f38c2db5fa0 R15: 00007ffdb7237b68 [ 304.011002][T11526] [ 304.679455][ T48] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 304.832896][ T48] usb 1-1: unable to get BOS descriptor or descriptor too short [ 304.842644][ T48] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 304.850288][ T48] usb 1-1: can't read configurations, error -71 [ 305.149345][T11577] rust_binder: Error while translating object. [ 305.149394][T11577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 305.155977][T11577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1337 [ 305.410772][T11593] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 305.804694][ T36] audit: type=1400 audit(1750481001.465:720): avc: denied { mounton } for pid=11605 comm="syz.3.4308" path="/proc/56/cgroup" dev="proc" ino=89484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 305.870391][ T36] audit: type=1400 audit(1750481001.535:721): avc: denied { name_bind } for pid=11609 comm="syz.1.4310" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 305.933702][T11624] cgroup: Unknown subsys name '#' [ 306.159459][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 306.259519][ T48] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 306.309546][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 306.317834][ T9] usb 4-1: config 108 has an invalid interface number: 89 but max is 1 [ 306.326806][ T9] usb 4-1: config 108 contains an unexpected descriptor of type 0x1, skipping [ 306.336092][ T9] usb 4-1: config 108 has an invalid interface number: 237 but max is 1 [ 306.344624][ T9] usb 4-1: config 108 has no interface number 0 [ 306.350957][ T9] usb 4-1: config 108 has no interface number 1 [ 306.357248][ T9] usb 4-1: config 108 interface 89 altsetting 205 endpoint 0xC has an invalid bInterval 205, changing to 7 [ 306.368806][ T9] usb 4-1: config 108 interface 237 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 306.379858][ T9] usb 4-1: config 108 interface 237 altsetting 0 endpoint 0x1 has invalid maxpacket 1544, setting to 64 [ 306.391444][ T9] usb 4-1: config 108 interface 237 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 306.402587][ T9] usb 4-1: config 108 interface 89 has no altsetting 0 [ 306.410721][ T9] usb 4-1: New USB device found, idVendor=0711, idProduct=5200, bcdDevice=68.e8 [ 306.419902][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.427895][ T9] usb 4-1: Product: syz [ 306.432065][ T48] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 306.432085][ T9] usb 4-1: Manufacturer: ш [ 306.432100][ T9] usb 4-1: SerialNumber: syz [ 306.441577][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.461880][ T48] usb 3-1: Product: syz [ 306.466104][ T48] usb 3-1: Manufacturer: syz [ 306.470801][ T48] usb 3-1: SerialNumber: syz [ 306.477465][ T48] r8152-cfgselector 3-1: Unknown version 0x0000 [ 306.483829][ T36] audit: type=1326 audit(1750481002.135:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11642 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251538e929 code=0x7ffc0000 [ 306.507347][ T48] r8152-cfgselector 3-1: config 0 descriptor?? [ 306.513704][ T36] audit: type=1326 audit(1750481002.135:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11642 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251538e929 code=0x7ffc0000 [ 306.537361][ T36] audit: type=1326 audit(1750481002.135:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11642 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f251538e929 code=0x7ffc0000 [ 306.561222][ T36] audit: type=1326 audit(1750481002.135:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11642 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251538e929 code=0x7ffc0000 [ 306.584867][ T36] audit: type=1326 audit(1750481002.135:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11642 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251538e929 code=0x7ffc0000 [ 306.608406][ T306] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 306.608762][ T36] audit: type=1326 audit(1750481002.135:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11642 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f251538e929 code=0x7ffc0000 [ 306.639587][ T36] audit: type=1326 audit(1750481002.146:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11642 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251538e929 code=0x7ffc0000 [ 306.663197][ T36] audit: type=1326 audit(1750481002.146:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11642 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251538e929 code=0x7ffc0000 [ 306.683353][T11616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.696841][T11616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.713127][ T9] usb 4-1: USB disconnect, device number 85 [ 306.770696][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.782627][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.792844][ T306] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 306.802331][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.811038][ T306] usb 1-1: config 0 descriptor?? [ 306.998059][ T9] r8152-cfgselector 3-1: USB disconnect, device number 104 [ 307.245845][ T306] hid-steam 0003:28DE:1142.0039: item fetching failed at offset 4/5 [ 307.254052][ T306] hid-steam 0003:28DE:1142.0039: steam_probe:parse of hid interface failed [ 307.262703][ T306] hid-steam 0003:28DE:1142.0039: probe with driver hid-steam failed with error -22 [ 307.494332][ T306] usb 1-1: USB disconnect, device number 103 [ 307.770380][T11689] overlayfs: failed to resolve './file1': -2 [ 308.051758][T11706] input: syz0 as /devices/virtual/input/input62 [ 308.465064][T11735] FAULT_INJECTION: forcing a failure. [ 308.465064][T11735] name failslab, interval 1, probability 0, space 0, times 0 [ 308.477761][T11735] CPU: 0 UID: 0 PID: 11735 Comm: syz.2.4359 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 308.477791][T11735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.477801][T11735] Call Trace: [ 308.477808][T11735] [ 308.477815][T11735] __dump_stack+0x21/0x30 [ 308.477847][T11735] dump_stack_lvl+0x10c/0x190 [ 308.477864][T11735] ? __cfi_dump_stack_lvl+0x10/0x10 [ 308.477882][T11735] dump_stack+0x19/0x20 [ 308.477899][T11735] should_fail_ex+0x3d9/0x530 [ 308.477917][T11735] should_failslab+0xac/0x100 [ 308.477938][T11735] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 308.477956][T11735] ? __alloc_skb+0x10c/0x370 [ 308.477975][T11735] __alloc_skb+0x10c/0x370 [ 308.477991][T11735] netlink_dump+0x237/0xeb0 [ 308.478011][T11735] ? cred_has_capability+0x281/0x380 [ 308.478031][T11735] ? refcount_inc+0x90/0x90 [ 308.478049][T11735] ? __kasan_check_write+0x18/0x20 [ 308.478066][T11735] ? mutex_lock+0x92/0x1c0 [ 308.478082][T11735] ? __cfi_mutex_lock+0x10/0x10 [ 308.478096][T11735] ? xfrm_policy_walk_init+0x22/0xf0 [ 308.478111][T11735] __netlink_dump_start+0x6f8/0x980 [ 308.478130][T11735] ? __cfi_xfrm_dump_policy+0x10/0x10 [ 308.478148][T11735] xfrm_user_rcv_msg+0x2e1/0x860 [ 308.478168][T11735] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 308.478186][T11735] ? stack_trace_save+0x9d/0xe0 [ 308.478207][T11735] ? __asan_memcpy+0x5a/0x80 [ 308.478223][T11735] ? avc_has_perm_noaudit+0x286/0x360 [ 308.478239][T11735] ? __cfi_xfrm_dump_policy_start+0x10/0x10 [ 308.478259][T11735] ? __cfi_xfrm_dump_policy+0x10/0x10 [ 308.478277][T11735] ? __cfi_xfrm_dump_policy_done+0x10/0x10 [ 308.478302][T11735] ? avc_has_perm+0x144/0x220 [ 308.478317][T11735] netlink_rcv_skb+0x22b/0x4a0 [ 308.478338][T11735] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 308.478355][T11735] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 308.478377][T11735] ? __kasan_check_write+0x18/0x20 [ 308.478395][T11735] ? mutex_lock+0x92/0x1c0 [ 308.478408][T11735] ? __cfi_mutex_lock+0x10/0x10 [ 308.478422][T11735] ? netlink_autobind+0x1c0/0x1c0 [ 308.478444][T11735] xfrm_netlink_rcv+0x76/0x90 [ 308.478462][T11735] netlink_unicast+0x8c6/0xa60 [ 308.478479][T11735] netlink_sendmsg+0x7f0/0xaf0 [ 308.478500][T11735] ? __cfi_netlink_sendmsg+0x10/0x10 [ 308.478520][T11735] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 308.478541][T11735] ? security_socket_sendmsg+0x33/0xd0 [ 308.478559][T11735] ? __cfi_netlink_sendmsg+0x10/0x10 [ 308.478579][T11735] ____sys_sendmsg+0xa15/0xa70 [ 308.478603][T11735] ? __sys_sendmsg_sock+0x50/0x50 [ 308.478624][T11735] ? import_iovec+0x81/0xb0 [ 308.478643][T11735] ___sys_sendmsg+0x220/0x2a0 [ 308.478663][T11735] ? __sys_sendmsg+0x280/0x280 [ 308.478684][T11735] ? proc_fail_nth_write+0x17e/0x210 [ 308.478699][T11735] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 308.478717][T11735] __x64_sys_sendmsg+0x1eb/0x2c0 [ 308.478731][T11735] ? fput+0x1a5/0x240 [ 308.478751][T11735] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 308.478765][T11735] ? ksys_write+0x1ef/0x250 [ 308.478783][T11735] ? __kasan_check_read+0x15/0x20 [ 308.478799][T11735] x64_sys_call+0x2a4c/0x2ee0 [ 308.478820][T11735] do_syscall_64+0x58/0xf0 [ 308.478849][T11735] ? clear_bhb_loop+0x35/0x90 [ 308.478872][T11735] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 308.478893][T11735] RIP: 0033:0x7fefc518e929 [ 308.478908][T11735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.478922][T11735] RSP: 002b:00007fefc5f29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.478940][T11735] RAX: ffffffffffffffda RBX: 00007fefc53b5fa0 RCX: 00007fefc518e929 [ 308.478952][T11735] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 308.478961][T11735] RBP: 00007fefc5f29090 R08: 0000000000000000 R09: 0000000000000000 [ 308.478970][T11735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.478979][T11735] R13: 0000000000000000 R14: 00007fefc53b5fa0 R15: 00007ffd2436c148 [ 308.478990][T11735] [ 308.863363][ T306] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 309.023598][ T306] usb 4-1: Using ep0 maxpacket: 8 [ 309.029687][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.040620][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.050381][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.063176][ T306] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 309.072846][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.081472][ T306] usb 4-1: config 0 descriptor?? [ 309.130614][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 309.291946][ T9] usb 3-1: config 7 has an invalid interface number: 209 but max is 1 [ 309.300171][ T9] usb 3-1: config 7 has an invalid interface number: 61 but max is 1 [ 309.308285][ T9] usb 3-1: config 7 has no interface number 0 [ 309.314388][ T9] usb 3-1: config 7 has no interface number 1 [ 309.320486][ T9] usb 3-1: config 7 interface 61 altsetting 1 endpoint 0x9 has invalid maxpacket 1983, setting to 1024 [ 309.331589][ T9] usb 3-1: config 7 interface 61 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024 [ 309.341737][ T9] usb 3-1: config 7 interface 61 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 