last executing test programs: 36.860111454s ago: executing program 2 (id=521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x9, 0x0, &(0x7f0000000140)=[@request_death], 0x0, 0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) connect$bt_sco(r1, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)={0x4, 0x0, [{0xeeee8000, 0x78, &(0x7f0000000000)=""/120}, {0x6000, 0x21, &(0x7f0000000080)=""/33}, {0x5000, 0x11, &(0x7f00000000c0)=""/17}, {0x1000, 0x29, &(0x7f0000000180)=""/41}]}) 36.859832084s ago: executing program 2 (id=522): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000480)={0x10, 0x0, 0xffff, 0x1}, 0xc) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000000000061616161616161616161616161616161616161616161616161616161616161505edc523747f16131313131313131313131313131313131313131313131313131"], 0x48, 0xfffffffffffffffa) 36.848053984s ago: executing program 2 (id=523): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x478103, 0x60) 36.823876954s ago: executing program 2 (id=524): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x418580, 0x0) pipe2$9p(&(0x7f0000000080), 0x84080) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x0, &(0x7f00000001c0)={@flat, @fd, @fd={0x66642a85, 0x0, r2}}, 0x0}, 0x10}], 0x5e, 0x0, &(0x7f0000000280)="27340dbe79e8af432ff4fa2360c88df5a04d47326ef1148e7eeb14f8d0fab09d900a6bb5bc0f07887e054cb7693ae1fb57bdf9173c6f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7123d2729933e63d7"}) 36.759649946s ago: executing program 2 (id=525): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, 0x0) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40000, 0x0) (async) chdir(&(0x7f0000000280)='./file0\x00') (async) io_setup(0x5, &(0x7f0000000440)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='\x00', 0x1}]) (async) sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="a5fd843b400ef067b3f948fc6084537dd719f4004009010468f59a93f0282e2230cf8b213f83d5cf87fef689dad02492cc15b3949541bf0687ed"}, {&(0x7f0000000340)="6788cf459bf49fc090de83f2161f7cf5e8cbf8fca19ebf9bc5e5a20485a0f6137e15fa38dec1a4a273af74c3aa69e47f90153fcdb6f55370ace6f1f70ec4c14f315a82cc0e2573c8f5c02416edbbea756b5a79b4b3959b834023712a70e6166ba482d857febf3f195b7563ec85fd35bca3e123369fcbab00558ba4093fc9a501b043fd13b9e6fe85cee6d6f08ea5cef1d8fcca087b8d845e5e8a812ae4771bc66d028695e6a74eef"}, {&(0x7f0000000500)="818f5fcb1e5da9db1387698bc067eea0e51c53402ad5d10d0a8aefb23b488ee6863302e925fb8fa53190f0b87d19ebbef891928efc0841f7e1007c17d3b5495b831dbc56b08368f753a6b3282074fe23adae59d337899acdf8b5916e448e04814a25d0ebaf6716867aa2acef6b4d291fe71b8d9aa9bdab7c28e4fc0cda2993709941ca702ab6ed4c459130cfe147231ca129914aa72e38674872fefcbee2d5037806c9a9fae84b28cd17a195fb68be437688a2364ee7e24879d882b04782"}, {&(0x7f00000005c0)="6ecfcc9b9072720fbf56c1a42f094cbbf0ab04dba4c02342c68c313504b65831878a03f493e86272656b75b8970218fa10ceb3ee95f86365e357ddbf8fad9d55a1c9d456223fdb2474"}, {&(0x7f0000000640)="0f2bfb1baa5896b4b6240f298fa3624d61699eede5e122e7a47bdda7a49383908e80812c4b38d2ee2e6c6f4c91421750362dd5e8e43a24f0699d30944eb851f39d820df9076a09c6a1e6119a53450c347040ac96908353069d50a4c8c71c43b017dfe0d2d135b3c140"}, {&(0x7f0000000700)="feddecfd5cb5dc192f18ee1ffd3a83961de43c16dc2dfb6633d5bb9959d81e1cd1b37053b617aa1b97b26c1bccc0047cfc07933e7de95df04c82711182b791c4c1b66226d9ebb1599505971f1adfdee918971d762d24dae7e965e24bb18aaa51d163f83453a3ccf724d52b94f0e48ed9381afcde1cf6ad66f548da354e15b47097d8346a"}], 0x0, &(0x7f0000000840)=[@hopopts_2292={{0x0, 0x29, 0x36, {0x73, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x0, {0x2, 0x0, 0x6, 0x7, [0x1, 0x81, 0x615]}}, @pad1, @hao={0xc9, 0x0, @local}, @enc_lim={0x4, 0x1, 0x8}, @pad1, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x0, [0x0, 0x0]}, @calipso={0x7, 0x0, {0x2, 0x0, 0x8, 0x4, [0x7, 0x3]}}, @pad1]}}}, @hoplimit_2292={{0x0, 0x29, 0x8, 0xca78}}, @hopopts={{0x0, 0x29, 0x36, {0x1d, 0x0, '\x00', [@generic={0xc, 0x0, "1026c9ead1ae29d7aa5b2fb77a588c3ffd6514d5bb5bae51e6d24d74b65a06e81aad"}, @hao={0xc9, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}}, @ra={0x5, 0x2, 0x400}, @pad1, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x1, [0x6, 0x2f0c]}}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}, @pad1]}}}, @hoplimit_2292={{0x0, 0x29, 0x8, 0xc}}, @rthdr_2292={{0x0, 0x29, 0x39, {0x84, 0x0, 0x0, 0x2, 0x0, [@empty]}}}, @hoplimit={{0x0, 0x29, 0x34, 0x80000001}}, @hopopts_2292={{0x0, 0x29, 0x36, {0x3a, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xc}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @jumbo={0xc2, 0x4, 0x3}]}}}, @hoplimit={{0x0, 0x29, 0x34, 0x3}}]}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a00)="8177e2cc112dd39c29bd32a1a8ec492b0190888598aac65cf3454947dd0753c4eb4b0a5630a4574e3b2b2e072c1cbbb9fbb81c213b2771a96e3237fa68bb7f76bb8d14f403035bb0558f5f80de8508bfa34e5e5841b7d53023780cf982335622d1ce14a71d1306b7b80477aef6ef883f8a7fa7893c662c67ddc1fe0caa0cb952a5b55100c23a0be70cc12ab14ca7a98a1bc032638f8c079033bd0391a8cfae7e9490896b3c642856746d31b8832b50272513eb7f0adc2f4425fe7155dcc87287455a"}, {&(0x7f0000000b00)="511b630122d104b874f9737ae48e30115dae7f642c1203e4d54fac8e4e2d25a8233a4e740603f1f16cf3e971571aa1eff1f3fc57028cdca9f58a4919d1d429086b7257c71110bb37a2b0c57a123ba4837453ad88da16c8a73f0b630be07aa01cb621f381ce2c33acc052054f969cdbba29d9abf2082353dc57b1ac9e8992553c37058d9f1c992d4342f0ce8b70fdaccc376dd56d6e95157c23a450cd506458d71bd5b831fb8647b1b7ab2e1d68a8f75a3c46e52ad0848f8f0b2a1d19e62e9cc5e11e066e519eb6978ddfe3f4344ddea3dc8d814c7cd1"}]}}, {{&(0x7f0000000c00)={0xa, 0x4e22, 0x2, @loopback, 0x6}, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c40)="08e4f231b2780a8a8b0c92c0a41eacef5e105052544cc75b278af24a31a18919fb2fde5b616736a6c014234a594d3103e66c64979a129abdc1f9ccafa0aad2405961159a85251f267b77abf53a9d1cea9cc3d645d61d5a004893ea40e2d28ce294558db557fb93d2f36a7bd7cfac46ac55a623a3a75ba7fdf85693d6fa13a460c58efd2b913febde8e3d598b031fd21e7c0069311b37ffacc259b07d04cc8a6a891616b9ad0ed1c9cc860572456e3c0fd9a0d397929f103d01c54ea5e156d5fd039e78c9fe"}, {&(0x7f0000000d40)="4f057b967a27bfd99cb18b811158d7b0ac4ac426d6350769c4368a8c38a54c067117039a71082850e1fe8ce210acfdb081d335f5e2e1e9ebc44f5f255a5584fa95e7cb3270826ec5d90e9bab352a27007a134b1d404ba8e9558b782e1353587268e0dd97"}, {&(0x7f0000000dc0)="4c540616ea1d8c18824e699e3f0a8cb0c08fedfd98559da3428d707861402a160fa582b78a07b7dda352cb9ed009261d26c6cb07fc44487337c9ba1b309a44526334b0b98ed829004c47ecddf5bc5edc580a042588d0b95e8cd24702222527384c8300dc72329530dc4b8227cbe21dc0c21070fcc133a713a8a14ca2c94fd9f693d6fc6eddcabec9086b7c4c7f848112bf832c4e5c72a968b77c0d295a865bf7f2"}, {&(0x7f0000000e80)="f9972aaeef25a20aabb4075df663af698a44a0cac429a9d1d3904962e68f0a6eb4f4874fd4f951a6c17ad325240346473ac10799079021e09c35b14116e89a197ac8011ff4c67bb9bab60ba53165036ee86dca7391e67fb209f0ff47c4d1cb4c624428e1886267ee89e3f9a0fe21d0b4992af091cf4523cd0035ebef12e628e8f01ef398b36a"}, {&(0x7f0000000f40)="69b0e58c43efb5167b37171d5c480ba39ac2bc054dd1245d4e92120c1bf50ed0c0606b373742ed61c3c56e9cc09a6b7720869ff7a3cdf76892ad999a629751bbac"}, {&(0x7f0000000fc0)="6168fe075c85e6b5d3de8ea85c3c8c8c859bdbbb8be863b2c5d95e91bc73e6541c2bcb2d6865a7d0f5b81aa6610d10e4236d2abcbc81b251233882083d2c7f2d0deaff357f796ba678b489e16e0eb8dbfb2f39d3145bb78372377a9aa0164ed42cfd477d8d955be7679961e3c33f22cb06591b443e5f7f63"}]}}, {{&(0x7f00000010c0)={0xa, 0x4e20, 0x3, @private2, 0x6}, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001100)="5400c98cccb97a0803e235d9f49d4443b5c3990f659e0bb72e96e103baa05e7950b6299aa8c7951db621836997adc92d8f44e8952b12bc7cfb02cc8e989f6c06af4531afa07e0c7a9f5404d07371b254a8fd29a70e911e2afeaa41c4f3aef1b1c207f15e3eae0591fe0037cde3070e146523a11975f50e78f2c781888525ce288ce2f91b51c6721757bd27caee3ff03ba1f28aeed9aad8a850dc107a0824386c8b30a0af"}, {&(0x7f00000011c0)="a80f33094ba67640bc5d2483b8695f54bf534a102aaac145ef752dda20c83283bab1812ad525ccaa11c9944d310083061c63ce59ad100701bae3b85910021960d1697c5162500ef963f179fa30ba536b8e44f805a712d3f48cd70a2b3aca0872c3f8347a7125507977697eaa9b5f5c02ddee93eda38ee92494"}, {&(0x7f0000001240)="3fd1df7130db31dd283d7ba7f881e0d80a37dd79"}, {&(0x7f00000016c0)="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"}, {&(0x7f00000026c0)="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"}, {&(0x7f0000001280)="3b9fd3e12fd6dca1bf971c5e4c85ad303731699ea33ee6da5b7a18c024e584e59617c8910d4e779a8cf820fa2aef0ca438154744a6a6e35d2256339eda02d2c753bd7546d01fe2bb01e1267290610d482a8e47b6fa71903a379ca75f9c0abe80a67547caa6b8094a464703a8a6ad3d651d56a18e17a7e8bfe270027f1441cc830a161e5d7d0903639f235a4cdf2f57"}, {&(0x7f0000001340)="35517ce8019bb328189eff1adb76796bf639563692b1e2988dd9b647d4f0787110a3eb5b6239f01fd774c5e856266c85ad3d6d9c389489df276ba5e4685d294de6db0ec12a0a142a8593ff7c433aa1"}, {&(0x7f00000013c0)="0fcb27ff8a16d899865ca446205ddeb7fa08d12c5e0950f1c0ca62bdbcb0829871a153804e5eb466fe53262138a0d1498a55d88ea9ab37cf1fb51ded00d30f390de821aa9250d11aafc2c96993c31df18f6214392faac83236282c20ef8d7cd5f6662f3bd89da46a131fd17a047c17c380604db22dd6f8e13e77b065c01689b6a96d7d4a45a9e23de284d53dcfdecdaf461f85ffe1a2969049a13d94c8a54d7c19eb6f5a86aacf9de58a54fad2dcc80d66684bac729f66f1ab2fbb8b819fe728c0d5fb1f2a93a4d8"}], 0x0, &(0x7f0000001540)=[@rthdr_2292={{0x0, 0x29, 0x39, {0x6, 0x0, 0x2, 0x5, 0x0, [@remote]}}}, @dontfrag={{0x0, 0x29, 0x3e, 0x4000000}}]}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001580)="0bf78aa7aa056dc1c8dcc88967abfea64a5781b25f2749bb878af0413fe48380f77862fe1437dd579affc9e091cc001c85fb968a3a443bbb60e4ff623b24edef5077a84914f44023593efb22ea3e4a200fed09ff009b36fe8e3f25c5cb8ea4b792947f3037315ebaba40443075ff82e8925f2db4f401"}], 0x0, &(0x7f00000036c0)=[@dstopts_2292={{0x0, 0x29, 0x4, {0x0, 0x0, '\x00', [@calipso={0x7, 0x0, {0x0, 0x0, 0x5d, 0x9, [0x2, 0x1, 0x2, 0x0, 0x80000000]}}, @calipso={0x7, 0x0, {0x3, 0x0, 0xf5, 0x8, [0x6c, 0x3c0000, 0x400, 0x2c]}}, @calipso={0x7, 0x0, {0x1, 0x0, 0x40, 0x4, [0x67bea5f3]}}]}}}]}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000001640)="b149934322e0f1da7cf3aca48eb94e270a5e86bf5c4eef13098ca46894b78c295507b1ae690ce52228a8b8bee7b6f580a8fe9b60c3fde4"}, {&(0x7f0000003780)="5c1a5afcebedb1b835a7e9bfef27d8802766bd798e959e82e69d7e2bda3859c54b924a5974feb515e64d88ca0280a9a106529c746ef6c818c12ba64b2814d225410fc84539445d8ffc5e31e9d193d9ca8d1a46a345701628bcc52da0f589757ff1ca399acd3951a5bd7b62c7902f85aa655e5fe7aeea21e89c72ebabb8811954fa85d8a8baa662c3161639db29967919caecd1fd2f7289003d12f7e8bcc134d3e9ac77360326e5e05a5238203055235dca71325623ce0ba3f97bfb5123857a506e021e38fca37fff4f179b56dd9e0fd5c6b90ea87441e7f76819420482886bc595ea39565e9ca3244af519e3f9beb0"}, {&(0x7f0000003880)="6267935537bc70fc5adbac4c13d3d874496856dca868d49780ee9189783a484c184be38ec8ea90ce51c0933d2640a8c35d43f5d574751f521c90b5529af4d6f8085551fea5601a530f50a6cb0a104c04f9e6cbefa828400be72dd518561109c48fc0bd9b4271c7dab6cbe99a736b978d36cb9edcfb516df7818e85f5ebb1a3deb9891275836699fe9ebb068c5170e9b07f6fd5b8ea2284d3707aebde47e5e29e3c6b3d3ad79af575d0f41b6dc6ef194dd4635d5c267e017fff2f6c7ce89c4ec7ca2dee38420dc2d484b33fdb675b9b797f4c2e8115a500fb88469b58cae23b16eab562b2d0748e98f060b447a6323d30256340e51ce6b521"}], 0x0, &(0x7f00000039c0)=[@rthdrdstopts={{0x0, 0x29, 0x37, {0x37, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x8}]}}}, @dontfrag={{0x0, 0x29, 0x3e, 0x2}}, @dstopts_2292={{0x0, 0x29, 0x4, {0x0, 0x0, '\x00', [@calipso={0x7, 0x0, {0x1, 0x0, 0x9, 0xf498, [0x1, 0x7, 0xffff]}}, @hao={0xc9, 0x0, @empty}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x19}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, @pad1, @jumbo={0xc2, 0x4, 0xb6}, @jumbo={0xc2, 0x4, 0x7fff}]}}}]}}], 0x1, 0x4000000) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) bind$tipc(r5, &(0x7f0000001680)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r4, 0x0, 0x0) (async) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r6, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r6, 0x293f000) (async) fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) (async) r7 = socket(0xa, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e24, @private=0xa010100}, 0x18) 36.679754887s ago: executing program 2 (id=526): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0xa200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x40002002, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x12, r0, 0x4d75d000) 36.638903317s ago: executing program 32 (id=526): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0xa200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x40002002, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x12, r0, 0x4d75d000) 3.053507802s ago: executing program 0 (id=992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000030000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff00000000000000000000000044010500e0000002000000000000000000000000000004d632"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 3.042191682s ago: executing program 0 (id=993): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000005a80)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 3.031337542s ago: executing program 0 (id=994): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfaE\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1056) close(r0) 2.980028893s ago: executing program 0 (id=995): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) syz_clone3(&(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000002980)=[0x0], 0x1}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x400000400) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 2.871697075s ago: executing program 0 (id=996): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000700feffffff00000000000000000000000044010500e0000002000000000000000000000000000004d632"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 2.861121925s ago: executing program 0 (id=997): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x4, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x39, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, 's'}, {0x5, 0x24, 0x0, 0xe508}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4000, 0x4, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xf7}, @network_terminal={0x7, 0x24, 0xa, 0x32, 0x7f, 0x5, 0xff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x80, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0xc, 0x1a}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0xd, 0x2, 0x6, 0x40, 0x7}, 0x49, &(0x7f00000002c0)={0x5, 0xf, 0x49, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x5, 0xe10f, 0x0, [0xde, 0x3f00, 0xc0, 0xcf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x30, 0x0, 0xa, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x6, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0xfb, 0x0, 0x7fffff8, 0xff00, 0x81}, @ptm_cap={0x3}]}, 0x3, [{0x20, &(0x7f0000000340)=@string={0x20, 0x3, "5e261fb84084c4b9ae05f167b8b8b86b8669d562ec0337d667c898628a6d"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44a}}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x3, 0x1}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.038069408s ago: executing program 1 (id=1011): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000000033000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff00000000000000000000000044010500e0000002000000000000000000000000000004d6320000000a000000ac1414aa000000000000000000000000053500000303030009000000b4000000070000007f000001000000000000000000000000000004d36c00000000000000fc0100000000000006000000000000000000000000000900010000000080000008000000ac1414aa000000000000000000000000000004d2330000000a000000ac1414bb0000000000000000ddffffff023500000002fa00070000000a00000002000000fe80000000000000000000000000000f000004d43c"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 2.024021698s ago: executing program 1 (id=1012): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.91197245s ago: executing program 1 (id=1013): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r2, 0x0, 0x0) write$selinux_context(r2, 0x0, 0x0) (async) write$selinux_context(r2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000002c0)=[@exit_looper, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/4096, 0x0, 0x2, 0x1c}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x3001, 0x3}}, &(0x7f0000000100)}}], 0x59, 0x0, &(0x7f0000000180)="7da36444688b9003c6045e1cc7af25c074e647b4f4564aaa63f27ea91489a03854cefdb82aa7678a81e6c8848304e129eafaad290f30a1fdb345cc9108b412d63b555e427f4860ca62c851483d9fcdadd026296f264d18663831e148180528a1a50b1eb41156e49ac7"}) 1.90859404s ago: executing program 1 (id=1014): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) fsync(r0) syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x58) 1.90843229s ago: executing program 1 (id=1015): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000000000000000000000000000000002000feffffff00000000000000000000000044010500e0000002000000000000000000000000000004d632"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.9079528s ago: executing program 1 (id=1016): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000340)=[@increfs, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000080)={0x1000, 0x0, 0x0, 0x3}) pipe(&(0x7f0000000440)={0xffffffffffffffff}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000480)={0x20, 0xb, 0xbe, {0xbe, 0x9, "c83bc7a422e40eca36a0c3d58dff2f591584a874fe82bcc92799f6f652af19d0f56be1fea27630b3dee457079a4519f4df29e3437908271838ad4dc92cc728c86eb695909dbefa812796ca2ba15e31e9582b35deb16fc366f7dc12cbfbce1e70ed7bf7f796418e5f44c3e68e7bec0ff91e5ff37d048e89ab3330f05fd82832615a1145f3a91d9d04d433c2e616c2de800c83838bf71d99b390369c9025b51ecc8306db1af95e686339c77ce038467826af9a28f99f0a26e6af215166"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f00000002c0)={0x40, 0x15, 0x56, "60be09844adb03ee2548d836c5c5aa04880821cae3c7b4cded14030ab95aa4e32ee0d63756033e8104ab6d91b9d17acbcaebf6226d7ab22affd9ebab5f17f35bad6d9ceb1a36de21eb81455c771f0f139ac1cb312ad3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0xbe9, 0x81, 0x101, 0x5, 0x2, 0x0, 0x5, 0xfff, 0x100, 0x3, 0xf, 0x8}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x2}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000680)={0x20, 0x87, 0x2}, &(0x7f00000006c0)={0x20, 0x89, 0x2}}) syz_clone3(&(0x7f0000000600)={0x200040000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x5e, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000740)={0x40, 0x0, 0x5, "f55a77283c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000840)={0x14, &(0x7f0000000780)={0x40, 0x8, 0x45, {0x45, 0x23, "c4d73a445fd3f4cb2fc761601024a1ca46c9afa4f75bf53dd5a72b9b249e23fe030de28b66695cf99ed5e8bc10f4a9efb1773619900cf652931fa1038d51ff93ca587c"}}, &(0x7f0000000800)={0x0, 0x3, 0x33, @string={0x33, 0x3, "5cfed0581e02c6779fc436f209bf76c7ac0f5092a305ce0ff707b6c12ed3723027890ddba3ac7159465cd6df5c33b0fa07"}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000880)={0x40, 0x15, 0xa, "fe0ab2d224dab15c246e"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x42}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000940)={0x20, 0x81, 0x1, 'l'}, &(0x7f0000000980)={0x20, 0x82, 0x1, "13"}, &(0x7f00000009c0)={0x20, 0x83, 0x2, "8275"}, &(0x7f0000000a00)={0x20, 0x84, 0x3, "ed6827"}, &(0x7f0000000a40)={0x20, 