last executing test programs: 21.376120576s ago: executing program 1 (id=2975): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x7a05, 0x1700) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000180)=0xfffffff6, 0x4) listen(r2, 0x5) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) r4 = syz_pidfd_open(0x0, 0x0) setns(r4, 0x10000000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 21.374344696s ago: executing program 1 (id=2976): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x1000007fd) 21.369224716s ago: executing program 1 (id=2977): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ioprio_set$pid(0x3, r1, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x20340, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x7, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x1800000) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="420bb6873bffebb42b", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="acbddf157a95c96807936bdc6c70aff7fda23f3ee0ad4319dc3585a18c5217b1fdd7c69bb02dfa21de5b35ddb2199c2f2134c9d0e3ec856dfae5e0e52540000000ef7d15e6852b88300b766ab70535837520a57571ae2e7ed0eec5530c9bbe7e3756ba577d82e21dca4343146d99cb3e", 0x70}, {&(0x7f0000000740)="17b12a16a78691c3f183230cc5904abefd641e5668369e13ee287081481be182e0fbde757cf702f1e99b6db51a0db96eaf7484543d3333dc113fd7dc366eb2125d94c6b04b35444e3f93a571adb8192641e8d8e5c5550e2256dc671da679713dee003e55335a23f4780a66cd179ef6cdd76dd3343757bf9ea2197998490a2e0cc60d749a1074345a9e", 0x89}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)="5bba4406c37b6c2e1662e1d37e5900e41d36d277c3616b73c16d4f56903b31d71bdb5137e8d3c7d31279cff9572da0f9e3fe1507188d69a979779e44d361571bafe5799eb6a677180ac595c871150624abc3c38ce1a4369aa6ea47e23ac6f5d98f55440f96647af83b1df3781ead1c", 0x6f}, {&(0x7f00000008c0)="7066dc66cff6f1d248399b17b5", 0xd}, {&(0x7f0000000900)="9a9e28610f5841d5fad44191e2e9c5cc70dc4301236e1d7903ed6e9b9963fb5d76c53baf500904106dbeebb395f0c6912db21635ae1bc6d062", 0x39}, {&(0x7f0000000940)="db34238ff8c24119302b2ed38d5edb804240484d6e3803875932c00ca77b8a680916c9e01b88f58ca4301fc55eeeee134a3ff0e0888762eb51e08225a15b1aab13dad338d43fcb8651bb7f359c810ded9bc47a11427f09022355425292c41f321b28cee590", 0x65}, {&(0x7f00000009c0)="9190e42e123ee37d19f2a627aec0b3d42e14db4a0954e630a80066086fc2c4f7a3e33e42e0a6d83e3dc38c5edc7741f5e557c64ede71fdf7b721aafa99a009a769092cbb0dd4345178f3b155f1f53d9085595471faa592bbdc3e3f28de545362d4cadcd1b86d3f8c9b8b0bd14e802453e93f", 0x72}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000280)="01808d8e2707c513ff18766900d2a16406cbd2bf7405b1b3e3ea25b31806f69954d1d5c2b0b9d25f60dd5b5d811bde8c6601fcd8cf8f3f25812a2acf0b5e69e409282d7881044f440cfd74137b08c64b81fdfc83fa9aa4fb8fd661300c82816f37cf4e6c100cc73a1af35b2bb1024d51bc3af740de6b16f736f7ff5500be7c9656", 0x81}, {&(0x7f0000000d00)="987ed064a0f2ad23fbbaa7215ccbfedcd5587c725c02741a2a767b119e0f662893ce028ddac9056398d2236a52d332b4c03c542ff7e2bc0b4e427a168bcf96a84a71857005279c6cf404fa81b2c7e09bc11bcded6c934a346365338296e8ad8b6f0215a4bf190f318c3ea50746cb050db929f2f05e17a619ed12adbd69df1405214c6dd5a781411ba3210685f61b1f3bc306b3167b0bc927bfe0ef1c2ab69943a09bc06a2d0aafdbc82350f00fa6", 0xae}, {&(0x7f0000000dc0)="11b2f2357917d42f98899ebb1bfe1e01a3694356a88dd4", 0x17}], 0x3}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f00)="e8b5880486801e29aac1506ea21503664e4d6c408ee727aabae8f5e0ce9405fe5989baf51b2959cfba7dc341aef71a3fe3db7850827c331ac8ab17f3ee859f4a912321efca0c5a34a94dfcb1fb0cf43342e36c7faa7e0245bbb46ef714fc54601e7307b7e760a03dc5f40ae2509f6885fd394b9901a8434ce1084743c0ec70f5bfca1bfdf57aa010f39beefafb6b81805c61b8606d3077452491a22b15c844135f3c11d4", 0xa4}, {&(0x7f0000001340)="1435c475ff655bd18d564b6fd912016611af9363c8584d1b5418f29756c335f7c6ca9902ea932c22210b5344584f1b3be7a37b604e4675a6f5098b0e8a950edeb4d8445e534fb262b950f7512e50efa4e6cb7e7b746053c4a61ade3f3788ebd09c8cb461f8cf64d0f696f936d915ead80ef69228cde363e6e9c22024872dd1f4ab2ac3c579e321aca11b042d1faf574b0809243ac751b2a9392694f4168e819f912b83841056b56b1396b81dd6e2af37b3c455ed45fdb193bf353f94811aa216a5e268a85bdb", 0xc6}, {&(0x7f0000001040)="0e85119382927d42bd8eccb5fc985cf2a0f62d61bc81a58e9c88", 0x1a}, {&(0x7f0000001080)="67ffd3610b524767a7760698340e3546bbd84f76794d0394f85a10164293e7e68b30c5ef4ea96e73a9b880d18090c35924611b1284407f1c553ca7207b5ffade1338b85187bc064978a5d9050eedee5f1f08aedb63", 0x55}], 0x4}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)="d3e7b4373ba9678b1eccb6697fa110ff29ffcc3ab370d555ea939ec5119563a01696675f867ade147f4009f1921311fd3576492ba947", 0x36}], 0x1}}], 0x6, 0x400c404) sendmmsg$inet6(r6, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)='s', 0x1}], 0x1}}], 0x1, 0x84) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x1000007fd) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)={0x0, 0x10, 0x4, "9500499c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000002980)={0x34, &(0x7f0000002800)={0x40, 0x12, 0x9, "9ed2a9fb27e7b7a707"}, &(0x7f0000002840)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002880)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0, &(0x7f0000002940)={0xc0, 0xa2, 0x2f, "737843815ad792d6897e4a26ba83276557e6aeaf863c5f5b08e544f581b94a215d29c51c47c020cea6c982e848be0a"}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="400e71000000710c7f70406ded469c0b32e858bfe38967afa894064b2e46392cf0da9af4ce4b7aa80bcaefb935f24480072c523006b782f0d996e31fe560b03da8f6d8073b0ebc71118df51802b45cde31ccb75e6617dc589b33bd44ec7d81a329a9741a44595e97262fde0e73417ad5ad091e7e44bd43b54852068f8c74a1cd060a91ccfcc2921ac2fc9af62162997f2b40309c3a150630dd122abf5b1e2baf7a1e"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000440)={0x20, 0x10, 0x20, "1f4304c218b7db0055d0869d74e3cc01d996c29404726d97abc0f24e3170cd20"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3}}) 20.850093419s ago: executing program 1 (id=2987): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)={0x1c, 0x2e, 0x31f, 0x0, 0x0, "", [@typed={0xc, 0xd6, 0x0, 0x0, @u64=0x1}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0xfffffffffffffffd, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 20.836585399s ago: executing program 1 (id=2989): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r0, 0xffffffffffff8001, 0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f0000000440)=[@enter_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @clear_death={0x400c630f, 0x3}, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000900)={0x0, 0x0, 0x0, 0xb, 0x0, &(0x7f00000008c0)="4b30174b442288c3a9def1"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20.821420439s ago: executing program 1 (id=2991): setfsgid(0xee01) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x0, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1101}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper], 0x6c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699d"}) 9.050888808s ago: executing program 2 (id=3029): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) unshare(0x22020600) r1 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) read$eventfd(r3, &(0x7f0000000340), 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x200000d, 0x12, 0xffffffffffffffff, 0x4e881000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 9.050364417s ago: executing program 3 (id=3030): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000b7, 0x0, 0xc}]}) r3 = socket(0x1a, 0x80a, 0x8001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000380)="4d01000000020000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d80df726f864ddd38d", 0x3c, 0x81, &(0x7f0000000340)={0x11, 0x0, r6, 0x1, 0x8a, 0x6, @multicast}, 0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x30, r7, 0xc4fc9e906872338b, 0x24, 0x25dfdbff, {{0x15}, {@void, @val={0xc, 0x99, {0xa, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x40880) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0}) 7.478636236s ago: executing program 0 (id=3031): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r5, &(0x7f0000001100)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0xff7ffffe, @empty, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@hopopts={{0x18, 0x29, 0x36, {0x2f}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2c}}}], 0x30}}], 0x1, 0x4000) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x80080, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x14) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000000640)={{'\x00', 0x1}, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="38a9df7577f2a1102b47b2dc83d2a5f2920ca6902cb1e4f7541fc93b0689a51677427aa8c8c4b5acd2fe90ca79ac3f413ea5ea1203788e0c9b3b18e555e0980f3ba4e41101d3f1e2376c6cb8bca25c66ae5cdeb53d4e8c6591afa2dfef6b84f529c39ffd372f7b8f0c90218c9c86a2", 0x6f, 0x0, &(0x7f0000000400)={0x2, 0x117, {0x0, 0xc, 0x4a, "545178014de1a2e4427a6a515578538829b49dae28bf8006e39c3304fce0b686cd362fb6e439e8e7a46fc68ceec6b2cb3f1002c5b43d9df8796f1c8d67084298ff618cd1839bb5172499", 0xc0, "e2415609a96040a015a2ec3c8723fd2888ea92f16e73208321379988c49341ae64d4778e5f0cf64bf186a5398726a32ea2bef098558c88f532977196fdfa84c5f8f44cd23a06ea9576e04dc458d54369da3f209ea860efecd60ef63accbb0f9b433421ae61890299d0c0dabe05fae432428e2225c98df610e2de8b8c1af81d21e524a2d182b3f1bac4a5075b730a694d99ad143b63ca64e6a9383b123561b3aceb5a892afb6ce46ea6d5a78e5860a202214249a5db257f6d9b04c0ac79973a92"}, 0xe8, "8fc19c92bd1e7ed4d57841b79716999d8ed57de13fd72751a6dc0756c5035b18609e0f94d93d1c00418345776bd5d0544d21e076d17a1ac73a7149ca7b0fad79006518bfc888ee08c8e954683208db110b5e1d1b94283639f805a3e885e5e55ef4a747a93f50bdddbc73b3e2d3c203f64edf83ef17f2e2fb2c72fe2c7dfa60339b3371c6fb00230b389e630bec797315590de14e8f693ee44d3a9b7edf6542974e6228f604ab9521f716d9706e4573ff660f8ab7b01df7711c51f7b9f17f40b0617761e15550232052658e4c5c1eb77ad8a6b118b296a3ecf74da1abb448c3119fb64c8e1217c22c"}, 0x20b}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',debug=C']) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000100)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x11c, r2, 0x401, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1a79}}, {@pci={{0x8}, {0x5}}, {0x8, 0xb, 0x9}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) 7.478174227s ago: executing program 2 (id=3032): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000400)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100e2ffffffffff400101c0"]) (async) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000100)=ANY=[]) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/7, 0x7, 0x2, 0x21}, @fda={0x66646185, 0x9, 0x0, 0x29}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death={0x400c630f, 0x1}], 0x56, 0x0, &(0x7f0000000380)="f22439c47e109c6096ea2bae1f7d03b8c44245ee48a8a255e0db445a21505ddddb4f9e2515db95a1de45d524bb52899f326bab2c88053f7a7475b3ec0373c50a7a4d67df5fde31db1a31325bebcf85b344c0596e65b8"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) socket$inet_udp(0x2, 0x2, 0x0) 7.478015067s ago: executing program 3 (id=3033): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe7) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 5.762056977s ago: executing program 0 (id=3034): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e7551ecdef6"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e7551ecdef6"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [], 0x6b}}) (async) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') (async) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) sendfile(r4, r3, 0x0, 0xffffffff) (async) 5.716466657s ago: executing program 2 (id=3035): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x40048c67) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0x5) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r7 = dup2(r4, r5) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', &(0x7f00000001c0), 0x200a020, &(0x7f00000004c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}]}}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0xfffffdfffffffffc, 0x0, 0x1, r3, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x27800000000, 0x0, 0x2, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 5.716285637s ago: executing program 3 (id=3036): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfc\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xa4\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01L\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x06\xb3\xf0wVq\xe9d\xac\xe9\xaa\x9dR\x00\x9b\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2G\x1b+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2v\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x1e\x11X\f\x0f\xf0\xe2\xb5\xf8', 0xb) ftruncate(r1, 0xffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x58, 0x0, &(0x7f00000001c0)=[@acquire_done={0x40106309, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x1, 0x0, 0x24}, @flat=@binder={0x73622a85, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/221, 0xdd, 0x2, 0x16}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}}], 0x43, 0x0, &(0x7f0000000740)="ff9388205610ea990eaaba1fb8f28d721321e0ee676b6be7e753dfed4627798d969499de1f768fb7f709a95a8827959fc3a7c7d5b2375ce7636e7fa23142d3c6fb86e6"}) 3.950693767s ago: executing program 0 (id=3037): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x27f, @mcast2, 0xffff}, 0x1c, 0x0}}], 0x1, 0x4400c800) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) lsm_set_self_attr(0x65, 0x0, 0x0, 0x0) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0xfffffcf1) 3.950289407s ago: executing program 2 (id=3038): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) (async) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mmap(&(0x7f0000700000/0x4000)=nil, 0x4000, 0x10, 0xb67bcb5a7db220d6, r1, 0x4de77000) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r5, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_fuse_handle_req(r3, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001700)={0x0, &(0x7f0000000280)={0x18, 0x0, 0x7f, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[], 0x0, &(0x7f0000001500)={0xa0, 0x0, 0xc800000, {{0x6, 0x3, 0x0, 0x7, 0x400, 0x0, {0x5, 0xd, 0x9, 0xf, 0xfffffffffffffff6, 0xc, 0x3, 0xffff79e5, 0xb0b, 0x0, 0x1, r5, 0x0, 0x9a, 0x9}}, {0x0, 0x4}}}, &(0x7f0000000dc0)={0x20, 0xffffffffffffffda, 0x2, {0x0, 0x0, 0x7fffffff, 0x1000}}, 0x0}) syz_usb_connect(0x6, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550e, 0x0) (async) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) r6 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) read$FUSE(r6, &(0x7f0000000800)={0x2020}, 0x2020) read(r0, &(0x7f0000000000)=""/183, 0xb7) 3.950075527s ago: executing program 3 (id=3039): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001d0001f800000000000000000a0010"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xb, 0x8000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xfffffff8, 0x3, 0x2, 0x8, 0x2}) 2.038192368s ago: executing program 0 (id=3040): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r1 = socket$inet6(0xa, 0x2, 0x0) unshare(0x62040200) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000005f40)={0x34, r3, 0x1, 0x70bd2d, 0xfffffffc, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000010c0)={0x0, 0x0, "1a5d168e27f7225226a3d66ff1ce8e46"}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x1, 0x7, 0x7fc, 0x96}, 0x20) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) preadv2(r5, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x9, 0xf) 2.037731838s ago: executing program 2 (id=3041): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) removexattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') r3 = openat$cgroup_int(r2, &(0x7f0000000200)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x1002, 0x12) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000440)={0x377, 0x8, '\x00', 0x1, &(0x7f0000000400)=[0x0]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/7, 0x7, 0x2, 0x21}, @fda={0x66646185, 0x9, 0x0, 0x29}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death={0x400c630f, 0x1}], 0x56, 0x0, &(0x7f0000000380)="f22439c47e109c6096ea2bae1f7d03b8c44245ee48a8a255e0db445a21505ddddb4f9e2515db95a1de45d524bb52899f326bab2c88053f7a7475b3ec0373c50a7a4d67df5fde31db1a31325bebcf85b344c0596e65b8"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) (async) removexattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') (async) openat$cgroup_int(r2, &(0x7f0000000200)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) (async) write$cgroup_int(r3, &(0x7f00000003c0)=0x1002, 0x12) (async) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000440)={0x377, 0x8, '\x00', 0x1, &(0x7f0000000400)=[0x0]}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/7, 0x7, 0x2, 0x21}, @fda={0x66646185, 0x9, 0x0, 0x29}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death={0x400c630f, 0x1}], 0x56, 0x0, &(0x7f0000000380)="f22439c47e109c6096ea2bae1f7d03b8c44245ee48a8a255e0db445a21505ddddb4f9e2515db95a1de45d524bb52899f326bab2c88053f7a7475b3ec0373c50a7a4d67df5fde31db1a31325bebcf85b344c0596e65b8"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async) 2.037427048s ago: executing program 3 (id=3042): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@local, 0x800, 0x0, 0x3, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x2, 0x0, 0x4, 0xf, 0x9}, 0x20) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.968443519s ago: executing program 0 (id=3043): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000240)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x3}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x119, 0x75, 0x0, 0x1, [@typed={0x8, 0xe6, 0x0, 0x0, @fd=r2}, @generic="897a22072687e16fdfb849e8dd3bce220a0ca5a0217c43a621fc12ea0f434990fb1debcbb8e87383381132856180c51cf041d37410e5c77c74341ca2fb3527623d0d2d2bc75c54319aadb5a0bf07015b904d89c47e56d4a00a4d5513d73c8f790a8c6205fc5adf3ece36d8bf098573c2ec8b3967135a4bcb4b37bbfc8f6f11a6125f87dedb659579fb127e221eb9a41ce6664ff427973789c92dbadbc1c26802fd2a7e6d3152396176", @nested={0x64, 0x425, 0x0, 0x1, [@nested={0x5d, 0x5b, 0x0, 0x1, [@nested={0x4, 0x38}, @generic="31ee704bf2205ac750d21a6c2f2dfbe2ec632ee97444c6e5508eecb0d002fed7244664b012fdb29ccd21c6e14a7fd67239cda477572049ea05", @nested={0x1a, 0xe8, 0x0, 0x1, [@typed={0x8, 0x99, 0x0, 0x0, @uid}, @generic="8cda759849b5a66f654f3e332a3d"]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x804) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x4c, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x33, 0x0, 0x0}) 7.47497ms ago: executing program 0 (id=3044): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') sendto(r0, &(0x7f0000000300)="4625bb7328291e27241d5e90a0e4f786d5e28b5af9798b0011691dc45f020e74dfe695eaa8b21bf696c4172679af9fbebebeadf3f63f3cff51e31835d1e764bc726794dbf68c7dff17b92f01be4a847434477d29bda8268314722bf3db3c942259e42b7483ddd643b5adb4669476e969a786b2dce51872be184927eb5046aa12290af71829b2b0b16e346e743d869b125c5ac9ce1b90179eb66a7fc54ba9411187dd8beefef3aa382637103d99a2076f7d615475c100cf3dccf2eccacf20aa5dfa577ab1980dfa4304cf95e68602ee8e573defef035bbf9f34cbc01345", 