309.352544][ T9] usb 3-1: config 7 interface 209 has no altsetting 0 [ 309.359625][ T9] usb 3-1: config 7 interface 61 has no altsetting 0 [ 309.367769][ T9] usb 3-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice=7f.6e [ 309.376841][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.384825][ T9] usb 3-1: Product: syz [ 309.388997][ T9] usb 3-1: Manufacturer: syz [ 309.393601][ T9] usb 3-1: SerialNumber: syz [ 309.515157][T11737] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 309.515985][ T306] usbhid 4-1:0.0: can't add hid device: -71 [ 309.529938][ T306] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 309.538881][ T306] usb 4-1: USB disconnect, device number 86 [ 309.666996][ T9] hub 3-1:7.209: Invalid hub with more than one config or interface [ 309.675078][ T9] hub 3-1:7.209: probe with driver hub failed with error -22 [ 309.683316][ T9] hub 3-1:7.61: Invalid hub with more than one config or interface [ 309.691260][ T9] hub 3-1:7.61: probe with driver hub failed with error -22 [ 309.699868][ T9] usb 3-1: USB disconnect, device number 105 [ 310.057453][T11768] FAULT_INJECTION: forcing a failure. [ 310.057453][T11768] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 310.071019][T11768] CPU: 1 UID: 0 PID: 11768 Comm: syz.3.4373 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 310.071048][T11768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.071058][T11768] Call Trace: [ 310.071064][T11768] [ 310.071072][T11768] __dump_stack+0x21/0x30 [ 310.071097][T11768] dump_stack_lvl+0x10c/0x190 [ 310.071116][T11768] ? __cfi_dump_stack_lvl+0x10/0x10 [ 310.071137][T11768] dump_stack+0x19/0x20 [ 310.071155][T11768] should_fail_ex+0x3d9/0x530 [ 310.071174][T11768] should_fail_alloc_page+0xeb/0x110 [ 310.071198][T11768] __alloc_pages_noprof+0x19d/0x6c0 [ 310.071218][T11768] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 310.071234][T11768] ? save_stack+0x11c/0x1f0 [ 310.071256][T11768] ? sized_strscpy+0x9f/0x2a0 [ 310.071277][T11768] __folio_alloc_noprof+0x14/0x80 [ 310.071293][T11768] folio_prealloc+0x46/0x240 [ 310.071316][T11768] do_pte_missing+0x1603/0x3e50 [ 310.071341][T11768] ? pte_marker_clear+0x1b0/0x1b0 [ 310.071363][T11768] ? __pte_offset_map+0x1b0/0x230 [ 310.071382][T11768] ? pte_offset_map_rw_nolock+0xba/0x110 [ 310.071421][T11768] handle_mm_fault+0x1166/0x1b90 [ 310.071446][T11768] ? __cfi_handle_mm_fault+0x10/0x10 [ 310.071467][T11768] ? find_vma+0xcd/0x110 [ 310.071487][T11768] ? lock_mm_and_find_vma+0xb8/0x3a0 [ 310.071509][T11768] do_user_addr_fault+0x4ca/0x1200 [ 310.071532][T11768] exc_page_fault+0x59/0xc0 [ 310.071549][T11768] asm_exc_page_fault+0x2b/0x30 [ 310.071572][T11768] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 310.071592][T11768] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 310.071607][T11768] RSP: 0018:ffffc9000436fbd0 EFLAGS: 00050206 [ 310.071625][T11768] RAX: ffffffff82a47201 RBX: 0000000000000068 RCX: 0000000000000068 [ 310.071638][T11768] RDX: 0000000000000000 RSI: ffff888115016000 RDI: 00002000000027c0 [ 310.071651][T11768] RBP: ffffc9000436fc00 R08: ffff888115016067 R09: 1ffff11022a02c0c [ 310.071664][T11768] R10: dffffc0000000000 R11: ffffed1022a02c0d R12: 0000200000002828 [ 310.071677][T11768] R13: 00007ffffffff000 R14: 00002000000027c0 R15: ffff888115016000 [ 310.071692][T11768] ? _copy_from_user+0x71/0xb0 [ 310.071715][T11768] ? _copy_to_user+0x7d/0xa0 [ 310.071736][T11768] environ_read+0x2ab/0x460 [ 310.071758][T11768] ? __cfi_environ_read+0x10/0x10 [ 310.071778][T11768] vfs_read+0x278/0xb60 [ 310.071797][T11768] ? __cfi_vfs_read+0x10/0x10 [ 310.071814][T11768] ? __kasan_check_write+0x18/0x20 [ 310.071831][T11768] ? mutex_lock+0x92/0x1c0 [ 310.071846][T11768] ? __cfi_mutex_lock+0x10/0x10 [ 310.071861][T11768] ? __fget_files+0x2c5/0x340 [ 310.071883][T11768] ksys_read+0x141/0x250 [ 310.071900][T11768] ? __cfi_ksys_read+0x10/0x10 [ 310.071918][T11768] ? __kasan_check_read+0x15/0x20 [ 310.071936][T11768] __x64_sys_read+0x7f/0x90 [ 310.071954][T11768] x64_sys_call+0x2638/0x2ee0 [ 310.071973][T11768] do_syscall_64+0x58/0xf0 [ 310.071993][T11768] ? clear_bhb_loop+0x35/0x90 [ 310.072014][T11768] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 310.072035][T11768] RIP: 0033:0x7f8469b8e929 [ 310.072048][T11768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.072061][T11768] RSP: 002b:00007f846a973038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.072076][T11768] RAX: ffffffffffffffda RBX: 00007f8469db5fa0 RCX: 00007f8469b8e929 [ 310.072089][T11768] RDX: 0000000000002020 RSI: 00002000000027c0 RDI: 0000000000000003 [ 310.072101][T11768] RBP: 00007f846a973090 R08: 0000000000000000 R09: 0000000000000000 [ 310.072113][T11768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.072125][T11768] R13: 0000000000000000 R14: 00007f8469db5fa0 R15: 00007ffdc5868148 [ 310.072140][T11768] [ 310.458073][T11772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1357 [ 310.512149][T11779] rust_binder: Write failure EINVAL in pid:1357 [ 310.584457][ T306] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 310.757886][ T306] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 310.766985][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.774971][ T306] usb 1-1: Product: syz [ 310.779165][ T306] usb 1-1: Manufacturer: syz [ 310.783755][ T306] usb 1-1: SerialNumber: syz [ 310.790163][ T306] r8152-cfgselector 1-1: Unknown version 0x0000 [ 310.796442][ T306] r8152-cfgselector 1-1: config 0 descriptor?? [ 311.125903][T11799] 9p: Unknown Cache mode or invalid value ;j~.rM09]~ށa΋!B\nz\A/ [ 311.232590][ T306] r8152-cfgselector 1-1: USB disconnect, device number 104 [ 311.245674][T11823] fuse: Bad value for 'fd' [ 311.390004][T11834] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 311.399337][T11834] rust_binder: Write failure EINVAL in pid:97 [ 311.467986][T11839] tmpfs: Unknown parameter 'smackfsfloor' [ 311.653504][ T378] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 311.815236][ T378] usb 3-1: unable to get BOS descriptor or descriptor too short [ 311.823343][ T378] usb 3-1: not running at top speed; connect to a high speed hub [ 311.831874][ T378] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 311.842797][ T378] usb 3-1: config 1 interface 0 has no altsetting 0 [ 311.850886][ T378] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.859976][ T378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.868015][ T378] usb 3-1: Product: syz [ 311.872185][ T378] usb 3-1: Manufacturer: syz [ 311.877015][ T378] usb 3-1: SerialNumber: syz [ 311.882505][T11843] rust_binder: Failed copying remainder into alloc: EFAULT [ 311.882526][T11843] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 311.883144][T11836] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 311.890166][T11843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 311.905203][T11843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:573 [ 312.117527][ T378] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 312.136816][ T378] usb 3-1: USB disconnect, device number 106 [ 312.177337][ T307] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 312.338808][ T307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.349838][ T307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.359750][ T307] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 312.368791][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.377361][ T307] usb 1-1: config 0 descriptor?? [ 312.812859][ T307] saitek 0003:06A3:0CCB.003A: unknown main item tag 0x0 [ 312.822513][ T307] saitek 0003:06A3:0CCB.003A: hidraw0: USB HID v0.0a Device [HID 06a3:0ccb] on usb-dummy_hcd.0-1/input0 [ 312.877924][T11891] overlayfs: failed to clone upperpath [ 313.028021][ T307] usb 1-1: USB disconnect, device number 105 [ 313.473221][T11904] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4431'. [ 313.699018][T11915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4436'. [ 314.005463][ T306] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 314.166877][ T306] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 314.177774][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.188692][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.198449][ T306] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 314.212659][ T306] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 314.221773][ T306] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 314.230061][ T306] usb 3-1: Manufacturer: syz [ 314.235200][ T306] usb 3-1: config 0 descriptor?? [ 314.290500][T11931] rust_binder: Write failure EINVAL in pid:117 [ 314.456235][ T306] appleir 0003:05AC:8243.003B: unknown main item tag 0x0 [ 314.479763][ T306] appleir 0003:05AC:8243.003B: No inputs registered, leaving [ 314.490781][ T306] appleir 0003:05AC:8243.003B: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 314.503264][ T306] usb 3-1: USB disconnect, device number 107 [ 314.522521][T11950] fido_id[11950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 314.601431][T11955] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 314.601464][T11955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:130 [ 314.711850][T11970] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 314.730846][T11970] SELinux: failed to load policy [ 314.750386][T11974] fuse: Bad value for 'user_id' [ 314.755590][T11974] fuse: Bad value for 'user_id' [ 314.817984][ T306] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 314.978283][ T9] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 314.979398][ T306] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 314.995780][ T306] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 315.006939][ T306] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.016080][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.024094][ T306] usb 3-1: Product: syz [ 315.028252][ T306] usb 3-1: Manufacturer: syz [ 315.032855][ T306] usb 3-1: SerialNumber: syz [ 315.141087][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 315.150243][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.158419][ T9] usb 4-1: Product: syz [ 315.162648][ T9] usb 4-1: Manufacturer: syz [ 315.167249][ T9] usb 4-1: SerialNumber: syz [ 315.173691][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 315.180004][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 315.469959][T11949] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.477299][T11949] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.616475][ T9] r8152-cfgselector 4-1: USB disconnect, device number 87 [ 316.474985][ T406] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 316.593662][ T306] cdc_ncm 3-1:1.0: bind() failure [ 316.599397][ T306] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 316.606245][ T306] cdc_ncm 3-1:1.1: bind() failure [ 316.612623][ T306] usb 3-1: USB disconnect, device number 108 [ 316.635329][ T406] usb 4-1: Using ep0 