0x85, 0x3, "98a53e"}}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x40040c0) 1.27168403s ago: executing program 4 (id=1019): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x5bc}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext']) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0xb, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = dup3(r2, r1, 0x80000) read$usbmon(r6, &(0x7f0000000600)=""/4096, 0x1000) eventfd(0x6) (async) r7 = eventfd(0x6) eventfd2(0x8, 0x800) (async) r8 = eventfd2(0x8, 0x800) io_submit(0x0, 0x6, &(0x7f0000000880)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xfffd, r2, &(0x7f0000000200)="9562d2823c46066fb5c7b3a2be693224491b74390d0c2d50451c385fcd04f981339e73d9a1ea16", 0x27, 0x7, 0x0, 0x3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xc90, r0, &(0x7f0000000580)="5fd7e890e4ca8ae332dfb8178392df74b48c05f6ffb55116b203dd08fc98df0224c54cf549bf418f20cdb63bae382f47c80d01b7860ee35c8fedba1e6a1e522e69dd2e55f0c21a5071648115d095207a113160fd287f60921b9c87f49ffc57b122feffa98b5b39d52702fdb0cb2189742cf6924820b48f10a159f116ec64616e3baf789871ff3a1474fcbbaad33fb726e03df28b28ae5677018d5023ead62169cac4462b8537ba5a84f5df7bd728ae47370113e5ec1fae77e2394b58266e5afcbe980ed5f23a190cb83f6ae7c83fa7d5e4d201a2a81b7207b53dc3188a3699700dbd5602", 0xe4, 0x80000001, 0x0, 0x0, r6}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x1f4e, r4, &(0x7f00000003c0)="f82009e5158e595f276e47f4ac348f696eeef92478b1cdef80f128b205bfefb0714ac8fbfed4cf6bbb942d7997059f523f54a15bf52579e59e008fb1c306c4fc3c208e7d6d03", 0x46, 0x8}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x400, r4, &(0x7f0000000680)="fe77c3ded3c0f64b0944659aa0cf5ec453b8bbdbc1fc53b59ca3e5e9aa6a5febb687160bd00713", 0x27, 0x1, 0x0, 0x0, r7}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x5, r1, &(0x7f0000000700)="d01ca41105968b581a1cfc30db118916b6111b4dcaa336222fceb0358c56fc7a6134f9510524e0661a8b9e9c4b682f69d4524233d6b9a4d3acb54650c629a9f9533f32c67c10d94e3b9860c2e1aef5eb075041176c92379e704d8d6ad15d4a4b36", 0x61, 0x5, 0x0, 0x1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xe, r0, &(0x7f00000007c0)="27dcf1c5b515c8b4a02be58872c8b196abcf34d376191899784c95bf795e08482a6b7ba076079a4603d62f37743fab87aaa24fd66253543237ac7a9c5e13dfd6c2112732c59d2a5699df1ede0d4afbb2016c81d45bad0287e6612a28c8945be95e093df257293669becd71d3bff8684a64", 0x71, 0xffff, 0x0, 0x3, r8}]) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "cbbf09c473ef3ee5", "d62cb2759e70ad75c3b50ef30b007511", "0884054c", "2a6f9fea1f1bb653"}, 0x28) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r9 = timerfd_create(0x0, 0x0) timerfd_settime(r9, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) (async) timerfd_settime(r9, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r10, 0x0, 0x200000000622c, 0x0) (async) splice(0xffffffffffffffff, 0x0, r10, 0x0, 0x200000000622c, 0x0) timerfd_settime(r9, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001600)=ANY=[@ANYBLOB="0f00000000000000024d564b000000007f00000000000000f223c474bcff0008231593d0d6f26d39ace1dff785a5ff7ad0db0b1c5bcc06084c7d2ce30fa12c20e545e26a157a85e16910f003623dd5956db59278c76fa5906bb190d5652010d09c"]) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001600)=ANY=[@ANYBLOB="0f00000000000000024d564b000000007f00000000000000f223c474bcff0008231593d0d6f26d39ace1dff785a5ff7ad0db0b1c5bcc06084c7d2ce30fa12c20e545e26a157a85e16910f003623dd5956db59278c76fa5906bb190d5652010d09c"]) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[]) 1.27078455s ago: executing program 4 (id=1020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r2, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e1bd526216bdd852b328b0bd932c72b471eaa4e9c1f0d3f3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2271f0118b6ba3ce520ef3621791a0f4ad2d612c18506ac9"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a4680d1967c83bfbd900be13b126f7071f559f4b02c76b46"}]]}, 0x90}, 0x1, 0x0, 0x0, 0x4000004}, 0x48080) (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x4400) (async) socketpair(0x38, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x8840) timerfd_create(0x2, 0x80000) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000540)="f0f2bae754b8051fa5368f89686b510aff39d5508af85eb158e241b7290c7cf6eb07634851734e42fdd59893b14501833fe098f2eed680699ba93c93ae626599c427cb3c9b33839755b9b33ca893343279750b4f1de05ebfb8507e830f1f4f20b5f320403fd04ee8fafa09d48f9ee4b040c91e087e5a00609181c1c3b6b32a70704ad00f978c85f9f2e324185e6374adaa3704f528592f", 0x97, 0x4000000, &(0x7f0000000600)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb3fb}, 0x1c) (async) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000680), r5) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xe320, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) (async) r9 = openat$cgroup_devices(r1, &(0x7f00000007c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000800)={'b', ' *:* ', 'wm\x00'}, 0x9) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0xfff) ioctl$BTRFS_IOC_SET_FEATURES(r10, 0x40309439, &(0x7f0000000840)={0x2, 0x3, 0x7}) (async, rerun: 64) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000880), r11) ioctl$sock_proto_private(r6, 0x89e7, &(0x7f00000008c0)="4cea111bf3d1382330917aabf4a499ccb3965003d0609a7186f5ae7048175787b7c1bd051d4c83272761044d1f6f940522f652ad509faf497b37176bd836278ec8d9ca2355b830f70d1d69a02d4fc4b844e813cbcfc583373ac9d3d36c40f3457b5fceebc4c2d9b9ef9e21936083c2a6372bc1d368f3a0604da3fd49668d200099fbbdcbf6a563f411f819") (async) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000980)={0x80, 0x0, 0x1000}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000001ec0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000ac0)={0x13c0, r12, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0xa2, 0x7f, [@supported_rates={0x1, 0x1, [{0x9, 0x1}]}, @preq={0x82, 0x78, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x4, 0x8, 0x8, @device_a, 0xffff, @value=@device_b, 0x0, 0xfffffffb, 0x8, [{{}, @device_b, 0x4}, {{0x1}, @device_a, 0x8}, {{0x1}, @device_b, 0x1ff}, {{0x0, 0x0, 0x1}, @broadcast}, {{}, @device_b, 0xb}, {{0x1, 0x0, 0x1}, @device_b, 0x7fff}, {{0x1}, @device_b, 0xa}, {{}, @broadcast, 0x5}]}}, @prep={0x83, 0x1f, {{}, 0xc, 0x6, @broadcast, 0x6, @void, 0xe000, 0x8, @device_b, 0x3}}]}, @NL80211_ATTR_BEACON_TAIL={0x10e, 0xf, [@ibss={0x6, 0x2, 0x9}, @measure_req={0x26, 0x90, {0xf8, 0xba, 0xd6, "f7013efe12a3c67043ba882a92464c64b903676b7343d00f5902e2865e676f130cb5fdc7c865c01839a2d3870fc8a4d8addc2ddc542b1efe8dd2841a47531ed697f1b756dc7a2e7fc3c0798d0fa740a558e761b46f80029e91c0135f2641f03803ea95443faaf655fc6938d14cace55b4432a4faa5e5a8ac0f299feccefefeec96905cbedb0b66c4af2a4234b4"}}, @preq={0x82, 0x67, {{0x1}, 0x4, 0x3e, 0x5, @broadcast, 0x8, @void, 0xffffffff, 0x7f, 0x7, [{{0x0, 0x0, 0x1}, @device_b, 0xfffff000}, {{0x1, 0x0, 0x1}, @device_b, 0xa}, {{}, @device_a, 0xe}, {{}, @broadcast, 0xfffffff7}, {{0x0, 0x0, 0x1}, @device_b, 0xd45}, {{}, @device_a, 0x8}, {{}, @device_a, 0x9}]}}, @mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x84, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @chsw_timing={0x68, 0x4, {0x5, 0x4b7}}, @random_vendor={0xdd, 0x54, "9e3cdf7dd2f4d48160ca3073f0cdf0b7860b72774ad57f4d2c44b7b2ac9e25519a03d08c092c1feaebbf30ab30f23eb8ef25e166126457015bbbf88996040dabbf3f80b44e8c52dc2a3c669d5e0706101743f602"}, @preq={0x82, 0x1a, {{0x1, 0x0, 0x1}, 0x6, 0x9, 0x0, @device_a, 0xe, @void, 0xa88d, 0x29}}]}, @NL80211_ATTR_BEACON_TAIL={0x1169, 0xf, [@measure_req={0x26, 0x1003, {0x3, 0xff, 0x9, "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"}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x156, {0x0, 0xa, "7ae83bf097eeae9ca4c4085575cf92db", "55d0088e2223f8ddfa0767321c43874a99bdf528d08b78a16cf0be300366b1e4", "80a0bda499a1d91e403e6f206b220b3a4fdcac15e4e0c0d352ca175443b25995", [{0x4, 0x1f, "1cb94048e4f1dbcf132aa23f9fa7c01ff6bb1a8c0b228976865ba2164c8782"}, {0x1, 0x23, "69d80f8c89342beda09103a2a3f5a98d59b2023387e309aba2402ab6fb80087f284c96"}, {0x3, 0x27, "cd06c28989793afd4965b2fee00670f5620a05e26a868bd5a672f241b971c1f7268eb014a493c8"}, {0x2, 0x12, "3bcc6026a6a64158c28ccbf1b9d7216945da"}, {0x4, 0x18, "39591d3e51094f86005e264938eb1c5f75928880d15297a5"}, {0x53}, {0x4, 0x26, "e64525da2d79e8f9a84cc1579f4837817fe92a7f296918230df8fc650ecd52d62cbf46b2e53c"}, {0x3, 0x20, "3f4a9981468ad5a568306cc6f81ed7e7a1822af62a0410cf41ef0eda447a40f2"}, {0x1, 0xc, "98b2047ecdfc9a09654a9916"}, {0x1, 0xb, "8634e5e0ef1510726b5b0e"}]}}]}]}, 0x13c0}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001f00)=0x1) (async) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f00000021c0)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002180)={&(0x7f0000001f80)={0x1c4, 0x12, 0x8, 0x70bd27, 0x25dfdbfd, {0x10, 0x3, 0x0, 0x9, {0x4e24, 0x4e24, [0x1, 0x3, 0xfffffc00], [0xd58, 0x3ff, 0x3, 0xe8], 0x0, [0x4, 0x7]}}, [@INET_DIAG_REQ_BYTECODE={0x99, 0x1, "968497785491405af990b5f4bcb88d8f7a021ed994fec5f33d105084a4c5d301e02ae2e17aca399d642ebfcbeef8d9fd4b1b813a1856eadb360ccf50bb504dea0b7a113de6b6e304b2e8f109546b839c8614f767ddded44d8af96b6af92013864668b3bcd03fc7034f6e29e85368c0daf9f349addab6dfc1f22493942483a4e983f1163b5519c6622d1ce1119e10e211d51e6906f5"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "2db17bcd8ed03a3105b97bef018b25bcf7727467d50de5d4c89c2309634dd665e3af0e626dd12a046afa77b68606f188ca102016d553a6727703f4e448cd02af9a6fed8616a05d2d37c8c642fd4e0fce1dbe732273947cc4ae85257ed25d496448383faa655a395984c5fa58dda31cb7e01dff097b13786bdc9e2fbfb943f33901b61358d5c7fb81070413282f0b611d498109d4a053b757a1272db07517378d3c4d9887ce4377d6c184b2d731660cb2378027164608e362b2bf10ad0d08c2b733f96345c716c6071c0e90dc757da37b2503ab2492"}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4008000}, 0x20048084) clock_gettime(0x0, &(0x7f00000078c0)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000007700)=[{{&(0x7f0000002200)=@can, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/191, 0xbf}, {&(0x7f0000002340)=""/79, 0x4f}, {&(0x7f00000023c0)=""/115, 0x73}, {&(0x7f0000002440)=""/225, 0xe1}], 0x4, &(0x7f0000002580)=""/125, 0x7d}, 0x250}, {{&(0x7f0000002600)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002680)=""/140, 0x8c}, {&(0x7f0000002740)=""/84, 0x54}, {&(0x7f00000027c0)=""/183, 0xb7}, {&(0x7f0000002880)=""/238, 0xee}, {&(0x7f0000002980)=""/18, 0x12}, {&(0x7f00000029c0)=""/118, 0x76}, {&(0x7f0000002a40)=""/86, 0x56}], 0x7, &(0x7f0000002b40)=""/149, 0x95}, 0x10000}, {{&(0x7f0000002c00)=@l2tp, 0x80, &(0x7f0000003200)=[{&(0x7f0000002c80)}, {&(0x7f0000002cc0)=""/172, 0xac}, {&(0x7f0000002d80)=""/155, 0x9b}, {&(0x7f0000002e40)=""/101, 0x65}, {&(0x7f0000002ec0)=""/29, 0x1d}, {&(0x7f0000002f00)=""/223, 0xdf}, {&(0x7f0000003000)=""/141, 0x8d}, {&(0x7f00000030c0)=""/141, 0x8d}, {&(0x7f0000003180)=""/87, 0x57}], 0x9, &(0x7f00000032c0)=""/4096, 0x1000}, 0xffff}, {{&(0x7f00000042c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004840)=[{&(0x7f0000004340)=""/144, 0x90}, {&(0x7f0000004400)=""/116, 0x74}, {&(0x7f0000004480)=""/180, 0xb4}, {&(0x7f0000004540)=""/141, 0x8d}, {&(0x7f0000004600)=""/229, 0xe5}, {&(0x7f0000004700)=""/115, 0x73}, {&(0x7f0000004780)=""/179, 0xb3}], 0x7, &(0x7f00000048c0)=""/221, 0xdd}}, {{0x0, 0x0, &(0x7f00000069c0)=[{&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/4096, 0x1000}], 0x2, &(0x7f0000006a00)=""/192, 0xc0}, 0xffff}, {{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000006ac0)=""/114, 0x72}, {&(0x7f0000006b40)=""/172, 0xac}, {&(0x7f0000006c00)=""/138, 0x8a}, {&(0x7f0000006cc0)=""/57, 0x39}, {&(0x7f0000006d00)=""/128, 0x80}, {&(0x7f0000006d80)=""/54, 0x36}, {&(0x7f0000006dc0)=""/187, 0xbb}, {&(0x7f0000006e80)=""/241, 0xf1}], 0x8, &(0x7f0000007000)=""/172, 0xac}, 0x2}, {{&(0x7f00000070c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000007580)=[{&(0x7f0000007140)=""/134, 0x86}, {&(0x7f0000007200)=""/201, 0xc9}, {&(0x7f0000007300)=""/155, 0x9b}, {&(0x7f00000073c0)=""/131, 0x83}, {&(0x7f0000007480)=""/206, 0xce}], 0x5, &(0x7f0000007600)=""/214, 0xd6}, 0x5}], 0x7, 0x40, &(0x7f0000007900)={r14, r15+10000000}) 1.26790966s ago: executing program 4 (id=1021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r2) setreuid(r2, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) mount$9p_fd(0x0, 0xfffffffffffffffd, &(0x7f0000000000), 0x40000, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '[#,\xfe}]]\\/'}}, {@version_u}, {@uname={'uname', 0x3d, '&:{@^+/['}}, {@afid={'afid', 0x3d, 0xeda}}, {@msize={'msize', 0x3d, 0x8}}, {@version_u}, {@cache_fscache}, {@msize}, {@nodevmap}], [{@fsname}, {@subj_role={'subj_role', 0x3d, '{\'@.%$-%{}-'}}, {@uid_gt={'uid>', r2}}, {@subj_role={'subj_role', 0x3d, './binderfs/binder0\x00'}}, {@fowner_lt={'fowner<', r4}}]}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000740)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40054}, 0x20000801) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r7, 0x4010}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r9, 0x2000) 1.185765991s ago: executing program 4 (id=1022): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008010100", 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.068001423s ago: executing program 4 (id=1023): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r1, 0x0, 0xb, 0x0, &(0x7f00000008c0)) (async) getsockopt$inet_int(r1, 0x0, 0xb, 0x0, &(0x7f00000008c0)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 1.067721583s ago: executing program 4 (id=1024): mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="44010000001001"], 0x144}, 0x1, 0x0, 0x0, 0x88d0}, 0x44) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0xe91, 0x6, 0x10, 0x2}, 0x14) 206.605116ms ago: executing program 3 (id=1026): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1}) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x118, 0x15, &(0x7f0000000740)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}, @increfs, @decrefs], 0x0, 0x0, 0x0}) 128.489547ms ago: executing program 3 (id=1027): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) truncate(&(0x7f0000000240)='./file0\x00', 0x1) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 128.110327ms ago: executing program 3 (id=1028): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80000006, 0x48002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000000000000000000001200"}}) 126.929818ms ago: executing program 3 (id=1029): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008702"]) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r4, &(0x7f0000000080)=""/93, 0xffffff6c) (async) r5 = syz_clone(0x42000, &(0x7f0000000000)="70b115cfa8f1deac208f129c9ea4c2afd640d59b75cdd05a6a5d07d3184c43c3416974f8069488078f5dde34c2bac423a38e5bbe8e5a6987bb781c2b33525db0424d8e15ba3becd994428e9e8e68397c52171f3c81f5c74a716d9084299f43a00b0c001b26039e0964bfb0e78297614ecc2c35674a310bc24eb9278f1e2cd1ac", 0x80, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="c74e29edf883f2fef0f3b0016879cbc7ef4813440e37eac0a13e1d672e5048eef73c4004ed0945e89a2ccaf9ad5b8018b8f9f30326aa943a23171af512232d47a4af53d7e4142f2c994d01fb17c11c98dd8b0cdb5558c2c2c82ca4ccad798e9adb3402f9b55c303ba989d43771fb2f402ecb") ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000200)={r5}) 75.233798ms ago: executing program 3 (id=1030): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=1031): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000330000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff00000000000000000000000044010500e0000002000000000000000000000000000004d632"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 0s ago: executing program 3 (id=1032): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r2 = dup(r1) (async) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): idge_slave_1) entered disabled state [ 60.419829][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.426937][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.446451][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.453645][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.494597][ T1892] veth0_vlan: entered promiscuous mode [ 60.507518][ T1892] veth1_macvtap: entered promiscuous mode [ 60.530221][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 60.530240][ T36] audit: type=1400 audit(1750464017.175:366): avc: denied { mounton } for pid=1892 comm="syz-executor" path="/root/syzkaller.kohauo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.722622][ T306] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 60.884099][ T306] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 60.892380][ T306] usb 2-1: config 0 has no interface number 0 [ 60.898605][ T306] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 60.910202][ T306] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 60.922839][ T306] usb 2-1: config 0 interface 230 has no altsetting 0 [ 60.931273][ T306] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 60.940484][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.948691][ T306] usb 2-1: Product: syz [ 60.952884][ T306] usb 2-1: Manufacturer: syz [ 60.957490][ T306] usb 2-1: SerialNumber: syz [ 60.962968][ T306] usb 2-1: config 0 descriptor?? [ 60.968263][ T1913] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 60.975850][ T1913] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 60.983758][ T306] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 60.991681][ T306] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 61.016951][ T36] audit: type=1400 audit(1750464017.633:367): avc: denied { map } for pid=1927 comm="syz.4.539" path="socket:[18382]" dev="sockfs" ino=18382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.045692][ T36] audit: type=1400 audit(1750464017.633:368): avc: denied { read } for pid=1927 comm="syz.4.539" path="socket:[18382]" dev="sockfs" ino=18382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.071752][ T1930] fuse: Unknown parameter 'rood%Eu' [ 61.079716][ T1930] overlay: ./file0 is not a directory [ 61.081665][ T1932] overlayfs: missing 'workdir' [ 61.098148][ T36] audit: type=1400 audit(1750464017.708:369): avc: denied { lock } for pid=1929 comm="syz.3.540" path="socket:[18483]" dev="sockfs" ino=18483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 61.143197][ T1936] rust_binder: Failed copying remainder into alloc: EFAULT [ 61.143221][ T1936] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 61.150767][ T1936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 61.159087][ T1936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:19 [ 61.161980][ T1930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:474 [ 61.178145][ T36] audit: type=1400 audit(1750464017.774:370): avc: denied { read } for pid=1929 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.215085][ T36] audit: type=1400 audit(1750464017.792:371): avc: denied { connect } for pid=1935 comm="syz.4.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.239405][ T36] audit: type=1400 audit(1750464017.792:372): avc: denied { shutdown } for pid=1935 comm="syz.4.