0xdd, 0x2004c845, &(0x7f0000000440)=@sco={0x1f, @none}, 0xc6) r2 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) close(r1) syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x163342, 0x0) read(r1, &(0x7f0000001400)=""/255, 0xff) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r5 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000003c0)="c6714e54", 0x4}], 0x1, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=3046): r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) madvise(&(0x7f000045d000/0x3000)=nil, 0x3000, 0x80000000e) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) pipe2$9p(0x0, 0x80800) sendmmsg$sock(r0, &(0x7f0000000000), 0x0, 0x4000) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e44000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000e44000/0x2000)=nil, 0x2000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ab2000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, 0x0, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a004e2400000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200120002000200000000000000000006002b00020000000000000000000000fe880000000000000000000000000001fc010000020000000000000000000000040004"], 0xc0}}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a004e2400000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200120002000200000000000000000006002b00020000000000000000000000fe880000000000000000000000000001fc010000020000000000000000000000040004"], 0xc0}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe, 0x4010, 0xffffffffffffffff, 0x180000000) (async) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe, 0x4010, 0xffffffffffffffff, 0x180000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8a00, &(0x7f0000000300)={0x8, 0x70, 0x1e0000, {r4}}, 0x20) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) (async) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) kernel console output (not intermixed with test programs): _u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 102.055459][ T3278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.959'. [ 102.165880][ T406] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 102.256324][ T3286] rust_binder: Error while translating object. [ 102.256369][ T3286] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 102.262598][ T3286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:466 [ 102.327371][ T406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.348342][ T406] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 102.357536][ T406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.369032][ T406] usb 2-1: config 0 descriptor?? [ 102.487741][ T3310] fuse: Bad value for 'user_id' [ 102.492689][ T3310] fuse: Bad value for 'user_id' [ 102.525648][ T36] audit: type=1400 audit(1762475802.966:484): avc: denied { accept } for pid=3304 comm="syz.3.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.546567][ T36] audit: type=1400 audit(1762475802.976:485): avc: denied { ioctl } for pid=3304 comm="syz.3.968" path="socket:[16840]" dev="sockfs" ino=16840 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.576574][ T3313] sock: sock_set_timeout: `syz.2.971' (pid 3313) tries to set negative timeout [ 102.781249][ T406] isku 0003:1E7D:3264.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:3264] on usb-dummy_hcd.1-1/input0 [ 102.881367][ T3324] binder: Bad value for 'max' [ 102.956367][ T3329] rust_binder: 606: no such ref 1 [ 103.100442][ T3339] netlink: 68 bytes leftover after parsing attributes in process `syz.0.980'. [ 103.255946][ T406] usb 2-1: USB disconnect, device number 22 [ 103.625903][ T574] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 103.635976][ T406] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 103.765887][ T406] usb 2-1: device descriptor read/64, error -71 [ 103.777067][ T574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 103.788039][ T574] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 103.797120][ T574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.805819][ T574] usb 4-1: config 0 descriptor?? [ 103.811179][ T3364] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 103.948259][ T3368] netlink: 44 bytes leftover after parsing attributes in process `syz.0.990'. [ 104.005953][ T406] usb 2-1: device descriptor read/64, error -71 [ 104.148017][ T36] audit: type=1400 audit(1762475804.596:486): avc: denied { create } for pid=3383 comm="syz.0.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 104.223357][ T574] hid-generic 0003:04F3:0755.0014: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 104.263301][ T406] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 104.277523][ T3397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.998'. [ 104.373413][ T3408] overlayfs: failed to clone lowerpath [ 104.395968][ T406] usb 2-1: device descriptor read/64, error -71 [ 104.435903][ T45] usb 4-1: USB disconnect, device number 28 [ 104.635894][ T406] usb 2-1: device descriptor read/64, error -71 [ 104.745978][ T406] usb usb2-port1: attempt power cycle [ 104.775892][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 104.935892][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 104.943276][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.953469][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.963257][ T45] usb 4-1: config 1 interface 1 has no altsetting 1 [ 104.971324][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.980432][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.988454][ T45] usb 4-1: Product: syz [ 104.992631][ T45] usb 4-1: Manufacturer: syz [ 104.997255][ T45] usb 4-1: SerialNumber: syz [ 105.085902][ T406] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 105.106992][ T406] usb 2-1: device descriptor read/8, error -71 [ 105.211451][ T45] usb 4-1: selecting invalid altsetting 1 [ 105.217519][ T45] cdc_ncm 4-1:1.0: bind() failure [ 105.223416][ T45] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 105.230308][ T45] cdc_ncm 4-1:1.1: bind() failure [ 105.236497][ T45] usb 4-1: USB disconnect, device number 29 [ 105.241699][ T406] usb 2-1: device descriptor read/8, error -71 [ 105.485898][ T406] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 105.507061][ T406] usb 2-1: device descriptor read/8, error -71 [ 105.636971][ T406] usb 2-1: device descriptor read/8, error -71 [ 105.669689][ T3435] netlink: 'syz.0.1010': attribute type 5 has an invalid length. [ 105.731035][ T3444] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 105.739675][ T3444] SELinux: failed to load policy [ 105.746113][ T406] usb usb2-port1: unable to enumerate USB device [ 105.776658][ T3444] rust_binder: Write failure EINVAL in pid:488 [ 105.800669][ T3446] /dev/rnullb0: Can't lookup blockdev [ 105.802078][ T36] audit: type=1400 audit(1762475806.246:487): avc: denied { mounton } for pid=3445 comm="syz.3.1014" path="/syzcgroup/unified/syz3" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 105.845430][ T36] audit: type=1400 audit(1762475806.286:488): avc: denied { execmod } for pid=3447 comm="syz.3.1015" path="/dev/rnullb0" dev="devtmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 106.017384][ T3453] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 106.210972][ T36] audit: type=1400 audit(1762475806.656:489): avc: denied { getopt } for pid=3460 comm="syz.0.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.781719][ T406] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 106.794612][ T406] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.027746][ T574] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 107.186975][ T574] usb 4-1: config 0 has no interfaces? [ 107.193225][ T574] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.202399][ T574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 107.210524][ T574] usb 4-1: SerialNumber: syz [ 107.217385][ T574] usb 4-1: config 0 descriptor?? [ 107.358799][ T3507] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1038'. [ 107.493673][ T3520] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1044'. [ 107.543850][ T3528] overlayfs: failed to clone upperpath [ 107.549983][ T36] audit: type=1400 audit(1762475807.996:490): avc: denied { create } for pid=3527 comm="syz.0.1047" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 107.709580][ T36] audit: type=1400 audit(1762475808.156:491): avc: denied { mounton } for pid=3540 comm="syz.0.1052" path="/file0" dev="ramfs" ino=17397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 107.802681][ T3544] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 108.195003][ T3546] 9pnet_fd: Insufficient options for proto=fd [ 108.213267][ T36] audit: type=1326 audit(1762475808.656:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc618f6c9 code=0x7ffc0000 [ 108.236846][ T36] audit: type=1326 audit(1762475808.656:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc618f6c9 code=0x7ffc0000 [ 108.260521][ T36] audit: type=1326 audit(1762475808.666:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0dc618f6c9 code=0x7ffc0000 [ 108.284158][ T36] audit: type=1326 audit(1762475808.666:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc618f6c9 code=0x7ffc0000 [ 108.307762][ T36] audit: type=1326 audit(1762475808.666:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc618f6c9 code=0x7ffc0000 [ 108.331364][ T36] audit: type=1326 audit(1762475808.666:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0dc618f6c9 code=0x7ffc0000 [ 108.354876][ T36] audit: type=1326 audit(1762475808.666:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc618f6c9 code=0x7ffc0000 [ 108.378587][ T36] audit: type=1326 audit(1762475808.666:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc618f6c9 code=0x7ffc0000 [ 109.300501][ T3575] mmap: syz.0.1063 (3575): VmData 20692992 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 109.432927][ T3581] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1066'. [ 109.442463][ T3581] netlink: 'syz.2.1066': attribute type 28 has an invalid length. [ 109.527064][ T3589] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1068'. [ 109.794296][ T653] usb 4-1: USB disconnect, device number 30 [ 109.809215][ T3594] binder: Unknown parameter 'defcontext01777777777777777777777' [ 109.831338][ T3598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:506 [ 109.832154][ T3598] rust_binder: 506: no such ref 0 [ 109.901458][ T3609] binder: Unknown parameter 'LTO^' [ 110.065927][ T3622] binder: Bad value for 'stats' [ 110.135328][ T3627] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.249303][ T3633] netlink: 'syz.2.1084': attribute type 16 has an invalid length. [ 110.263768][ T3633] netlink: 'syz.2.1084': attribute type 2 has an invalid length. [ 110.271541][ T3633] netlink: 64086 bytes leftover after parsing attributes in process `syz.2.1084'. [ 110.368586][ T3642] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 110.491228][ T3654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1090'. [ 110.715896][ T653] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 110.739771][ T3669] overlayfs: failed to clone upperpath [ 110.865888][ T653] usb 2-1: Using ep0 maxpacket: 16 [ 110.872202][ T653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.883197][ T653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.892977][ T653] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.905797][ T653] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 110.914958][ T653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.923949][ T653] usb 2-1: config 0 descriptor?? [ 110.992599][ T3673] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.002259][ T3673] x_tables: duplicate underflow at hook 1 [ 111.015125][ T3673] 9pnet_virtio: no channels available for device 127.0.0.1 [ 111.023089][ T3673] rust_binder: Error in use_page_slow: ESRCH [ 111.023106][ T3673] rust_binder: use_range failure ESRCH [ 111.029144][ T3673] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 111.034664][ T3673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 111.042808][ T3673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:522 [ 111.167779][ T3684] rust_binder: Write failure EFAULT in pid:526 [ 111.189545][ T3686] netlink: 'syz.3.1105': attribute type 3 has an invalid length. [ 111.275606][ T3692] overlayfs: missing 'lowerdir' [ 111.346703][ T653] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0016/input/input11 [ 111.368362][ T653] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 111.532767][ T3650] binder: Bad value for 'max' [ 111.539385][ T3650] overlayfs: failed to resolve './file0': -2 [ 111.548238][ T45] usb 2-1: USB disconnect, device number 27 [ 112.185425][ T3710] overlayfs: failed to clone lowerpath [ 112.209388][ T3714] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 112.216926][ T3714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 112.241937][ T3722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 112.335885][ T574] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 112.461482][ T3746] netlink: 'syz.0.1127': attribute type 16 has an invalid length. [ 112.469504][ T3746] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1127'. [ 112.485886][ T574] usb 2-1: Using ep0 maxpacket: 32 [ 112.495880][ T45] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 112.506603][ T574] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1006 [ 112.525973][ T574] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 112.538561][ T574] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.547778][ T574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.555794][ T574] usb 2-1: Product: 공❷ⴧ돜橂Ꝟ璶침ﳏ诶펳პ鬇ꌒ쯲㷔淨郖洈澫㎎頟ꠌ⩙ᖇ䈳Ꮸ灕蕵꿥탤嬫랔쪊蟇♡襃靊뼶녤덖뼨ޚ漍﫨丈蚣睠鰊苌Ṹ䐓垧ኴ䟣炽勬絘㨌鏬䶷硯뺃骿ሗ⇼먰쩲㟚䮻輔鑙莿䛂ꇷ৘췾鴏ាכ㓋꣼ἶ㓅垅㘟찐ꍦ㕈㕅쥣Ž⍭댏既饛䥾黛䌥 [ 112.590217][ T574] usb 2-1: Manufacturer: 粕缥䯾谚뺈㥶笊瀟燎쉲깈㻕뉘躭줲硾첀ᖊヨ햽Ω莸殺᭎戁㐼ᆄຂꞜ鮯ᠷ論햹஝㡰ɂꋪ㷇꤉䐏␧쉰וּ趼䛐ढ჉䦈Ẍଈ겊院ᮤ໳쭨溿㯚㔚ꭊ秡￣涝앮܌뛦嚾筒㮇ꈠᔂ飂嚞ຘ㮜娬⿬⛉㸶䜋仛䯺돆䓨䫽棰챢웱꣜᫃局훴遼直鿋焫ꕸ뜩␦෤鴼 [ 112.590896][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 112.590915][ T36] audit: type=1326 audit(1762475813.046:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3747 comm="syz.2.1120" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dc618f6c9 code=0x0 [ 112.622475][ T574] usb 2-1: SerialNumber: ⺹樁仭쟁Ვ쇨⊯赯ﳨ雀㗔錳ꤥᇈ魃᧎㣴高楎䍄琶ꙗ꿕쵌᳈ᨴ뀑㺷顜䜩轟톩㡇娐㤳ꂖ浤䌋⢖ﲱ듎氅糰뫑溉䡡帬嶅湢誳稥餗謖㈣쿍⚪⿼濒ቚ꺯갅칲꓋ﾇ誝លҝ튦ꖊ弝 [ 112.707027][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.719983][ T45] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 112.729129][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.738034][ T45] usb 4-1: config 0 descriptor?? [ 112.845763][ T3782] fuse: Bad value for 'fd' [ 112.860489][ T3784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'. [ 112.889661][ T36] audit: type=1400 audit(1762475813.336:544): avc: denied { create } for pid=3785 comm="syz.0.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.922383][ T3794] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 113.152477][ T45] waltop 0003:172F:0037.0017: unknown main item tag 0x0 [ 113.159644][ T45] waltop 0003:172F:0037.0017: unknown main item tag 0x0 [ 113.166805][ T45] waltop 0003:172F:0037.0017: unknown main item tag 0x0 [ 113.173786][ T45] waltop 0003:172F:0037.0017: unknown main item tag 0x0 [ 113.180810][ T45] waltop 0003:172F:0037.0017: unknown main item tag 0x0 [ 113.188616][ T45] waltop 0003:172F:0037.0017: hidraw0: USB HID v0.00 Device [HID 172f:0037] on usb-dummy_hcd.3-1/input0 [ 113.351506][ T3722] rust_binder: Error in use_page_slow: ESRCH [ 113.351540][ T3722] rust_binder: use_range failure ESRCH [ 113.357687][ T3722] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 113.363212][ T3722] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 113.371141][ T3722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:536 [ 113.381032][ T45] usb 4-1: USB disconnect, device number 31 [ 113.460754][ T3815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 113.579426][ T3824] fuseblk: Bad value for 'fd' [ 113.908422][ T36] audit: type=1400 audit(1762475814.356:545): avc: denied { watch watch_reads } for pid=3838 comm="syz.0.1161" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 113.919434][ T3841] sock: sock_timestamping_bind_phc: sock not bind to device [ 113.967730][ T3844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1163'. [ 114.028690][ T36] audit: type=1326 audit(1762475814.476:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.0.1168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f044758f6c9 code=0x0 [ 114.171486][ T3865] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.180575][ T3865] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.180790][ T3865] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 114.187317][ T3865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:557 [ 114.281068][ T3872] netlink: 'syz.3.1172': attribute type 4 has an invalid length. [ 114.298305][ T3872] netlink: 'syz.3.1172': attribute type 5 has an invalid length. [ 114.306181][ T3872] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1172'. [ 114.435429][ T3883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.443384][ T3883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:568 [ 114.450698][ T3883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.092562][ T574] cdc_ncm 2-1:1.0: bind() failure [ 115.098928][ T574] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 115.105758][ T574] cdc_ncm 2-1:1.1: bind() failure [ 115.112555][ T574] usb 2-1: USB disconnect, device number 28 [ 115.147461][ T36] audit: type=1400 audit(1762475815.596:547): avc: denied { listen } for pid=3906 comm="syz.1.