maxpacket: 32 [ 316.641574][ T406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.652483][ T406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.662300][ T406] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 316.671369][ T406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.679985][ T406] usb 4-1: config 0 descriptor?? [ 316.685811][ T406] hub 4-1:0.0: USB hub found [ 316.725696][T12050] fuse: Bad value for 'fd' [ 316.900497][ T406] hub 4-1:0.0: 1 port detected [ 317.117565][ T406] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 317.123939][ T406] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 317.132886][ T406] usbhid 4-1:0.0: can't add hid device: -71 [ 317.138917][ T406] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 317.159547][ T306] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 317.167370][ T406] usb 4-1: USB disconnect, device number 88 [ 317.332669][ T306] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 317.341866][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.349841][ T306] usb 1-1: Product: syz [ 317.354288][ T306] usb 1-1: Manufacturer: syz [ 317.358878][ T306] usb 1-1: SerialNumber: syz [ 317.365265][ T306] r8152-cfgselector 1-1: Unknown version 0x0000 [ 317.371509][ T306] r8152-cfgselector 1-1: config 0 descriptor?? [ 317.801711][T12082] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.807674][ T306] r8152-cfgselector 1-1: USB disconnect, device number 106 [ 317.808752][T12082] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.823100][T12082] bridge_slave_0: entered allmulticast mode [ 317.829616][T12082] bridge_slave_0: entered promiscuous mode [ 317.836375][T12082] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.843560][T12082] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.850802][T12082] bridge_slave_1: entered allmulticast mode [ 317.857080][T12082] bridge_slave_1: entered promiscuous mode [ 317.863230][ T4581] bridge_slave_1: left allmulticast mode [ 317.868957][ T4581] bridge_slave_1: left promiscuous mode [ 317.874633][ T4581] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.882112][ T4581] bridge_slave_0: left allmulticast mode [ 317.887803][ T4581] bridge_slave_0: left promiscuous mode [ 317.893445][ T4581] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.988569][T12082] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.995630][T12082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.002881][T12082] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.009945][T12082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.020108][ T4581] veth1_macvtap: left promiscuous mode [ 318.068552][ T4580] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.079091][ T4583] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.086172][ T4583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.113913][T12082] veth0_vlan: entered promiscuous mode [ 318.125068][T12082] veth1_macvtap: entered promiscuous mode [ 318.183638][ T306] hid-generic C98F:0003:0000.003C: unknown main item tag 0x0 [ 318.191206][ T306] hid-generic C98F:0003:0000.003C: unknown main item tag 0x0 [ 318.199559][ T306] hid-generic C98F:0003:0000.003C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 318.205436][T12095] rust_binder: got new transaction with bad transaction stack [ 318.209162][T12095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 318.226460][T12095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.228987][T12096] fido_id[12096]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 318.623765][ T306] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 318.785397][ T306] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.795594][ T306] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.805154][ T306] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 318.814383][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 318.822460][ T306] usb 1-1: SerialNumber: syz [ 319.043280][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 319.043296][ T36] audit: type=1400 audit(1750481013.894:783): avc: denied { add_name } for pid=12104 comm="syz.0.4514" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 319.070103][ T36] audit: type=1400 audit(1750481013.894:784): avc: denied { create } for pid=12104 comm="syz.0.4514" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 319.071577][ T306] usb 1-1: 0:2 : does not exist [ 319.098283][ T306] usb 1-1: USB disconnect, device number 107 [ 319.234713][T12146] overlayfs: conflicting options: nfs_export=on,index=off [ 319.267088][T12152] FAULT_INJECTION: forcing a failure. [ 319.267088][T12152] name failslab, interval 1, probability 0, space 0, times 0 [ 319.276763][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 319.279815][T12152] CPU: 0 UID: 0 PID: 12152 Comm: syz.3.4532 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 319.279843][T12152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 319.279854][T12152] Call Trace: [ 319.279860][T12152] [ 319.279867][T12152] __dump_stack+0x21/0x30 [ 319.279892][T12152] dump_stack_lvl+0x10c/0x190 [ 319.279910][T12152] ? __cfi_dump_stack_lvl+0x10/0x10 [ 319.279931][T12152] dump_stack+0x19/0x20 [ 319.279948][T12152] should_fail_ex+0x3d9/0x530 [ 319.279972][T12152] should_failslab+0xac/0x100 [ 319.279993][T12152] kmem_cache_alloc_noprof+0x42/0x3a0 [ 319.280012][T12152] ? fib_insert_alias+0x14d/0x11a0 [ 319.280030][T12152] fib_insert_alias+0x14d/0x11a0 [ 319.280047][T12152] ? kmem_cache_alloc_noprof+0x154/0x3a0 [ 319.280065][T12152] ? fib_table_insert+0x7ae/0x2010 [ 319.280081][T12152] fib_table_insert+0x953/0x2010 [ 319.280098][T12152] ? kasan_save_alloc_info+0x10/0x50 [ 319.280117][T12152] ip_rt_ioctl+0x479/0x1030 [ 319.280137][T12152] ? arch_stack_walk+0x10b/0x170 [ 319.280157][T12152] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 319.280179][T12152] ? __cfi_ip_rt_ioctl+0x10/0x10 [ 319.280201][T12152] ? __kasan_check_write+0x18/0x20 [ 319.280219][T12152] inet_ioctl+0x43d/0x4d0 [ 319.280234][T12152] ? __cfi_inet_ioctl+0x10/0x10 [ 319.280251][T12152] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 319.280268][T12152] sock_do_ioctl+0x102/0x330 [ 319.280287][T12152] ? sock_show_fdinfo+0xd0/0xd0 [ 319.280304][T12152] ? __cfi_vfs_write+0x10/0x10 [ 319.280322][T12152] ? __kasan_check_write+0x18/0x20 [ 319.280339][T12152] ? mutex_unlock+0x8b/0x240 [ 319.280356][T12152] sock_ioctl+0x634/0x7b0 [ 319.280371][T12152] ? __cfi_sock_ioctl+0x10/0x10 [ 319.280387][T12152] ? __fget_files+0x2c5/0x340 [ 319.280408][T12152] ? bpf_lsm_file_ioctl+0xd/0x20 [ 319.280425][T12152] ? security_file_ioctl+0x34/0xd0 [ 319.280446][T12152] ? __cfi_sock_ioctl+0x10/0x10 [ 319.280462][T12152] __se_sys_ioctl+0x132/0x1b0 [ 319.280482][T12152] __x64_sys_ioctl+0x7f/0xa0 [ 319.280502][T12152] x64_sys_call+0x1878/0x2ee0 [ 319.280523][T12152] do_syscall_64+0x58/0xf0 [ 319.280540][T12152] ? clear_bhb_loop+0x35/0x90 [ 319.280563][T12152] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 319.280584][T12152] RIP: 0033:0x7f8469b8e929 [ 319.280599][T12152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.280612][T12152] RSP: 002b:00007f846a973038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.280631][T12152] RAX: ffffffffffffffda RBX: 00007f8469db5fa0 RCX: 00007f8469b8e929 [ 319.280644][T12152] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000006 [ 319.280656][T12152] RBP: 00007f846a973090 R08: 0000000000000000 R09: 0000000000000000 [ 319.280666][T12152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.280677][T12152] R13: 0000000000000000 R14: 00007f8469db5fa0 R15: 00007ffdc5868148 [ 319.280691][T12152] [ 319.299965][T12152] syzkaller0: entered promiscuous mode [ 319.345143][T12153] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4532'. [ 319.351453][T12152] syzkaller0: entered allmulticast mode [ 319.970806][ T306] usb 1-1: new low-speed USB device number 108 using dummy_hcd [ 319.978453][ T378] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 320.120495][ T378] usb 3-1: device descriptor read/64, error -71 [ 320.126881][ T306] usb 1-1: device descriptor read/64, error -71 [ 320.387728][ T378] usb 3-1: device descriptor read/64, error -71 [ 320.394029][ T306] usb 1-1: device descriptor read/64, error -71 [ 320.491519][T12185] netlink: 'syz.1.4544': attribute type 1 has an invalid length. [ 320.604245][T12190] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 320.654999][ T378] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 320.670633][ T306] usb 1-1: new low-speed USB device number 109 using dummy_hcd [ 320.768307][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4548'. [ 320.789609][T12197] rust_binder: Error while translating object. [ 320.789645][T12197] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 320.796034][T12197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182 [ 320.815395][ T378] usb 3-1: device descriptor read/64, error -71 [ 320.823146][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4552'. [ 320.825635][ T306] usb 1-1: device descriptor read/64, error -71 [ 320.842376][T12205] fuse: Unknown parameter 'gX_id' [ 321.071941][ T378] usb 3-1: device descriptor read/64, error -71 [ 321.093334][ T306] usb 1-1: device descriptor read/64, error -71 [ 321.114700][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 321.189618][ T378] usb usb3-port1: attempt power cycle [ 321.210962][ T306] usb usb1-port1: attempt power cycle [ 321.275051][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 321.281787][ T9] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1024 [ 321.291733][ T9] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 8 [ 321.301567][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 321.309634][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 321.318712][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.326679][ T9] usb 4-1: Product: syz [ 321.330848][ T9] usb 4-1: SerialNumber: syz [ 321.336715][T12207] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 321.345562][T12207] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 321.553735][ T378] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 321.567355][T12207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.574452][ T306] usb 1-1: new low-speed USB device number 110 using dummy_hcd [ 321.576265][T12207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.584591][ T378] usb 3-1: device descriptor read/8, error -71 [ 321.594779][ T9] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 89 if 0 alt 4 proto 3 vid 0x0525 pid 0xA4A8 [ 321.599375][ T306] usb 1-1: device descriptor read/8, error -71 [ 321.612215][ T9] usb 4-1: USB disconnect, device number 89 [ 321.621120][ T9] usblp0: removed [ 321.735712][ T378] usb 3-1: device descriptor read/8, error -71 [ 321.746539][ T306] usb 1-1: device descriptor read/8, error -71 [ 321.991318][ T378] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 322.002131][ T306] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 322.013914][ T378] usb 3-1: device descriptor read/8, error -71 [ 322.024541][ T306] usb 1-1: device descriptor read/8, error -71 [ 322.152649][ T378] usb 3-1: device descriptor read/8, error -71 [ 322.163799][ T306] usb 1-1: device descriptor read/8, error -71 [ 322.269353][ T378] usb usb3-port1: unable to enumerate USB device [ 322.280082][ T306] usb usb1-port1: unable to enumerate USB device [ 322.462868][ T406] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 322.600686][ T406] usb 4-1: device descriptor read/64, error -71 [ 322.857248][ T406] usb 4-1: device descriptor read/64, error -71 [ 323.006950][ T9] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 323.113829][ T406] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 323.168320][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 323.176473][ T9] usb 3-1: config 0 has no interface number 0 [ 323.182699][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 323.190814][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 323.199932][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.207916][ T9] usb 3-1: Product: syz [ 323.212116][ T9] usb 3-1: Manufacturer: syz [ 323.216707][ T9] usb 3-1: SerialNumber: syz [ 323.222001][ T9] usb 3-1: config 0 descriptor?? [ 323.252825][ T406] usb 4-1: device descriptor read/64, error -71 [ 323.509402][ T406] usb 4-1: device descriptor read/64, error -71 [ 323.627150][ T406] usb usb4-port1: attempt power cycle [ 323.990469][ T406] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 324.012813][ T406] usb 4-1: device descriptor read/8, error -71 [ 324.091192][ T36] audit: type=1400 audit(1750481018.618:785): avc: denied { connect } for pid=12267 comm="syz.0.4576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 324.158892][ T52] Bluetooth: hci0: sending frame failed (-49) [ 324.165280][ T1301] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 324.165852][ T406] usb 4-1: device descriptor read/8, error -71 [ 324.428876][ T406] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 324.451205][ T406] usb 4-1: device descriptor read/8, error -71 [ 324.512993][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 324.523699][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 324.533712][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 324.542997][ T9] usb 3-1: USB disconnect, device number 113 [ 324.600885][ T406] usb 4-1: device descriptor read/8, error -71 [ 324.717534][ T406] usb usb4-port1: unable to enumerate USB device [ 325.161092][T12287] FAULT_INJECTION: forcing a failure. [ 325.161092][T12287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.174225][T12287] CPU: 0 UID: 0 PID: 12287 Comm: syz.0.4583 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 325.174252][T12287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.174263][T12287] Call Trace: [ 325.174271][T12287] [ 325.174280][T12287] __dump_stack+0x21/0x30 [ 325.174299][T12287] dump_stack_lvl+0x10c/0x190 [ 325.174317][T12287] ? __cfi_dump_stack_lvl+0x10/0x10 [ 325.174329][T12287] dump_stack+0x19/0x20 [ 325.174339][T12287] should_fail_ex+0x3d9/0x530 [ 325.174351][T12287] should_fail+0xf/0x20 [ 325.174360][T12287] should_fail_usercopy+0x1e/0x30 [ 325.174371][T12287] _copy_to_user+0x24/0xa0 [ 325.174383][T12287] simple_read_from_buffer+0xed/0x160 [ 325.174399][T12287] proc_fail_nth_read+0x19e/0x210 [ 325.174409][T12287] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 325.174418][T12287] ? bpf_lsm_file_permission+0xd/0x20 [ 325.174429][T12287] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 325.174438][T12287] vfs_read+0x278/0xb60 [ 325.174449][T12287] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 325.174463][T12287] ? __cfi_vfs_read+0x10/0x10 [ 325.174473][T12287] ? __kasan_check_write+0x18/0x20 [ 325.174484][T12287] ? mutex_lock+0x92/0x1c0 [ 325.174493][T12287] ? __cfi_mutex_lock+0x10/0x10 [ 325.174502][T12287] ? __fget_files+0x2c5/0x340 [ 325.174515][T12287] ksys_read+0x141/0x250 [ 325.174525][T12287] ? __cfi_ksys_read+0x10/0x10 [ 325.174536][T12287] ? __kasan_check_read+0x15/0x20 [ 325.174546][T12287] __x64_sys_read+0x7f/0x90 [ 325.174557][T12287] x64_sys_call+0x2638/0x2ee0 [ 325.174569][T12287] do_syscall_64+0x58/0xf0 [ 325.174581][T12287] ? clear_bhb_loop+0x35/0x90 [ 325.174596][T12287] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 325.174609][T12287] RIP: 0033:0x7f38c2b8d33c [ 325.174618][T12287] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 325.174627][T12287] RSP: 002b:00007f38c3931030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.174639][T12287] RAX: ffffffffffffffda RBX: 00007f38c2db5fa0 RCX: 00007f38c2b8d33c [ 325.174647][T12287] RDX: 000000000000000f RSI: 00007f38c39310a0 RDI: 0000000000000005 [ 325.174654][T12287] RBP: 00007f38c3931090 R08: 0000000000000000 R09: 0000000000000000 [ 325.174661][T12287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.174667][T12287] R13: 0000000000000000 R14: 00007f38c2db5fa0 R15: 00007ffdb7237b68 [ 325.174675][T12287] [ 325.433878][ T36] audit: type=1326 audit(1750481019.862:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.0.4585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38c2b8e929 code=0x0 [ 325.541158][T12297] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 325.978922][ T306] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 325.978922][ T360] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 326.117874][ T360] usb 2-1: device descriptor read/64, error -71 [ 326.154060][ T36] audit: type=1400 audit(1750481020.545:787): avc: denied { attach_queue } for pid=12327 comm="syz.2.4598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 326.161752][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.184940][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.194693][ T306] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 326.203752][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.212268][ T306] usb 1-1: config 0 descriptor?? [ 326.387464][ T360] usb 2-1: device descriptor read/64, error -71 [ 326.641797][ T360] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 326.648783][ T306] usbhid 1-1:0.0: can't add hid device: -71 [ 326.655493][ T306] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 326.665322][ T306] usb 1-1: USB disconnect, device number 112 [ 326.780709][ T360] usb 2-1: device descriptor read/64, error -71 [ 327.037310][ T360] usb 2-1: device descriptor read/64, error -71 [ 327.068614][T12349] syzkaller0: entered promiscuous mode [ 327.074145][T12349] syzkaller0: entered allmulticast mode [ 327.083696][T12349] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4606'. [ 327.154993][ T360] usb usb2-port1: attempt power cycle [ 327.390658][T12383] rust_binder: Write failure EFAULT in pid:679 [ 327.413646][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4616'. [ 327.421149][T12392] FAULT_INJECTION: forcing a failure. [ 327.421149][T12392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.430037][T12391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4616'. [ 327.442426][T12392] CPU: 1 UID: 0 PID: 12392 Comm: syz.2.4615 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 327.442454][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.442465][T12392] Call Trace: [ 327.442471][T12392] [ 327.442478][T12392] __dump_stack+0x21/0x30 [ 327.442502][T12392] dump_stack_lvl+0x10c/0x190 [ 327.442521][T12392] ? __cfi_dump_stack_lvl+0x10/0x10 [ 327.442541][T12392] dump_stack+0x19/0x20 [ 327.442557][T12392] should_fail_ex+0x3d9/0x530 [ 327.442576][T12392] should_fail+0xf/0x20 [ 327.442592][T12392] should_fail_usercopy+0x1e/0x30 [ 327.442610][T12392] _copy_to_user+0x24/0xa0 [ 327.442630][T12392] simple_read_from_buffer+0xed/0x160 [ 327.442653][T12392] proc_fail_nth_read+0x19e/0x210 [ 327.442670][T12392] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 327.442686][T12392] ? bpf_lsm_file_permission+0xd/0x20 [ 327.442704][T12392] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 327.442719][T12392] vfs_read+0x278/0xb60 [ 327.442737][T12392] ? sock_show_fdinfo+0xd0/0xd0 [ 327.442755][T12392] ? __cfi_vfs_read+0x10/0x10 [ 327.442772][T12392] ? __kasan_check_write+0x18/0x20 [ 327.442788][T12392] ? mutex_lock+0x92/0x1c0 [ 327.442804][T12392] ? __cfi_mutex_lock+0x10/0x10 [ 327.442818][T12392] ? __fget_files+0x2c5/0x340 [ 327.442839][T12392] ksys_read+0x141/0x250 [ 327.442857][T12392] ? __cfi_ksys_read+0x10/0x10 [ 327.442875][T12392] ? __kasan_check_read+0x15/0x20 [ 327.442892][T12392] __x64_sys_read+0x7f/0x90 [ 327.442910][T12392] x64_sys_call+0x2638/0x2ee0 [ 327.442930][T12392] do_syscall_64+0x58/0xf0 [ 327.442949][T12392] ? clear_bhb_loop+0x35/0x90 [ 327.442972][T12392] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 327.442994][T12392] RIP: 0033:0x7fefc518d33c [ 327.443008][T12392] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 327.443021][T12392] RSP: 002b:00007fefc5f29030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 327.443048][T12392] RAX: ffffffffffffffda RBX: 00007fefc53b5fa0 RCX: 00007fefc518d33c [ 327.443061][T12392] RDX: 000000000000000f RSI: 00007fefc5f290a0 RDI: 0000000000000004 [ 327.443072][T12392] RBP: 00007fefc5f29090 R08: 0000000000000000 R09: 0000000000000000 [ 327.443084][T12392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.443094][T12392] R13: 0000000000000000 R14: 00007fefc53b5fa0 R15: 00007ffd2436c148 [ 327.443108][T12392] [ 327.489634][T12402] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4616'. [ 327.534323][ T36] audit: type=1400 audit(1750481021.836:788): avc: denied { setattr } for pid=12395 comm="syz.2.4617" name="binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 327.539549][T12403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4617'. [ 327.561120][ T360] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 327.765277][ T360] usb 2-1: device descriptor read/8, error -71 [ 327.904268][ T360] usb 2-1: device descriptor read/8, error -71 [ 327.986308][T12431] SELinux: security_context_str_to_sid () failed with errno=-22 [ 328.010180][ T9] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 328.159876][ T360] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 328.170622][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 328.176665][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 328.184623][ T360] usb 2-1: device descriptor read/8, error -71 [ 328.191533][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.40 [ 328.200665][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.208785][ T9] usb 1-1: Product: ࠝ [ 328.212958][ T9] usb 1-1: Manufacturer: 窭⒊ₜᩗ딍虸쌏ᖩꌵ䚗踸鲎쇠֯庯徏ᵓꊥᑈ䲡ﬢ<䔒胕제 [ 328.224723][ T9] usb 1-1: SerialNumber: ᖖ箚氶ꂔሦ綽㜜毣菉룸蛧끄쪌糩턠﫞ﶸ쎨䥓⎹┨㌳浤㋤浓⣛䝸簒쬖⶯쟀떃聪԰岱榫壓¢ᵮ⾸ືꝾ磝鈊瞴ຍ邅ꩀ㯬໦ꬍᄱ您풵놀뽒疄㒡澮뒁瀖皑誘즵뾃㭯䒤埦샩괞⨿캜䣲䎰炐䮍㤱볽긹ί吚멎馎…ί麯孀 [ 328.288107][ T406] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 328.331959][ T360] usb 2-1: device descriptor read/8, error -71 [ 328.391123][T12448] input: syz0 as /devices/virtual/input/input63 [ 328.448539][ T360] usb usb2-port1: unable to enumerate USB device [ 328.449547][ T406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.465871][ T406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.475687][ T406] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 328.480744][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 328.484908][ T406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.499788][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 328.501940][ T406] usb 3-1: config 0 descriptor?? [ 328.512898][ T9] usb 1-1: USB disconnect, device number 113 [ 328.779840][ T306] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 328.918838][ T306] usb 4-1: device descriptor read/64, error -71 [ 328.946677][ T406] hid-steam 0003:28DE:1142.003D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 329.175559][ T306] usb 4-1: device descriptor read/64, error -71 [ 329.229294][ T9] usb 3-1: USB disconnect, device number 114 [ 329.431984][ T306] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 329.570975][ T306] usb 4-1: device descriptor read/64, error -71 [ 329.827569][ T306] usb 4-1: device descriptor read/64, error -71 [ 329.945241][ T306] usb usb4-port1: attempt power cycle [ 330.094798][ T360] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 330.233767][ T360] usb 2-1: device descriptor read/64, error -71 [ 330.308612][ T306] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 330.331109][ T306] usb 4-1: device descriptor read/8, error -71 [ 330.469911][ T306] usb 4-1: device descriptor read/8, error -71 [ 330.490343][ T360] usb 2-1: device descriptor read/64, error -71 [ 330.725578][ T306] usb 4-1: new low-speed USB device number 97 using dummy_hcd [ 330.746971][ T360] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 330.756456][ T306] usb 4-1: device descriptor read/8, error -71 [ 330.885927][ T360] usb 2-1: device descriptor read/64, error -71 [ 330.908272][ T306] usb 4-1: device descriptor read/8, error -71 [ 331.003532][ T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 331.011775][T12495] fuse: Bad value for 'user_id' [ 331.016692][T12495] fuse: Bad value for 'user_id' [ 331.025068][ T306] usb usb4-port1: unable to enumerate USB device [ 331.142526][ T360] usb 2-1: device descriptor read/64, error -71 [ 331.164935][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.175075][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.184615][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 331.193716][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 331.201730][ T9] usb 3-1: SerialNumber: syz [ 331.260174][ T360] usb usb2-port1: attempt power cycle [ 331.422929][ T9] usb 3-1: 0:2 : does not exist [ 331.429683][ T9] usb 3-1: USB disconnect, device number 115 [ 331.602769][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 331.623563][ T360] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 331.645923][ T360] usb 2-1: device descriptor read/8, error -71 [ 331.784896][ T360] usb 2-1: device descriptor read/8, error -71 [ 331.967085][T12504] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 331.974461][T12504] rust_binder: Write failure EINVAL in pid:1513 [ 332.000716][T12506] kvm: pic: non byte write [ 332.040494][ T360] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 332.075449][ T360] usb 2-1: device descriptor read/8, error -71 [ 332.151918][T12510] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.159484][T12510] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.166576][T12510] bridge_slave_0: entered allmulticast mode [ 332.172952][T12510] bridge_slave_0: entered promiscuous mode [ 332.180531][T12510] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.187588][T12510] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.194749][T12510] bridge_slave_1: entered allmulticast mode [ 332.201077][T12510] bridge_slave_1: entered promiscuous mode [ 332.223292][ T360] usb 2-1: device descriptor read/8, error -71 [ 332.261421][ T4583] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.268502][ T4583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.278944][ T4581] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.285996][ T4581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.293639][ T4583] bridge_slave_1: left allmulticast mode [ 332.299305][ T4583] bridge_slave_1: left promiscuous mode [ 332.305234][ T4583] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.312782][ T4583] bridge_slave_0: left allmulticast mode [ 332.318685][ T4583] bridge_slave_0: left promiscuous mode [ 332.324299][ T4583] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.343814][ T360] usb usb2-port1: unable to enumerate USB device [ 332.462507][T12510] veth0_vlan: entered promiscuous mode [ 332.470790][ T4583] veth1_macvtap: left promiscuous mode [ 332.476394][ T4583] veth0_vlan: left promiscuous mode [ 332.515657][T12510] veth1_macvtap: entered promiscuous mode [ 332.917124][ T406] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 333.076888][T12541] binder: Binderfs stats mode cannot be changed during a remount [ 333.087450][ T406] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 333.095820][ T406] usb 4-1: config 0 has no interface number 0 [ 333.102449][ T406] usb 4-1: config 0 interface 41 has no altsetting 0 [ 333.110663][ T406] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 333.119817][ T406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.127848][ T406] usb 4-1: Product: syz [ 333.132073][ T406] usb 4-1: Manufacturer: syz [ 333.136659][ T406] usb 4-1: SerialNumber: syz [ 333.142862][ T406] usb 4-1: config 0 descriptor?? [ 333.576412][ T406] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -32 [ 333.741462][ T406] usb 4-1: USB disconnect, device number 98 [ 333.828509][T12583] rust_binder: Write failure EINVAL in pid:253 [ 333.857894][ T360] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 333.889940][ T36] audit: type=1400 audit(1750481027.776:789): avc: denied { accept } for pid=12587 comm="syz.2.4689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 333.929747][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4692'. [ 333.946606][T12602] binder: Unknown parameter '' [ 334.007566][ T360] usb 1-1: device descriptor read/64, error -71 [ 334.264162][ T360] usb 1-1: device descriptor read/64, error -71 [ 334.520709][ T360] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 334.659756][ T360] usb 1-1: device descriptor read/64, error -71 [ 334.911827][T12627] overlayfs: missing 'workdir' [ 334.916832][ T360] usb 1-1: device descriptor read/64, error -71 [ 335.034017][ T360] usb usb1-port1: attempt power cycle [ 335.247681][ T306] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 335.354591][ T4608] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 335.397346][ T360] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 335.408023][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 335.414136][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.419737][ T360] usb 1-1: device descriptor read/8, error -71 [ 335.425114][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.440938][ T306] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 335.449950][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.458512][ T306] usb 4-1: config 0 descriptor?? [ 335.464311][ T306] hub 4-1:0.0: USB hub found [ 335.514934][ T4608] usb 3-1: Using ep0 maxpacket: 32 [ 335.521193][ T4608] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 335.529374][ T4608] usb 3-1: config 0 has no interface number 0 [ 335.535453][ T4608] usb 3-1: too many endpoints for config 0 interface 2 altsetting 45: 160, using maximum allowed: 30 [ 335.546353][ T4608] usb 3-1: config 0 interface 2 altsetting 45 has 1 endpoint descriptor, different from the interface descriptor's value: 160 [ 335.559596][ T4608] usb 3-1: config 0 interface 2 has no altsetting 0 [ 335.567691][ T4608] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 335.576777][ T4608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.584855][ T4608] usb 3-1: Product: syz [ 335.589060][ T4608] usb 3-1: Manufacturer: syz [ 335.593746][ T4608] usb 3-1: SerialNumber: syz [ 335.598855][ T360] usb 1-1: device descriptor read/8, error -71 [ 335.605551][ T4608] usb 3-1: config 0 descriptor?? [ 335.678046][ T306] hub 4-1:0.0: 1 port detected [ 335.848223][ T4608] usb 3-1: invalid MIDI out EP 0 [ 335.856065][ T4608] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 335.865150][ T360] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 335.874115][ T4608] usb 3-1: USB disconnect, device number 116 [ 335.883405][ T6796] udevd[6796]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 335.899255][ T306] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 335.905636][ T306] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 335.911514][ T360] usb 1-1: device descriptor read/8, error -71 [ 335.914463][ T306] usbhid 4-1:0.0: can't add hid device: -71 [ 335.925159][ T306] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 335.954151][ T306] usb 4-1: USB disconnect, device number 99 [ 336.050452][ T360] usb 1-1: device descriptor read/8, error -71 [ 336.163920][T12673] fuse: Bad value for 'group_id' [ 336.169028][T12673] fuse: Bad value for 'group_id' [ 336.169118][ T360] usb usb1-port1: unable to enumerate USB device [ 336.275029][T12694] /dev/loop0: Can't lookup blockdev [ 336.467057][T12706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 336.467089][T12706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 336.511503][ T36] audit: type=1400 audit(1750481030.236:790): avc: denied { read write } for pid=12716 comm="syz.2.4738" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:sshd_key_t:s0" [ 336.554221][ T36] audit: type=1400 audit(1750481030.264:791): avc: denied { open } for pid=12716 comm="syz.2.4738" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:sshd_key_t:s0" [ 336.589229][ T36] audit: type=1400 audit(1750481030.264:792): avc: denied { ioctl } for pid=12716 comm="syz.2.4738" path="/dev/udmabuf" dev="devtmpfs" ino=83 ioctlcmd=0x7543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:sshd_key_t:s0" [ 336.659580][T12708] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 336.659603][T12708] rust_binder: Read failure Err(EFAULT) in pid:278 [ 336.732571][T12732] rust_binder: Write failure EFAULT in pid:286 [ 336.746910][ T36] audit: type=1400 audit(1750481030.451:793): avc: denied { getopt } for pid=12733 comm="syz.3.4745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 336.847547][ T4580] Bluetooth: hci0: Frame reassembly failed (-84) [ 336.919478][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4750'. [ 336.929341][T12750] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 336.929475][T12750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 337.246895][ T360] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 337.396615][ T360] usb 1-1: device descriptor read/64, error -71 [ 337.653072][ T360] usb 1-1: device descriptor read/64, error -71 [ 337.759464][T12765] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 337.765190][T12765] pim6reg0: linktype set to 769 [ 337.909687][ T360] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 338.070038][ T360] usb 1-1: device descriptor read/64, error -71 [ 338.089379][T12789] 9pnet_fd: Insufficient options for proto=fd [ 338.096412][ T36] audit: type=1326 audit(1750481031.714:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12788 comm="syz.1.4766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fc398e929 code=0x0 [ 338.174658][T12797] rust_binder: Write failure EINVAL in pid:95 [ 338.326580][ T360] usb 1-1: device descriptor read/64, error -71 [ 338.454950][ T360] usb usb1-port1: attempt power cycle [ 338.486994][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 338.625921][ T9] usb 3-1: device descriptor read/64, error -71 [ 338.818470][ T360] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 338.840691][ T360] usb 1-1: device descriptor read/8, error -71 [ 338.882472][ T9] usb 3-1: device descriptor read/64, error -71 [ 338.979875][ T360] usb 1-1: device descriptor read/8, error -71 [ 338.992243][T12804] incfs: Options parsing error. -22 [ 338.997466][T12804] incfs: mount failed -22 [ 339.002105][ T1301] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 339.002958][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 339.140423][ T9] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 339.198555][T12829] SELinux: Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped). [ 339.208764][ T36] audit: type=1400 audit(1750481032.752:795): avc: denied { relabelto } for pid=12828 comm="syz.3.4780" name="file0" dev="tmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 339.235706][ T36] audit: type=1400 audit(1750481032.752:796): avc: denied { associate } for pid=12828 comm="syz.3.4780" name="file0" dev="tmpfs" ino=709 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:udev_helper_exec_t:s0" [ 339.263744][ T360] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 339.289733][ T360] usb 1-1: device descriptor read/8, error -71 [ 339.331490][ T9] usb 3-1: device descriptor read/64, error -71 [ 339.428712][ T360] usb 1-1: device descriptor read/8, error -71 [ 339.545389][ T360] usb usb1-port1: unable to enumerate USB device [ 339.588057][ T9] usb 3-1: device descriptor read/64, error -71 [ 339.705745][ T9] usb usb3-port1: attempt power cycle [ 339.932292][T12832] netlink: 'syz.1.4781': attribute type 3 has an invalid length. [ 340.069153][ T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 340.091640][ T9] usb 3-1: device descriptor read/8, error -71 [ 340.139968][T12847] binder: Bad value for 'stats' [ 340.157490][T12849] overlayfs: missing 'lowerdir' [ 340.163362][T12849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:731 [ 340.230516][ T9] usb 3-1: device descriptor read/8, error -71 [ 340.496771][ T9] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 340.513082][ T36] audit: type=1400 audit(1750481033.977:797): avc: denied { create } for pid=12869 comm="syz.1.4797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 340.533497][ T36] audit: type=1107 audit(1750481033.977:798): pid=12869 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='*)ZfnNfRFlߩt,P K36FPI<*cפ!s\^ax.0*ܱLê~H'' [ 340.540770][ T9] usb 3-1: device descriptor read/8, error -71 [ 340.699940][ T4608] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 340.711634][ T9] usb 3-1: device descriptor read/8, error -71 [ 340.773976][T12889] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 340.773999][T12889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:738 [ 340.829749][ T9] usb usb3-port1: unable to enumerate USB device [ 340.872015][ T4608] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.882976][ T4608] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 340.894414][ T4608] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.903497][ T4608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.911467][ T4608] usb 4-1: Product: syz [ 340.915684][ T4608] usb 4-1: Manufacturer: syz [ 340.920471][ T4608] usb 4-1: SerialNumber: syz [ 340.945977][T12894] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 340.953307][T12894] rust_binder: Write failure EINVAL in pid:743 [ 340.964800][T12897] Unsupported ieee802154 address type: 0 [ 340.979880][T12897] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.980156][T12897] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 341.141036][T12866] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 341.165229][T12908] fuse: Unknown parameter 'D Os00000000000000000000' [ 341.411289][T12926] overlayfs: failed to clone upperpath [ 341.458359][T12932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4824'. [ 341.484448][T12934] 9pnet_fd: Insufficient options for proto=fd [ 341.553285][T12940] binfmt_misc: register: failed to install interpreter file ./file0 [ 341.571457][T12940] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 341.583863][T12944] fuse: Bad value for 'fd' [ 341.804401][T12866] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 341.872403][ T36] audit: type=1326 audit(1750481035.250:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.4835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38c2b8e929 code=0x0 [ 341.950688][ T307] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 342.026094][ T4608] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 342.032698][ T4608] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 342.040205][ T4608] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 342.122245][ T307] usb 3-1: no configurations [ 342.126984][ T307] usb 3-1: can't read configurations, error -22 [ 342.246731][ T4608] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 342.253800][ T4608] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 342.271401][ T307] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 342.432105][ T307] usb 3-1: no configurations [ 342.436737][ T307] usb 3-1: can't read configurations, error -22 [ 342.443353][ T307] usb usb3-port1: attempt power cycle [ 342.463000][ T406] usb 4-1: USB disconnect, device number 100 [ 342.469288][ T406] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 342.771360][T13003] rust_binder: Write failure EINVAL in pid:771 [ 342.771486][T13003] rust_binder: Read failure Err(EAGAIN) in pid:771 [ 342.806662][ T307] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 342.838718][ T307] usb 3-1: no configurations [ 342.843336][ T307] usb 3-1: can't read configurations, error -22 [ 342.987741][ T307] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 343.009766][ T307] usb 3-1: no configurations [ 343.012109][T13010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.014393][ T307] usb 3-1: can't read configurations, error -22 [ 343.021059][ T307] usb usb3-port1: unable to enumerate USB device [ 343.083882][ T406] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 343.092446][T13011] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 343.092715][T13011] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 343.109124][T13011] rust_binder: Write failure EINVAL in pid:338 [ 343.244243][ T406] usb 1-1: Using ep0 maxpacket: 8 [ 343.256521][ T406] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 343.264678][ T406] usb 1-1: config 0 has no interface number 0 [ 343.270813][ T406] usb 1-1: too many endpoints for config 0 interface 143 altsetting 0: 141, using maximum allowed: 30 [ 343.281794][ T406] usb 1-1: config 0 interface 143 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 141 [ 343.295035][ T406] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 343.304083][ T406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.312710][ T406] usb 1-1: config 0 descriptor?? [ 343.533384][ T48] usb 1-1: USB disconnect, device number 122 [ 343.989294][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4856'. [ 344.065704][T13051] input: syz0 as /devices/virtual/input/input69 [ 344.072039][T13051] input: failed to attach handler leds to device input69, error: -6 [ 344.131740][ T36] audit: type=1400 audit(1750481037.364:800): avc: denied { create } for pid=13054 comm="syz.3.4862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 344.181256][ T36] audit: type=1400 audit(1750481037.401:801): avc: denied { set_context_mgr } for pid=13058 comm="syz.0.4864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 344.235609][ T36] audit: type=1400 audit(1750481037.457:802): avc: denied { call } for pid=13058 comm="syz.0.4864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 344.235779][T13067] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 344.254616][T13061] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 344.450262][ T36] audit: type=1400 audit(1750481037.654:803): avc: denied { create } for pid=13073 comm="syz.1.4869" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 344.479551][ T36] audit: type=1400 audit(1750481037.654:804): avc: denied { associate } for pid=13073 comm="syz.1.4869" name="cgroup.controllers" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 344.537802][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 344.698191][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 344.704453][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 344.712740][ T9] usb 4-1: config 0 has no interface number 0 [ 344.720286][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 344.729329][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.737368][ T9] usb 4-1: Product: syz [ 344.741673][ T9] usb 4-1: Manufacturer: syz [ 344.746276][ T9] usb 4-1: SerialNumber: syz [ 344.751704][ T9] usb 4-1: config 0 descriptor?? [ 344.757491][ T9] smsc95xx v2.0.0 [ 345.185710][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 345.196535][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 345.420963][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 345.431796][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 345.457204][ T4608] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 345.460998][T13107] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 345.617938][ T4608] usb 1-1: no configurations [ 345.630398][ T4608] usb 1-1: can't read configurations, error -22 [ 345.767263][ T4608] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 345.927969][ T4608] usb 1-1: no configurations [ 345.932691][ T4608] usb 1-1: can't read configurations, error -22 [ 345.939086][ T4608] usb usb1-port1: attempt power cycle [ 346.301773][ T4608] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 346.323838][ T4608] usb 1-1: no configurations [ 346.328479][ T4608] usb 1-1: can't read configurations, error -22 [ 346.426782][ T36] audit: type=1326 