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.287779][ T36] audit: type=1400 audit(1750464017.886:373): avc: denied { write } for pid=1947 comm="syz.3.547" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 61.326748][ T1950] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.327226][ T36] audit: type=1400 audit(1750464017.923:374): avc: denied { create } for pid=1949 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 61.329036][ T1950] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 61.396616][ T1955] overlayfs: missing 'workdir' [ 61.433583][ T1961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.438484][ T1960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 61.445226][ T1960] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 61.454705][ T1960] rust_binder: Read failure Err(EFAULT) in pid:30 [ 61.498688][ T479] usb 1-1: string descriptor 0 read error: -71 [ 61.513258][ T1967] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 61.515328][ T1967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:399 [ 61.523754][ T479] usbhid 1-1:0.0: can't add hid device: -71 [ 61.539990][ T36] audit: type=1400 audit(1750464018.129:375): avc: denied { getopt } for pid=1963 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.541937][ T479] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 61.567382][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 61.585780][ T479] usb 1-1: USB disconnect, device number 17 [ 61.727563][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 61.734776][ T10] usb 4-1: config 1 has an invalid interface descriptor of length 4, skipping [ 61.743820][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 61.756720][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 61.769388][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.778611][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.786651][ T10] usb 4-1: Product: syz [ 61.789784][ T1974] /dev/loop0: Can't lookup blockdev [ 61.790876][ T10] usb 4-1: Manufacturer: syz [ 61.800960][ T10] usb 4-1: SerialNumber: syz [ 62.039475][ T10] usb 4-1: found format II with max.bitrate = 2, frame size=8 [ 62.047163][ T10] usb 4-1: found format II with max.bitrate = 2, frame size=8 [ 62.055695][ T10] usb 4-1: failed to enable PITCH for EP 0x82 [ 62.079480][ T10] usb 4-1: USB disconnect, device number 14 [ 62.096808][ T1984] rust_binder: Error while translating object. [ 62.096847][ T1984] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.103205][ T1984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:488 [ 62.143746][ T1989] overlayfs: missing 'workdir' [ 62.196064][ T1995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 62.196090][ T1995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:499 [ 62.206082][ T1996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.262770][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.309401][ T2003] rust_binder: Failed copying remainder into alloc: EFAULT [ 62.309422][ T2003] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 62.318231][ T2003] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 62.327039][ T2003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:504 [ 62.408768][ T2007] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 62.425853][ T2007] SELinux: failed to load policy [ 62.518785][ T2019] random: crng reseeded on system resumption [ 62.529102][ T2021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.578202][ T2027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:407 [ 62.590134][ T2029] rust_binder: Write failure EFAULT in pid:253 [ 62.624930][ T2034] binder: Bad value for 'max' [ 62.680657][ T2042] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.731402][ T2045] rust_binder: 2036 RLIMIT_NICE not set [ 62.807286][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 62.931340][ T2052] kvm: kvm [2046]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 62.978317][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 62.992539][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.003522][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 63.019978][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 63.029704][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.039881][ T10] usb 4-1: config 0 descriptor?? [ 63.040449][ T2047] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 63.461429][ T306] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 63.471698][ T306] usb 2-1: USB disconnect, device number 14 [ 63.869465][ T2067] binder: Unknown parameter '0x00000000000001ae' [ 63.909846][ T2074] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 63.990780][ T2076] binder: Bad value for 'stats' [ 64.196118][ T2084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:438 [ 65.045256][ T2092] 8021q: VLANs not supported on sit0 [ 65.059858][ T2093] 8021q: VLANs not supported on sit0 [ 65.065750][ T479] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 65.156119][ T2105] rust_binder: Error in use_page_slow: ESRCH [ 65.156146][ T2105] rust_binder: use_range failure ESRCH [ 65.162305][ T2105] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 65.167812][ T2105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 65.175861][ T2105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:452 [ 65.206435][ T2108] /dev/loop0: Can't lookup blockdev [ 65.235232][ T479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.246372][ T479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.256669][ T479] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 65.267701][ T479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.276732][ T479] usb 1-1: config 0 descriptor?? [ 65.578533][ T2135] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 65.578562][ T2135] rust_binder: Error while translating object. [ 65.587388][ T2135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.593599][ T2135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:484 [ 65.740045][ T2141] rust_binder: Write failure EINVAL in pid:490 [ 65.763959][ T10] usb 4-1: string descriptor 0 read error: -71 [ 65.778417][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 65.785132][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 65.804947][ T10] usb 4-1: USB disconnect, device number 15 [ 65.845617][ T2152] netlink: 44 bytes leftover after parsing attributes in process `syz.1.619'. [ 65.855895][ T2152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 65.882542][ T2157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:497 [ 65.921908][ T2159] kvm: kvm [2158]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 65.940262][ T479] usbhid 1-1:0.0: can't add hid device: -71 [ 65.946555][ T479] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 65.971854][ T479] usb 1-1: USB disconnect, device number 18 [ 65.980169][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 65.980187][ T36] audit: type=1400 audit(1750464022.273:396): avc: denied { create } for pid=2161 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.324798][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 66.431414][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 66.484853][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 66.491894][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.503185][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 66.516416][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 66.525543][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.534237][ T10] usb 4-1: config 0 descriptor?? [ 66.571001][ T2178] cgroup: Need name or subsystem set [ 66.591740][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 66.598006][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 66.609416][ T9] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.620489][ T9] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 66.633655][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 66.642429][ T9] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 66.651607][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.660386][ T9] usb 2-1: config 0 descriptor?? [ 66.730601][ T2185] overlay: Unknown parameter 'appraise_type' [ 66.738130][ T2185] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 66.818914][ T2187] rust_binder: Write failure EINVAL in pid:291 [ 66.836850][ T36] audit: type=1326 audit(1750464023.077:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2188 comm="syz.0.633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x0 [ 66.960740][ T2194] binder: Unknown parameter '' [ 67.105863][ T2174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.114508][ T2174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.123306][ T2174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.131942][ T2174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.146316][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 67.161606][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 67.170707][ T9] usb 2-1: USB disconnect, device number 15 [ 67.189401][ T2203] FAULT_INJECTION: forcing a failure. [ 67.189401][ T2203] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.202728][ T2203] CPU: 0 UID: 0 PID: 2203 Comm: syz.4.638 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 67.202757][ T2203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.202774][ T2203] Call Trace: [ 67.202779][ T2203] [ 67.202786][ T2203] __dump_stack+0x21/0x30 [ 67.202811][ T2203] dump_stack_lvl+0x10c/0x190 [ 67.202829][ T2203] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.202852][ T2203] dump_stack+0x19/0x20 [ 67.202868][ T2203] should_fail_ex+0x3d9/0x530 [ 67.202885][ T2203] should_fail+0xf/0x20 [ 67.202899][ T2203] should_fail_usercopy+0x1e/0x30 [ 67.202917][ T2203] strncpy_from_user+0x28/0x270 [ 67.202933][ T2203] ? getname_flags+0xc6/0x710 [ 67.202953][ T2203] getname_flags+0x102/0x710 [ 67.202971][ T2203] ? build_open_flags+0x487/0x600 [ 67.202986][ T2203] getname+0x1b/0x30 [ 67.203003][ T2203] do_sys_openat2+0xcb/0x1c0 [ 67.203017][ T2203] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 67.203049][ T2203] ? do_sys_open+0x100/0x100 [ 67.203064][ T2203] ? handle_softirqs+0x556/0x630 [ 67.203083][ T2203] __x64_sys_openat+0x13a/0x170 [ 67.203098][ T2203] x64_sys_call+0xe69/0x2ee0 [ 67.203118][ T2203] do_syscall_64+0x58/0xf0 [ 67.203137][ T2203] ? clear_bhb_loop+0x35/0x90 [ 67.203160][ T2203] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.203182][ T2203] RIP: 0033:0x7f2033b8e929 [ 67.203198][ T2203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.203212][ T2203] RSP: 002b:00007f2034ad6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 67.203228][ T2203] RAX: ffffffffffffffda RBX: 00007f2033db5fa0 RCX: 00007f2033b8e929 [ 67.203240][ T2203] RDX: 0000000000478103 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 67.203252][ T2203] RBP: 00007f2034ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 67.203261][ T2203] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 67.203271][ T2203] R13: 0000000000000000 R14: 00007f2033db5fa0 R15: 00007ffe02de5ad8 [ 67.203284][ T2203] [ 67.438944][ T2208] rust_binder: Error while translating object. [ 67.438972][ T2208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 67.445217][ T2208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:62 [ 67.926614][ T36] audit: type=1400 audit(1750464024.097:398): avc: denied { create } for pid=2238 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 67.977201][ T36] audit: type=1400 audit(1750464024.144:399): avc: denied { lock } for pid=2241 comm="syz.1.651" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.048081][ T2246] netlink: 324 bytes leftover after parsing attributes in process `syz.0.652'. [ 68.212951][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.219412][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.420849][ T2252] rust_binder: Read failure Err(EFAULT) in pid:310 [ 68.579789][ T2264] kvm: Disabled LAPIC found during irq injection [ 68.688799][ T2276] kvm: kvm [2275]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 68.800145][ T2280] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 68.801034][ T2280] rust_binder: Write failure EINVAL in pid:332 [ 68.844651][ T2286] rust_binder: Write failure EINVAL in pid:337 [ 68.854367][ T36] audit: type=1400 audit(1750464024.967:400): avc: denied { map } for pid=2285 comm="syz.0.666" path="socket:[21170]" dev="sockfs" ino=21170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.885085][ T36] audit: type=1400 audit(1750464024.967:401): avc: denied { accept } for pid=2285 comm="syz.0.666" path="socket:[21170]" dev="sockfs" ino=21170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.965083][ T306] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.121357][ T36] audit: type=1400 audit(1750464025.219:402): avc: denied { accept } for pid=2303 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 69.142533][ T306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.153829][ T306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.163684][ T306] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 69.172882][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.181821][ T306] usb 5-1: config 0 descriptor?? [ 69.188016][ T306] usbhid 5-1:0.0: can't add hid device: -22 [ 69.194024][ T306] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 69.211903][ T1639] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 69.225590][ T2306] SELinux: policydb version 2040237772 does not match my version range 15-33 [ 69.234751][ T2306] SELinux: failed to load policy [ 69.240470][ T2306] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 69.275434][ T36] audit: type=1400 audit(1750464025.369:403): avc: denied { bind } for pid=2309 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.302553][ T10] usb 4-1: string descriptor 0 read error: -71 [ 69.319048][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 69.331503][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 69.341097][ T10] usb 4-1: USB disconnect, device number 16 [ 69.354441][ T2318] binder: Unknown parameter 'context' [ 69.355824][ T36] audit: type=1326 audit(1750464025.435:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2317 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 69.370125][ T2320] FAULT_INJECTION: forcing a failure. [ 69.370125][ T2320] name failslab, interval 1, probability 0, space 0, times 1 [ 69.385555][ T36] audit: type=1326 audit(1750464025.435:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2317 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 69.419482][ T1639] usb 2-1: Using ep0 maxpacket: 16 [ 69.422573][ T2276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.427278][ T1639] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.433639][ T2320] CPU: 0 UID: 0 PID: 2320 Comm: syz.3.680 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 69.433679][ T2320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.433694][ T2320] Call Trace: [ 69.433702][ T2320] [ 69.433712][ T2320] __dump_stack+0x21/0x30 [ 69.433746][ T2320] dump_stack_lvl+0x10c/0x190 [ 69.433774][ T2320] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.433801][ T2320] ? kasan_save_track+0x4f/0x80 [ 69.433833][ T2320] ? kasan_save_alloc_info+0x40/0x50 [ 69.433856][ T2320] ? __kasan_slab_alloc+0x73/0x90 [ 69.433886][ T2320] ? kmem_cache_alloc_lru_noprof+0x134/0x3a0 [ 69.433914][ T2320] ? d_alloc+0x4c/0x1c0 [ 69.433937][ T2320] ? vfs_tmpfile+0x172/0x590 [ 69.433970][ T2320] ? do_tmpfile+0xdf/0x280 [ 69.433998][ T2320] dump_stack+0x19/0x20 [ 69.434022][ T2320] should_fail_ex+0x3d9/0x530 [ 69.434049][ T2320] should_failslab+0xac/0x100 [ 69.434081][ T2320] kmem_cache_alloc_lru_noprof+0x45/0x3a0 [ 69.434108][ T2320] ? ovl_alloc_inode+0x3b/0x130 [ 69.434138][ T2320] ? __cfi_ovl_alloc_inode+0x10/0x10 [ 69.434167][ T2320] ovl_alloc_inode+0x3b/0x130 [ 69.434197][ T2320] ? __cfi_ovl_alloc_inode+0x10/0x10 [ 69.434225][ T2320] alloc_inode+0x7a/0x270 [ 69.434257][ T2320] new_inode+0x25/0x1e0 [ 69.434290][ T2320] ? mnt_want_write+0x321/0x510 [ 69.434325][ T2320] ovl_new_inode+0x28/0x2b0 [ 69.434356][ T2320] ovl_tmpfile+0x20e/0x810 [ 69.434377][ T2320] ? __kasan_check_write+0x18/0x20 [ 69.434404][ T2320] ? __cfi_ovl_tmpfile+0x10/0x10 [ 69.434425][ T2320] ? mode_strip_sgid+0x75/0x1d0 [ 69.434448][ T2320] vfs_tmpfile+0x387/0x590 [ 69.434486][ T2320] do_tmpfile+0xdf/0x280 [ 69.434516][ T2320] path_openat+0x2d87/0x34b0 [ 69.434551][ T2320] ? _parse_integer+0x2e/0x40 [ 69.434577][ T2320] ? kasan_save_track+0x4f/0x80 [ 69.434606][ T2320] ? kasan_save_alloc_info+0x40/0x50 [ 69.434636][ T2320] ? __kasan_slab_alloc+0x73/0x90 [ 69.434668][ T2320] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 69.434692][ T2320] ? getname_flags+0xc6/0x710 [ 69.434722][ T2320] ? do_sys_openat2+0xcb/0x1c0 [ 69.434743][ T2320] ? __x64_sys_openat+0x13a/0x170 [ 69.434764][ T2320] ? x64_sys_call+0xe69/0x2ee0 [ 69.434795][ T2320] ? do_syscall_64+0x58/0xf0 [ 69.434827][ T2320] ? do_filp_open+0x3e0/0x3e0 [ 69.434862][ T2320] do_filp_open+0x1c6/0x3e0 [ 69.434895][ T2320] ? __cfi_do_filp_open+0x10/0x10 [ 69.434933][ T2320] ? alloc_fd+0x4e7/0x5a0 [ 69.434974][ T2320] do_sys_openat2+0x12c/0x1c0 [ 69.435003][ T2320] ? fput+0x1a5/0x240 [ 69.435036][ T2320] ? do_sys_open+0x100/0x100 [ 69.435058][ T2320] ? ksys_write+0x1ef/0x250 [ 69.435085][ T2320] ? __cfi_ksys_write+0x10/0x10 [ 69.435113][ T2320] __x64_sys_openat+0x13a/0x170 [ 69.435136][ T2320] x64_sys_call+0xe69/0x2ee0 [ 69.435167][ T2320] do_syscall_64+0x58/0xf0 [ 69.435196][ T2320] ? clear_bhb_loop+0x35/0x90 [ 69.435231][ T2320] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.435270][ T2320] RIP: 0033:0x7f5fd578e929 [ 69.435288][ T2320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.435308][ T2320] RSP: 002b:00007f5fd6620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 69.435334][ T2320] RAX: ffffffffffffffda RBX: 00007f5fd59b5fa0 RCX: 00007f5fd578e929 [ 69.435353][ T2320] RDX: 0000000000478103 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 69.435370][ T2320] RBP: 00007f5fd6620090 R08: 0000000000000000 R09: 0000000000000000 [ 69.435384][ T2320] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 69.435399][ T2320] R13: 0000000000000000 R14: 00007f5fd59b5fa0 R15: 00007ffe898ddd88 [ 69.435419][ T2320] [ 69.442302][ T2276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.445191][ T1639] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.821445][ T1639] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 69.835399][ T1639] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 69.838422][ T2324] netlink: 324 bytes leftover after parsing attributes in process `syz.3.681'. [ 69.845308][ T1639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.863620][ T1639] usb 2-1: config 0 descriptor?? [ 69.990056][ T2347] netlink: 324 bytes leftover after parsing attributes in process `syz.3.691'. [ 70.162470][ T451] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 70.298629][ T1639] microsoft 0003:045E:07DA.0005: unknown main item tag 0x1 [ 70.305949][ T1639] microsoft 0003:045E:07DA.0005: unknown global tag 0xc [ 70.313071][ T1639] microsoft 0003:045E:07DA.0005: item 0 0 1 12 parsing failed [ 70.320749][ T1639] microsoft 0003:045E:07DA.0005: parse failed [ 70.327038][ T1639] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 