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.177369][ T36] audit: type=1400 audit(1762475815.626:548): avc: denied { remount } for pid=3908 comm="syz.1.1186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 115.202541][ T36] audit: type=1400 audit(1762475815.656:549): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 115.247572][ T3913] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 115.255184][ T3913] SELinux: failed to load policy [ 115.267603][ T3913] tipc: Started in network mode [ 115.272731][ T3913] tipc: Node identity ac14140f, cluster identity 4711 [ 115.279884][ T3913] tipc: New replicast peer: 255.255.255.255 [ 115.286108][ T3913] tipc: Enabled bearer , priority 10 [ 115.341107][ T36] audit: type=1400 audit(1762475815.786:550): avc: denied { map } for pid=3914 comm="syz.3.1189" path="socket:[19233]" dev="sockfs" ino=19233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.353193][ T3915] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.365299][ T3916] rust_binder: Error in use_page_slow: ESRCH [ 115.372205][ T3916] rust_binder: use_range failure ESRCH [ 115.378797][ T3916] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 115.384394][ T3916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 115.393009][ T3916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:576 [ 115.403414][ T3920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.421400][ T3920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.434713][ T3920] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 115.440673][ T3920] syzkaller1: Refused to change device type [ 115.446974][ T3920] rust_binder: inc_ref_done called when no active inc_refs [ 115.489457][ T3926] cannot load conntrack support for proto=3 [ 115.503941][ T36] audit: type=1400 audit(1762475815.946:551): avc: denied { connect } for pid=3925 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.558434][ T36] audit: type=1400 audit(1762475816.006:552): avc: denied { shutdown } for pid=3925 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.635925][ T390] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 115.675918][ T574] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 115.765920][ T390] usb 2-1: device descriptor read/64, error -71 [ 115.825889][ T574] usb 4-1: Using ep0 maxpacket: 16 [ 115.832318][ T574] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 115.840620][ T574] usb 4-1: config 0 has no interface number 0 [ 115.846919][ T574] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 115.857037][ T574] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 115.867122][ T574] usb 4-1: config 0 interface 41 has no altsetting 0 [ 115.875273][ T574] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 115.884396][ T574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.892490][ T574] usb 4-1: Product: syz [ 115.896733][ T574] usb 4-1: Manufacturer: syz [ 115.901350][ T574] usb 4-1: SerialNumber: syz [ 115.906801][ T574] usb 4-1: config 0 descriptor?? [ 115.912054][ T3924] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 115.919343][ T3924] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 116.015904][ T390] usb 2-1: device descriptor read/64, error -71 [ 116.127078][ T3924] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 116.134300][ T3924] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 116.255945][ T390] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 116.342965][ T574] Error reading MAC address [ 116.348073][ T3931] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 116.355344][ T3931] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 116.385891][ T390] usb 2-1: device descriptor read/64, error -71 [ 116.415904][ T1965] tipc: Node number set to 2886997007 [ 116.563832][ T3930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.573065][ T3930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.581363][ T574] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 116.592759][ T574] usb 4-1: USB disconnect, device number 32 [ 116.625258][ T3937] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.625583][ T3938] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 116.632208][ T390] usb 2-1: device descriptor read/64, error -71 [ 116.642399][ T3938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:586 [ 116.682054][ T3942] mmap: syz.3.1198 (3942) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.755953][ T390] usb usb2-port1: attempt power cycle [ 117.025942][ T574] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 117.095917][ T390] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 117.117160][ T390] usb 2-1: device descriptor read/8, error -71 [ 117.155896][ T574] usb 4-1: device descriptor read/64, error -71 [ 117.247024][ T390] usb 2-1: device descriptor read/8, error -71 [ 117.395971][ T574] usb 4-1: device descriptor read/64, error -71 [ 117.485908][ T390] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 117.507079][ T390] usb 2-1: device descriptor read/8, error -71 [ 117.588065][ T3958] overlayfs: failed to clone upperpath [ 117.606500][ T3963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1205'. [ 117.617734][ T3963] overlayfs: failed to clone lowerpath [ 117.635969][ T574] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 117.646981][ T390] usb 2-1: device descriptor read/8, error -71 [ 117.764169][ T390] usb usb2-port1: unable to enumerate USB device [ 117.776072][ T574] usb 4-1: device descriptor read/64, error -71 [ 118.015952][ T574] usb 4-1: device descriptor read/64, error -71 [ 118.126039][ T574] usb usb4-port1: attempt power cycle [ 118.142257][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 118.142275][ T36] audit: type=1400 audit(1762475818.586:559): avc: denied { create } for pid=3970 comm="syz.0.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 118.465959][ T574] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 118.497541][ T574] usb 4-1: device descriptor read/8, error -71 [ 118.505508][ T3977] netlink: 'syz.2.1210': attribute type 27 has an invalid length. [ 118.542073][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.552821][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.562051][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.570220][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.579517][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.587788][ T110] loop7: unable to read partition table [ 118.598695][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.607912][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.616220][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.625430][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.633653][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.642851][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.651216][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.660428][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.668691][ T574] usb 4-1: device descriptor read/8, error -71 [ 118.668917][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.684165][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.714556][ T3992] fuse: Bad value for 'fd' [ 118.757206][ T3999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:685 [ 118.777774][ T36] audit: type=1400 audit(1762475819.226:560): avc: denied { bind } for pid=4001 comm="syz.1.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.894276][ T4005] /dev/rnullb0: Can't lookup blockdev [ 118.905908][ T574] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 118.936997][ T574] usb 4-1: device descriptor read/8, error -71 [ 119.066917][ T574] usb 4-1: device descriptor read/8, error -71 [ 119.176555][ T574] usb usb4-port1: unable to enumerate USB device [ 119.747984][ T4052] skbuff: bad partial csum: csum=65506/2 headroom=130 headlen=65526 [ 119.768454][ T36] audit: type=1400 audit(1762475820.216:561): avc: denied { execmem } for pid=4055 comm="syz.3.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 119.800816][ T4060] rust_binder: Error while translating object. [ 119.800878][ T4060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 119.807893][ T4060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:597 [ 120.102597][ T390] kernel write not supported for file /607/clear_refs (pid: 390 comm: kworker/1:3) [ 120.127127][ T4097] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.147898][ T4099] /dev/rnullb0: Can't lookup blockdev [ 120.180783][ T36] audit: type=1400 audit(1762475820.626:562): avc: denied { search } for pid=4100 comm="syz.3.1256" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 120.435905][ T390] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 120.469455][ T4111] overlayfs: failed to clone lowerpath [ 120.596142][ T390] usb 4-1: Using ep0 maxpacket: 16 [ 120.604106][ T390] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 120.615294][ T390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.626439][ T390] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 120.639677][ T390] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 120.648934][ T390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.661667][ T390] usb 4-1: config 0 descriptor?? [ 120.869022][ T36] audit: type=1400 audit(1762475821.316:563): avc: denied { write } for pid=4100 comm="syz.3.1256" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 120.912347][ T390] usbhid 4-1:0.0: can't add hid device: -71 [ 120.918449][ T390] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 120.919449][ T4130] /dev/rnullb0: Can't lookup blockdev [ 120.928244][ T390] usb 4-1: USB disconnect, device number 37 [ 120.997989][ T4136] fuse: Bad value for 'fd' [ 121.074515][ T574] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 121.084085][ T574] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.395922][ T390] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 121.557142][ T390] usb 4-1: config 0 has no interfaces? [ 121.563522][ T390] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.572673][ T390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 121.580746][ T390] usb 4-1: SerialNumber: syz [ 121.588138][ T390] usb 4-1: config 0 descriptor?? [ 121.848462][ T390] usb 4-1: USB disconnect, device number 38 [ 122.158680][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.167627][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.167666][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.182622][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.182664][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.197669][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.197719][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.212795][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.212839][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.227806][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.227854][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.242733][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.242776][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.257777][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.257826][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.272629][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.272671][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.287487][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.287535][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.302410][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.302470][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.317327][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.317371][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.332141][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.332188][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.346973][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.347012][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.361874][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.361922][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.376760][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.376808][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.392330][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.392375][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.407263][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.407312][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.419095][ T4181] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.422228][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.424303][ T36] audit: type=1400 audit(1762475822.876:564): avc: denied { watch } for pid=4180 comm="syz.3.1281" path="/216/file0" dev="tmpfs" ino=1194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.428711][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.428729][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.466127][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.481040][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.481087][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.495875][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.495910][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.510683][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.510729][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.525558][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.525607][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.540839][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.540892][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.555966][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.556017][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.571011][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.571056][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.585937][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.585984][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.592919][ T4191] binder: Bad value for 'stats' [ 122.603977][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.606228][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.621306][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.621356][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.636474][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.636522][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.651680][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.651728][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.666902][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.666950][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.681798][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.681852][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.688906][ T4198] netlink: 'syz.2.1287': attribute type 4 has an invalid length. [ 122.696765][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.704475][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.708568][ T4198] netlink: 'syz.2.1287': attribute type 4 has an invalid length. [ 122.710742][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.720943][ T4198] 9pnet_fd: Insufficient options for proto=fd [ 122.727872][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.748272][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.748324][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.763218][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.763564][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.778353][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.778413][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.793212][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.793264][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.808437][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.808491][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.823532][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.823585][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.838495][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.838545][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.853530][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.853579][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.868526][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.868566][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.883357][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.883407][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.898187][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.898225][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.912986][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.913033][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.927855][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.927902][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.942674][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.942729][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.957528][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.957568][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.972341][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.972385][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.987178][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 122.987217][ T4177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 123.002331][ T4177] rust_binder: Write failure EINVAL in pid:706 [ 123.259582][ T36] audit: type=1400 audit(1762475823.706:565): avc: denied { create } for pid=4211 comm="syz.2.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.259829][ T4212] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1291'. [ 123.276192][ T36] audit: type=1400 audit(1762475823.706:566): avc: denied { write } for pid=4211 comm="syz.2.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.315332][ T390] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 123.323363][ T36] audit: type=1400 audit(1762475823.706:567): avc: denied { nlmsg_write } for pid=4211 comm="syz.2.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.337617][ T4218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1293'. [ 123.344463][ T36] audit: type=1400 audit(1762475823.766:568): avc: denied { nlmsg_write } for pid=4214 comm="syz.3.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 123.373021][ T4216] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.445511][ T36] audit: type=1400 audit(1762475823.886:569): avc: denied { accept } for pid=4239 comm="syz.0.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.471920][ T36] audit: type=1400 audit(1762475823.916:570): avc: denied { nlmsg_read } for pid=4241 comm="syz.0.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.506120][ T390] usb 2-1: device descriptor read/64, error -71 [ 123.635941][ T63] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 123.745897][ T390] usb 2-1: device descriptor read/64, error -71 [ 123.787019][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.796930][ T63] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 123.806021][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.814985][ T63] usb 4-1: config 0 descriptor?? [ 123.985957][ T390] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 124.109544][ T36] audit: type=1400 audit(1762475824.556:571): avc: denied { map } for pid=4259 comm="syz.0.1307" path="pipe:[1558]" dev="pipefs" ino=1558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 124.132531][ T390] usb 2-1: device descriptor read/64, error -71 [ 124.226805][ T63] usbhid 4-1:0.0: can't add hid device: -71 [ 124.233780][ T63] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 124.242992][ T63] usb 4-1: USB disconnect, device number 39 [ 124.377754][ T390] usb 2-1: device descriptor read/64, error -71 [ 124.485996][ T390] usb usb2-port1: attempt power cycle [ 124.742851][ T4295] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.743043][ T4295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:641 [ 124.807477][ T4296] rust_binder: Error in use_page_slow: ESRCH [ 124.816735][ T4296] rust_binder: use_range failure ESRCH [ 124.822877][ T4296] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 124.828455][ T390] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 124.828493][ T4296] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 124.844166][ T4296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:641 [ 124.857113][ T390] usb 2-1: device descriptor read/8, error -71 [ 124.997110][ T390] usb 2-1: device descriptor read/8, error -71 [ 125.235916][ T390] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 125.256970][ T390] usb 2-1: device descriptor read/8, error -71 [ 125.340438][ T4303] fuse: Bad value for 'fd' [ 125.384787][ T36] audit: type=1400 audit(1762475825.826:572): avc: denied { bind } for pid=4308 comm="syz.2.