audit(1750481039.506:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.2.4883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ccc58e929 code=0x0 [ 346.473261][ T4608] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 346.494949][ T4608] usb 1-1: no configurations [ 346.499597][ T4608] usb 1-1: can't read configurations, error -22 [ 346.506123][ T4608] usb usb1-port1: unable to enumerate USB device [ 346.535616][T13115] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 347.397491][T13123] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 347.397515][T13123] rust_binder: Error in use_page_slow: EBUSY [ 347.408131][T13123] rust_binder: use_range failure EBUSY [ 347.414195][T13123] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 347.419730][T13123] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 347.427411][T13123] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 347.436749][T13123] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:152 [ 347.448469][ T4608] usb 4-1: USB disconnect, device number 101 [ 347.477548][T13128] 9pnet_virtio: no channels available for device syz [ 347.504632][T13134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4891'. [ 347.521366][T13136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:159 [ 348.300979][ T4608] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 348.421629][ T36] audit: type=1326 audit(1750481041.376:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ccc58e929 code=0x7fc00000 [ 348.445256][ T36] audit: type=1326 audit(1750481041.376:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ccc58e929 code=0x7fc00000 [ 348.468574][ T4608] usb 4-1: device descriptor read/64, error -71 [ 348.474842][ T36] audit: type=1326 audit(1750481041.376:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ccc58e929 code=0x7fc00000 [ 348.498572][ T36] audit: type=1326 audit(1750481041.376:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ccc58e929 code=0x7fc00000 [ 348.521998][ T36] audit: type=1326 audit(1750481041.376:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ccc58e929 code=0x7fc00000 [ 348.545431][ T36] audit: type=1326 audit(1750481041.376:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ccc58e929 code=0x7fc00000 [ 348.568923][ T36] audit: type=1326 audit(1750481041.376:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ccc58e929 code=0x7fc00000 [ 348.592350][ T36] audit: type=1326 audit(1750481041.376:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ccc58e929 code=0x7fc00000 [ 348.615735][ T36] audit: type=1326 audit(1750481041.376:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ccc58e929 code=0x7fc00000 [ 348.717843][ T4608] usb 4-1: device descriptor read/64, error -71 [ 348.766868][T13172] 9pnet_fd: Insufficient options for proto=fd [ 348.835652][ T307] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 348.974424][ T4608] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 348.998170][ T307] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 349.007277][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.015257][ T307] usb 1-1: Product: syz [ 349.019452][ T307] usb 1-1: Manufacturer: syz [ 349.024046][ T307] usb 1-1: SerialNumber: syz [ 349.113382][ T4608] usb 4-1: device descriptor read/64, error -71 [ 349.369972][ T4608] usb 4-1: device descriptor read/64, error -71 [ 349.487695][ T4608] usb usb4-port1: attempt power cycle [ 349.851082][ T4608] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 349.873706][ T4608] usb 4-1: device descriptor read/8, error -71 [ 350.012373][ T4608] usb 4-1: device descriptor read/8, error -71 [ 350.269225][ T4608] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 350.290507][ T4608] usb 4-1: device descriptor read/8, error -71 [ 350.429486][ T4608] usb 4-1: device descriptor read/8, error -71 [ 350.546226][ T4608] usb usb4-port1: unable to enumerate USB device [ 351.077275][T13241] FAULT_INJECTION: forcing a failure. [ 351.077275][T13241] name failslab, interval 1, probability 0, space 0, times 0 [ 351.090004][T13241] CPU: 1 UID: 0 PID: 13241 Comm: syz.2.4934 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 351.090035][T13241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.090042][T13241] Call Trace: [ 351.090091][T13241] [ 351.090096][T13241] __dump_stack+0x21/0x30 [ 351.090114][T13241] dump_stack_lvl+0x10c/0x190 [ 351.090125][T13241] ? __cfi_dump_stack_lvl+0x10/0x10 [ 351.090137][T13241] dump_stack+0x19/0x20 [ 351.090147][T13241] should_fail_ex+0x3d9/0x530 [ 351.090159][T13241] should_failslab+0xac/0x100 [ 351.090173][T13241] kmem_cache_alloc_noprof+0x42/0x3a0 [ 351.090187][T13241] ? security_inode_alloc+0x51/0x200 [ 351.090199][T13241] ? __cfi_make_kgid+0x10/0x10 [ 351.090211][T13241] security_inode_alloc+0x51/0x200 [ 351.090221][T13241] inode_init_always_gfp+0x756/0x9e0 [ 351.090235][T13241] ? __cfi_proc_alloc_inode+0x10/0x10 [ 351.090246][T13241] alloc_inode+0xc5/0x270 [ 351.090259][T13241] new_inode+0x25/0x1e0 [ 351.090271][T13241] ? __cfi_d_alloc_parallel+0x10/0x10 [ 351.090282][T13241] proc_pid_make_inode+0x25/0x140 [ 351.090294][T13241] proc_fd_instantiate+0x57/0x310 [ 351.090306][T13241] proc_fill_cache+0x32a/0x420 [ 351.090317][T13241] ? __cfi_proc_fd_instantiate+0x10/0x10 [ 351.090329][T13241] ? __cfi_proc_fill_cache+0x10/0x10 [ 351.090341][T13241] ? __cfi_snprintf+0x10/0x10 [ 351.090353][T13241] ? __kasan_check_write+0x18/0x20 [ 351.090364][T13241] proc_readfd_common+0x41f/0x5a0 [ 351.090376][T13241] ? __cfi_proc_fd_instantiate+0x10/0x10 [ 351.090388][T13241] ? proc_fdinfo_iterate+0x50/0x50 [ 351.090399][T13241] ? vfs_write+0x8ba/0xe80 [ 351.090410][T13241] ? devlink_port_attrs_pci_pf_set+0x210/0x320 [ 351.090424][T13241] ? __cfi_down_read_killable+0x10/0x10 [ 351.090435][T13241] ? mutex_lock+0x92/0x1c0 [ 351.090444][T13241] ? __cfi_mutex_lock+0x10/0x10 [ 351.090453][T13241] proc_fd_iterate+0x28/0x40 [ 351.090464][T13241] iterate_dir+0x200/0x5e0 [ 351.090477][T13241] __se_sys_getdents+0xe9/0x240 [ 351.090489][T13241] ? fput+0x1a5/0x240 [ 351.090503][T13241] ? __x64_sys_getdents+0xa0/0xa0 [ 351.090515][T13241] ? ksys_write+0x1ef/0x250 [ 351.090525][T13241] ? __cfi_filldir+0x10/0x10 [ 351.090537][T13241] ? __cfi_ksys_write+0x10/0x10 [ 351.090549][T13241] ? __kasan_check_read+0x15/0x20 [ 351.090561][T13241] __x64_sys_getdents+0x7f/0xa0 [ 351.090573][T13241] x64_sys_call+0x26e0/0x2ee0 [ 351.090595][T13241] do_syscall_64+0x58/0xf0 [ 351.090606][T13241] ? clear_bhb_loop+0x35/0x90 [ 351.090621][T13241] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 351.090634][T13241] RIP: 0033:0x7f1ccc58e929 [ 351.090644][T13241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.090653][T13241] RSP: 002b:00007f1ccd4a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 351.090666][T13241] RAX: ffffffffffffffda RBX: 00007f1ccc7b5fa0 RCX: 00007f1ccc58e929 [ 351.090674][T13241] RDX: 0000000000001027 RSI: 00002000000003c0 RDI: 0000000000000003 [ 351.090681][T13241] RBP: 00007f1ccd4a5090 R08: 0000000000000000 R09: 0000000000000000 [ 351.090687][T13241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.090694][T13241] R13: 0000000000000000 R14: 00007f1ccc7b5fa0 R15: 00007ffe97c2eee8 [ 351.090701][T13241] [ 351.430779][T13245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 351.447092][T13245] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4936'. [ 351.485868][T13253] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 351.593433][ T360] usb 1-1: USB disconnect, device number 127 [ 351.699338][T13277] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4949'. [ 351.753838][T13283] FAULT_INJECTION: forcing a failure. [ 351.753838][T13283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.766998][T13283] CPU: 0 UID: 0 PID: 13283 Comm: syz.0.4947 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 351.767031][T13283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.767042][T13283] Call Trace: [ 351.767048][T13283] [ 351.767056][T13283] __dump_stack+0x21/0x30 [ 351.767082][T13283] dump_stack_lvl+0x10c/0x190 [ 351.767100][T13283] ? __cfi_dump_stack_lvl+0x10/0x10 [ 351.767119][T13283] dump_stack+0x19/0x20 [ 351.767137][T13283] should_fail_ex+0x3d9/0x530 [ 351.767156][T13283] should_fail+0xf/0x20 [ 351.767173][T13283] should_fail_usercopy+0x1e/0x30 [ 351.767191][T13283] _copy_from_iter+0x1a3/0x14b0 [ 351.767213][T13283] ? __kasan_check_write+0x18/0x20 [ 351.767233][T13283] ? __cfi__copy_from_iter+0x10/0x10 [ 351.767254][T13283] ? check_stack_object+0x82/0x140 [ 351.767274][T13283] ? __virt_addr_valid+0x2a6/0x380 [ 351.767297][T13283] ? __check_object_size+0x455/0x620 [ 351.767316][T13283] skb_copy_datagram_from_iter+0x100/0x700 [ 351.767340][T13283] ? x64_sys_call+0xe69/0x2ee0 [ 351.767361][T13283] ? do_syscall_64+0x58/0xf0 [ 351.767382][T13283] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 351.767407][T13283] packet_sendmsg+0x3d74/0x56e0 [ 351.767428][T13283] ? avc_has_perm_noaudit+0x268/0x360 [ 351.767448][T13283] ? security_prepare_creds+0x1b0/0x230 [ 351.767490][T13283] ? selinux_socket_sendmsg+0x284/0x380 [ 351.767510][T13283] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 351.767529][T13283] ? __cfi_packet_sendmsg+0x10/0x10 [ 351.767550][T13283] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 351.767574][T13283] ? security_socket_sendmsg+0x33/0xd0 [ 351.767593][T13283] ? __cfi_packet_sendmsg+0x10/0x10 [ 351.767614][T13283] ____sys_sendmsg+0xa15/0xa70 [ 351.767638][T13283] ? __sys_sendmsg_sock+0x50/0x50 [ 351.767662][T13283] ? import_iovec+0x81/0xb0 [ 351.767685][T13283] ___sys_sendmsg+0x220/0x2a0 [ 351.767708][T13283] ? __sys_sendmsg+0x280/0x280 [ 351.767738][T13283] ? kstrtouint+0x78/0xf0 [ 351.767760][T13283] __sys_sendmmsg+0x271/0x470 [ 351.767777][T13283] ? __cfi___sys_sendmmsg+0x10/0x10 [ 351.767796][T13283] ? __cfi_ksys_write+0x10/0x10 [ 351.767816][T13283] __x64_sys_sendmmsg+0xa4/0xc0 [ 351.767833][T13283] x64_sys_call+0xfec/0x2ee0 [ 351.767853][T13283] do_syscall_64+0x58/0xf0 [ 351.767874][T13283] ? clear_bhb_loop+0x35/0x90 [ 351.767897][T13283] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 351.767919][T13283] RIP: 0033:0x7f38c2b8e929 [ 351.767935][T13283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.767951][T13283] RSP: 002b:00007f38c3931038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 351.767971][T13283] RAX: ffffffffffffffda RBX: 00007f38c2db5fa0 RCX: 00007f38c2b8e929 [ 351.767985][T13283] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 000000000000000c [ 351.767996][T13283] RBP: 00007f38c3931090 R08: 0000000000000000 R09: 0000000000000000 [ 351.768008][T13283] R10: 0000000020000084 R11: 0000000000000246 R12: 0000000000000001 [ 351.768019][T13283] R13: 0000000000000000 R14: 00007f38c2db5fa0 R15: 00007ffdb7237b68 [ 351.768035][T13283] [ 351.836469][T13293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4954'. [ 351.837698][ T4608] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 