70.336409][ T451] usb 1-1: Using ep0 maxpacket: 16 [ 70.345672][ T451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.356634][ T451] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 70.369531][ T451] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 70.378658][ T451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.387557][ T451] usb 1-1: config 0 descriptor?? [ 70.429678][ T891] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.429887][ T892] Bluetooth: hci0: command 0x1003 tx timeout [ 70.519598][ T2294] input: syz1 as /devices/virtual/input/input13 [ 70.527874][ T1639] usb 2-1: USB disconnect, device number 16 [ 70.998651][ T2359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:566 [ 70.998723][ T2360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:566 [ 71.151548][ T2375] FAULT_INJECTION: forcing a failure. [ 71.151548][ T2375] name failslab, interval 1, probability 0, space 0, times 0 [ 71.173569][ T2375] CPU: 0 UID: 0 PID: 2375 Comm: syz.1.699 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 71.173604][ T2375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.173619][ T2375] Call Trace: [ 71.173625][ T2375] [ 71.173634][ T2375] __dump_stack+0x21/0x30 [ 71.173662][ T2375] dump_stack_lvl+0x10c/0x190 [ 71.173685][ T2375] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.173717][ T2375] dump_stack+0x19/0x20 [ 71.173740][ T2375] should_fail_ex+0x3d9/0x530 [ 71.173763][ T2375] should_failslab+0xac/0x100 [ 71.173792][ T2375] kmem_cache_alloc_noprof+0x42/0x3a0 [ 71.173810][ T2375] ? prepare_creds+0x48/0x6b0 [ 71.173842][ T2375] prepare_creds+0x48/0x6b0 [ 71.173872][ T2375] ovl_tmpfile+0x2ba/0x810 [ 71.173891][ T2375] ? __kasan_check_write+0x18/0x20 [ 71.173914][ T2375] ? __cfi_ovl_tmpfile+0x10/0x10 [ 71.173932][ T2375] ? mode_strip_sgid+0x75/0x1d0 [ 71.173952][ T2375] vfs_tmpfile+0x387/0x590 [ 71.173976][ T2375] do_tmpfile+0xdf/0x280 [ 71.173994][ T2375] path_openat+0x2d87/0x34b0 [ 71.174028][ T2375] ? _parse_integer+0x2e/0x40 [ 71.174048][ T2375] ? kasan_save_track+0x4f/0x80 [ 71.174073][ T2375] ? kasan_save_alloc_info+0x40/0x50 [ 71.174093][ T2375] ? __kasan_slab_alloc+0x73/0x90 [ 71.174112][ T2375] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 71.174129][ T2375] ? getname_flags+0xc6/0x710 [ 71.174151][ T2375] ? do_sys_openat2+0xcb/0x1c0 [ 71.174171][ T2375] ? __x64_sys_openat+0x13a/0x170 [ 71.174191][ T2375] ? x64_sys_call+0xe69/0x2ee0 [ 71.174216][ T2375] ? do_syscall_64+0x58/0xf0 [ 71.174242][ T2375] ? do_filp_open+0x3e0/0x3e0 [ 71.174265][ T2375] do_filp_open+0x1c6/0x3e0 [ 71.174287][ T2375] ? __cfi_do_filp_open+0x10/0x10 [ 71.174323][ T2375] ? alloc_fd+0x4e7/0x5a0 [ 71.174349][ T2375] do_sys_openat2+0x12c/0x1c0 [ 71.174368][ T2375] ? fput+0x1a5/0x240 [ 71.174394][ T2375] ? do_sys_open+0x100/0x100 [ 71.174414][ T2375] ? ksys_write+0x1ef/0x250 [ 71.174432][ T2375] ? __cfi_ksys_write+0x10/0x10 [ 71.174456][ T2375] ? __se_sys_chdir+0x1ba/0x290 [ 71.174485][ T2375] __x64_sys_openat+0x13a/0x170 [ 71.174505][ T2375] x64_sys_call+0xe69/0x2ee0 [ 71.174532][ T2375] do_syscall_64+0x58/0xf0 [ 71.174551][ T2375] ? clear_bhb_loop+0x35/0x90 [ 71.174574][ T2375] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.174603][ T2375] RIP: 0033:0x7ff35318e929 [ 71.174620][ T2375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.174636][ T2375] RSP: 002b:00007ff353ff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 71.174659][ T2375] RAX: ffffffffffffffda RBX: 00007ff3533b5fa0 RCX: 00007ff35318e929 [ 71.174675][ T2375] RDX: 0000000000478103 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 71.174686][ T2375] RBP: 00007ff353ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 71.174696][ T2375] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 71.174705][ T2375] R13: 0000000000000000 R14: 00007ff3533b5fa0 R15: 00007ffeb29a7f18 [ 71.174718][ T2375] [ 71.665979][ T36] audit: type=1400 audit(1750464027.595:406): avc: denied { execute } for pid=2383 comm="syz.3.702" path="/proc/sys/fs/binfmt_misc/register" dev="binfmt_misc" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=file permissive=1 [ 71.830205][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 71.951171][ T1639] usb 5-1: USB disconnect, device number 2 [ 72.001216][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 72.007656][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.019140][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 72.032047][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 72.041145][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.050006][ T10] usb 2-1: config 0 descriptor?? [ 72.068932][ T2396] netlink: 188 bytes leftover after parsing attributes in process `syz.4.705'. [ 72.439535][ T1639] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.488335][ T2380] tap0: tun_chr_ioctl cmd 1074025677 [ 72.494971][ T2380] tap0: linktype set to 776 [ 72.501223][ T10] microsoft 0003:045E:07DA.0006: item fetching failed at offset 14/34 [ 72.525225][ T10] microsoft 0003:045E:07DA.0006: parse failed [ 72.531409][ T10] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22 [ 72.601469][ T1639] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.613910][ T1639] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.623039][ T1639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.631115][ T1639] usb 5-1: Product: syz [ 72.635335][ T1639] usb 5-1: Manufacturer: syz [ 72.639955][ T1639] usb 5-1: SerialNumber: syz [ 72.704262][ T2409] FAULT_INJECTION: forcing a failure. [ 72.704262][ T2409] name failslab, interval 1, probability 0, space 0, times 0 [ 72.717002][ T2409] CPU: 0 UID: 0 PID: 2409 Comm: syz.3.709 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 72.717038][ T2409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.717050][ T2409] Call Trace: [ 72.717058][ T2409] [ 72.717066][ T2409] __dump_stack+0x21/0x30 [ 72.717097][ T2409] dump_stack_lvl+0x10c/0x190 [ 72.717121][ T2409] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.717148][ T2409] dump_stack+0x19/0x20 [ 72.717169][ T2409] should_fail_ex+0x3d9/0x530 [ 72.717191][ T2409] should_failslab+0xac/0x100 [ 72.717218][ T2409] __kmalloc_noprof+0x69/0x450 [ 72.717244][ T2409] ? security_prepare_creds+0x66/0x230 [ 72.717275][ T2409] security_prepare_creds+0x66/0x230 [ 72.717304][ T2409] prepare_creds+0x46e/0x6b0 [ 72.717332][ T2409] ovl_tmpfile+0x2ba/0x810 [ 72.717360][ T2409] ? __kasan_check_write+0x18/0x20 [ 72.717386][ T2409] ? __cfi_ovl_tmpfile+0x10/0x10 [ 72.717405][ T2409] ? mode_strip_sgid+0x75/0x1d0 [ 72.717427][ T2409] vfs_tmpfile+0x387/0x590 [ 72.717460][ T2409] do_tmpfile+0xdf/0x280 [ 72.717484][ T2409] path_openat+0x2d87/0x34b0 [ 72.717515][ T2409] ? _parse_integer+0x2e/0x40 [ 72.717537][ T2409] ? kasan_save_track+0x4f/0x80 [ 72.717562][ T2409] ? kasan_save_alloc_info+0x40/0x50 [ 72.717582][ T2409] ? __kasan_slab_alloc+0x73/0x90 [ 72.717609][ T2409] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 72.717632][ T2409] ? getname_flags+0xc6/0x710 [ 72.717658][ T2409] ? do_sys_openat2+0xcb/0x1c0 [ 72.717678][ T2409] ? __x64_sys_openat+0x13a/0x170 [ 72.717697][ T2409] ? x64_sys_call+0xe69/0x2ee0 [ 72.717723][ T2409] ? do_syscall_64+0x58/0xf0 [ 72.717750][ T2409] ? do_filp_open+0x3e0/0x3e0 [ 72.717781][ T2409] do_filp_open+0x1c6/0x3e0 [ 72.717811][ T2409] ? __cfi_do_filp_open+0x10/0x10 [ 72.717844][ T2409] ? alloc_fd+0x4e7/0x5a0 [ 72.717871][ T2409] do_sys_openat2+0x12c/0x1c0 [ 72.717889][ T2409] ? fput+0x1a5/0x240 [ 72.717917][ T2409] ? do_sys_open+0x100/0x100 [ 72.717935][ T2409] ? ksys_write+0x1ef/0x250 [ 72.717961][ T2409] ? __cfi_ksys_write+0x10/0x10 [ 72.717984][ T2409] ? __se_sys_chdir+0x1ba/0x290 [ 72.718011][ T2409] __x64_sys_openat+0x13a/0x170 [ 72.718032][ T2409] x64_sys_call+0xe69/0x2ee0 [ 72.718056][ T2409] do_syscall_64+0x58/0xf0 [ 72.718082][ T2409] ? clear_bhb_loop+0x35/0x90 [ 72.718114][ T2409] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.718142][ T2409] RIP: 0033:0x7f5fd578e929 [ 72.718159][ T2409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.718177][ T2409] RSP: 002b:00007f5fd6620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 72.718200][ T2409] RAX: ffffffffffffffda RBX: 00007f5fd59b5fa0 RCX: 00007f5fd578e929 [ 72.718215][ T2409] RDX: 0000000000478103 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 72.718231][ T2409] RBP: 00007f5fd6620090 R08: 0000000000000000 R09: 0000000000000000 [ 72.718245][ T2409] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 72.718258][ T2409] R13: 0000000000000000 R14: 00007f5fd59b5fa0 R15: 00007ffe898ddd88 [ 72.718275][ T2409] [ 73.128041][ T451] usb 1-1: string descriptor 0 read error: -71 [ 73.139100][ T451] usbhid 1-1:0.0: can't add hid device: -71 [ 73.146862][ T2417] rust_binder: Error in use_page_slow: ESRCH [ 73.146880][ T2417] rust_binder: use_range failure ESRCH [ 73.152949][ T451] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 73.153519][ T2417] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 73.159968][ T451] usb 1-1: USB disconnect, device number 19 [ 73.166383][ T2417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 73.184356][ T2417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:372 [ 73.211525][ T2419] binder: Bad value for 'stats' [ 73.287685][ T36] audit: type=1400 audit(1750464029.120:407): avc: denied { map } for pid=2412 comm="syz.3.711" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.377490][ T2425] binder: Unknown parameter 'fsconte_u' [ 73.554537][ T2430] FAULT_INJECTION: forcing a failure. [ 73.554537][ T2430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.567747][ T2430] CPU: 1 UID: 0 PID: 2430 Comm: syz.3.717 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 73.567787][ T2430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.567800][ T2430] Call Trace: [ 73.567809][ T2430] [ 73.567818][ T2430] __dump_stack+0x21/0x30 [ 73.567845][ T2430] dump_stack_lvl+0x10c/0x190 [ 73.567863][ T2430] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.567882][ T2430] dump_stack+0x19/0x20 [ 73.567899][ T2430] should_fail_ex+0x3d9/0x530 [ 73.567916][ T2430] should_fail+0xf/0x20 [ 73.567931][ T2430] should_fail_usercopy+0x1e/0x30 [ 73.567948][ T2430] strncpy_from_user+0x28/0x270 [ 73.567965][ T2430] ? getname_flags+0xc6/0x710 [ 73.567984][ T2430] getname_flags+0x102/0x710 [ 73.568002][ T2430] ? build_open_flags+0x487/0x600 [ 73.568017][ T2430] getname+0x1b/0x30 [ 73.568035][ T2430] do_sys_openat2+0xcb/0x1c0 [ 73.568048][ T2430] ? fput+0x1a5/0x240 [ 73.568070][ T2430] ? do_sys_open+0x100/0x100 [ 73.568083][ T2430] ? ksys_write+0x1ef/0x250 [ 73.568100][ T2430] ? __cfi_ksys_write+0x10/0x10 [ 73.568119][ T2430] __x64_sys_openat+0x13a/0x170 [ 73.568133][ T2430] x64_sys_call+0xe69/0x2ee0 [ 73.568153][ T2430] do_syscall_64+0x58/0xf0 [ 73.568173][ T2430] ? clear_bhb_loop+0x35/0x90 [ 73.568196][ T2430] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.568217][ T2430] RIP: 0033:0x7f5fd578d290 [ 73.568231][ T2430] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 73.568250][ T2430] RSP: 002b:00007f5fd661ff60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 73.568267][ T2430] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5fd578d290 [ 73.568278][ T2430] RDX: 0000000000000000 RSI: 00007f5fd5810c51 RDI: 00000000ffffff9c [ 73.568288][ T2430] RBP: 00007f5fd5810c51 R08: 0000000000000000 R09: 0000000000000000 [ 73.568297][ T2430] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 73.568307][ T2430] R13: 0000000000000000 R14: 00007f5fd59b5fa0 R15: 00007ffe898ddd88 [ 73.568320][ T2430] [ 73.780339][ T1639] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 73.786881][ T1639] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 73.793123][ T2432] No source specified [ 73.794472][ T1639] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 73.814239][ T2434] FAULT_INJECTION: forcing a failure. [ 73.814239][ T2434] name failslab, interval 1, probability 0, space 0, times 0 [ 73.826933][ T2434] CPU: 1 UID: 0 PID: 2434 Comm: syz.3.719 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 73.826967][ T2434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.826981][ T2434] Call Trace: [ 73.826989][ T2434] [ 73.827000][ T2434] __dump_stack+0x21/0x30 [ 73.827025][ T2434] dump_stack_lvl+0x10c/0x190 [ 73.827046][ T2434] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.827065][ T2434] dump_stack+0x19/0x20 [ 73.827081][ T2434] should_fail_ex+0x3d9/0x530 [ 73.827099][ T2434] should_failslab+0xac/0x100 [ 73.827120][ T2434] __kmalloc_cache_noprof+0x41/0x3c0 [ 73.827138][ T2434] ? alloc_empty_backing_file+0x68/0x1a0 [ 73.827162][ T2434] alloc_empty_backing_file+0x68/0x1a0 [ 73.827185][ T2434] backing_tmpfile_open+0x75/0x100 [ 73.827209][ T2434] ovl_tmpfile+0x4dc/0x810 [ 73.827227][ T2434] ? __kasan_check_write+0x18/0x20 [ 73.827245][ T2434] ? __cfi_ovl_tmpfile+0x10/0x10 [ 73.827258][ T2434] ? mode_strip_sgid+0x75/0x1d0 [ 73.827275][ T2434] vfs_tmpfile+0x387/0x590 [ 73.827298][ T2434] do_tmpfile+0xdf/0x280 [ 73.827316][ T2434] path_openat+0x2d87/0x34b0 [ 73.827339][ T2434] ? _parse_integer+0x2e/0x40 [ 73.827359][ T2434] ? kasan_save_track+0x4f/0x80 [ 73.827387][ T2434] ? kasan_save_alloc_info+0x40/0x50 [ 73.827408][ T2434] ? __kasan_slab_alloc+0x73/0x90 [ 73.827429][ T2434] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 73.827446][ T2434] ? getname_flags+0xc6/0x710 [ 73.827464][ T2434] ? do_sys_openat2+0xcb/0x1c0 [ 73.827479][ T2434] ? __x64_sys_openat+0x13a/0x170 [ 73.827493][ T2434] ? x64_sys_call+0xe69/0x2ee0 [ 73.827512][ T2434] ? do_syscall_64+0x58/0xf0 [ 73.827533][ T2434] ? do_filp_open+0x3e0/0x3e0 [ 73.827556][ T2434] do_filp_open+0x1c6/0x3e0 [ 73.827578][ T2434] ? __cfi_do_filp_open+0x10/0x10 [ 73.827603][ T2434] ? alloc_fd+0x4e7/0x5a0 [ 73.827623][ T2434] do_sys_openat2+0x12c/0x1c0 [ 73.827636][ T2434] ? fput+0x1a5/0x240 [ 73.827658][ T2434] ? do_sys_open+0x100/0x100 [ 73.827671][ T2434] ? ksys_write+0x1ef/0x250 [ 73.827689][ T2434] ? __cfi_ksys_write+0x10/0x10 [ 73.827705][ T2434] ? __se_sys_chdir+0x1ba/0x290 [ 73.827727][ T2434] __x64_sys_openat+0x13a/0x170 [ 73.827742][ T2434] x64_sys_call+0xe69/0x2ee0 [ 73.827761][ T2434] do_syscall_64+0x58/0xf0 [ 73.827780][ T2434] ? clear_bhb_loop+0x35/0x90 [ 73.827803][ T2434] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.827825][ T2434] RIP: 0033:0x7f5fd578e929 [ 73.827838][ T2434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.827852][ T2434] RSP: 002b:00007f5fd6620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 73.827868][ T2434] RAX: ffffffffffffffda RBX: 00007f5fd59b5fa0 RCX: 00007f5fd578e929 [ 73.827880][ T2434] RDX: 0000000000478103 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 73.827891][ T2434] RBP: 00007f5fd6620090 R08: 0000000000000000 R09: 0000000000000000 [ 73.827900][ T2434] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 73.827910][ T2434] R13: 0000000000000000 R14: 00007f5fd59b5fa0 R15: 00007ffe898ddd88 [ 73.827922][ T2434] [ 74.135807][ T1639] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 74.143296][ T1639] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 74.169308][ T36] audit: type=1400 audit(1750464029.934:408): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.190622][ T36] audit: type=1400 audit(1750464029.934:409): avc: denied { setattr } for pid=2437 comm="syz.3.721" name="" dev="pipefs" ino=23364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 74.194050][ T2442] netlink: 324 bytes leftover after parsing attributes in process `syz.3.722'. [ 74.245403][ T36] audit: type=1400 audit(1750464030.009:410): avc: denied { read } for pid=2446 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.268683][ T36] audit: type=1400 audit(1750464030.037:411): avc: denied { open } for pid=2446 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.299845][ T36] audit: type=1400 audit(1750464030.065:412): avc: denied { getattr } for pid=2446 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.326809][ T2450] rust_binder: Write failure EINVAL in pid:382 [ 74.342773][ T2456] FAULT_INJECTION: forcing a failure. [ 74.342773][ T2456] name failslab, interval 1, probability 0, space 0, times 0 [ 74.377760][ T2396] serio: Serial port ttynull [ 74.388371][ T2456] CPU: 0 UID: 0 PID: 2456 Comm: syz.0.727 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 74.388405][ T2456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.388419][ T2456] Call Trace: [ 74.388426][ T2456] [ 74.388435][ T2456] __dump_stack+0x21/0x30 [ 74.388473][ T2456] dump_stack_lvl+0x10c/0x190 [ 74.388496][ T2456] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.388522][ T2456] dump_stack+0x19/0x20 [ 74.388543][ T2456] should_fail_ex+0x3d9/0x530 [ 74.388566][ T2456] should_failslab+0xac/0x100 [ 74.388594][ T2456] kmem_cache_alloc_noprof+0x42/0x3a0 [ 74.388617][ T2456] ? alloc_empty_file+0xbf/0x280 [ 74.388647][ T2456] alloc_empty_file+0xbf/0x280 [ 74.388677][ T2456] path_openat+0xf8/0x34b0 [ 74.388707][ T2456] ? _parse_integer+0x2e/0x40 [ 74.388727][ T2456] ? kasan_save_track+0x4f/0x80 [ 74.388752][ T2456] ? kasan_save_alloc_info+0x40/0x50 [ 74.388772][ T2456] ? __kasan_slab_alloc+0x73/0x90 [ 74.388801][ T2456] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 74.388825][ T2456] ? getname_flags+0xc6/0x710 [ 74.388851][ T2456] ? do_sys_openat2+0xcb/0x1c0 [ 74.388870][ T2456] ? __x64_sys_openat+0x13a/0x170 [ 74.388890][ T2456] ? x64_sys_call+0xe69/0x2ee0 [ 74.388917][ T2456] ? do_syscall_64+0x58/0xf0 [ 74.388946][ T2456] ? do_filp_open+0x3e0/0x3e0 [ 74.388977][ T2456] do_filp_open+0x1c6/0x3e0 [ 74.389006][ T2456] ? __cfi_do_filp_open+0x10/0x10 [ 74.389041][ T2456] ? alloc_fd+0x4e7/0x5a0 [ 74.389069][ T2456] do_sys_openat2+0x12c/0x1c0 [ 74.389088][ T2456] ? fput+0x1a5/0x240 [ 74.389118][ T2456] ? do_sys_open+0x100/0x100 [ 74.389136][ T2456] ? ksys_write+0x1ef/0x250 [ 74.389162][ T2456] ? __cfi_ksys_write+0x10/0x10 [ 74.389187][ T2456] __x64_sys_openat+0x13a/0x170 [ 74.389208][ T2456] x64_sys_call+0xe69/0x2ee0 [ 74.389235][ T2456] do_syscall_64+0x58/0xf0 [ 74.389260][ T2456] ? clear_bhb_loop+0x35/0x90 [ 74.389291][ T2456] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.389321][ T2456] RIP: 0033:0x7fadad38d290 [ 74.389339][ T2456] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 74.389357][ T2456] RSP: 002b:00007fadae144f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 74.389380][ T2456] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fadad38d290 [ 74.389396][ T2456] RDX: 0000000000000000 RSI: 00007fadad410c51 RDI: 00000000ffffff9c [ 74.389411][ T2456] RBP: 00007fadad410c51 R08: 0000000000000000 R09: 0000000000000000 [ 74.389425][ T2456] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 74.389438][ T2456] R13: 0000000000000000 R14: 00007fadad5b5fa0 R15: 00007ffedad73578 [ 74.389456][ T2456] [ 74.649743][ T36] audit: type=1400 audit(1750464030.374:413): avc: denied { write } for pid=2444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.691722][ T36] audit: type=1400 audit(1750464030.392:414): avc: denied { add_name } for pid=2444 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.721204][ T36] audit: type=1400 