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.389392][ T390] usb 2-1: device descriptor read/8, error -71 [ 125.527210][ T390] usb usb2-port1: unable to enumerate USB device [ 125.556295][ T4328] fuse: Bad value for 'fd' [ 125.671587][ T36] audit: type=1400 audit(1762475826.116:573): avc: denied { create } for pid=4339 comm="syz.3.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.770147][ T4363] fuse: Bad value for 'fd' [ 125.838138][ T4378] traps: syz.0.1345[4378] attempts to use CLI/STI, pretending it's a NOP, ip:200000000002 [ 125.943871][ T4399] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 125.976561][ T4401] fuse: Bad value for 'fd' [ 126.022154][ T4410] netlink: 'syz.2.1357': attribute type 4 has an invalid length. [ 126.039819][ T4410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 126.154613][ T390] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 126.209242][ T4442] overlayfs: failed to clone upperpath [ 126.325866][ T390] usb 4-1: Using ep0 maxpacket: 16 [ 126.336594][ T390] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 126.347112][ T390] usb 4-1: config 0 has no interface number 0 [ 126.353462][ T390] usb 4-1: config 0 interface 106 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 126.366445][ T4451] fuse: Bad value for 'fd' [ 126.373556][ T390] usb 4-1: New USB device found, idVendor=2cb7, idProduct=0105, bcdDevice=a3.2c [ 126.383006][ T390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.391206][ T390] usb 4-1: Product: syz [ 126.395567][ T390] usb 4-1: Manufacturer: syz [ 126.400398][ T390] usb 4-1: SerialNumber: syz [ 126.406216][ T390] usb 4-1: config 0 descriptor?? [ 126.411640][ T4389] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 126.621692][ T4389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.630440][ T4389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.768056][ T4460] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 127.244454][ T4521] fuse: Bad value for 'user_id' [ 127.249455][ T4521] fuse: Bad value for 'user_id' [ 127.698713][ T4531] /dev/loop0: Can't lookup blockdev [ 127.817541][ T4541] fuse: Bad value for 'fd' [ 128.014188][ T4549] netlink: 'syz.0.1396': attribute type 6 has an invalid length. [ 128.051756][ T4557] overlayfs: failed to clone lowerpath [ 128.285882][ T390] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 128.415885][ T390] usb 2-1: device descriptor read/64, error -71 [ 128.655884][ T390] usb 2-1: device descriptor read/64, error -71 [ 128.741840][ T4596] fuse: Bad value for 'fd' [ 128.780190][ T4596] overlayfs: failed to resolve '/z(&epEЙ|Ydz&>ǀK#g': -2 [ 128.790292][ T4596] overlayfs: failed to resolve '/z(&epEЙ|Ydz&>ǀK#g': -2 [ 128.818623][ T4599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1413'. [ 128.827816][ T4598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1413'. [ 128.855709][ T4603] overlayfs: missing 'lowerdir' [ 128.896123][ T390] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 129.035884][ T390] usb 2-1: device descriptor read/64, error -71 [ 129.071475][ T406] usb 4-1: USB disconnect, device number 40 [ 129.146383][ T4615] 9pnet_fd: Insufficient options for proto=fd [ 129.305911][ T390] usb 2-1: device descriptor read/64, error -71 [ 129.343651][ T4624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.349432][ T4624] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 129.355993][ T4624] rust_binder: Error while translating object. [ 129.368252][ T4624] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.374452][ T4624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:678 [ 129.425980][ T390] usb usb2-port1: attempt power cycle [ 129.624176][ T4630] rust_binder: Write failure EFAULT in pid:684 [ 129.739210][ T4635] fuse: Bad value for 'fd' [ 129.785883][ T390] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 129.819711][ T390] usb 2-1: device descriptor read/8, error -71 [ 129.855511][ T4660] fuse: Bad value for 'fd' [ 129.926182][ T4665] netlink: 'syz.0.1435': attribute type 6 has an invalid length. [ 129.936611][ T4665] overlayfs: failed to resolve '/xKNN}ͤso0ASjR[УHuq[Y$#ABƾJu]GMx*/ah': -2 [ 129.957066][ T390] usb 2-1: device descriptor read/8, error -71 [ 130.169845][ T4675] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.170539][ T4674] rust_binder: Error in use_page_slow: ESRCH [ 130.177133][ T4674] rust_binder: use_range failure ESRCH [ 130.183188][ T4674] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 130.188741][ T4674] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 130.195920][ T390] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 130.197156][ T4674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:691 [ 130.229062][ T390] usb 2-1: device descriptor read/8, error -71 [ 130.370707][ T390] usb 2-1: device descriptor read/8, error -71 [ 130.486426][ T390] usb usb2-port1: unable to enumerate USB device [ 130.523459][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 130.523476][ T36] audit: type=1400 audit(1762475831.969:578): avc: denied { accept } for pid=4686 comm="syz.3.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.577354][ T4691] fuse: Bad value for 'fd' [ 130.581876][ T4690] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.582324][ T4687] rust_binder: Error in use_page_slow: ESRCH [ 130.588975][ T4687] rust_binder: use_range failure ESRCH [ 130.595215][ T4687] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 130.601216][ T4687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 130.609657][ T4687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:705 [ 130.761287][ T4714] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 130.825691][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.836345][ T36] audit: type=1400 audit(1762475832.239:579): avc: denied { relabelto } for pid=4713 comm="syz.3.1451" name="cgroup" dev="tmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 130.868937][ T36] audit: type=1400 audit(1762475832.239:580): avc: denied { associate } for pid=4713 comm="syz.3.1451" name="cgroup" dev="tmpfs" ino=1312 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 130.896729][ T36] audit: type=1400 audit(1762475832.239:581): avc: denied { map } for pid=4713 comm="syz.3.1451" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 130.921097][ T36] audit: type=1400 audit(1762475832.239:582): avc: denied { execute } for pid=4713 comm="syz.3.1451" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 130.945599][ T36] audit: type=1400 audit(1762475832.249:583): avc: denied { unlink } for pid=295 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 130.989401][ T4719] fuse: Bad value for 'fd' [ 131.017378][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.026566][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.035028][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.044219][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.052153][ T110] loop7: unable to read partition table [ 131.061335][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.070583][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.087314][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.096530][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.111746][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.120963][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.129185][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.138394][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.148693][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.157901][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.249843][ T4734] netlink: 'syz.0.1456': attribute type 8 has an invalid length. [ 131.333196][ T36] audit: type=1400 audit(1762475832.779:584): avc: denied { map } for pid=4736 comm="syz.2.1458" path="socket:[21657]" dev="sockfs" ino=21657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 131.425911][ T45] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 131.576930][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 131.587910][ T45] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 131.597004][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.606020][ T45] usb 2-1: config 0 descriptor?? [ 131.611295][ T4732] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 131.863920][ T4747] rust_binder: Write failure EINVAL in pid:728 [ 131.889071][ T36] audit: type=1400 audit(1762475833.339:585): avc: denied { setcurrent } for pid=4750 comm="syz.3.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 132.026158][ T45] hid-generic 0003:04F3:0755.0019: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 132.267784][ T406] usb 2-1: USB disconnect, device number 41 [ 132.429086][ T4767] fuse: Bad value for 'fd' [ 132.458652][ T4773] overlayfs: missing 'workdir' [ 132.795299][ T4799] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 132.802755][ T4799] rust_binder: Write failure EINVAL in pid:761 [ 132.821771][ T4801] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1480'. [ 132.883003][ T36] audit: type=1400 audit(1762475834.329:586): avc: denied { accept } for pid=4806 comm="syz.1.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.085890][ T45] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 133.236982][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 133.247998][ T45] usb 4-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 133.257067][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.265752][ T45] usb 4-1: config 0 descriptor?? [ 133.271052][ T4801] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.680297][ T45] betop 0003:8380:1850.001A: item fetching failed at offset 3/5 [ 133.688169][ T45] betop 0003:8380:1850.001A: parse failed [ 133.693993][ T45] betop 0003:8380:1850.001A: probe with driver betop failed with error -22 [ 133.898466][ T4801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:742 [ 133.899328][ T406] usb 4-1: USB disconnect, device number 41 [ 133.995927][ T1965] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 134.155867][ T1965] usb 2-1: Using ep0 maxpacket: 32 [ 134.162260][ T1965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.173375][ T1965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.183242][ T1965] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.192495][ T1965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.201505][ T1965] usb 2-1: config 0 descriptor?? [ 134.213222][ T1965] hub 2-1:0.0: USB hub found [ 134.414131][ T1965] hub 2-1:0.0: 1 port detected [ 134.422503][ T1965] hub 2-1:0.0: config failed, can't get hub status (err -5) [ 134.441845][ T36] audit: type=1400 audit(1762475835.889:587): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 134.446274][ T1965] usbhid 2-1:0.0: can't add hid device: -71 [ 134.493906][ T1965] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 134.518764][ T4851] netlink: 'syz.0.1498': attribute type 46 has an invalid length. [ 134.527346][ T1965] usb 2-1: USB disconnect, device number 42 [ 135.082321][ T4885] rust_binder: 4881 RLIMIT_NICE not set [ 135.082369][ T4885] rust_binder: 783: no such ref 0 [ 135.099853][ T4887] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1511'. [ 135.177614][ T4905] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 135.177645][ T4905] rust_binder: Error while translating object. [ 135.195961][ T4905] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 135.202352][ T4905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:786 [ 135.354112][ T4939] /dev/rnullb0: Can't lookup blockdev [ 135.374124][ T4942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:790 [ 135.491462][ T4967] futex_wake_op: syz.2.1537 tries to shift op by -1; fix this program [ 135.563730][ T4972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:759 [ 135.580551][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 135.580595][ T36] audit: type=1400 audit(1762475837.029:674): avc: denied { read } for pid=4973 comm="syz.3.1540" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 135.616790][ T36] audit: type=1400 audit(1762475837.029:675): avc: denied { open } for pid=4973 comm="syz.3.1540" path="/255/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 135.648062][ T4941] fuse: Bad value for 'rootmode' [ 135.660768][ T4978] binder: Unknown parameter 'fscontext?}' [ 135.667632][ T4979] binder: Unknown parameter 'fscontext?}' [ 135.685403][ T4983] rust_binder: Got transaction with invalid offset. [ 135.685470][ T4983] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 135.692221][ T4983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:770 [ 135.711632][ T36] audit: type=1400 audit(1762475837.159:676): avc: denied { sqpoll } for pid=4982 comm="syz.3.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 135.868073][ T5002] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 135.968457][ T5006] rust_binder: Write failure EFAULT in pid:793 [ 135.983790][ T5009] binder: Unknown parameter 'conte:t' [ 136.035173][ T5014] /dev/rnullb0: Can't lookup blockdev [ 136.058256][ T36] audit: type=1400 audit(1762475837.509:677): avc: denied { read } for pid=5016 comm="syz.3.1553" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.086600][ T36] audit: type=1400 audit(1762475837.509:678): avc: denied { open } for pid=5016 comm="syz.3.1553" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.115295][ T36] audit: type=1400 audit(1762475837.509:679): avc: denied { ioctl } for pid=5016 comm="syz.3.1553" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.140530][ T36] audit: type=1400 audit(1762475837.509:680): avc: denied { map } for pid=5016 comm="syz.3.1553" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.167673][ T36] audit: type=1400 audit(1762475837.559:681): avc: denied { setattr } for pid=5023 comm="syz.3.1556" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 136.210979][ T5036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1559'. [ 136.704348][ T5053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1564'. [ 136.713741][ T5053] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1564'. [ 136.885664][ T36] audit: type=1400 audit(1762475838.329:682): avc: denied { read } for pid=5063 comm="syz.2.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 136.937645][ T36] audit: type=1400 audit(1762475838.389:683): avc: denied { setopt } for pid=5063 comm="syz.2.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.234949][ T5069] /dev/loop0: Can't lookup blockdev [ 137.255061][ T5074] overlayfs: failed to clone upperpath [ 137.274547][ T5076] fuse: Bad value for 'fd' [ 137.302551][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1574'. [ 137.324280][ T5082] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1575'. [ 137.335886][ T390] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 137.485866][ T390] usb 2-1: Using ep0 maxpacket: 16 [ 137.493740][ T390] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 137.503023][ T390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.511133][ T390] usb 2-1: Product: syz [ 137.515349][ T390] usb 2-1: Manufacturer: syz [ 137.520009][ T390] usb 2-1: SerialNumber: syz [ 137.530153][ T390] usb 2-1: config 0 descriptor?? [ 137.536732][ T390] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 137.544563][ T390] usb 2-1: Detected FT4233HP [ 137.552494][ T5084] rust_binder: 815: no such ref 3 [ 137.557698][ T5084] rust_binder: 815: no such ref 3 [ 137.562765][ T5084] rust_binder: 815: no such ref 2 [ 137.567836][ T5084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:815 [ 137.585995][ T5086] rust_binder: 817: no such ref 2 [ 137.867461][ T5095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1581'. [ 137.896385][ T653] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 137.942694][ T390] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 137.950361][ T390] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 137.959452][ T390] usb 2-1: USB disconnect, device number 43 [ 137.966741][ T390] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 137.976657][ T390] ftdi_sio 2-1:0.0: device disconnected [ 138.045863][ T653] usb 4-1: Using ep0 maxpacket: 16 [ 138.052137][ T653] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 138.060451][ T653] usb 4-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 138.070697][ T653] usb 4-1: config 0 has no interface number 0 [ 138.076858][ T653] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 138.088630][ T653] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 138.099966][ T653] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 138.110940][ T653] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 138.122176][ T653] usb 4-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 138.132320][ T653] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 138.145403][ T653] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 138.154760][ T653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.163409][ T653] usb 4-1: config 0 descriptor?? [ 138.168693][ T5088] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 138.175970][ T5088] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 138.386036][ T653] usb 4-1: USB disconnect, device number 42 [ 138.469039][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.494753][ T5117] bpf: Bad value for 'uid' [ 138.529368][ T5121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1289 sclass=netlink_route_socket pid=5121 comm=syz.0.1591 [ 138.550204][ T5121] netlink: 'syz.0.1591': attribute type 6 has an invalid length. [ 138.567897][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.577085][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 138.585071][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.594285][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 138.602160][ T110] loop7: unable to read partition table [ 138.613153][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.622405][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 138.630623][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.639813][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 138.649620][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.649885][ T5130] overlayfs: cannot append lower layer [ 138.658825][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 138.659909][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.681322][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 