351.842992][T13293] rust_binder: 13292 RLIMIT_NICE not set [ 352.088400][ T4608] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 352.110924][ T4608] usb 4-1: can't read configurations, error -71 [ 352.216355][T13298] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 352.216355][T13298] attempt to subtract with overflow [ 352.229370][T13298] ------------[ cut here ]------------ [ 352.234814][T13298] kernel BUG at rust/helpers/bug.c:7! [ 352.240429][T13298] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 352.241598][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 352.241611][ T36] audit: type=1400 audit(1750481044.950:882): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 352.247370][T13298] CPU: 1 UID: 0 PID: 13298 Comm: syz.0.4963 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 352.247398][T13298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.247409][T13298] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 352.253904][ T36] audit: type=1400 audit(1750481044.950:883): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.275166][T13298] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 ad f0 3d 84 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 e7 34 74 08 90 90 90 90 90 90 90 90 90 [ 352.275190][T13298] RSP: 0018:ffffc9000321da90 EFLAGS: 00010246 [ 352.275207][T13298] RAX: 0000000000000061 RBX: 1ffff92000643b54 RCX: 6250528e57d72b00 [ 352.275222][T13298] RDX: ffffc9000ded1000 RSI: 0000000000004169 RDI: 000000000000416a [ 352.275233][T13298] RBP: ffffc9000321da90 R08: ffffc9000321d787 R09: 1ffff92000643af0 [ 352.275246][T13298] R10: dffffc0000000000 R11: fffff52000643af1 R12: 0000000000000000 [ 352.275258][T13298] R13: dffffc0000000000 R14: ffffc9000321dac0 R15: ffffc9000321daf0 [ 352.275271][T13298] FS: 00007f38c39316c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 352.275285][T13298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.275295][T13298] CR2: 0000001b2cc1fffc CR3: 0000000117008000 CR4: 00000000003526b0 [ 352.275310][T13298] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 352.275321][T13298] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.289618][ T36] audit: type=1400 audit(1750481044.950:884): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.298886][T13298] Call Trace: [ 352.298896][T13298] [ 352.298904][T13298] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 352.304551][ T36] audit: type=1400 audit(1750481044.950:885): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.325409][T13298] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 352.325443][T13298] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 352.325475][T13298] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 352.325510][T13298] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 352.325535][T13298] ? __kasan_check_write+0x18/0x20 [ 352.325553][T13298] ? _raw_spin_lock+0x8c/0x120 [ 352.325575][T13298] ? __cfi__raw_spin_lock+0x10/0x10 [ 352.325593][T13298] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 352.325617][T13298] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 352.346010][ T36] audit: type=1400 audit(1750481044.950:886): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 352.351264][T13298] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 352.359692][ T36] audit: type=1400 audit(1750481044.950:887): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 352.367189][T13298] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 352.367220][T13298] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 352.375505][ T36] audit: type=1400 audit(1750481044.950:888): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 352.383132][T13298] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 352.663795][T13298] ? __kasan_check_write+0x18/0x20 [ 352.668896][T13298] ? _raw_spin_lock+0x8c/0x120 [ 352.673647][T13298] ? __cfi__raw_spin_lock+0x10/0x10 [ 352.678826][T13298] ? __kasan_check_write+0x18/0x20 [ 352.683918][T13298] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 352.693474][T13298] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 352.703364][T13298] ? unwind_next_frame+0x3c2/0x750 [ 352.708465][T13298] ? do_filp_open+0x1c6/0x3e0 [ 352.713126][T13298] ? do_filp_open+0x1c6/0x3e0 [ 352.717781][T13298] ? __kernel_text_address+0x11/0x40 [ 352.723045][T13298] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 352.729180][T13298] ? arch_stack_walk+0x12a/0x170 [ 352.734101][T13298] ? do_filp_open+0x1c6/0x3e0 [ 352.738764][T13298] ? stack_depot_save_flags+0x38/0x800 [ 352.744212][T13298] ? is_bpf_text_address+0x17b/0x1a0 [ 352.749483][T13298] ? kernel_text_address+0xa9/0xe0 [ 352.754574][T13298] ? unwind_get_return_address+0x51/0x90 [ 352.760183][T13298] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 352.766316][T13298] ? arch_stack_walk+0x10b/0x170 [ 352.771235][T13298] ? stack_depot_save_flags+0x38/0x800 [ 352.776673][T13298] ? kasan_save_alloc_info+0x40/0x50 [ 352.781938][T13298] ? kasan_save_track+0x4f/0x80 [ 352.786768][T13298] ? kasan_save_track+0x3e/0x80 [ 352.791597][T13298] ? kasan_save_alloc_info+0x40/0x50 [ 352.796860][T13298] ? __kasan_kmalloc+0x96/0xb0 [ 352.801606][T13298] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 352.808178][T13298] ? krealloc_noprof+0x8d/0x130 [ 352.813008][T13298] ? rust_helper_krealloc+0x33/0xd0 [ 352.818188][T13298] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 352.827710][T13298] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 352.838188][T13298] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 352.847458][T13298] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 352.856132][T13298] ? __se_sys_ioctl+0x132/0x1b0 [ 352.860971][T13298] ? __x64_sys_ioctl+0x7f/0xa0 [ 352.865730][T13298] ? do_syscall_64+0x58/0xf0 [ 352.870315][T13298] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 352.876368][T13298] ? __kasan_kmalloc+0x96/0xb0 [ 352.881117][T13298] ? kasan_save_alloc_info+0x40/0x50 [ 352.886390][T13298] ? __kasan_kmalloc+0x96/0xb0 [ 352.891158][T13298] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 352.897733][T13298] ? __kasan_check_write+0x18/0x20 [ 352.902826][T13298] ? _raw_spin_lock+0x8c/0x120 [ 352.907575][T13298] ? __cfi__raw_spin_lock+0x10/0x10 [ 352.912756][T13298] ? __asan_memset+0x39/0x50 [ 352.917327][T13298] ? _raw_spin_unlock+0x45/0x60 [ 352.922168][T13298] ? rust_helper_spin_unlock+0x19/0x30 [ 352.927610][T13298] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440 [ 352.938094][T13298] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 352.948843][T13298] ? kvm_sched_clock_read+0x15/0x30 [ 352.954031][T13298] ? sched_clock_noinstr+0xd/0x30 [ 352.959037][T13298] ? sched_clock+0x44/0x60 [ 352.963442][T13298] ? sched_clock_cpu+0x75/0x400 [ 352.968274][T13298] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 352.974324][T13298] ? xfd_validate_state+0x68/0x150 [ 352.979443][T13298] ? save_fpregs_to_fpstate+0x196/0x230 [ 352.984979][T13298] ? __cfi___switch_to+0x10/0x10 [ 352.989912][T13298] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 352.999007][T13298] ? finish_task_switch+0x13a/0x780 [ 353.004188][T13298] ? __switch_to_asm+0x3d/0x70 [ 353.008937][T13298] ? avc_has_extended_perms+0x7c7/0xdd0 [ 353.014472][T13298] ? __asan_memcpy+0x5a/0x80 [ 353.019046][T13298] ? avc_has_extended_perms+0x921/0xdd0 [ 353.024573][T13298] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 353.034100][T13298] ? do_vfs_ioctl+0xeda/0x1e30 [ 353.038906][T13298] ? __futex_queue+0x19a/0x340 [ 353.043659][T13298] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 353.049280][T13298] ? __cfi___futex_queue+0x10/0x10 [ 353.054374][T13298] ? futex_wait_setup+0x1bc/0x260 [ 353.059380][T13298] ? __futex_wait+0x218/0x2a0 [ 353.064039][T13298] ? ioctl_has_perm+0x384/0x4d0 [ 353.068875][T13298] ? has_cap_mac_admin+0xd0/0xd0 [ 353.073796][T13298] ? futex_wake+0x5fb/0x900 [ 353.078279][T13298] ? futex_setup_timer+0xb4/0xd0 [ 353.083204][T13298] ? futex_wait+0x288/0x540 [ 353.087699][T13298] ? __cfi_futex_wait+0x10/0x10 [ 353.092530][T13298] ? selinux_file_ioctl+0x6e0/0x1360 [ 353.097802][T13298] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 353.103370][T13298] ? do_futex+0x309/0x500 [ 353.107694][T13298] ? __cfi_do_futex+0x10/0x10 [ 353.112384][T13298] ? __fget_files+0x2c5/0x340 [ 353.117074][T13298] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 353.125563][T13298] ? __se_sys_ioctl+0x114/0x1b0 [ 353.130400][T13298] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 353.139501][T13298] __se_sys_ioctl+0x132/0x1b0 [ 353.144165][T13298] __x64_sys_ioctl+0x7f/0xa0 [ 353.148741][T13298] x64_sys_call+0x1878/0x2ee0 [ 353.153403][T13298] do_syscall_64+0x58/0xf0 [ 353.157811][T13298] ? clear_bhb_loop+0x35/0x90 [ 353.162479][T13298] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 353.168364][T13298] RIP: 0033:0x7f38c2b8e929 [ 353.172774][T13298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.192371][T13298] RSP: 002b:00007f38c3931038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.200776][T13298] RAX: ffffffffffffffda RBX: 00007f38c2db5fa0 RCX: 00007f38c2b8e929 [ 353.208732][T13298] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 353.216689][T13298] RBP: 00007f38c2c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 353.224643][T13298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.232603][T13298] R13: 0000000000000000 R14: 00007f38c2db5fa0 R15: 00007ffdb7237b68 [ 353.240571][T13298] [ 353.243584][T13298] Modules linked in: [ 353.247822][T13298] ---[ end trace 0000000000000000 ]--- [ 353.253500][T13298] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 353.258829][T13298] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 ad f0 3d 84 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 e7 34 74 08 90 90 90 90 90 90 90 90 90 [ 353.278660][T13298] RSP: 0018:ffffc9000321da90 EFLAGS: 00010246 [ 353.285046][T13298] RAX: 0000000000000061 RBX: 1ffff92000643b54 RCX: 6250528e57d72b00 [ 353.293035][T13298] RDX: ffffc9000ded1000 RSI: 0000000000004169 RDI: 000000000000416a [ 353.301134][T13298] RBP: ffffc9000321da90 R08: ffffc9000321d787 R09: 1ffff92000643af0 [ 353.309156][T13298] R10: dffffc0000000000 R11: fffff52000643af1 R12: 0000000000000000 [ 353.317175][T13298] R13: dffffc0000000000 R14: ffffc9000321dac0 R15: ffffc9000321daf0 [ 353.325151][T13298] FS: 00007f38c39316c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 353.334179][T13298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.340866][T13298] CR2: 000000110c2b773b CR3: 0000000117008000 CR4: 00000000003526b0 [ 353.348960][T13298] DR0: 0000000000000008 DR1: 0000000000000008 DR2: 0000000000000006 [ 353.357046][T13298] DR3: 0000000000000004 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.365176][T13298] Kernel panic - not syncing: Fatal exception [ 353.371510][T13298] Kernel Offset: disabled [ 353.375827][T13298] Rebooting in 86400 seconds..