audit(1750464030.458:415): avc: denied { remove_name } for pid=2467 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=3431 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.786078][ T9] usb 2-1: USB disconnect, device number 17 [ 74.793663][ T10] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 74.816573][ T2471] FAULT_INJECTION: forcing a failure. [ 74.816573][ T2471] name failslab, interval 1, probability 0, space 0, times 0 [ 74.829763][ T2471] CPU: 1 UID: 0 PID: 2471 Comm: syz.0.730 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 74.829800][ T2471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.829813][ T2471] Call Trace: [ 74.829820][ T2471] [ 74.829828][ T2471] __dump_stack+0x21/0x30 [ 74.829857][ T2471] dump_stack_lvl+0x10c/0x190 [ 74.829880][ T2471] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.829906][ T2471] dump_stack+0x19/0x20 [ 74.829927][ T2471] should_fail_ex+0x3d9/0x530 [ 74.829950][ T2471] should_failslab+0xac/0x100 [ 74.829980][ T2471] kmem_cache_alloc_noprof+0x42/0x3a0 [ 74.830004][ T2471] ? security_file_alloc+0x49/0x200 [ 74.830033][ T2471] security_file_alloc+0x49/0x200 [ 74.830061][ T2471] init_file+0x9e/0x210 [ 74.830091][ T2471] alloc_empty_backing_file+0x82/0x1a0 [ 74.830123][ T2471] backing_tmpfile_open+0x75/0x100 [ 74.830172][ T2471] ovl_tmpfile+0x4dc/0x810 [ 74.830190][ T2471] ? __kasan_check_write+0x18/0x20 [ 74.830215][ T2471] ? __cfi_ovl_tmpfile+0x10/0x10 [ 74.830234][ T2471] ? mode_strip_sgid+0x75/0x1d0 [ 74.830255][ T2471] vfs_tmpfile+0x387/0x590 [ 74.830287][ T2471] do_tmpfile+0xdf/0x280 [ 74.830310][ T2471] path_openat+0x2d87/0x34b0 [ 74.830338][ T2471] ? _parse_integer+0x2e/0x40 [ 74.830359][ T2471] ? kasan_save_track+0x4f/0x80 [ 74.830386][ T2471] ? kasan_save_alloc_info+0x40/0x50 [ 74.830406][ T2471] ? __kasan_slab_alloc+0x73/0x90 [ 74.830434][ T2471] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 74.830458][ T2471] ? getname_flags+0xc6/0x710 [ 74.830481][ T2471] ? do_sys_openat2+0xcb/0x1c0 [ 74.830499][ T2471] ? __x64_sys_openat+0x13a/0x170 [ 74.830518][ T2471] ? x64_sys_call+0xe69/0x2ee0 [ 74.830544][ T2471] ? do_syscall_64+0x58/0xf0 [ 74.830574][ T2471] ? do_filp_open+0x3e0/0x3e0 [ 74.830607][ T2471] do_filp_open+0x1c6/0x3e0 [ 74.830638][ T2471] ? __cfi_do_filp_open+0x10/0x10 [ 74.830671][ T2471] ? alloc_fd+0x4e7/0x5a0 [ 74.830699][ T2471] do_sys_openat2+0x12c/0x1c0 [ 74.830719][ T2471] ? fput+0x1a5/0x240 [ 74.830749][ T2471] ? do_sys_open+0x100/0x100 [ 74.830768][ T2471] ? ksys_write+0x1ef/0x250 [ 74.830805][ T2471] ? __cfi_ksys_write+0x10/0x10 [ 74.830831][ T2471] __x64_sys_openat+0x13a/0x170 [ 74.830853][ T2471] x64_sys_call+0xe69/0x2ee0 [ 74.830881][ T2471] do_syscall_64+0x58/0xf0 [ 74.830908][ T2471] ? clear_bhb_loop+0x35/0x90 [ 74.830939][ T2471] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.830970][ T2471] RIP: 0033:0x7fadad38e929 [ 74.830988][ T2471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.831007][ T2471] RSP: 002b:00007fadae145038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.831030][ T2471] RAX: ffffffffffffffda RBX: 00007fadad5b5fa0 RCX: 00007fadad38e929 [ 74.831048][ T2471] RDX: 0000000000478103 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 74.831070][ T2471] RBP: 00007fadae145090 R08: 0000000000000000 R09: 0000000000000000 [ 74.831084][ T2471] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 74.831097][ T2471] R13: 0000000000000000 R14: 00007fadad5b5fa0 R15: 00007ffedad73578 [ 74.831113][ T2471] [ 74.832212][ T2473] rust_binder: Error while translating object. [ 75.146493][ T2473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.152900][ T2473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:533 [ 75.230945][ T10] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 75.251836][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 75.258768][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 75.268346][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.279501][ T10] usb 4-1: config 0 descriptor?? [ 75.285756][ T2484] netlink: 324 bytes leftover after parsing attributes in process `syz.1.734'. [ 75.295220][ T2460] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 75.478913][ T2507] FAULT_INJECTION: forcing a failure. [ 75.478913][ T2507] name failslab, interval 1, probability 0, space 0, times 0 [ 75.491653][ T2507] CPU: 0 UID: 0 PID: 2507 Comm: syz.1.742 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 75.491689][ T2507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.491703][ T2507] Call Trace: [ 75.491711][ T2507] [ 75.491722][ T2507] __dump_stack+0x21/0x30 [ 75.491752][ T2507] dump_stack_lvl+0x10c/0x190 [ 75.491774][ T2507] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.491796][ T2507] ? avc_has_perm_noaudit+0x286/0x360 [ 75.491812][ T2507] dump_stack+0x19/0x20 [ 75.491828][ T2507] should_fail_ex+0x3d9/0x530 [ 75.491845][ T2507] should_failslab+0xac/0x100 [ 75.491866][ T2507] kmem_cache_alloc_lru_noprof+0x45/0x3a0 [ 75.491884][ T2507] ? __d_alloc+0x42/0x8e0 [ 75.491901][ T2507] __d_alloc+0x42/0x8e0 [ 75.491916][ T2507] ? bpf_lsm_inode_permission+0xd/0x20 [ 75.491931][ T2507] ? security_inode_permission+0x6d/0x120 [ 75.491964][ T2507] d_alloc+0x4c/0x1c0 [ 75.491980][ T2507] vfs_tmpfile+0x172/0x590 [ 75.492002][ T2507] ? init_file+0x14e/0x210 [ 75.492026][ T2507] backing_tmpfile_open+0xbd/0x100 [ 75.492049][ T2507] ovl_tmpfile+0x4dc/0x810 [ 75.492062][ T2507] ? __kasan_check_write+0x18/0x20 [ 75.492080][ T2507] ? __cfi_ovl_tmpfile+0x10/0x10 [ 75.492093][ T2507] ? mode_strip_sgid+0x75/0x1d0 [ 75.492109][ T2507] vfs_tmpfile+0x387/0x590 [ 75.492132][ T2507] do_tmpfile+0xdf/0x280 [ 75.492150][ T2507] path_openat+0x2d87/0x34b0 [ 75.492172][ T2507] ? _parse_integer+0x2e/0x40 [ 75.492187][ T2507] ? kasan_save_track+0x4f/0x80 [ 75.492210][ T2507] ? kasan_save_alloc_info+0x40/0x50 [ 75.492225][ T2507] ? __kasan_slab_alloc+0x73/0x90 [ 75.492245][ T2507] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 75.492261][ T2507] ? getname_flags+0xc6/0x710 [ 75.492279][ T2507] ? do_sys_openat2+0xcb/0x1c0 [ 75.492292][ T2507] ? __x64_sys_openat+0x13a/0x170 [ 75.492306][ T2507] ? x64_sys_call+0xe69/0x2ee0 [ 75.492325][ T2507] ? do_syscall_64+0x58/0xf0 [ 75.492346][ T2507] ? do_filp_open+0x3e0/0x3e0 [ 75.492369][ T2507] do_filp_open+0x1c6/0x3e0 [ 75.492398][ T2507] ? __cfi_do_filp_open+0x10/0x10 [ 75.492423][ T2507] ? alloc_fd+0x4e7/0x5a0 [ 75.492443][ T2507] do_sys_openat2+0x12c/0x1c0 [ 75.492457][ T2507] ? fput+0x1a5/0x240 [ 75.492478][ T2507] ? do_sys_open+0x100/0x100 [ 75.492491][ T2507] ? ksys_write+0x1ef/0x250 [ 75.492509][ T2507] ? __cfi_ksys_write+0x10/0x10 [ 75.492525][ T2507] ? __se_sys_chdir+0x1ba/0x290 [ 75.492547][ T2507] __x64_sys_openat+0x13a/0x170 [ 75.492562][ T2507] x64_sys_call+0xe69/0x2ee0 [ 75.492581][ T2507] do_syscall_64+0x58/0xf0 [ 75.492600][ T2507] ? clear_bhb_loop+0x35/0x90 [ 75.492623][ T2507] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.492645][ T2507] RIP: 0033:0x7ff35318e929 [ 75.492658][ T2507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.492671][ T2507] RSP: 002b:00007ff353ff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 75.492688][ T2507] RAX: ffffffffffffffda RBX: 00007ff3533b5fa0 RCX: 00007ff35318e929 [ 75.492700][ T2507] RDX: 0000000000478103 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 75.492711][ T2507] RBP: 00007ff353ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 75.492721][ T2507] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 75.492731][ T2507] R13: 0000000000000000 R14: 00007ff3533b5fa0 R15: 00007ffeb29a7f18 [ 75.492743][ T2507] [ 75.817798][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 75.883443][ T451] usb 5-1: USB disconnect, device number 3 [ 75.889657][ T451] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 75.901907][ T10] lenovo 0003:17EF:60B5.0007: hidraw0: USB HID vff.ff Device [HID 17ef:60b5] on usb-dummy_hcd.3-1/input0 [ 75.961649][ T2518] 9pnet_fd: Insufficient options for proto=fd [ 75.967894][ T31] usb 1-1: device descriptor read/64, error -71 [ 76.030348][ T2530] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 76.039131][ T2530] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 76.095737][ T1639] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 76.116002][ T2460] fuse: Bad value for 'rootmode' [ 76.122474][ T2460] fuse: Unknown parameter 'Sotmode' [ 76.129003][ T2460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.137498][ T2460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.224048][ T31] usb 1-1: device descriptor read/64, error -71 [ 76.256436][ T1639] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 76.272316][ T1639] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 76.281569][ T1639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 76.290240][ T1639] usb 2-1: Product: syz [ 76.294624][ T1639] usb 2-1: Manufacturer: syz [ 76.299502][ T1639] usb 2-1: SerialNumber: syz [ 76.305095][ T1639] usb 2-1: config 0 descriptor?? [ 76.323030][ T2536] SELinux: policydb string length 14080 does not match expected length 8 [ 76.331650][ T2536] SELinux: failed to load policy [ 76.491317][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 76.630290][ T31] usb 1-1: device descriptor read/64, error -71 [ 76.681842][ T306] usb 4-1: USB disconnect, device number 17 [ 76.712756][ T2549] netlink: 324 bytes leftover after parsing attributes in process `syz.3.752'. [ 76.886823][ T31] usb 1-1: device descriptor read/64, error -71 [ 77.004588][ T31] usb usb1-port1: attempt power cycle [ 77.367902][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 77.390286][ T31] usb 1-1: device descriptor read/8, error -71 [ 77.529334][ T31] usb 1-1: device descriptor read/8, error -71 [ 77.787142][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 77.787160][ T36] audit: type=1400 audit(1750464033.329:418): avc: denied { bind } for pid=2568 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.795610][ T31] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 77.828735][ T2571] FAULT_INJECTION: forcing a failure. [ 77.828735][ T2571] name failslab, interval 1, probability 0, space 0, times 0 [ 77.841461][ T2571] CPU: 1 UID: 0 PID: 2571 Comm: syz.3.760 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 77.841486][ T2571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.841497][ T2571] Call Trace: [ 77.841502][ T2571] [ 77.841508][ T2571] __dump_stack+0x21/0x30 [ 77.841530][ T2571] dump_stack_lvl+0x10c/0x190 [ 77.841550][ T2571] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.841570][ T2571] dump_stack+0x19/0x20 [ 77.841586][ T2571] should_fail_ex+0x3d9/0x530 [ 77.841604][ T2571] should_failslab+0xac/0x100 [ 77.841625][ T2571] kmem_cache_alloc_noprof+0x42/0x3a0 [ 77.841642][ T2571] ? security_inode_alloc+0x51/0x200 [ 77.841660][ T2571] ? __cfi_make_kgid+0x10/0x10 [ 77.841678][ T2571] security_inode_alloc+0x51/0x200 [ 77.841695][ T2571] inode_init_always_gfp+0x756/0x9e0 [ 77.841716][ T2571] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 77.841739][ T2571] alloc_inode+0xc5/0x270 [ 77.841759][ T2571] ? __cfi__raw_spin_lock+0x10/0x10 [ 77.841781][ T2571] new_inode+0x25/0x1e0 [ 77.841801][ T2571] ? __kasan_check_write+0x18/0x20 [ 77.841818][ T2571] shmem_get_inode+0x324/0xbe0 [ 77.841842][ T2571] shmem_tmpfile+0x5f/0x150 [ 77.841857][ T2571] vfs_tmpfile+0x387/0x590 [ 77.841880][ T2571] backing_tmpfile_open+0xbd/0x100 [ 77.841904][ T2571] ovl_tmpfile+0x4dc/0x810 [ 77.841919][ T2571] ? __kasan_check_write+0x18/0x20 [ 77.841944][ T2571] ? __cfi_ovl_tmpfile+0x10/0x10 [ 77.841963][ T2571] ? mode_strip_sgid+0x75/0x1d0 [ 77.841985][ T2571] vfs_tmpfile+0x387/0x590 [ 77.842014][ T2571] do_tmpfile+0xdf/0x280 [ 77.842032][ T2571] path_openat+0x2d87/0x34b0 [ 77.842055][ T2571] ? _parse_integer+0x2e/0x40 [ 77.842070][ T2571] ? kasan_save_track+0x4f/0x80 [ 77.842089][ T2571] ? kasan_save_alloc_info+0x40/0x50 [ 77.842103][ T2571] ? __kasan_slab_alloc+0x73/0x90 [ 77.842123][ T2571] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 77.842140][ T2571] ? getname_flags+0xc6/0x710 [ 77.842158][ T2571] ? do_sys_openat2+0xcb/0x1c0 [ 77.842172][ T2571] ? __x64_sys_openat+0x13a/0x170 [ 77.842185][ T2571] ? x64_sys_call+0xe69/0x2ee0 [ 77.842216][ T2571] ? do_syscall_64+0x58/0xf0 [ 77.842237][ T2571] ? do_filp_open+0x3e0/0x3e0 [ 77.842261][ T2571] do_filp_open+0x1c6/0x3e0 [ 77.842282][ T2571] ? __cfi_do_filp_open+0x10/0x10 [ 77.842307][ T2571] ? alloc_fd+0x4e7/0x5a0 [ 77.842327][ T2571] do_sys_openat2+0x12c/0x1c0 [ 77.842340][ T2571] ? fput+0x1a5/0x240 [ 77.842362][ T2571] ? do_sys_open+0x100/0x100 [ 77.842375][ T2571] ? ksys_write+0x1ef/0x250 [ 77.842392][ T2571] ? __cfi_ksys_write+0x10/0x10 [ 77.842409][ T2571] ? __se_sys_chdir+0x1ba/0x290 [ 77.842431][ T2571] __x64_sys_openat+0x13a/0x170 [ 77.842446][ T2571] x64_sys_call+0xe69/0x2ee0 [ 77.842465][ T2571] do_syscall_64+0x58/0xf0 [ 77.842484][ T2571] ? clear_bhb_loop+0x35/0x90 [ 77.842507][ T2571] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.842530][ T2571] RIP: 0033:0x7f5fd578e929 [ 77.842543][ T2571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.842556][ T2571] RSP: 002b:00007f5fd6620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 77.842573][ T2571] RAX: ffffffffffffffda RBX: 00007f5fd59b5fa0 RCX: 00007f5fd578e929 [ 77.842585][ T2571] RDX: 0000000000478103 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 77.842595][ T2571] RBP: 00007f5fd6620090 R08: 0000000000000000 R09: 0000000000000000 [ 77.842605][ T2571] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 77.842615][ T2571] R13: 0000000000000000 R14: 00007f5fd59b5fa0 R15: 00007ffe898ddd88 [ 77.842627][ T2571] [ 77.843624][ T31] usb 1-1: device descriptor read/8, error -71 [ 78.299216][ T2578] netlink: 324 bytes leftover after parsing attributes in process `syz.3.762'. [ 78.341842][ T31] usb 1-1: device descriptor read/8, error -71 [ 78.458457][ T31] usb usb1-port1: unable to enumerate USB device [ 78.597409][ T356] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 78.700556][ T36] audit: type=1400 audit(1750464034.171:419): avc: denied { nlmsg_tty_audit } for pid=2586 comm="syz.0.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 78.735053][ T36] audit: type=1400 audit(1750464034.209:420): avc: denied { relabelfrom } for pid=2591 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.755109][ T36] audit: type=1400 audit(1750464034.209:421): avc: denied { relabelto } for pid=2591 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.791551][ T356] usb 4-1: config 1 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.804718][ T356] usb 4-1: config 1 interface 0 has no altsetting 0 [ 78.813025][ T356] usb 4-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.40 [ 78.822222][ T356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.830326][ T356] usb 4-1: Product: 绽韢帽輤ൃ偦綿㬵Ƥྸꟿ㡵턎혝폶願꾖ﲼ忦癯⦎䜭ߠ鯨܃衚 [ 78.847521][ T356] usb 4-1: Manufacturer: 㸺࿖俪ᇂ톾᭕싐랤謂험탭猯串צ麏뾖桗串썮ຼᧅ鼊鳹縪仰퍫鄼ᧈ껧韆툣讣ࠅ൙ꚳ⻪緋誆廱ｴ₀唙缋靫搘襎촹箔缪᳉틓䁅䛘ሽꓮ癊丏慂࿗ຒ闓懔懃౨瘳࿁署ጥ鐚緂陦䮢痧幕㻨ꪏƑ≬⚶ʟ廖沗뫽ဌ뮢㫧랽⎴쪈﫤垕෴떸繎䆆樵䠶ƃ㦀 [ 78.880919][ T356] usb 4-1: SerialNumber: syz [ 78.908033][ T2599] FAULT_INJECTION: forcing a failure. [ 78.908033][ T2599] name failslab, interval 1, probability 0, space 0, times 0 [ 78.920817][ T2599] CPU: 0 UID: 0 PID: 2599 Comm: syz.0.769 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 78.920865][ T2599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.920880][ T2599] Call Trace: [ 78.920892][ T2599] [ 78.920901][ T2599] __dump_stack+0x21/0x30 [ 78.920930][ T2599] dump_stack_lvl+0x10c/0x190 [ 78.920953][ T2599] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.920976][ T2599] ? __kasan_slab_alloc+0x73/0x90 [ 78.920997][ T2599] dump_stack+0x19/0x20 [ 78.921018][ T2599] should_fail_ex+0x3d9/0x530 [ 78.921044][ T2599] should_failslab+0xac/0x100 [ 78.921070][ T2599] ? __cfi_shmem_initxattrs+0x10/0x10 [ 78.921094][ T2599] __kmalloc_noprof+0x69/0x450 [ 78.921112][ T2599] ? security_inode_init_security+0x120/0x560 [ 78.921131][ T2599] ? __cfi_shmem_initxattrs+0x10/0x10 [ 78.921146][ T2599] security_inode_init_security+0x120/0x560 [ 78.921172][ T2599] ? __cfi_shmem_initxattrs+0x10/0x10 [ 78.921195][ T2599] ? __cfi_security_inode_init_security+0x10/0x10 [ 78.921222][ T2599] shmem_tmpfile+0x9a/0x150 [ 78.921244][ T2599] vfs_tmpfile+0x387/0x590 [ 78.921268][ T2599] backing_tmpfile_open+0xbd/0x100 [ 78.921291][ T2599] ovl_tmpfile+0x4dc/0x810 [ 78.921305][ T2599] ? __kasan_check_write+0x18/0x20 [ 78.921332][ T2599] ? __cfi_ovl_tmpfile+0x10/0x10 [ 78.921351][ T2599] ? mode_strip_sgid+0x75/0x1d0 [ 78.921372][ T2599] vfs_tmpfile+0x387/0x590 [ 78.921401][ T2599] do_tmpfile+0xdf/0x280 [ 78.921419][ T2599] path_openat+0x2d87/0x34b0 [ 78.921442][ T2599] ? _parse_integer+0x2e/0x40 [ 78.921461][ T2599] ? kasan_save_track+0x4f/0x80 [ 78.921488][ T2599] ? kasan_save_alloc_info+0x40/0x50 [ 78.921508][ T2599] ? __kasan_slab_alloc+0x73/0x90 [ 78.921536][ T2599] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 78.921554][ T2599] ? getname_flags+0xc6/0x710 [ 78.921572][ T2599] ? do_sys_openat2+0xcb/0x1c0 [ 78.921586][ T2599] ? __x64_sys_openat+0x13a/0x170 [ 78.921601][ T2599] ? x64_sys_call+0xe69/0x2ee0 [ 78.921630][ T2599] ? do_syscall_64+0x58/0xf0 [ 78.921657][ T2599] ? do_filp_open+0x3e0/0x3e0 [ 78.921689][ T2599] do_filp_open+0x1c6/0x3e0 [ 78.921711][ T2599] ? __cfi_do_filp_open+0x10/0x10 [ 78.921736][ T2599] ? alloc_fd+0x4e7/0x5a0 [ 78.921764][ T2599] do_sys_openat2+0x12c/0x1c0 [ 78.921783][ T2599] ? fput+0x1a5/0x240 [ 78.921812][ T2599] ? do_sys_open+0x100/0x100 [ 78.921837][ T2599] ? ksys_write+0x1ef/0x250 [ 78.921855][ T2599] ? __cfi_ksys_write+0x10/0x10 [ 78.921873][ T2599] __x64_sys_openat+0x13a/0x170 [ 78.921888][ T2599] x64_sys_call+0xe69/0x2ee0 [ 78.921917][ T2599] do_syscall_64+0x58/0xf0 [ 78.921942][ T2599] ? clear_bhb_loop+0x35/0x90 [ 78.921972][ T2599] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.921995][ T2599] RIP: 0033:0x7fadad38e929 [ 78.922009][ T2599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.922028][ T2599] RSP: 002b:00007fadae145038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 78.922051][ T2599] RAX: ffffffffffffffda RBX: 00007fadad5b5fa0 RCX: 00007fadad38e929 [ 78.922067][ T2599] RDX: 0000000000478103 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 78.922082][ T2599] RBP: 00007fadae145090 R08: 0000000000000000 R09: 0000000000000000 [ 78.922095][ T2599] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 78.922108][ T2599] R13: 0000000000000000 R14: 00007fadad5b5fa0 R15: 00007ffedad73578 [ 78.922126][ T2599] [ 79.277122][ T356] usbhid 4-1:1.0: can't add hid device: -71 [ 79.280025][ T1639] usb 2-1: bad CDC descriptors [ 79.283180][ T356] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 79.290171][ T1639] usb 2-1: USB disconnect, device number 18 [ 79.296937][ T356] usb 4-1: USB disconnect, device number 18 [ 79.332053][ T2603] rust_binder: Error while translating object. [ 79.332107][ T2603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 79.338430][ T2603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:552 [ 79.366377][ T2606] netlink: 324 bytes leftover after