138.689446][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.698647][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.307405][ T5157] /dev/sr0: Can't lookup blockdev [ 139.487295][ T5172] IPv6: NLM_F_CREATE should be specified when creating new route [ 139.725899][ T406] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 139.879492][ T406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 139.899749][ T406] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 139.912484][ T406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.926931][ T406] usb 4-1: config 0 descriptor?? [ 139.933597][ T5173] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 139.965410][ T5204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5204 comm=syz.1.1615 [ 140.245887][ T390] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 140.350181][ T406] usbhid 4-1:0.0: can't add hid device: -71 [ 140.356324][ T406] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 140.364915][ T406] usb 4-1: USB disconnect, device number 43 [ 140.375865][ T390] usb 2-1: device descriptor read/64, error -71 [ 140.571160][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.578328][ T5208] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.585571][ T5208] bridge_slave_0: entered allmulticast mode [ 140.592107][ T5208] bridge_slave_0: entered promiscuous mode [ 140.600797][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.608019][ T5208] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.615163][ T5208] bridge_slave_1: entered allmulticast mode [ 140.621607][ T5208] bridge_slave_1: entered promiscuous mode [ 140.627914][ T390] usb 2-1: device descriptor read/64, error -71 [ 140.640813][ T13] bridge_slave_1: left allmulticast mode [ 140.646885][ T13] bridge_slave_1: left promiscuous mode [ 140.652601][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.660617][ T13] bridge_slave_0: left allmulticast mode [ 140.666477][ T13] bridge_slave_0: left promiscuous mode [ 140.672227][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.865902][ T390] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 140.877976][ T13] veth1_macvtap: left promiscuous mode [ 140.910529][ T5219] futex_wake_op: syz.3.1620 tries to shift op by 144; fix this program [ 140.940356][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 140.940377][ T36] audit: type=1400 audit(1762475842.389:694): avc: denied { map } for pid=5215 comm="syz.2.1619" path="socket:[23723]" dev="sockfs" ino=23723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 141.005924][ T390] usb 2-1: device descriptor read/64, error -71 [ 141.016479][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.023542][ T5208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.031058][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.038130][ T5208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.066242][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.073764][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.087921][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.095052][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.113591][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.120707][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.131428][ T5233] rust_binder: Error while translating object. [ 141.131459][ T5233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 141.137969][ T5232] rust_binder: Error while translating object. [ 141.146697][ T5233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:849 [ 141.147446][ T5232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 141.162768][ T5232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:849 [ 141.188627][ T5208] veth0_vlan: entered promiscuous mode [ 141.210375][ T5208] veth1_macvtap: entered promiscuous mode [ 141.255878][ T390] usb 2-1: device descriptor read/64, error -71 [ 141.278527][ T36] audit: type=1400 audit(1762475842.729:695): avc: denied { execute } for pid=5240 comm="syz.0.1625" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.324076][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.331526][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.331601][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.345034][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.345077][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.358530][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.358596][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.372122][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.372172][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.386893][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.386942][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.387009][ T390] usb usb2-port1: attempt power cycle [ 141.393399][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.406654][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.420243][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.420287][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.434055][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.434108][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.447776][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.447827][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.461389][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.461447][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.475062][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.475114][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.488704][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.488754][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.502532][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.502580][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.516267][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.516318][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.530046][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.530092][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.543553][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.543621][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.557362][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.557414][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.571155][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.571208][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.584665][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.584720][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.594864][ T5255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:859 [ 141.598516][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.607896][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.621211][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.621263][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.634674][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.634727][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.648514][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.648566][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.661969][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.662017][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.675467][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.675533][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.689133][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.689185][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.702651][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.702707][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.716178][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.716228][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.730378][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.730427][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.737788][ T5262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:863 [ 141.744273][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.753676][ T390] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 141.759685][ T36] audit: type=1400 audit(1762475843.209:696): avc: denied { append } for pid=5264 comm="syz.3.1633" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 141.759975][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.798611][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.798661][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.812381][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.812432][ T5246] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 141.826078][ T5246] rust_binder: Write failure EINVAL in pid:12 [ 141.827098][ T390] usb 2-1: device descriptor read/8, error -71 [ 141.848665][ T5267] SELinux: security_context_str_to_sid () failed with errno=-22 [ 141.877516][ T5275] rust_binder: Write failure EINVAL in pid:23 [ 141.967623][ T390] usb 2-1: device descriptor read/8, error -71 [ 142.074163][ T5289] IPv6: syztnl0: Disabled Multicast RS [ 142.130037][ T5298] tmpfs: Unknown parameter 'nr_bloDks' [ 142.136004][ T5298] __vm_enough_memory: pid: 5298, comm: syz.0.1644, bytes: 18014402804453376 not enough memory for the allocation [ 142.165881][ T331] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 142.198020][ T5310] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.198143][ T5310] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 142.225894][ T390] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 142.234507][ T5316] rust_binder: Error while translating object. [ 142.241672][ T5316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 142.248187][ T5316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:54 [ 142.278523][ T390] usb 2-1: device descriptor read/8, error -71 [ 142.325885][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 142.331492][ T331] usb 4-1: too many configurations: 97, using maximum allowed: 8 [ 142.340741][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.351177][ T331] usb 4-1: config 0 has no interfaces? [ 142.358113][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.368301][ T331] usb 4-1: config 0 has no interfaces? [ 142.374559][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.387611][ T331] usb 4-1: config 0 has no interfaces? [ 142.396681][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.408778][ T331] usb 4-1: config 0 has no interfaces? [ 142.415060][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.416030][ T5323] syz.2.1652(5323): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 142.425532][ T331] usb 4-1: config 0 has no interfaces? [ 142.444710][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.455113][ T331] usb 4-1: config 0 has no interfaces? [ 142.465897][ T390] usb 2-1: device descriptor read/8, error -71 [ 142.466047][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.483030][ T331] usb 4-1: config 0 has no interfaces? [ 142.489647][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.500011][ T331] usb 4-1: config 0 has no interfaces? [ 142.517217][ T5282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:871 [ 142.518182][ T331] usb 4-1: string descriptor 0 read error: -71 [ 142.538328][ T331] usb 4-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 142.555795][ T331] usb 4-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 142.569956][ T331] usb 4-1: config 0 descriptor?? [ 142.575954][ T390] usb usb2-port1: unable to enumerate USB device [ 142.576169][ T331] usb 4-1: can't set config #0, error -71 [ 142.594211][ T331] usb 4-1: USB disconnect, device number 44 [ 142.731041][ T5326] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.295944][ T653] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 143.345900][ T390] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 143.457086][ T653] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 143.465412][ T653] usb 4-1: config 0 has no interface number 0 [ 143.471700][ T653] usb 4-1: config 0 interface 41 has no altsetting 0 [ 143.480082][ T653] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 143.489215][ T653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.497474][ T653] usb 4-1: Product: syz [ 143.501854][ T653] usb 4-1: Manufacturer: syz [ 143.506626][ T653] usb 4-1: SerialNumber: syz [ 143.511817][ T390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 143.522175][ T653] usb 4-1: config 0 descriptor?? [ 143.527279][ T390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 143.539052][ T390] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 143.548314][ T390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.556885][ T390] usb 2-1: Product: syz [ 143.561079][ T390] usb 2-1: Manufacturer: syz [ 143.565769][ T390] usb 2-1: SerialNumber: syz [ 143.571407][ T390] usb 2-1: config 0 descriptor?? [ 143.578396][ T390] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 144.339328][ T653] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 144.533214][ T5354] rust_binder: 862: no such ref 1 [ 144.538380][ T5354] rust_binder: 862: no such ref 3 [ 144.553562][ T5336] netlink: 'syz.3.1656': attribute type 4 has an invalid length. [ 144.561433][ T5336] netlink: 'syz.3.1656': attribute type 6 has an invalid length. [ 144.569307][ T5336] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1656'. [ 144.582931][ T653] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 144.593608][ T653] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 144.603614][ T653] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 144.613009][ T653] usb 4-1: USB disconnect, device number 45 [ 145.113235][ T653] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 145.121352][ T653] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.232380][ T5316] overlayfs: statfs failed on './file0' [ 145.355894][ T45] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 145.507045][ T45] usb 4-1: config 0 has no interfaces? [ 145.513306][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.522507][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.530757][ T45] usb 4-1: SerialNumber: syz [ 145.536591][ T45] usb 4-1: config 0 descriptor?? [ 145.656005][ T653] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 145.795130][ T45] usb 4-1: USB disconnect, device number 46 [ 145.797188][ T5400] 9pnet_fd: Insufficient options for proto=fd [ 145.820488][ T653] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 145.831289][ T653] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.846830][ T653] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 145.856502][ T653] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.864527][ T653] usb 1-1: Product: syz [ 145.868837][ T653] usb 1-1: Manufacturer: syz [ 145.873469][ T653] usb 1-1: SerialNumber: syz [ 145.883096][ T653] rtl8150 1-1:1.0: couldn't find required endpoints [ 145.891410][ T653] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 146.344310][ T5426] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 146.351683][ T5428] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 146.359398][ T5426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:885 [ 146.359458][ T5428] rust_binder: 885: no such ref 2 [ 146.373731][ T5428] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 146.405952][ T5430] rust_binder: 889: no such ref 1 [ 146.498616][ T36] audit: type=1400 audit(1762475847.949:697): avc: denied { lock } for pid=5431 comm="syz.3.1689" path="/dev/binderfs/binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 146.735873][ T45] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 146.865882][ T45] usb 4-1: device descriptor read/64, error -71 [ 146.970998][ T5442] sit0: entered promiscuous mode [ 146.977851][ T5442] netlink: 'syz.2.1691': attribute type 1 has an invalid length. [ 146.985657][ T5442] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1691'. [ 147.006332][ T5444] netlink: 'syz.2.1692': attribute type 15 has an invalid length. [ 147.065324][ T5445] fuse: Bad value for 'user_id' [ 147.066171][ T5446] fuse: Bad value for 'user_id' [ 147.070405][ T5445] fuse: Bad value for 'user_id' [ 147.075169][ T5446] fuse: Bad value for 'user_id' [ 147.105888][ T45] usb 4-1: device descriptor read/64, error -71 [ 147.345943][ T45] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 147.475967][ T45] usb 4-1: device descriptor read/64, error -71 [ 147.671083][ T5453] netlink: 'syz.2.1695': attribute type 11 has an invalid length. [ 147.715898][ T45] usb 4-1: device descriptor read/64, error -71 [ 147.773811][ T5467] netlink: 'syz.2.1700': attribute type 12 has an invalid length. [ 147.825947][ T45] usb usb4-port1: attempt power cycle [ 148.165877][ T45] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 148.187044][ T45] usb 4-1: device descriptor read/8, error -71 [ 148.316933][ T45] usb 4-1: device descriptor read/8, error -71 [ 148.425864][ T331] usb 1-1: USB disconnect, device number 2 [ 148.447281][ T36] audit: type=1400 audit(1762475849.899:698): avc: denied { create } for pid=5495 comm="syz.0.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 148.450905][ T5496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.475150][ T5496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.489748][ T653] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 148.491800][ T5500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.498019][ T653] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 148.511262][ T5500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.565913][ T45] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 148.586893][ T45] usb 4-1: device descriptor read/8, error -71 [ 148.716950][ T45] usb 4-1: device descriptor read/8, error -71 [ 148.775924][ T331] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 148.825986][ T45] usb usb4-port1: unable to enumerate USB device [ 148.925862][ T331] usb 1-1: Using ep0 maxpacket: 16 [ 148.932182][ T331] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 148.940475][ T331] usb 1-1: config 0 has no interface number 0 [ 148.948140][ T331] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 148.957268][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.965480][ T331] usb 1-1: Product: syz [ 148.969968][ T331] usb 1-1: Manufacturer: syz [ 148.974591][ T331] usb 1-1: SerialNumber: syz [ 148.979881][ T331] usb 1-1: config 0 descriptor?? [ 149.192772][ T331] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 149.201595][ T331] usb 1-1: No valid video chain found. [ 149.221888][ T331] usb 1-1: USB disconnect, device number 3 [ 149.729636][ T5524] rust_binder: Write failure EFAULT in pid:69 [ 149.742288][ T5527] rust_binder: Error while translating object. [ 149.748490][ T5527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 149.754742][ T5527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:71 [ 149.800591][ T1965] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 149.835912][ T1965] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 149.990036][ T5541] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5541 comm=syz.2.1726 [ 150.035866][ T331] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 150.197580][ T331] usb 1-1: config 0 has no interfaces? [ 150.203923][ T331] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.213252][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 150.228703][ T331] usb 1-1: SerialNumber: syz [ 150.235573][ T5544] netlink: 'syz.3.1727': attribute type 6 has an invalid length. [ 150.243809][ T331] usb 1-1: config 0 descriptor?? [ 150.250932][ T5544] netlink: 'syz.3.1727': attribute type 4 has an invalid length. [ 150.259063][ T5544] netlink: 'syz.3.1727': attribute type 6 has an invalid length. [ 150.271707][ T5544] netlink: 'syz.3.1727': attribute type 13 has an invalid length. [ 150.279765][ T5544] netlink: 'syz.3.1727': attribute type 15 has an invalid length. [ 150.288247][ T5544] netlink: 'syz.3.1727': attribute type 19 has an invalid length. [ 150.296380][ T5544] netlink: 3684 bytes leftover after parsing attributes in process `syz.3.1727'. [ 150.305824][ T5546] rust_binder: Error while translating object. [ 150.305880][ T5546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 150.312116][ T5546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:898 [ 150.380149][ T36] audit: type=1400 audit(1762475851.829:699): avc: denied { remount } for pid=5550 comm="syz.3.1729" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 150.380437][ T5551] binder: Unknown parameter '00000000000000000000' [ 150.520282][ T45] usb 1-1: USB disconnect, device number 4 [ 151.091498][ T5572] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.091932][ T5570] batadv_slave_1: entered promiscuous mode [ 151.107109][ T5571] batadv_slave_1: left promiscuous mode [ 151.569854][ T5601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.578623][ T5601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.676704][ T36] audit: type=1400 audit(1762475853.129:700): avc: denied { getopt } for pid=5603 comm="syz.2.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.676917][ T5605] tmpfs: Invalid uid '0x00000000ffffffff' [ 152.071959][ T36] audit: type=1326 audit(1762475853.519:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5638 comm="syz.0.1759" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10deb8f6c9 code=0x0 [ 152.154816][ T5642] SELinux: failed to load policy [ 152.160324][ T5642] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 152.160344][ T5642] rust_binder: Error while translating object. [ 152.172632][ T5642] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 152.178916][ T5642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:892 [ 152.226060][ T406] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 152.397009][ T406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.408325][ T406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.418560][ T406] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.427419][ T5654] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1765'. [ 152.431816][ T406] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.450298][ T406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.459808][ T406] usb 4-1: config 0 descriptor?? [ 152.872512][ T5630] fuse: Bad value for 'group_id' [ 152.877558][ T5630] fuse: Bad value for 'group_id' [ 152.939248][ T406] usbhid 4-1:0.0: can't add hid device: -71 [ 152.945328][ T406] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 152.954701][ T406] usb 4-1: USB disconnect, device number 51 [ 152.979040][ T5661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100 [ 153.009564][ T331] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 153.030437][ T331] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.032890][ T36] audit: type=1400 audit(1762475854.479:702): avc: denied { accept } for pid=5676 comm="syz.2.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.265899][ T390] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 153.330152][ T5704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.338671][ T5704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.348235][ T5704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.357186][ T5704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.380719][ T36] audit: type=1400 audit(1762475854.829:703): avc: denied { compute_member } for pid=5708 comm="syz.1.1784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 153.414982][ T5711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.417354][ T390] usb 1-1: config 0 has no interfaces? [ 153.423663][ T5711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.429849][ T390] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.445712][ T390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.453757][ T390] usb 1-1: SerialNumber: syz [ 153.459229][ T390] usb 1-1: config 0 descriptor?? [ 153.717761][ T390] usb 1-1: USB disconnect, device number 5 [ 154.023294][ T5724] rust_binder: 917: no such ref 3 [ 154.028451][ T5724] rust_binder: inc_ref_done called when no active inc_refs [ 154.028472][ T5724] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 154.042891][ T5724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:917 [ 154.192315][ T5729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.210260][ T5729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.269472][ T36] audit: type=1400 audit(1762475855.719:704): avc: denied { append } for pid=5732 comm="syz.0.1792" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.424653][ T5757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.474532][ T406] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 154.490404][ T406] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 154.586975][ T5772] netlink: 'syz.0.1804': attribute type 27 has an invalid length. [ 154.610765][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.618055][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.735851][ T331] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 154.896982][ T331] usb 4-1: config 0 has no interfaces? [ 154.903412][ T331] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.915759][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 154.926027][ T331] usb 4-1: SerialNumber: syz [ 154.933078][ T331] usb 4-1: config 0 descriptor?? [ 155.142185][ T331] usb 4-1: USB disconnect, device number 52 [ 155.218012][ T36] audit: type=1326 audit(1762475856.669:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.0.1806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10deb8f6c9 code=0x0 [ 155.389406][ T36] audit: type=1400 audit(1762475856.839:706): avc: denied { listen } for pid=5804 comm="syz.0.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.955224][ T5835] netlink: 1072 bytes leftover after parsing attributes in process `syz.2.1825'. [ 155.964564][ T5835] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1825'. [ 156.204795][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1829'. [ 156.215157][ T5845] 9pnet_fd: Insufficient options for proto=fd [ 156.298309][ T36] audit: type=1400 audit(1762475857.749:707): avc: denied { lock } for pid=5857 comm="syz.0.1834" path="socket:[26849]" dev="sockfs" ino=26849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.396268][ T5868] cgroup: Name too long [ 156.736032][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 157.118785][ T5902] SELinux: failed to load policy [ 157.208022][ T5910] rust_binder: Error while translating object. [ 157.208058][ T5910] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.214657][ T5910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:931 [ 157.225313][ T5910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.318137][ T5928] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 157.498316][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.502677][ T5942] binder: Unknown parameter '' [ 157.507567][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.518395][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.525924][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.533896][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.541331][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.548824][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.556253][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.563657][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.571123][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.578662][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.586124][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.593528][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.600959][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.608381][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.615775][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.623213][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.630641][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.639490][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.646981][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.655438][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.662965][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.670446][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.678047][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.685473][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.692905][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.700375][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.707817][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.715224][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.722646][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.730091][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.737992][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.745412][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.752868][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.760322][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.767786][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.775218][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.782681][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.790128][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.797628][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.805052][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.812573][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.820120][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.827690][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.835111][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.842601][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.850047][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.857919][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.865307][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.872858][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.880291][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.887742][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.895141][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.902565][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.909995][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.917422][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.924821][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.932244][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.939672][ T390] hid-generic 0003:0008:000F.0020: unknown main item tag 0x0 [ 157.947183][ T390] hid-generic 0003:0008:000F.0020: collection stack underflow [ 157.954704][ T390] hid-generic 0003:0008:000F.0020: item 0 0 0 12 parsing failed [ 157.962617][ T390] hid-generic 0003:0008:000F.0020: probe with driver hid-generic failed with error -22 [ 158.021558][ T5966] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 158.031064][ T5966] fuse: Bad value for 'rootmode' [ 158.076697][ T5963] rust_binder: Write failure EFAULT in pid:949 [ 158.163946][ T5982] devpts: called with bogus options [ 158.176059][ T5982] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 158.176172][ T5982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:953 [ 158.198786][ T5986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.217254][ T5986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.742929][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.751526][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.755925][ T1083] Bluetooth: hci0: command 0x1003 tx timeout [ 158.759375][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 158.898957][ T6027] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 158.898989][ T6027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 158.907019][ T6027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:962 [ 159.059412][ T36] audit: type=1326 audit(1762475860.509:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.2.1910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dc618f6c9 code=0x0 [ 159.544746][ T6069] binder: Bad value for 'max' [ 159.565387][ T6076] netlink: 'syz.3.1914': attribute type 46 has an invalid length. [ 159.579379][ T6079] netlink: 4432 bytes leftover after parsing attributes in process `syz.0.1915'. [ 159.588644][ T6080] netlink: 4432 bytes leftover after parsing attributes in process `syz.0.1915'. [ 159.591398][ T6082] binder: Unknown parameter 'mntext' [ 159.621727][ T6089] /dev/rnullb0: Can't lookup blockdev [ 159.634608][ T36] audit: type=1400 audit(1762475861.079:709): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 159.658738][ T6091] binder: Bad value for 'defcontext' [ 159.736391][ T36] audit: type=1400 audit(1762475861.189:710): avc: denied { setopt } for pid=6104 comm="syz.3.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 159.822332][ T36] audit: type=1400 audit(1762475861.269:711): avc: denied { getopt } for pid=6108 comm="syz.3.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 159.863351][ T6113] /dev/rnullb0: Can't lookup blockdev [ 159.962946][ T6131] fuse: Bad value for 'fd' [ 160.455916][ T390] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 160.607056][ T390] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 160.615173][ T390] usb 4-1: config 0 has no interface number 0 [ 160.622804][ T390] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 160.631929][ T390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.639980][ T390] usb 4-1: Product: syz [ 160.644173][ T390] usb 4-1: Manufacturer: syz [ 160.648804][ T390] usb 4-1: SerialNumber: syz [ 160.654045][ T390] usb 4-1: config 0 descriptor?? [ 160.894434][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.901780][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.909179][ T6185] bridge_slave_0: entered allmulticast mode [ 160.915690][ T6185] bridge_slave_0: entered promiscuous mode [ 160.922632][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.930070][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.937463][ T6185] bridge_slave_1: entered allmulticast mode [ 160.943987][ T6185] bridge_slave_1: entered promiscuous mode [ 161.028952][ T390] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 161.032590][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.035395][ T390] usb 4-1: No valid video chain found. [ 161.042461][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.042571][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.057209][ T390] usb 4-1: USB disconnect, device number 53 [ 161.062243][ T6185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.107101][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.114877][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.132488][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.139617][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.147675][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.154748][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.180501][ T6185] veth0_vlan: entered promiscuous mode [ 161.199009][ T6185] veth1_macvtap: entered promiscuous mode [ 161.249559][ T653] hid (null): report_id 1888591305 is invalid [ 161.255694][ T653] hid (null): report_id 0 is invalid [ 161.263161][ T653] hid-generic 03FF:0003:0007.0021: unknown main item tag 0x1 [ 161.270671][ T653] hid-generic 03FF:0003:0007.0021: unexpected long global item [ 161.278708][ T653] hid-generic 03FF:0003:0007.0021: probe with driver hid-generic failed with error -22 [ 161.405587][ T6226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6226 comm=syz.2.1961 [ 161.430455][ T36] audit: type=1400 audit(1762475862.879:712): avc: denied { bind } for pid=6229 comm="syz.2.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.467893][ T6235] rust_binder: Error while translating object. [ 161.468038][ T6235] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 161.474279][ T6235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:24 [ 161.537354][ T36] audit: type=1400 audit(1762475862.989:713): avc: denied { mounton } for pid=6242 comm="syz.2.1967" path="/proc/30/ns/cgroup" dev="proc" ino=28141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 161.815896][ T1965] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 161.967048][ T1965] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 161.975347][ T1965] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 161.985699][ T1965] usb 4-1: config 8 has no interface number 0 [ 162.018434][ T1965] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 162.030314][ T36] audit: type=1400 audit(1762475863.479:714): avc: denied { create } for pid=6258 comm="syz.0.