parsing attributes in process `syz.1.772'. [ 79.401162][ T2608] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 79.416526][ T2608] syzkaller0: entered allmulticast mode [ 79.562334][ T2620] FAULT_INJECTION: forcing a failure. [ 79.562334][ T2620] name failslab, interval 1, probability 0, space 0, times 0 [ 79.575144][ T2620] CPU: 0 UID: 0 PID: 2620 Comm: syz.1.778 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 79.575178][ T2620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.575190][ T2620] Call Trace: [ 79.575195][ T2620] [ 79.575201][ T2620] __dump_stack+0x21/0x30 [ 79.575224][ T2620] dump_stack_lvl+0x10c/0x190 [ 79.575242][ T2620] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.575261][ T2620] dump_stack+0x19/0x20 [ 79.575277][ T2620] should_fail_ex+0x3d9/0x530 [ 79.575294][ T2620] should_failslab+0xac/0x100 [ 79.575315][ T2620] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 79.575334][ T2620] ? vfs_tmpfile+0x387/0x590 [ 79.575356][ T2620] ? sidtab_sid2str_get+0x139/0x370 [ 79.575376][ T2620] ? do_filp_open+0x1c6/0x3e0 [ 79.575399][ T2620] kmemdup_noprof+0x31/0x80 [ 79.575416][ T2620] sidtab_sid2str_get+0x139/0x370 [ 79.575436][ T2620] security_sid_to_context_core+0x30d/0x5d0 [ 79.575456][ T2620] security_sid_to_context_force+0x31/0x40 [ 79.575474][ T2620] selinux_inode_init_security+0x602/0x930 [ 79.575495][ T2620] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 79.575515][ T2620] ? shmem_tmpfile+0x130/0x150 [ 79.575531][ T2620] security_inode_init_security+0x1b4/0x560 [ 79.575550][ T2620] ? __cfi_shmem_initxattrs+0x10/0x10 [ 79.575566][ T2620] ? __cfi_security_inode_init_security+0x10/0x10 [ 79.575585][ T2620] shmem_tmpfile+0x9a/0x150 [ 79.575600][ T2620] vfs_tmpfile+0x387/0x590 [ 79.575623][ T2620] backing_tmpfile_open+0xbd/0x100 [ 79.575646][ T2620] ovl_tmpfile+0x4dc/0x810 [ 79.575659][ T2620] ? __kasan_check_write+0x18/0x20 [ 79.575676][ T2620] ? __cfi_ovl_tmpfile+0x10/0x10 [ 79.575690][ T2620] ? mode_strip_sgid+0x75/0x1d0 [ 79.575706][ T2620] vfs_tmpfile+0x387/0x590 [ 79.575728][ T2620] do_tmpfile+0xdf/0x280 [ 79.575746][ T2620] path_openat+0x2d87/0x34b0 [ 79.575769][ T2620] ? _parse_integer+0x2e/0x40 [ 79.575784][ T2620] ? kasan_save_track+0x4f/0x80 [ 79.575803][ T2620] ? kasan_save_alloc_info+0x40/0x50 [ 79.575825][ T2620] ? __kasan_slab_alloc+0x73/0x90 [ 79.575844][ T2620] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 79.575861][ T2620] ? getname_flags+0xc6/0x710 [ 79.575885][ T2620] ? do_sys_openat2+0xcb/0x1c0 [ 79.575904][ T2620] ? __x64_sys_openat+0x13a/0x170 [ 79.575918][ T2620] ? x64_sys_call+0xe69/0x2ee0 [ 79.575937][ T2620] ? do_syscall_64+0x58/0xf0 [ 79.575958][ T2620] ? do_filp_open+0x3e0/0x3e0 [ 79.575981][ T2620] do_filp_open+0x1c6/0x3e0 [ 79.576003][ T2620] ? __cfi_do_filp_open+0x10/0x10 [ 79.576028][ T2620] ? alloc_fd+0x4e7/0x5a0 [ 79.576048][ T2620] do_sys_openat2+0x12c/0x1c0 [ 79.576063][ T2620] ? fput+0x1a5/0x240 [ 79.576085][ T2620] ? do_sys_open+0x100/0x100 [ 79.576098][ T2620] ? ksys_write+0x1ef/0x250 [ 79.576115][ T2620] ? __cfi_ksys_write+0x10/0x10 [ 79.576132][ T2620] ? __se_sys_chdir+0x1ba/0x290 [ 79.576153][ T2620] __x64_sys_openat+0x13a/0x170 [ 79.576168][ T2620] x64_sys_call+0xe69/0x2ee0 [ 79.576187][ T2620] do_syscall_64+0x58/0xf0 [ 79.576206][ T2620] ? clear_bhb_loop+0x35/0x90 [ 79.576229][ T2620] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.576252][ T2620] RIP: 0033:0x7ff35318e929 [ 79.576265][ T2620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.576278][ T2620] RSP: 002b:00007ff353ff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.576295][ T2620] RAX: ffffffffffffffda RBX: 00007ff3533b5fa0 RCX: 00007ff35318e929 [ 79.576307][ T2620] RDX: 0000000000478103 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 79.576318][ T2620] RBP: 00007ff353ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 79.576328][ T2620] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 79.576337][ T2620] R13: 0000000000000000 R14: 00007ff3533b5fa0 R15: 00007ffeb29a7f18 [ 79.576349][ T2620] [ 79.655212][ T2624] netlink: 324 bytes leftover after parsing attributes in process `syz.4.781'. [ 79.944337][ T356] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 80.000136][ T2632] fuse: Bad value for 'fd' [ 80.017898][ T2629] SELinux: security_context_str_to_sid () failed with errno=-22 [ 80.168836][ T356] usb 4-1: Using ep0 maxpacket: 8 [ 80.184876][ T356] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 80.198039][ T356] usb 4-1: config 179 has no interface number 0 [ 80.204884][ T356] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 80.218389][ T356] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 80.229903][ T356] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.241288][ T356] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 80.252934][ T356] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 80.266415][ T356] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 80.275659][ T356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.285966][ T2626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.332988][ T2656] FAULT_INJECTION: forcing a failure. [ 80.332988][ T2656] name failslab, interval 1, probability 0, space 0, times 0 [ 80.345779][ T2656] CPU: 0 UID: 0 PID: 2656 Comm: syz.1.794 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 80.345811][ T2656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.345824][ T2656] Call Trace: [ 80.345836][ T2656] [ 80.345844][ T2656] __dump_stack+0x21/0x30 [ 80.345874][ T2656] dump_stack_lvl+0x10c/0x190 [ 80.345898][ T2656] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.345925][ T2656] ? __kasan_slab_alloc+0x73/0x90 [ 80.345954][ T2656] dump_stack+0x19/0x20 [ 80.345976][ T2656] should_fail_ex+0x3d9/0x530 [ 80.346009][ T2656] should_failslab+0xac/0x100 [ 80.346037][ T2656] ? __cfi_shmem_initxattrs+0x10/0x10 [ 80.346059][ T2656] __kmalloc_noprof+0x69/0x450 [ 80.346085][ T2656] ? security_inode_init_security+0x120/0x560 [ 80.346111][ T2656] ? __cfi_shmem_initxattrs+0x10/0x10 [ 80.346133][ T2656] security_inode_init_security+0x120/0x560 [ 80.346158][ T2656] ? __cfi_shmem_initxattrs+0x10/0x10 [ 80.346180][ T2656] ? __cfi_security_inode_init_security+0x10/0x10 [ 80.346207][ T2656] shmem_tmpfile+0x9a/0x150 [ 80.346228][ T2656] vfs_tmpfile+0x387/0x590 [ 80.346260][ T2656] backing_tmpfile_open+0xbd/0x100 [ 80.346291][ T2656] ovl_tmpfile+0x4dc/0x810 [ 80.346308][ T2656] ? __kasan_check_write+0x18/0x20 [ 80.346332][ T2656] ? __cfi_ovl_tmpfile+0x10/0x10 [ 80.346350][ T2656] ? mode_strip_sgid+0x75/0x1d0 [ 80.346372][ T2656] vfs_tmpfile+0x387/0x590 [ 80.346403][ T2656] do_tmpfile+0xdf/0x280 [ 80.346428][ T2656] path_openat+0x2d87/0x34b0 [ 80.346459][ T2656] ? kasan_save_track+0x4f/0x80 [ 80.346484][ T2656] ? kasan_save_alloc_info+0x40/0x50 [ 80.346503][ T2656] ? __kasan_slab_alloc+0x73/0x90 [ 80.346530][ T2656] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 80.346553][ T2656] ? getname_flags+0xc6/0x710 [ 80.346579][ T2656] ? do_sys_openat2+0xcb/0x1c0 [ 80.346597][ T2656] ? __x64_sys_openat+0x13a/0x170 [ 80.346617][ T2656] ? x64_sys_call+0xe69/0x2ee0 [ 80.346643][ T2656] ? do_syscall_64+0x58/0xf0 [ 80.346671][ T2656] ? do_filp_open+0x3e0/0x3e0 [ 80.346704][ T2656] do_filp_open+0x1c6/0x3e0 [ 80.346735][ T2656] ? __cfi_do_filp_open+0x10/0x10 [ 80.346769][ T2656] ? alloc_fd+0x4e7/0x5a0 [ 80.346796][ T2656] do_sys_openat2+0x12c/0x1c0 [ 80.346816][ T2656] ? fput+0x1a5/0x240 [ 80.346846][ T2656] ? do_sys_open+0x100/0x100 [ 80.346864][ T2656] ? ksys_write+0x1ef/0x250 [ 80.346889][ T2656] ? __cfi_ksys_write+0x10/0x10 [ 80.346912][ T2656] ? __se_sys_chdir+0x1ba/0x290 [ 80.346941][ T2656] __x64_sys_openat+0x13a/0x170 [ 80.346961][ T2656] x64_sys_call+0xe69/0x2ee0 [ 80.346987][ T2656] do_syscall_64+0x58/0xf0 [ 80.347022][ T2656] ? clear_bhb_loop+0x35/0x90 [ 80.347055][ T2656] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.347086][ T2656] RIP: 0033:0x7ff35318e929 [ 80.347103][ T2656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.347122][ T2656] RSP: 002b:00007ff353ff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 80.347144][ T2656] RAX: ffffffffffffffda RBX: 00007ff3533b5fa0 RCX: 00007ff35318e929 [ 80.347159][ T2656] RDX: 0000000000478103 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 80.347173][ T2656] RBP: 00007ff353ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 80.347183][ T2656] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 80.347193][ T2656] R13: 0000000000000000 R14: 00007ff3533b5fa0 R15: 00007ffeb29a7f18 [ 80.347206][ T2656] [ 80.688706][ T31] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 80.853020][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 80.859348][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.870449][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.883432][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.892647][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.910581][ T31] usb 1-1: config 0 descriptor?? [ 80.917716][ T2626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.927203][ T2626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.117672][ T1639] usb 4-1: USB disconnect, device number 19 [ 81.117800][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 81.132141][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 81.502444][ T2677] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 81.511254][ T2677] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 81.520442][ T2677] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 81.579643][ T2684] netlink: 324 bytes leftover after parsing attributes in process `syz.3.805'. [ 81.654505][ T2692] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 81.654533][ T2692] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 81.662619][ T2692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:129 [ 81.708026][ T2697] FAULT_INJECTION: forcing a failure. [ 81.708026][ T2697] name failslab, interval 1, probability 0, space 0, times 0 [ 81.731126][ T2697] CPU: 0 UID: 0 PID: 2697 Comm: syz.4.811 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 81.731162][ T2697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.731175][ T2697] Call Trace: [ 81.731182][ T2697] [ 81.731191][ T2697] __dump_stack+0x21/0x30 [ 81.731220][ T2697] dump_stack_lvl+0x10c/0x190 [ 81.731245][ T2697] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.731271][ T2697] ? stack_depot_save_flags+0x38/0x800 [ 81.731295][ T2697] dump_stack+0x19/0x20 [ 81.731317][ T2697] should_fail_ex+0x3d9/0x530 [ 81.731340][ T2697] should_failslab+0xac/0x100 [ 81.731370][ T2697] kmem_cache_alloc_lru_noprof+0x45/0x3a0 [ 81.731397][ T2697] ? alloc_inode+0xa9/0x270 [ 81.731426][ T2697] ? avc_has_perm_noaudit+0x286/0x360 [ 81.731471][ T2697] alloc_inode+0xa9/0x270 [ 81.731501][ T2697] new_inode_pseudo+0x19/0x40 [ 81.731532][ T2697] path_from_stashed+0x207/0x870 [ 81.731553][ T2697] ? _raw_spin_lock+0x8c/0x120 [ 81.731593][ T2697] ? __cfi__raw_spin_lock+0x10/0x10 [ 81.731619][ T2697] ? __kasan_check_write+0x18/0x20 [ 81.731643][ T2697] ? __cfi_path_from_stashed+0x10/0x10 [ 81.731666][ T2697] ? _raw_spin_unlock+0x45/0x60 [ 81.731692][ T2697] ns_get_path+0x7a/0xa0 [ 81.731717][ T2697] proc_ns_get_link+0xf7/0x210 [ 81.731746][ T2697] ? __cfi_proc_ns_get_link+0x10/0x10 [ 81.731775][ T2697] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 81.731803][ T2697] ? bpf_lsm_inode_follow_link+0xd/0x20 [ 81.731823][ T2697] ? security_inode_follow_link+0x74/0x140 [ 81.731847][ T2697] ? __cfi_proc_ns_get_link+0x10/0x10 [ 81.731877][ T2697] pick_link+0x671/0xe80 [ 81.731900][ T2697] step_into+0xc58/0xf50 [ 81.731922][ T2697] ? __d_add+0x639/0xaa0 [ 81.731948][ T2697] ? set_root+0x420/0x420 [ 81.731969][ T2697] ? __kasan_check_write+0x18/0x20 [ 81.731991][ T2697] path_openat+0x19dd/0x34b0 [ 81.732026][ T2697] ? do_filp_open+0x3e0/0x3e0 [ 81.732058][ T2697] do_filp_open+0x1c6/0x3e0 [ 81.732089][ T2697] ? __cfi_do_filp_open+0x10/0x10 [ 81.732124][ T2697] ? alloc_fd+0x4e7/0x5a0 [ 81.732150][ T2697] do_sys_openat2+0x12c/0x1c0 [ 81.732168][ T2697] ? fput+0x1a5/0x240 [ 81.732197][ T2697] ? do_sys_open+0x100/0x100 [ 81.732215][ T2697] ? ksys_write+0x1ef/0x250 [ 81.732240][ T2697] ? __cfi_ksys_write+0x10/0x10 [ 81.732266][ T2697] __x64_sys_openat+0x13a/0x170 [ 81.732287][ T2697] x64_sys_call+0xe69/0x2ee0 [ 81.732315][ T2697] do_syscall_64+0x58/0xf0 [ 81.732342][ T2697] ? clear_bhb_loop+0x35/0x90 [ 81.732374][ T2697] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.732404][ T2697] RIP: 0033:0x7f2033b8d290 [ 81.732421][ T2697] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 81.732440][ T2697] RSP: 002b:00007f2034ad5f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 81.732463][ T2697] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2033b8d290 [ 81.732478][ T2697] RDX: 0000000000000000 RSI: 00007f2033c10c51 RDI: 00000000ffffff9c [ 81.732492][ T2697] RBP: 00007f2033c10c51 R08: 0000000000000000 R09: 0000000000000000 [ 81.732506][ T2697] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 81.732519][ T2697] R13: 0000000000000000 R14: 00007f2033db5fa0 R15: 00007ffe02de5ad8 [ 81.732535][ T2697] [ 81.761459][ T2702] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 81.796471][ T36] audit: type=1400 audit(1750464037.071:422): avc: denied { ioctl } for pid=2703 comm="syz.3.814" path="socket:[25167]" dev="sockfs" ino=25167 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.906550][ T2707] netlink: 324 bytes leftover after parsing attributes in process `syz.4.815'. [ 81.909273][ T36] audit: type=1326 audit(1750464037.090:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2703 comm="syz.3.814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fd578e929 code=0x0 [ 82.735473][ T36] audit: type=1400 audit(1750464037.960:424): avc: denied { audit_write } for pid=2730 comm="syz.3.823" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.760949][ T2731] overlayfs: failed to resolve './file0': -2 [ 82.867348][ T2739] FAULT_INJECTION: forcing a failure. [ 82.867348][ T2739] name failslab, interval 1, probability 0, space 0, times 0 [ 82.880083][ T2739] CPU: 1 UID: 0 PID: 2739 Comm: syz.3.826 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 82.880120][ T2739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.880131][ T2739] Call Trace: [ 82.880137][ T2739] [ 82.880143][ T2739] __dump_stack+0x21/0x30 [ 82.880169][ T2739] dump_stack_lvl+0x10c/0x190 [ 82.880191][ T2739] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.880218][ T2739] dump_stack+0x19/0x20 [ 82.880241][ T2739] should_fail_ex+0x3d9/0x530 [ 82.880261][ T2739] should_failslab+0xac/0x100 [ 82.880282][ T2739] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 82.880302][ T2739] ? sidtab_sid2str_get+0x139/0x370 [ 82.880322][ T2739] ? avc_has_perm_noaudit+0x268/0x360 [ 82.880338][ T2739] kmemdup_noprof+0x31/0x80 [ 82.880355][ T2739] sidtab_sid2str_get+0x139/0x370 [ 82.880376][ T2739] security_sid_to_context_core+0x30d/0x5d0 [ 82.880395][ T2739] security_sid_to_context_force+0x31/0x40 [ 82.880416][ T2739] selinux_inode_getsecurity+0x3bb/0x460 [ 82.880446][ T2739] ? __cfi_selinux_inode_getsecurity+0x10/0x10 [ 82.880476][ T2739] ? cap_inode_getsecurity+0xae/0x970 [ 82.880505][ T2739] ? __cfi_selinux_inode_getxattr+0x10/0x10 [ 82.880525][ T2739] ? kasan_save_alloc_info+0x40/0x50 [ 82.880540][ T2739] ? __kasan_kmalloc+0x96/0xb0 [ 82.880559][ T2739] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 82.880577][ T2739] ? xattr_permission+0x47/0x450 [ 82.880593][ T2739] security_inode_getsecurity+0xfc/0x160 [ 82.880614][ T2739] vfs_getxattr+0x1a8/0x290 [ 82.880630][ T2739] ? __cfi_vfs_getxattr+0x10/0x10 [ 82.880645][ T2739] ? __kasan_check_write+0x18/0x20 [ 82.880662][ T2739] ovl_other_xattr_get+0x101/0x150 [ 82.880682][ T2739] ? __cfi_ovl_other_xattr_get+0x10/0x10 [ 82.880701][ T2739] ? __cfi_ovl_other_xattr_get+0x10/0x10 [ 82.880719][ T2739] __vfs_getxattr+0x41e/0x450 [ 82.880736][ T2739] inode_doinit_use_xattr+0xb6/0x550 [ 82.880759][ T2739] inode_doinit_with_dentry+0x76a/0xdd0 [ 82.880777][ T2739] ? sb_finish_set_opts+0xa00/0xa00 [ 82.880793][ T2739] ? __cfi_sprintf+0x10/0x10 [ 82.880811][ T2739] ? _raw_spin_lock+0x8c/0x120 [ 82.880831][ T2739] ? __cfi_ovl_get_inode+0x10/0x10 [ 82.880852][ T2739] selinux_d_instantiate+0x2b/0x40 [ 82.880867][ T2739] security_d_instantiate+0xb5/0xf0 [ 82.880883][ T2739] d_instantiate+0x59/0xb0 [ 82.880900][ T2739] ovl_instantiate+0x1b5/0x2a0 [ 82.880913][ T2739] ? ovl_create_or_link+0x14b0/0x14b0 [ 82.880926][ T2739] ? lockref_get+0x127/0x1b0 [ 82.880951][ T2739] ? __cfi_lockref_get+0x10/0x10 [ 82.880980][ T2739] ? backing_tmpfile_open+0xe3/0x100 [ 82.881010][ T2739] ovl_tmpfile+0x560/0x810 [ 82.881022][ T2739] ? __kasan_check_write+0x18/0x20 [ 82.881040][ T2739] ? __cfi_ovl_tmpfile+0x10/0x10 [ 82.881053][ T2739] ? mode_strip_sgid+0x75/0x1d0 [ 82.881069][ T2739] vfs_tmpfile+0x387/0x590 [ 82.881092][ T2739] do_tmpfile+0xdf/0x280 [ 82.881110][ T2739] path_openat+0x2d87/0x34b0 [ 82.881133][ T2739] ? kasan_save_track+0x4f/0x80 [ 82.881152][ T2739] ? kasan_save_alloc_info+0x40/0x50 [ 82.881166][ T2739] ? __kasan_slab_alloc+0x73/0x90 [ 82.881186][ T2739] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 82.881203][ T2739] ? getname_flags+0xc6/0x710 [ 82.881221][ T2739] ? do_sys_openat2+0xcb/0x1c0 [ 82.881234][ T2739] ? __x64_sys_openat+0x13a/0x170 [ 82.881248][ T2739] ? x64_sys_call+0xe69/0x2ee0 [ 82.881268][ T2739] ? do_syscall_64+0x58/0xf0 [ 82.881288][ T2739] ? do_filp_open+0x3e0/0x3e0 [ 82.881312][ T2739] do_filp_open+0x1c6/0x3e0 [ 82.881342][ T2739] ? __cfi_do_filp_open+0x10/0x10 [ 82.881373][ T2739] ? alloc_fd+0x4e7/0x5a0 [ 82.881394][ T2739] do_sys_openat2+0x12c/0x1c0 [ 82.881407][ T2739] ? fput+0x1a5/0x240 [ 82.881428][ T2739] ? do_sys_open+0x100/0x100 [ 82.881442][ T2739] ? ksys_write+0x1ef/0x250 [ 82.881459][ T2739] ? __cfi_ksys_write+0x10/0x10 [ 82.881476][ T2739] ? __se_sys_chdir+0x1ba/0x290 [ 82.881499][ T2739] __x64_sys_openat+0x13a/0x170 [ 82.881514][ T2739] x64_sys_call+0xe69/0x2ee0 [ 82.881533][ T2739] do_syscall_64+0x58/0xf0 [ 82.881553][ T2739] ? clear_bhb_loop+0x35/0x90 [ 82.881586][ T2739] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.881612][ T2739] RIP: 0033:0x7f5fd578e929 [ 82.881625][ T2739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.881638][ T2739] RSP: 002b:00007f5fd6620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.881655][ T2739] RAX: ffffffffffffffda RBX: 00007f5fd59b5fa0 RCX: 00007f5fd578e929 [ 82.881667][ T2739] RDX: 0000000000478103 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 82.881678][ T2739] RBP: 00007f5fd6620090 R08: 0000000000000000 R09: 0000000000000000 [ 82.881688][ T2739] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 82.881697][ T2739] R13: 0000000000000000 R14: 00007f5fd59b5fa0 R15: 00007ffe898ddd88 [ 82.881710][ T2739] [ 82.881738][ T2739] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=overlay ino=1481 [ 83.412075][ T2748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:715 [ 83.449120][ T31] usb 1-1: string descriptor 0 read error: -71 [ 83.474770][ T2749] rust_binder: Write failure EINVAL in pid:715 [ 83.475476][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 83.488580][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 83.500735][ T31] usb 1-1: USB disconnect, device number 24 [ 83.532039][ T2756] FAULT_INJECTION: forcing a failure. [ 83.532039][ T2756] name failslab, interval 1, probability 0, space 0, times 0 [ 83.544898][ T2756] CPU: 1 UID: 0 PID: 2756 Comm: syz.0.831 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 83.544932][ T2756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.544945][ T2756] Call Trace: [ 83.544952][ T2756] [ 83.544961][ T2756] __dump_stack+0x21/0x30 [ 83.544991][ T2756] dump_stack_lvl+0x10c/0x190 [ 83.545015][ T2756] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.545040][ T2756] dump_stack+0x19/0x20 [ 83.545062][ T2756] should_fail_ex+0x3d9/0x530 [ 83.545087][ T2756] should_failslab+0xac/0x100 [ 83.545115][ T2756] kmem_cache_alloc_lru_noprof+0x45/0x3a0 [ 83.545141][ T2756] ? __d_alloc+0x42/0x8e0 [ 83.545164][ T2756] __d_alloc+0x42/0x8e0 [ 83.545186][ T2756] ? alloc_inode+0xdb/0x270 [ 83.545216][ T2756] d_alloc_anon+0x1b/0x30 [ 83.545237][ T2756] path_from_stashed+0x3ca/0x870 [ 83.545260][ T2756] ? __cfi__raw_spin_lock+0x10/0x10 [ 83.545288][ T2756] ? __cfi_path_from_stashed+0x10/0x10 [ 83.545310][ T2756] ? _raw_spin_unlock+0x45/0x60 [ 83.545338][ T2756] ns_get_path+0x7a/0xa0 [ 83.545366][ T2756] proc_ns_get_link+0xf7/0x210 [ 83.545398][ T2756] ? __cfi_proc_ns_get_link+0x10/0x10 [ 83.545429][ T2756] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 83.545458][ T2756] ? bpf_lsm_inode_follow_link+0xd/0x20 [ 83.545478][ T2756] ? security_inode_follow_link+0x74/0x140 [ 83.545505][ T2756] ? __cfi_proc_ns_get_link+0x10/0x10 [ 83.545535][ T2756] pick_link+0x671/0xe80 [ 83.545560][ T2756] step_into+0xc58/0xf50 [ 83.545583][ T2756] ? __d_add+0x639/0xaa0 [ 83.545609][ T2756] ? set_root+0x420/0x420 [ 83.545632][ T2756] ? __kasan_check_write+0x18/0x20 [ 83.545656][ T2756] path_openat+0x19dd/0x34b0 [ 83.545691][ T2756] ? do_filp_open+0x3e0/0x3e0 [ 83.545724][ T2756] do_filp_open+0x1c6/0x3e0 [ 83.545753][ T2756] ? __cfi_do_filp_open+0x10/0x10 [ 83.545796][ T2756] ? alloc_fd+0x4e7/0x5a0 [ 83.545825][ T2756] do_sys_openat2+0x12c/0x1c0 [ 83.545848][ T2756] ? fput+0x1a5/0x240 [ 83.545878][ T2756] ? do_sys_open+0x100/0x100 [ 83.545897][ T2756] ? ksys_write+0x1ef/0x250 [ 83.545922][ T2756] ? __cfi_ksys_write+0x10/0x10 [ 83.545948][ T2756] __x64_sys_openat+0x13a/0x170 [ 83.545969][ T2756] x64_sys_call+0xe69/0x2ee0 [ 83.545996][ T2756] do_syscall_64+0x58/0xf0 [ 83.546022][ T2756] ? clear_bhb_loop+0x35/0x90 [ 83.546053][ T2756] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.546083][ T2756] RIP: 0033:0x7fadad38d290 [ 83.546101][ T2756] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 83.546118][ T2756] RSP: 002b:00007fadae144f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 83.546142][ T2756] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fadad38d290 [ 83.546157][ T2756] RDX: 0000000000000000 RSI: 00007fadad410c51 RDI: 00000000ffffff9c [ 83.546171][ T2756] RBP: 00007fadad410c51 R08: 0000000000000000 R09: 0000000000000000 [ 83.546184][ T2756] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 83.546197][ T2756] R13: 0000000000000000 R14: 00007fadad5b5fa0 R15: 00007ffedad73578 [ 83.546214][ T2756] [ 83.934972][ T2769] FAULT_INJECTION: forcing a failure. [ 83.934972][ T2769] name failslab, interval 1, probability 0, space 0, times 0 [ 83.972168][ T2769] CPU: 0 UID: 0 PID: 2769 Comm: syz.4.837 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 83.972206][ T2769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.972220][ T2769] Call Trace: [ 83.972227][ T2769] [ 83.972236][ T2769] __dump_stack+0x21/0x30 [ 83.972265][ T2769] dump_stack_lvl+0x10c/0x190 [ 83.972289][ T2769] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.972315][ T2769] dump_stack+0x19/0x20 [ 83.972337][ T2769] should_fail_ex+0x3d9/0x530 [ 83.972361][ T2769] should_failslab+0xac/0x100 [ 83.972391][ T2769] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 83.972418][ T2769] ? security_context_to_sid_core+0x13d/0x590 [ 83.972453][ T2769] kstrdup+0x4d/0x140 [ 83.972473][ T2769] ? security_context_to_sid_core+0x128/0x590 [ 83.972499][ T2769] security_context_to_sid_core+0x13d/0x590 [ 83.972524][ T2769] ? revert_creds+0xbc/0x150 [ 83.972555][ T2769] ? ovl_other_xattr_get+0x10c/0x150 [ 83.972581][ T2769] ? security_context_to_sid+0x60/0x60 [ 83.972608][ T2769] ? __cfi_ovl_other_xattr_get+0x10/0x10 [ 83.972634][ T2769] ? __vfs_getxattr+0x41e/0x450 [ 83.972659][ T2769] security_context_to_sid_default+0x3f/0x50 [ 83.972686][ T2769] inode_doinit_use_xattr+0x1a7/0x550 [ 83.972710][ T2769] inode_doinit_with_dentry+0x76a/0xdd0 [ 83.972735][ T2769] ? sb_finish_set_opts+0xa00/0xa00 [ 83.972757][ T2769] ? __cfi_sprintf+0x10/0x10 [ 83.972781][ T2769] ? _raw_spin_lock+0x8c/0x120 [ 83.972809][ T2769] ? __cfi_ovl_get_inode+0x10/0x10 [ 83.972837][ T2769] selinux_d_instantiate+0x2b/0x40 [ 83.972858][ T2769] security_d_instantiate+0xb5/0xf0 [ 83.972882][ T2769] d_instantiate+0x59/0xb0 [ 83.972905][ T2769] ovl_instantiate+0x1b5/0x2a0 [ 83.972925][ T2769] ? ovl_create_or_link+0x14b0/0x14b0 [ 83.972945][ T2769] ? lockref_get+0x127/0x1b0 [ 83.972974][ T2769] ? __cfi_lockref_get+0x10/0x10 [ 83.973003][ T2769] ? backing_tmpfile_open+0xe3/0x100 [ 83.973034][ T2769] ovl_tmpfile+0x560/0x810 [ 83.973052][ T2769] ? __kasan_check_write+0x18/0x20 [ 83.973077][ T2769] ? __cfi_ovl_tmpfile+0x10/0x10 [ 83.973096][ T2769] ? mode_strip_sgid+0x75/0x1d0 [ 83.973119][ T2769] vfs_tmpfile+0x387/0x590 [ 83.973150][ T2769] do_tmpfile+0xdf/0x280 [ 83.973176][ T2769] path_openat+0x2d87/0x34b0 [ 83.973207][ T2769] ? _parse_integer+0x2e/0x40 [ 83.973228][ T2769] ? kasan_save_track+0x4f/0x80 [ 83.973254][ T2769] ? kasan_save_alloc_info+0x40/0x50 [ 83.973275][ T2769] ? __kasan_slab_alloc+0x73/0x90 [ 83.973302][ T2769] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 83.973325][ T2769] ? getname_flags+0xc6/0x710 [ 83.973351][ T2769] ? do_sys_openat2+0xcb/0x1c0 [ 83.973370][ T2769] ? __x64_sys_openat+0x13a/0x170 [ 83.973390][ T2769] ? x64_sys_call+0xe69/0x2ee0 [ 83.973417][ T2769] ? do_syscall_64+0x58/0xf0 [ 83.973452][ T2769] ? do_filp_open+0x3e0/0x3e0 [ 83.973483][ T2769] do_filp_open+0x1c6/0x3e0 [ 83.973512][ T2769] ? __cfi_do_filp_open+0x10/0x10 [ 83.973546][ T2769] ? alloc_fd+0x4e7/0x5a0 [ 83.973573][ T2769] do_sys_openat2+0x12c/0x1c0 [ 83.973592][ T2769] ? fput+0x1a5/0x240 [ 83.973623][ T2769] ? do_sys_open+0x100/0x100 [ 83.973641][ T2769] ? ksys_write+0x1ef/0x250 [ 83.973666][ T2769] ? __cfi_ksys_write+0x10/0x10 [ 83.973693][ T2769] __x64_sys_openat+0x13a/0x170 [ 83.973714][ T2769] x64_sys_call+0xe69/0x2ee0 [ 83.973741][ T2769] do_syscall_64+0x58/0xf0 [ 83.973767][ T2769] ? clear_bhb_loop+0x35/0x90 [ 83.973798][ T2769] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.973826][ T2769] RIP: 0033:0x7f2033b8e929 [ 83.973843][ T2769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.973862][ T2769] RSP: 002b:00007f2034ad6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.973885][ T2769] RAX: ffffffffffffffda RBX: 00007f2033db5fa0 RCX: 00007f2033b8e929 [ 83.973902][ T2769] RDX: 0000000000478103 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 83.973917][ T2769] RBP: 00007f2034ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 83.973930][ T2769] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 83.973943][ T2769] R13: 0000000000000000 R14: 00007f2033db5fa0 R15: 00007ffe02de5ad8 [ 83.973960][ T2769] [ 83.973974][ T2769] SELinux: inode_doinit_use_xattr: context_to_sid(root:object_r:user_tmpfs_t) returned 12 for dev=overlay ino=372 [ 84.398859][ T36] audit: type=1400 audit(1750464039.512:425): avc: denied { ioctl open } for pid=2767 comm="syz.4.837" path=2F35372F6275732F23333732202864656C6574656429 dev="overlay" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.435766][ T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 84.483598][ T2785] FAULT_INJECTION: forcing a failure. [ 84.483598][ T2785] name failslab, interval 1, probability 0, space 0, times 0 [ 84.506844][ T2785] CPU: 1 UID: 0 PID: 2785 Comm: syz.3.841 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 84.506881][ T2785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.506895][ T2785] Call Trace: [ 84.506903][ T2785] [ 84.506911][ T2785] __dump_stack+0x21/0x30 [ 84.506944][ T2785] dump_stack_lvl+0x10c/0x190 [ 84.506970][ T2785] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.506996][ T2785] ? handle_mm_fault+0x169b/0x1b90 [ 84.507028][ T2785] dump_stack+0x19/0x20 [ 84.507052][ T2785] should_fail_ex+0x3d9/0x530 [ 84.507081][ T2785] should_failslab+0xac/0x100 [ 84.507111][ T2785] kmem_cache_alloc_noprof+0x42/0x3a0 [ 84.507137][ T2785] ? create_new_namespaces+0x48/0x720 [ 84.507163][ T2785] create_new_namespaces+0x48/0x720 [ 84.507189][ T2785] __se_sys_setns+0x2d1/0x12b0 [ 84.507215][ T2785] ? __kasan_check_write+0x18/0x20 [ 84.507239][ T2785] ? __x64_sys_setns+0x80/0x80 [ 84.507265][ T2785] ? __kasan_check_read+0x15/0x20 [ 84.507289][ T2785] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 84.507312][ T2785] __x64_sys_setns+0x5f/0x80 [ 84.507336][ T2785] x64_sys_call+0x2de8/0x2ee0 [ 84.507363][ T2785] do_syscall_64+0x58/0xf0 [ 84.507391][ T2785] ? clear_bhb_loop+0x35/0x90 [ 84.507424][ T2785] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.507456][ T2785] RIP: 0033:0x7f5fd5790157 [ 84.507474][ T2785] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.507493][ T2785] RSP: 002b:00007f5fd661ffd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 84.507516][ T2785] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f5fd5790157 [ 84.507531][ T2785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 84.507544][ T2785] RBP: 00007f5fd6620090 R08: 0000000000000000 R09: 0000000000000000 [ 84.507559][ T2785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.507572][ T2785] R13: 0000000000000000 R14: 00007f5fd59b5fa0 R15: 00007ffe898ddd88 [ 84.507589][ T2785] [ 84.747181][ T2794] netlink: 324 bytes leftover after parsing attributes in process `syz.1.844'. [ 84.828914][ T2796] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 84.828941][ T2796] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 84.836897][ T2796] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 84.844485][ T2798] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 84.844763][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.877523][ T2802] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 84.886392][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 84.891638][ T2802] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 84.901540][ T2802] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 84.910021][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.921039][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.934264][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.944026][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.963084][ T31] usb 1-1: config 0 descriptor?? [ 85.116513][ T2808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:616 [ 85.117549][ T2808] rust_binder: Write failure EINVAL in pid:616 [ 85.217389][ T36] audit: type=1400 audit(1750464040.279:426): avc: denied { listen } for pid=2782 comm="syz.4.840" path=2F35382FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 85.283849][ T2783] binder: Unknown parameter 'fscontext?}' [ 85.568650][ T451] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 85.728987][ T451] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 85.737136][ T451] usb 2-1: config 0 has an invalid descriptor of length 90, skipping remainder of the config [ 85.747578][ T451] usb 2-1: config 0 has no interface number 0 [ 85.755065][ T451] usb 2-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 85.764172][ T451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.772214][ T451] usb 2-1: Product: syz [ 85.776456][ T451] usb 2-1: Manufacturer: syz [ 85.781099][ T451] usb 2-1: SerialNumber: syz [ 85.786643][ T451] usb 2-1: config 0 descriptor?? [ 86.010930][ T451] usb 2-1: Found UVC 0.00 device syz (056d:0000) [ 86.017482][ T451] usb 2-1: No valid video chain found. [ 86.027528][ T451] usb 2-1: USB disconnect, device number 19 [ 86.588323][ T2819] rust_binder: Error while translating object. [ 86.588352][ T2819] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 86.595289][ T2819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:622 [ 87.021532][ T891] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.021555][ T892] Bluetooth: hci0: command 0x1003 tx timeout [ 87.113525][ T2828] netlink: 324 bytes leftover after parsing attributes in process `syz.3.854'. [ 87.135272][ T2830] FAULT_INJECTION: forcing a failure. [ 87.135272][ T2830] name failslab, interval 1, probability 0, space 0, times 0 [ 87.148109][ T2830] CPU: 0 UID: 0 PID: 2830 Comm: syz.3.855 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 87.148143][ T2830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.148155][ T2830] Call Trace: [ 87.148161][ T2830] [ 87.148170][ T2830] __dump_stack+0x21/0x30 [ 87.148200][ T2830] dump_stack_lvl+0x10c/0x190 [ 87.148231][ T2830] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.148260][ T2830] ? avc_has_perm+0x144/0x220 [ 87.148283][ T2830] dump_stack+0x19/0x20 [ 87.148303][ T2830] should_fail_ex+0x3d9/0x530 [ 87.148328][ T2830] should_failslab+0xac/0x100 [ 87.148354][ T2830] kmem_cache_alloc_lru_noprof+0x45/0x3a0 [ 87.148379][ T2830] ? sock_alloc_inode+0x48/0x150 [ 87.148403][ T2830] sock_alloc_inode+0x48/0x150 [ 87.148425][ T2830] ? __cfi_sock_alloc_inode+0x10/0x10 [ 87.148447][ T2830] alloc_inode+0x7a/0x270 [ 87.148478][ T2830] ? bpf_lsm_socket_create+0xd/0x20 [ 87.148507][ T2830] new_inode_pseudo+0x19/0x40 [ 87.148534][ T2830] __sock_create+0x130/0x810 [ 87.148558][ T2830] __sys_socket+0xe2/0x1c0 [ 87.148582][ T2830] __x64_sys_socket+0x7e/0x90 [ 87.148606][ T2830] x64_sys_call+0x2608/0x2ee0 [ 87.148633][ T2830] do_syscall_64+0x58/0xf0 [ 87.148659][ T2830] ? clear_bhb_loop+0x35/0x90 [ 87.148689][ T2830] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.148719][ T2830] RIP: 0033:0x7f5fd578e929 [ 87.148735][ T2830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.148753][ T2830] RSP: 002b:00007f5fd661ffd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 87.148777][ T2830] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f5fd578e929 [ 87.148792][ T2830] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000024 [ 87.148804][ T2830] RBP: 00007f5fd6620090 R08: 0000000000000000 R09: 0000000000000000 [ 87.148817][ T2830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.148830][ T2830] R13: 0000000000000000 R14: 00007f5fd59b5fa0 R15: 00007ffe898ddd88 [ 87.148846][ T2830] [ 87.148881][ T2830] socket: no more sockets [ 87.267809][ T31] usb 1-1: string descriptor 0 read error: -71 [ 87.368628][ T2841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:474 [ 87.370146][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 87.385533][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 87.396967][ T31] usb 1-1: USB disconnect, device number 25 [ 87.705762][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 87.869399][ T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 87.878409][ T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 87.887135][ T31] usb 1-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 87.897447][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 87.904781][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.914059][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 87.922140][ T31] usb 1-1: SerialNumber: syz [ 88.153671][ T36] audit: type=1400 audit(1750464043.020:427): avc: denied { write } for pid=2843 comm="syz.0.860" name="dev_snmp6" dev="proc" ino=4026532883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 88.177363][ T36] audit: type=1400 audit(1750464043.020:428): avc: denied { add_name } for pid=2843 comm="syz.0.860" name="blkio.throttle.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 88.200850][ T36] audit: type=1400 audit(1750464043.020:429): avc: denied { create } for pid=2843 comm="syz.0.860" name="blkio.throttle.