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 162.033800][ T1965] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 162.060801][ T1965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.068983][ T1965] usb 4-1: Product: syz [ 162.073205][ T1965] usb 4-1: Manufacturer: syz [ 162.078138][ T1965] usb 4-1: SerialNumber: syz [ 162.139335][ T6268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.147975][ T6268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.285735][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.294942][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.359745][ T6278] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6278 comm=syz.0.1980 [ 162.373023][ T6278] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=258 sclass=netlink_tcpdiag_socket pid=6278 comm=syz.0.1980 [ 162.387520][ T6278] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6278 comm=syz.0.1980 [ 162.464783][ T6280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 162.731950][ T6288] 9pnet_fd: Insufficient options for proto=fd [ 162.765885][ T653] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 162.853827][ T6295] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.917114][ T653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.922245][ T6298] block device autoloading is deprecated and will be removed. [ 162.927104][ T653] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 162.944865][ T653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.954463][ T6298] VFS: Mount too revealing [ 162.972357][ T653] usb 3-1: config 0 descriptor?? [ 162.987771][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 163.386214][ T653] logitech-djreceiver 0003:046D:C71F.0022: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0 [ 163.584379][ T6284] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 163.585471][ T331] usb 3-1: USB disconnect, device number 13 [ 164.130427][ T6342] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2007'. [ 164.249966][ T6350] rust_binder: Error while translating object. [ 164.250070][ T6350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.256379][ T6350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:54 [ 164.484583][ T6354] rust_binder: Write failure EFAULT in pid:59 [ 164.545002][ T1965] usb 4-1: USB disconnect, device number 54 [ 164.594653][ T6356] rust_binder: Write failure EFAULT in pid:61 [ 164.729532][ T36] audit: type=1400 audit(1762475866.179:715): avc: denied { remount } for pid=6376 comm="syz.2.2019" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 164.995860][ T1083] Bluetooth: hci0: command 0x1003 tx timeout [ 164.995854][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 165.004250][ T36] audit: type=1400 audit(1762475866.449:716): avc: denied { unmount } for pid=6185 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 165.163371][ T6420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2032'. [ 165.487914][ T6456] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2046'. [ 165.525615][ T36] audit: type=1400 audit(1762475866.969:717): avc: denied { create } for pid=6460 comm="syz.3.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 165.546418][ T36] audit: type=1400 audit(1762475866.989:718): avc: denied { write } for pid=6460 comm="syz.3.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 165.555915][ T653] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 165.616539][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2052'. [ 165.668267][ T6467] netlink: 'syz.3.2051': attribute type 1 has an invalid length. [ 165.676217][ T6467] netlink: 'syz.3.2051': attribute type 2 has an invalid length. [ 165.684002][ T6478] netlink: 'syz.3.2051': attribute type 1 has an invalid length. [ 165.684159][ T6480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.691833][ T6478] netlink: 'syz.3.2051': attribute type 2 has an invalid length. [ 165.701567][ T6480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.746237][ T653] usb 3-1: config 66 has an invalid interface number: 105 but max is 0 [ 165.754573][ T653] usb 3-1: config 66 has no interface number 0 [ 165.760805][ T653] usb 3-1: config 66 interface 105 has no altsetting 0 [ 165.769027][ T653] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.7d [ 165.778209][ T653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.786247][ T653] usb 3-1: Product: syz [ 165.790435][ T653] usb 3-1: Manufacturer: syz [ 165.795029][ T653] usb 3-1: SerialNumber: syz [ 166.001497][ T6428] /dev/rnullb0: Can't lookup blockdev [ 166.010255][ T653] usb 3-1: USB disconnect, device number 14 [ 166.234145][ T653] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 166.239329][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.242417][ T653] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 166.256190][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.329800][ T6498] overlayfs: failed to clone lowerpath [ 166.358121][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'. [ 166.367309][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'. [ 166.574202][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2072'. [ 166.583650][ T6537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6537 comm=syz.2.2072 [ 166.638727][ T36] audit: type=1400 audit(1762475868.089:719): avc: denied { sys_module } for pid=6549 comm="syz.0.2076" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 166.855918][ T406] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 166.966318][ T6562] rust_binder: Write failure EFAULT in pid:1006 [ 167.007300][ T406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.028169][ T406] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 167.037483][ T406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.049338][ T406] usb 4-1: config 0 descriptor?? [ 167.283491][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2075'. [ 167.293901][ T36] audit: type=1400 audit(1762475868.749:720): avc: denied { setattr } for pid=6544 comm="syz.3.2075" name="/" dev="configfs" ino=2527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 167.574613][ T406] chicony 0003:04F2:1236.0024: item fetching failed at offset 3/7 [ 167.627375][ T406] chicony 0003:04F2:1236.0024: Chicony hid parse failed: -22 [ 167.634903][ T406] chicony 0003:04F2:1236.0024: probe with driver chicony failed with error -22 [ 167.700507][ T36] audit: type=1326 audit(1762475869.149:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.1.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc638f8f6c9 code=0x7fc00000 [ 167.728631][ T36] audit: type=1326 audit(1762475869.149:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.1.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc638f8f6c9 code=0x7fc00000 [ 167.825002][ T6545] rust_binder: Error while translating object. [ 167.825034][ T6545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 167.831922][ T6545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1068 [ 167.868292][ T406] usb 4-1: USB disconnect, device number 55 [ 168.384093][ T406] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 168.393682][ T406] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 168.423428][ T6617] rust_binder: Write failure EFAULT in pid:1072 [ 168.431594][ T6616] fido_id[6616]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 168.535349][ T6624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1079 [ 168.681026][ T653] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 168.706021][ T653] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 168.733890][ T6644] fido_id[6644]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 168.788099][ T6651] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 168.869544][ T6648] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2108'. [ 168.959598][ T6648] SELinux: policydb version 0 does not match my version range 15-33 [ 168.967801][ T6648] SELinux: failed to load policy [ 168.977899][ T6662] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.977979][ T6662] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 168.985274][ T6663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.993400][ T6662] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.999954][ T6664] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 169.203706][ T6677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.220759][ T6677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.712176][ T6692] /dev/rnullb0: Can't lookup blockdev [ 169.764433][ T36] audit: type=1400 audit(1762475871.209:723): avc: denied { watch } for pid=6696 comm="syz.3.2126" path="/dev/binderfs/binder1" dev="binder" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 169.799102][ T6705] tipc: Disabling bearer [ 169.804790][ T6705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 169.804817][ T6705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1044 [ 169.895001][ T6716] rust_binder: Error while translating object. [ 169.904582][ T6716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 169.910857][ T6716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1104 [ 169.974599][ T6720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.993114][ T6720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.025866][ T406] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 170.186995][ T406] usb 3-1: config 0 has no interfaces? [ 170.196353][ T406] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.205467][ T406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 170.213747][ T406] usb 3-1: SerialNumber: syz [ 170.226101][ T406] usb 3-1: config 0 descriptor?? [ 170.436485][ T406] usb 3-1: USB disconnect, device number 15 [ 170.563536][ T6733] syz.1.2139: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 170.582655][ T6733] CPU: 1 UID: 0 PID: 6733 Comm: syz.1.2139 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 170.582688][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.582715][ T6733] Call Trace: [ 170.582722][ T6733] [ 170.582732][ T6733] __dump_stack+0x21/0x30 [ 170.582766][ T6733] dump_stack_lvl+0x10c/0x190 [ 170.582802][ T6733] ? __cfi_dump_stack_lvl+0x10/0x10 [ 170.582833][ T6733] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 170.582865][ T6733] dump_stack+0x19/0x20 [ 170.582893][ T6733] warn_alloc+0x1bc/0x2a0 [ 170.582923][ T6733] ? kasan_save_free_info+0x4a/0x60 [ 170.582955][ T6733] ? __cfi_warn_alloc+0x10/0x10 [ 170.582985][ T6733] ? __get_vm_area_node+0x1dc/0x3a0 [ 170.583014][ T6733] ? __vcalloc_noprof+0x3a/0x50 [ 170.583036][ T6733] __vmalloc_node_range_noprof+0x68e/0x1420 [ 170.583068][ T6733] ? stack_depot_save_flags+0x38/0x800 [ 170.583097][ T6733] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 170.583121][ T6733] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 170.583156][ T6733] ? __vcalloc_noprof+0x3a/0x50 [ 170.583177][ T6733] __vmalloc_noprof+0xfe/0x1d0 [ 170.583207][ T6733] ? __vcalloc_noprof+0x3a/0x50 [ 170.583228][ T6733] ? __cfi___vmalloc_noprof+0x10/0x10 [ 170.583259][ T6733] ? mutex_lock+0x92/0x1c0 [ 170.583278][ T6733] ? __cfi_mutex_lock+0x10/0x10 [ 170.583299][ T6733] __vcalloc_noprof+0x3a/0x50 [ 170.583320][ T6733] kvm_set_memslot+0x4c6/0x13f0 [ 170.583351][ T6733] ? __kmalloc_cache_noprof+0x24c/0x490 [ 170.583374][ T6733] __kvm_set_memory_region+0x87c/0xb80 [ 170.583409][ T6733] kvm_set_memory_region+0x2f/0x50 [ 170.583441][ T6733] kvm_vm_ioctl+0x9ad/0xb80 [ 170.583470][ T6733] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 170.583500][ T6733] ? ioctl_has_perm+0x1aa/0x4d0 [ 170.583527][ T6733] ? __asan_memcpy+0x5a/0x80 [ 170.583547][ T6733] ? ioctl_has_perm+0x3e0/0x4d0 [ 170.583576][ T6733] ? __cfi_futex_wake+0x10/0x10 [ 170.583603][ T6733] ? selinux_file_ioctl+0x6e0/0x1360 [ 170.583629][ T6733] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 170.583659][ T6733] ? kfree+0x15c/0x460 [ 170.583678][ T6733] ? do_futex+0x356/0x500 [ 170.583700][ T6733] ? __cfi_do_futex+0x10/0x10 [ 170.583721][ T6733] ? anon_inode_getfile+0xfb/0x190 [ 170.583752][ T6733] ? __fget_files+0x2c5/0x340 [ 170.583782][ T6733] ? bpf_lsm_file_ioctl+0xd/0x20 [ 170.583813][ T6733] ? security_file_ioctl+0x34/0xd0 [ 170.583837][ T6733] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 170.583867][ T6733] __se_sys_ioctl+0x135/0x1b0 [ 170.583891][ T6733] __x64_sys_ioctl+0x7f/0xa0 [ 170.583915][ T6733] x64_sys_call+0x1878/0x2ee0 [ 170.583947][ T6733] do_syscall_64+0x58/0xf0 [ 170.583975][ T6733] ? clear_bhb_loop+0x50/0xa0 [ 170.584000][ T6733] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 170.584023][ T6733] RIP: 0033:0x7fc638f8f6c9 [ 170.584046][ T6733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.584066][ T6733] RSP: 002b:00007fc639e6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.584091][ T6733] RAX: ffffffffffffffda RBX: 00007fc6391e5fa0 RCX: 00007fc638f8f6c9 [ 170.584108][ T6733] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000004 [ 170.584123][ T6733] RBP: 00007fc639011f91 R08: 0000000000000000 R09: 0000000000000000 [ 170.584138][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.584152][ T6733] R13: 00007fc6391e6038 R14: 00007fc6391e5fa0 R15: 00007ffe705d4918 [ 170.584172][ T6733] [ 170.584232][ T6733] Mem-Info: [ 170.924756][ T6733] active_anon:56242 inactive_anon:131 isolated_anon:0 [ 170.924756][ T6733] active_file:7755 inactive_file:16643 isolated_file:0 [ 170.924756][ T6733] unevictable:16392 dirty:62 writeback:0 [ 170.924756][ T6733] slab_reclaimable:6109 slab_unreclaimable:73660 [ 170.924756][ T6733] mapped:26911 shmem:49300 pagetables:1120 [ 170.924756][ T6733] sec_pagetables:0 bounce:0 [ 170.924756][ T6733] kernel_misc_reclaimable:0 [ 170.924756][ T6733] free:1451979 free_pcp:2886 free_cma:0 [ 170.975896][ T6733] Node 0 active_anon:224976kB inactive_anon:524kB active_file:31020kB inactive_file:66572kB unevictable:65568kB isolated(anon):0kB isolated(file):0kB mapped:98248kB dirty:248kB writeback:0kB shmem:197196kB shmem_thp:6144kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5840kB pagetables:4560kB sec_pagetables:0kB all_unreclaimable? no [ 171.015722][ T6733] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:68kB free_cma:0kB [ 171.049629][ T6733] lowmem_reserve[]: 0 3921 3921 [ 171.054642][ T6733] Normal free:2857640kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:213340kB inactive_anon:524kB active_file:31020kB inactive_file:66572kB unevictable:65568kB writepending:248kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3812kB local_pcp:1424kB free_cma:0kB [ 171.090433][ T6733] lowmem_reserve[]: 0 0 0 [ 171.093966][ T6756] rust_binder: Write failure EFAULT in pid:128 [ 171.094855][ T6733] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 171.122507][ T6733] Normal: 81*4kB (U) 36*8kB (M) 520*16kB (UM) 90*32kB (UM) 182*64kB (UME) 100*128kB (UME) 76*256kB (ME) 41*512kB (ME) 53*1024kB (UME) 27*2048kB (UME) 652*4096kB (UM) = 2856868kB [ 171.140642][ T6733] 87349 total pagecache pages [ 171.145363][ T6733] 135 pages in swap cache [ 171.150185][ T6733] Free swap = 124040kB [ 171.154807][ T6733] Total swap = 124996kB [ 171.161341][ T6733] 2097051 pages RAM [ 171.165218][ T6733] 0 pages HighMem/MovableOnly [ 171.170184][ T6733] 351537 pages reserved [ 171.171227][ T6763] SELinux: failed to load policy [ 171.174350][ T6733] 0 pages cma reserved [ 171.177900][ T6733] Memory allocations: [ 171.180145][ T6763] rust_binder: 134: no such ref 0 [ 171.183389][ T6733] 0 B 0 init/main.c:1370 func:do_initcalls [ 171.187454][ T6763] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 171.192787][ T6733] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 171.199815][ T6763] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 171.207534][ T6733] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 171.234001][ T6733] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 171.242314][ T6733] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 171.250325][ T6733] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 171.259034][ T6733] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 171.267058][ T6733] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 171.275051][ T6733] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 171.283251][ T6733] 0 B 0 init/initramfs.c:101 func:find_link [ 171.327241][ T6768] rust_binder: Write failure EFAULT in pid:1060 [ 171.335874][ T331] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 171.366772][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.366815][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.373336][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.380055][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.387112][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.393575][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.400031][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.406509][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.412935][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.419594][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.426152][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.432664][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.439132][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.445571][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.452031][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.458505][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.464928][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.471373][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.477854][ T1965] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 171.484825][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.491931][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.498510][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.505092][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.511626][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.518170][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.524645][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.531227][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.537716][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.544213][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.544939][ T331] usb 4-1: unable to get BOS descriptor or descriptor too short [ 171.550947][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.557610][ T331] usb 4-1: not running at top speed; connect to a high speed hub [ 171.565143][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.572092][ T331] usb 4-1: config 13 has an invalid interface number: 90 but max is 0 [ 171.579707][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.585511][ T331] usb 4-1: config 13 has no interface number 0 [ 171.585549][ T331] usb 4-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 171.594193][ T6775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.601923][ T331] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 171.633518][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.641566][ T331] usb 4-1: Product: syz [ 171.645767][ T331] usb 4-1: Manufacturer: syz [ 171.650420][ T331] usb 4-1: SerialNumber: syz [ 171.675294][ T6779] binder: Unknown parameter 'defcontext01777777777777777777777' [ 171.683044][ T1965] usb 3-1: Using ep0 maxpacket: 16 [ 171.689697][ T1965] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 171.699295][ T1965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.711823][ T1965] usb 3-1: config 0 descriptor?? [ 171.718011][ T1965] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 171.863558][ T6781] rust_binder: Error while translating object. [ 171.863610][ T6781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.869927][ T6781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1073 [ 171.872420][ T6752] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2143'. [ 171.887025][ T6753] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2143'. [ 171.922967][ T1965] usb 3-1: Detected FT232B [ 171.929924][ T331] usb 4-1: USB disconnect, device number 56 [ 171.989910][ T6792] 9pnet_fd: Insufficient options for proto=fd [ 172.119173][ T1965] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 172.136043][ T1965] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 