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:proc_net_t tclass=file permissive=1 [ 88.226362][ T36] audit: type=1400 audit(1750464043.020:430): avc: denied { associate } for pid=2843 comm="syz.0.860" name="blkio.throttle.io_service_bytes" scontext=root:object_r:proc_net_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 88.226572][ T31] usb 1-1: USB disconnect, device number 26 [ 88.459212][ T2858] netlink: 324 bytes leftover after parsing attributes in process `syz.3.865'. [ 88.460820][ T2859] netlink: 'syz.1.863': attribute type 12 has an invalid length. [ 88.532173][ T2859] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 198) [ 88.532193][ T2859] rust_binder: Error while translating object. [ 88.542859][ T2859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.549058][ T2859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:633 [ 88.559475][ T36] audit: type=1400 audit(1750464043.404:431): avc: denied { append } for pid=2850 comm="syz.1.863" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 88.601771][ T36] audit: type=1326 audit(1750464043.432:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.4.867" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2033b8e929 code=0x0 [ 88.658632][ T2864] rust_binder: Error while translating object. [ 88.658667][ T2864] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 88.664921][ T2864] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:165 [ 88.732031][ T31] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 88.904104][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 88.910441][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.921454][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.934318][ T31] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 88.943448][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.956328][ T31] usb 4-1: config 0 descriptor?? [ 89.117281][ T2883] netlink: 324 bytes leftover after parsing attributes in process `syz.0.874'. [ 89.256403][ T2892] binder: Bad value for 'stats' [ 89.445843][ T2900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:645 [ 89.445907][ T2900] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 89.455266][ T2900] rust_binder: Read failure Err(EFAULT) in pid:645 [ 89.513213][ T2909] netlink: 324 bytes leftover after parsing attributes in process `syz.1.883'. [ 89.566073][ T2916] rust_binder: Error while translating object. [ 89.566112][ T2916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.572741][ T2917] rust_binder: Error while translating object. [ 89.576608][ T2916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:656 [ 89.582610][ T2917] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.598529][ T2917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:656 [ 89.641416][ T2922] binder: Bad value for 'stats' [ 89.678482][ T2926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.890'. [ 89.688182][ T2926] fuse: Bad value for 'group_id' [ 89.693169][ T2926] fuse: Bad value for 'group_id' [ 89.699355][ T36] audit: type=1400 audit(1750464044.470:433): avc: denied { mount } for pid=2925 comm="syz.4.890" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 89.700784][ T2926] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 89.740210][ T36] audit: type=1400 audit(1750464044.507:434): avc: denied { unmount } for pid=1892 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 89.889912][ T2928] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.922229][ T2945] netlink: 324 bytes leftover after parsing attributes in process `syz.4.895'. [ 89.989024][ T2956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 89.989069][ T2956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:671 [ 89.998652][ T2956] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 90.007916][ T2956] rust_binder: Read failure Err(EFAULT) in pid:671 [ 90.052664][ T2961] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 90.059509][ T2961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 90.067556][ T2961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:676 [ 90.085043][ T2965] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 90.126453][ T2969] netlink: 324 bytes leftover after parsing attributes in process `syz.1.904'. [ 90.144983][ T2952] fuse: Unknown parameter 'R'[ ' [ 90.150250][ T36] audit: type=1400 audit(1750464044.881:435): avc: denied { connect } for pid=2975 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.364425][ T36] audit: type=1326 audit(1750464045.087:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2999 comm="syz.0.915" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x0 [ 90.453246][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 90.461464][ T3002] overlayfs: missing 'lowerdir' [ 90.616972][ T10] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 90.626151][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.634184][ T10] usb 2-1: Product: syz [ 90.638438][ T10] usb 2-1: Manufacturer: syz [ 90.643116][ T10] usb 2-1: SerialNumber: syz [ 90.649279][ T10] usb 2-1: config 0 descriptor?? [ 91.304393][ T3009] netlink: 324 bytes leftover after parsing attributes in process `syz.4.917'. [ 91.410112][ T3020] x_tables: duplicate underflow at hook 1 [ 91.502809][ T3034] netlink: 324 bytes leftover after parsing attributes in process `syz.4.926'. [ 91.548554][ T3046] rust_binder: Error while translating object. [ 91.548597][ T3046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.565013][ T3046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222 [ 91.651177][ T3065] SELinux: security_context_str_to_sid (sytem_uGй :yHl) failed with errno=-22 [ 91.708077][ T31] usb 4-1: string descriptor 0 read error: -71 [ 91.729731][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 91.736524][ T3073] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 91.738684][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 91.744605][ T2984] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 91.768914][ T31] usb 4-1: USB disconnect, device number 20 [ 91.771389][ T2984] rust_binder: Error while translating object. [ 91.812940][ T2984] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.819528][ T2984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:682 [ 91.852017][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 91.884685][ T10] asix 2-1:0.0: probe with driver asix failed with error -71 [ 91.893478][ T10] usb 2-1: USB disconnect, device number 20 [ 91.904172][ T3082] rust_binder: Error while translating object. [ 91.904220][ T3082] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 91.910671][ T3082] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:229 [ 91.948992][ T3087] rust_binder: Write failure EINVAL in pid:756 [ 92.006847][ T3087] rust_binder: Read failure Err(EAGAIN) in pid:756 [ 92.057638][ T3092] netlink: 324 bytes leftover after parsing attributes in process `syz.3.937'. [ 92.085209][ T3094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:761 [ 92.352609][ T36] audit: type=1326 audit(1750464046.949:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3109 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 92.387061][ T36] audit: type=1326 audit(1750464046.949:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3109 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 92.415429][ T36] audit: type=1326 audit(1750464046.958:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3109 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 92.431732][ T3114] netlink: 324 bytes leftover after parsing attributes in process `syz.1.946'. [ 92.438757][ T36] audit: type=1326 audit(1750464046.958:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3109 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 92.471098][ T3117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'. [ 92.471603][ T36] audit: type=1326 audit(1750464046.958:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3109 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 92.481334][ T3117] rust_binder: Error while translating object. [ 92.503251][ T3117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 92.503833][ T36] audit: type=1326 audit(1750464046.958:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3109 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 92.509851][ T3117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:686 [ 92.519091][ T36] audit: type=1326 audit(1750464046.958:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3109 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 92.574698][ T36] audit: type=1326 audit(1750464046.958:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3109 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 92.734315][ T3139] netlink: 324 bytes leftover after parsing attributes in process `syz.0.955'. [ 92.929148][ T3165] netlink: 324 bytes leftover after parsing attributes in process `syz.4.965'. [ 92.946933][ T3163] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 92.946964][ T3163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:623 [ 92.967222][ T3167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.976495][ T3167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.983007][ T3167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.989829][ T3167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.996349][ T3167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.002832][ T3167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.010026][ T3167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.016508][ T3167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.023293][ T3167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.068995][ T3176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.969'. [ 93.093381][ T3176] Unsupported ieee802154 address type: 0 [ 93.099643][ T3176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.969'. [ 93.147644][ T3192] 9pnet_virtio: no channels available for device syz [ 93.155857][ T3192] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 93.155881][ T3192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:258 [ 93.165366][ T3192] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.174586][ T3192] rust_binder: Read failure Err(EFAULT) in pid:258 [ 93.187702][ T3194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.264993][ T3209] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.371770][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 93.532149][ T10] usb 4-1: device descriptor read/64, error -71 [ 93.577319][ T3242] process 'syz.0.995' launched './file2' with NULL argv: empty string added [ 93.662306][ T3242] kvm: user requested TSC rate below hardware speed [ 93.799435][ T10] usb 4-1: device descriptor read/64, error -71 [ 93.991799][ T356] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 94.055978][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 94.130810][ T356] usb 1-1: device descriptor read/64, error -71 [ 94.194901][ T10] usb 4-1: device descriptor read/64, error -71 [ 94.205074][ T3255] 8021q: VLANs not supported on tunl0 [ 94.265547][ T3263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:269 [ 94.339267][ T3273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.349510][ T3274] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.387356][ T356] usb 1-1: device descriptor read/64, error -71 [ 94.462175][ T10] usb 4-1: device descriptor read/64, error -71 [ 94.590618][ T10] usb usb4-port1: attempt power cycle [ 94.644486][ T3291] rust_binder: Write failure EFAULT in pid:729 [ 94.666840][ T356] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 94.686854][ T3301] rust_binder: Write failure EINVAL in pid:739 [ 94.825679][ T356] usb 1-1: device descriptor read/64, error -71 [ 94.943250][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 94.964646][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 94.987105][ T10] usb 4-1: device descriptor read/8, error -71 [ 95.092950][ T356] usb 1-1: device descriptor read/64, error -71 [ 95.114346][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 95.120601][ T31] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 95.129787][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.136871][ T10] usb 4-1: device descriptor read/8, error -71 [ 95.144333][ T31] usb 2-1: config 0 descriptor?? [ 95.216095][ T356] usb usb1-port1: attempt power cycle [ 95.392275][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 95.422449][ T10] usb 4-1: device descriptor read/8, error -71 [ 95.576364][ T10] usb 4-1: device descriptor read/8, error -71 [ 95.584704][ T356] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 95.596744][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.607162][ T356] usb 1-1: device descriptor read/8, error -71 [ 95.691723][ T10] usb usb4-port1: unable to enumerate USB device [ 95.746139][ T356] usb 1-1: device descriptor read/8, error -71 [ 96.001655][ T356] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 96.024094][ T356] usb 1-1: device descriptor read/8, error -71 [ 96.163049][ T356] usb 1-1: device descriptor read/8, error -71 [ 96.279699][ T356] usb usb1-port1: unable to enumerate USB device [ 96.363481][ T3327] __nla_validate_parse: 5 callbacks suppressed [ 96.363507][ T3327] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1025'. [ 96.434955][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 96.434973][ T36] audit: type=1326 audit(1750464050.765:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3336 comm="syz.3.1029" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fd578e929 code=0x0 [ 96.525375][ T36] audit: type=1400 audit(1750464050.849:513): avc: denied { link } for pid=3341 comm="syz.3.1030" name="file1" dev="tmpfs" ino=1653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.547834][ T36] audit: type=1400 audit(1750464050.859:514): avc: denied { rename } for pid=3341 comm="syz.3.1030" name="#90" dev="tmpfs" ino=1654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.570192][ T36] audit: type=1400 audit(1750464050.859:515): avc: denied { setattr } for pid=3341 comm="syz.3.1030" name="#91" dev="tmpfs" ino=1655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.612445][ T3347] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 96.612445][ T3347] null pointer dereference occurred [ 96.621334][ T3348] rust_binder: Error while translating object. [ 96.624831][ T3348] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.624962][ T3347] ------------[ cut here ]------------ [ 96.631137][ T3348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:790 [ 96.646275][ T3347] kernel BUG at rust/helpers/bug.c:7! [ 96.646289][ T36] audit: type=1400 audit(1750464050.952:516): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 96.655819][ T3347] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 96.661032][ T36] audit: type=1400 audit(1750464050.952:517): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.682529][ T3347] CPU: 0 UID: 0 PID: 3347 Comm: syz.3.1032 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 96.682558][ T3347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.682572][ T3347] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 96.690550][ T36] audit: type=1400 audit(1750464050.952:518): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.710783][ T3347] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 cd 30 72 85 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 87 f4 3b 09 90 90 90 90 90 90 90 90 90 [ 96.710808][ T3347] RSP: 0018:ffffc900062571d0 EFLAGS: 00010246 [ 96.710828][ T3347] RAX: 000000000000005a RBX: 1ffff92000c4ae3c RCX: cb8d72cfa1ed3e00 [ 96.710845][ T3347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 96.724939][ T36] audit: type=1400 audit(1750464050.952:519): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.734372][ T3347] RBP: ffffc900062571d0 R08: ffffc90006256ec7 R09: 1ffff92000c4add8 [ 96.734395][ T3347] R10: dffffc0000000000 R11: fffff52000c4add9 R12: 0000000000000000 [ 96.734410][ T3347] R13: dffffc0000000000 R14: ffffc90006257200 R15: ffffc90006257230 [ 96.734427][ T3347] FS: 00007f5fd66206c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 96.734453][ T3347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.734467][ T3347] CR2: 0000200000001000 CR3: 000000012340e000 CR4: 00000000003526b0 [ 96.734486][ T3347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.734499][ T3347] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.734514][ T3347] Call Trace: [ 96.734520][ T3347] [ 96.734529][ T3347] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 96.742090][ T36] audit: type=1400 audit(1750464050.952:520): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.761088][ T3347] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 96.761129][ T3347] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 96.761169][ T3347] ? p9pdu_vwritef+0x2720/0x2720 [ 96.781404][ T36] audit: type=1400 audit(1750464050.952:521): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.786905][ T3347] ? radix_tree_node_alloc+0x1af/0x400 [ 96.786949][ T3347] ? __cfi_p9pdu_vwritef+0x10/0x10 [ 96.786976][ T3347] ? p9pdu_vwritef+0x1c5e/0x2720 [ 96.985797][ T3347] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 96.993899][ T3347] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 97.002703][ T3347] ? p9pdu_writef+0xdb/0x130 [ 97.007314][ T3347] ? p9pdu_vwritef+0x2720/0x2720 [ 97.012275][ T3347] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 97.021420][ T3347] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 97.030289][ T3347] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 97.038137][ T3347] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 97.045890][ T3347] ? p9_client_prepare_req+0x732/0xa10 [ 97.051398][ T3347] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 97.059681][ T3347] ? __kasan_check_write+0x18/0x20 [ 97.064823][ T3347] ? _raw_spin_lock+0x8c/0x120 [ 97.069601][ T3347] ? tun_chr_poll+0x127/0x770 [ 97.074287][ T3347] ? _raw_spin_lock+0x8c/0x120 [ 97.079076][ T3347] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 97.087371][ T3347] p9_fd_request+0x446/0x520 [ 97.092005][ T3347] p9_client_rpc+0x2f9/0xb40 [ 97.096631][ T3347] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 97.104903][ T3347] ? p9_fid_create+0x3d0/0x3d0 [ 97.109694][ T3347] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 97.117968][ T3347] ? p9_conn_create+0x4c9/0x570 [ 97.122859][ T3347] ? p9_fd_create+0x2f3/0x4c0 [ 97.127548][ T3347] p9_client_create+0x96a/0x1190 [ 97.132501][ T3347] ? __cfi_p9_client_create+0x10/0x10 [ 97.137891][ T3347] ? kasan_save_alloc_info+0x40/0x50 [ 97.143178][ T3347] ? __kasan_kmalloc+0x96/0xb0 [ 97.147949][ T3347] ? kstrdup+0x7b/0x140 [ 97.152111][ T3347] ? __kasan_check_write+0x18/0x20 [ 97.157226][ T3347] v9fs_session_init+0x1e1/0x1820 [ 97.162254][ T3347] ? __cfi_v9fs_session_init+0x10/0x10 [ 97.167719][ T3347] ? kasan_save_alloc_info+0x40/0x50 [ 97.173008][ T3347] ? __kasan_kmalloc+0x96/0xb0 [ 97.177789][ T3347] ? v9fs_mount+0xbd/0xa00 [ 97.182230][ T3347] v9fs_mount+0xd7/0xa00 [ 97.186483][ T3347] ? selinux_sb_eat_lsm_opts+0xa69/0xb40 [ 97.192123][ T3347] ? __cfi_v9fs_mount+0x10/0x10 [ 97.196981][ T3347] ? selinux_capable+0x38/0x50 [ 97.201759][ T3347] legacy_get_tree+0x103/0x1b0 [ 97.206533][ T3347] ? __cfi_v9fs_mount+0x10/0x10 [ 97.211423][ T3347] vfs_get_tree+0x9e/0x290 [ 97.215860][ T3347] do_new_mount+0x251/0xb40 [ 97.220390][ T3347] path_mount+0x688/0x1050 [ 97.224811][ T3347] ? putname+0x113/0x150 [ 97.229061][ T3347] __se_sys_mount+0x2bd/0x480 [ 97.233784][ T3347] ? __x64_sys_mount+0xf0/0xf0 [ 97.238570][ T3347] ? __kasan_check_write+0x18/0x20 [ 97.243720][ T3347] ? fpregs_restore_userregs+0x11d/0x260 [ 97.249365][ T3347] __x64_sys_mount+0xc3/0xf0 [ 97.253961][ T3347] x64_sys_call+0x2021/0x2ee0 [ 97.258647][ T3347] do_syscall_64+0x58/0xf0 [ 97.263073][ T3347] ? clear_bhb_loop+0x35/0x90 [ 97.267770][ T3347] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.273682][ T3347] RIP: 0033:0x7f5fd578e929 [ 97.278096][ T3347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.297705][ T3347] RSP: 002b:00007f5fd6620038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 97.306123][ T3347] RAX: ffffffffffffffda RBX: 00007f5fd59b5fa0 RCX: 00007f5fd578e929 [ 97.314096][ T3347] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 97.322071][ T3347] RBP: 00007f5fd5810b39 R08: 0000200000000240 R09: 0000000000000000 [ 97.330065][ T3347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.338129][ T3347] R13: 0000000000000000 R14: 00007f5fd59b5fa0 R15: 00007ffe898ddd88 [ 97.346108][ T3347] [ 97.349125][ T3347] Modules linked in: [ 97.353496][ T3347] ---[ end trace 0000000000000000 ]--- [ 97.359115][ T3347] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 97.364554][ T3347] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 cd 30 72 85 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 87 f4 3b 09 90 90 90 90 90 90 90 90 90 [ 97.384473][ T3347] RSP: 0018:ffffc900062571d0 EFLAGS: 00010246 [ 97.390566][ T3347] RAX: 000000000000005a RBX: 1ffff92000c4ae3c RCX: cb8d72cfa1ed3e00 [ 97.398713][ T3347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 97.406781][ T3347] RBP: ffffc900062571d0 R08: ffffc90006256ec7 R09: 1ffff92000c4add8 [ 97.415597][ T3347] R10: dffffc0000000000 R11: fffff52000c4add9 R12: 0000000000000000 [ 97.423650][ T3347] R13: dffffc0000000000 R14: ffffc90006257200 R15: ffffc90006257230 [ 97.431650][ T3347] FS: 00007f5fd66206c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 97.440644][ T3347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.447352][ T3347] CR2: 0000200000001000 CR3: 000000012340e000 CR4: 00000000003526b0 [ 97.455603][ T3347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.463600][ T3347] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.471693][ T3347] Kernel panic - not syncing: Fatal exception [ 97.477930][ T3347] Kernel Offset: disabled [ 97.482349][ T3347] Rebooting in 86400 seconds..