172.155986][ T1965] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 172.185934][ T1965] usb 3-1: USB disconnect, device number 16 [ 172.196081][ T1965] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 172.205646][ T1965] ftdi_sio 3-1:0.0: device disconnected [ 172.301011][ T36] audit: type=1400 audit(1762475873.749:724): avc: denied { remount } for pid=6806 comm="syz.1.2162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 172.350670][ T36] audit: type=1400 audit(1762475873.799:725): avc: denied { lock } for pid=6821 comm="syz.0.2169" path="socket:[31930]" dev="sockfs" ino=31930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 172.540476][ T36] audit: type=1326 audit(1762475873.989:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182358f6c9 code=0x7ffc0000 [ 172.563951][ T36] audit: type=1326 audit(1762475873.989:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182358f6c9 code=0x7ffc0000 [ 172.587660][ T36] audit: type=1326 audit(1762475873.989:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f182358f6c9 code=0x7ffc0000 [ 172.611146][ T36] audit: type=1326 audit(1762475873.989:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182358f6c9 code=0x7ffc0000 [ 172.634704][ T36] audit: type=1326 audit(1762475873.989:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f182358f6c9 code=0x7ffc0000 [ 172.660196][ T6831] /dev/md0: Can't lookup blockdev [ 172.680548][ T36] audit: type=1326 audit(1762475873.989:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182358f6c9 code=0x7ffc0000 [ 172.704558][ T36] audit: type=1326 audit(1762475873.989:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f182358f6c9 code=0x7ffc0000 [ 172.745163][ T6839] rust_binder: 1120: no such ref 0 [ 172.750868][ T6839] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 172.757973][ T6839] rust_binder: 1120: no such ref 2 [ 172.763186][ T6839] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 172.774708][ T6842] No source specified [ 172.800658][ T6844] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 172.809442][ T6844] overlayfs: missing 'lowerdir' [ 172.915856][ T1965] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 172.957237][ T6859] tipc: Can't bind to reserved service type 0 [ 173.088848][ T1965] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.089811][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.107074][ T1965] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 173.108808][ T390] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 173.120447][ T1965] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.126023][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.136009][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.150747][ T1965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.151517][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.160364][ T1965] usb 3-1: Product: syz [ 173.170760][ T1965] usb 3-1: Manufacturer: syz [ 173.175345][ T1965] usb 3-1: SerialNumber: syz [ 173.285895][ T390] usb 4-1: Using ep0 maxpacket: 16 [ 173.292366][ T390] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.303329][ T390] usb 4-1: config 0 interface 0 has no altsetting 0 [ 173.309996][ T390] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 173.319073][ T390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.327810][ T390] usb 4-1: config 0 descriptor?? [ 173.381679][ T6833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.723413][ T6873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1098 [ 173.723972][ T6873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 173.733445][ T6873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1098 [ 173.789760][ T6833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.808844][ T1965] cdc_ncm 3-1:1.0: failed to get mac address [ 173.815331][ T1965] cdc_ncm 3-1:1.0: bind() failure [ 173.822112][ T1965] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 173.828999][ T1965] cdc_ncm 3-1:1.1: bind() failure [ 173.922351][ T6884] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 173.929822][ T6884] rust_binder: 1107: no such ref 1 [ 173.953500][ T63] usb 3-1: USB disconnect, device number 17 [ 174.046433][ T390] usbhid 4-1:0.0: can't add hid device: -71 [ 174.052593][ T390] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 174.064752][ T390] usb 4-1: USB disconnect, device number 57 [ 174.191173][ T6906] __vm_enough_memory: pid: 6906, comm: syz.3.2201, bytes: 18014402804453376 not enough memory for the allocation [ 174.350420][ T6913] rust_binder: Write failure EFAULT in pid:158 [ 174.366229][ T6919] rust_binder: Write failure EFAULT in pid:162 [ 174.380156][ T6918] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 174.482538][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.482569][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.494849][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.501616][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.508458][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.515249][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.528172][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.534751][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.541531][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.548311][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.552462][ T6936] overlayfs: failed to resolve './file1': -2 [ 174.557336][ T6933] Unsupported ieee802154 address type: 0 [ 174.561402][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.573136][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.579855][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.588105][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.594797][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.601298][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.607873][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.614368][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.620894][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.628499][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.635391][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.641937][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.648448][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.654967][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.662034][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.668760][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.691988][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.698690][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.705625][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.718021][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.724676][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.731572][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.731603][ T6954] rust_binder: 174: no such ref 0 [ 174.749728][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.749752][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.758839][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.761009][ T6954] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 174.767990][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.772127][ T6954] rust_binder: 174: no such ref 2 [ 174.779351][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.785729][ T6954] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 174.790619][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.805025][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.811735][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.818488][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.829654][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.836165][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.842624][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.849135][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.855606][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.862155][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.868661][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.875140][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.881657][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.888172][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.894619][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.901128][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.907675][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.914187][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.921201][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.928057][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.934656][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.941412][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.948002][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.954523][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.961054][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.967695][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.974290][ T6926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.996583][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.003797][ T390] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 175.012013][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.085615][ T6976] /dev/rnullb0: Can't lookup blockdev [ 175.114293][ T6979] rust_binder: Read failure Err(EAGAIN) in pid:190 [ 175.188885][ T390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.206632][ T390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.216795][ T390] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.230007][ T390] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.231481][ T6990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.239381][ T390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.241608][ T6990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:200 [ 175.255668][ T390] usb 4-1: config 0 descriptor?? [ 175.260650][ T6990] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 175.274368][ T6990] rust_binder: Error while translating object. [ 175.282859][ T6990] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.289190][ T6990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 175.570755][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 175.570775][ T36] audit: type=1400 audit(1762475877.019:770): avc: denied { map } for pid=6993 comm="syz.2.2231" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 175.621001][ T6997] 9pnet_fd: Insufficient options for proto=fd [ 175.663897][ T7007] netlink: 'syz.2.2235': attribute type 13 has an invalid length. [ 175.673182][ T390] plantronics 0003:047F:FFFF.0027: unknown main item tag 0xd [ 175.682569][ T390] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 175.696094][ T390] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 175.761979][ T7020] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 175.770696][ T7020] rust_binder: Write failure EINVAL in pid:222 [ 175.898525][ T7032] futex_wake_op: syz.2.2243 tries to shift op by -1; fix this program [ 175.913889][ T7032] tmpfs: Bad value for 'nr_blocks' [ 175.929280][ T6959] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2219'. [ 176.044734][ T7038] 9pnet_fd: Insufficient options for proto=fd [ 176.163107][ T36] audit: type=1400 audit(1762475877.609:771): avc: denied { accept } for pid=7041 comm="syz.0.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 176.540651][ T7068] 9pnet_fd: Insufficient options for proto=fd [ 176.683637][ T7070] rust_binder: Error while translating object. [ 176.683697][ T7070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 176.690237][ T7070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1139 [ 176.719555][ T7073] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.729273][ T7073] rust_binder: Error in use_page_slow: ESRCH [ 176.735977][ T7073] rust_binder: use_range failure ESRCH [ 176.742133][ T7073] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 176.747843][ T7073] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 176.756444][ T7073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1142 [ 176.800234][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2255'. [ 176.844311][ T7081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.854730][ T7081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.055863][ T574] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 177.115851][ T331] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 177.205835][ T574] usb 3-1: Using ep0 maxpacket: 32 [ 177.212670][ T574] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 177.221422][ T574] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.231558][ T574] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.241865][ T574] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.250979][ T574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.259028][ T574] usb 3-1: Product: 嘥깯왝ꒌ궶똈Ꙡૡ흋ɿ씙喤畠奜䅏䲇믃亇䥝ﳢធu猒႑⦲滺䷮봛꟝ຶ塊羁帇둎㈛癟ﭲ멮輢乫瞈䠋踱襒艕 [ 177.275503][ T574] usb 3-1: Manufacturer: ц [ 177.280058][ T574] usb 3-1: SerialNumber: ꌡ솼⪿ອ儧筇㻘ﱆꓸᜩ殸勝﹪ꘞ卉꺩댶✈໦䎦晖騗┾瓸ࠎ꽲쏡斣擓Ѱﴰ໣䰗棌ꔶ莆琬깷쪞ቁ⏲뒡鿈׻沽 ⿤᧱쐺嶒羞䥰縀ꄻ鍸쯹鶍בּ烀३吔殤깵謎黚湌㸺蔬䇽鑼累灨䖵ᱻ晴憃꒴熵篔堇띾﫛઄ﺺ [ 177.452326][ T7091] binder: Bad value for 'defcontext' [ 177.542502][ T7107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1158 [ 177.542939][ T7107] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 177.552317][ T7107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1158 [ 177.648980][ T36] audit: type=1400 audit(1762475879.099:772): avc: denied { nlmsg_write } for pid=7116 comm="syz.0.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 177.725876][ T7130] netlink: 'syz.0.2273': attribute type 27 has an invalid length. [ 177.733856][ T7130] lo: entered promiscuous mode [ 177.738750][ T7130] lo: entered allmulticast mode [ 177.744424][ T7130] tunl0: entered promiscuous mode [ 177.755849][ T7130] tunl0: entered allmulticast mode [ 177.761652][ T7130] gre0: entered promiscuous mode [ 177.767561][ T7130] gre0: entered allmulticast mode [ 177.773989][ T7130] gretap0: entered promiscuous mode [ 177.781188][ T7130] gretap0: entered allmulticast mode [ 177.787891][ T7130] erspan0: entered promiscuous mode [ 177.793326][ T7130] erspan0: entered allmulticast mode [ 177.799708][ T7130] ip_vti0: entered promiscuous mode [ 177.805163][ T7130] ip_vti0: entered allmulticast mode [ 177.811470][ T7130] ip6_vti0: entered promiscuous mode [ 177.816871][ T7130] ip6_vti0: entered allmulticast mode [ 177.823224][ T7130] sit0: entered promiscuous mode [ 177.832455][ T7130] sit0: entered allmulticast mode [ 177.840212][ T7130] ip6tnl0: entered promiscuous mode [ 177.845534][ T7130] ip6tnl0: entered allmulticast mode [ 177.854000][ T7130] ip6gre0: entered promiscuous mode [ 177.865649][ T7130] ip6gre0: entered allmulticast mode [ 177.871822][ T7130] syz_tun: entered promiscuous mode [ 177.877213][ T7130] syz_tun: entered allmulticast mode [ 177.883291][ T7130] ip6gretap0: entered promiscuous mode [ 177.890243][ T7130] ip6gretap0: entered allmulticast mode [ 177.896819][ T7130] bridge0: entered promiscuous mode [ 177.902164][ T7130] bridge0: entered allmulticast mode [ 177.908232][ T7130] vcan0: entered promiscuous mode [ 177.925854][ T7130] vcan0: entered allmulticast mode [ 177.938132][ T574] usb 3-1: 0:2 : does not exist [ 177.943754][ T7130] dummy0: entered promiscuous mode [ 177.948328][ T574] usb 3-1: USB disconnect, device number 18 [ 177.955866][ T7130] dummy0: entered allmulticast mode [ 177.962663][ T36] audit: type=1400 audit(1762475879.409:773): avc: denied { mounton } for pid=7142 comm="syz.1.2276" path="/381/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 177.967345][ T7130] veth0: entered promiscuous mode [ 177.987522][ T2974] udevd[2974]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 178.000363][ T7130] veth0: entered allmulticast mode [ 178.019430][ T7130] veth1: entered promiscuous mode [ 178.024646][ T7130] veth1: entered allmulticast mode [ 178.030537][ T7130] wg0: entered promiscuous mode [ 178.035416][ T7130] wg0: entered allmulticast mode [ 178.040962][ T7130] wg1: entered promiscuous mode [ 178.046071][ T7130] wg1: entered allmulticast mode [ 178.051760][ T7130] wg2: entered promiscuous mode [ 178.056729][ T7130] wg2: entered allmulticast mode [ 178.062254][ T7130] veth0_to_bridge: entered promiscuous mode [ 178.068336][ T7130] veth0_to_bridge: entered allmulticast mode [ 178.075151][ T7130] veth1_to_bridge: entered promiscuous mode [ 178.081186][ T7130] veth1_to_bridge: entered allmulticast mode [ 178.087982][ T7130] veth0_to_bond: entered promiscuous mode [ 178.093739][ T7130] veth0_to_bond: entered allmulticast mode [ 178.100187][ T7130] bond_slave_0: entered promiscuous mode [ 178.105930][ T7130] bond_slave_0: entered allmulticast mode [ 178.111935][ T7130] veth1_to_bond: entered promiscuous mode [ 178.118051][ T7130] veth1_to_bond: entered allmulticast mode [ 178.124627][ T7130] bond_slave_1: entered promiscuous mode [ 178.130646][ T7130] bond_slave_1: entered allmulticast mode [ 178.136970][ T7130] veth0_to_team: entered promiscuous mode [ 178.142799][ T7130] veth0_to_team: entered allmulticast mode [ 178.149505][ T7130] team_slave_0: entered promiscuous mode [ 178.155234][ T7130] team_slave_0: entered allmulticast mode [ 178.161502][ T7130] veth1_to_team: entered promiscuous mode [ 178.167651][ T7130] veth1_to_team: entered allmulticast mode [ 178.174279][ T7130] team_slave_1: entered promiscuous mode [ 178.180046][ T7130] team_slave_1: entered allmulticast mode [ 178.186300][ T7130] veth0_to_batadv: entered promiscuous mode [ 178.190215][ T36] audit: type=1400 audit(1762475879.639:774): avc: denied { create } for pid=7151 comm="syz.1.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 178.192272][ T7130] veth0_to_batadv: entered allmulticast mode [ 178.213037][ T7153] rust_binder: Write failure EFAULT in pid:1177 [ 178.219375][ T7130] batadv_slave_0: entered promiscuous mode [ 178.231940][ T7130] batadv_slave_0: entered allmulticast mode [ 178.242202][ T7130] veth1_to_batadv: entered promiscuous mode [ 178.248308][ T7130] veth1_to_batadv: entered allmulticast mode [ 178.255028][ T7130] batadv_slave_1: entered promiscuous mode [ 178.260976][ T7130] batadv_slave_1: entered allmulticast mode [ 178.267582][ T7130] xfrm0: entered promiscuous mode [ 178.272643][ T7130] xfrm0: entered allmulticast mode [ 178.278649][ T7130] veth0_to_hsr: entered promiscuous mode [ 178.284326][ T7130] veth0_to_hsr: entered allmulticast mode [ 178.290913][ T7130] hsr_slave_0: entered promiscuous mode [ 178.296547][ T7130] hsr_slave_0: entered allmulticast mode [ 178.302550][ T7130] veth1_to_hsr: entered promiscuous mode [ 178.308296][ T7130] veth1_to_hsr: entered allmulticast mode [ 178.314546][ T7130] hsr_slave_1: entered promiscuous mode [ 178.320236][ T7130] hsr_slave_1: entered allmulticast mode [ 178.326185][ T7130] veth1_virt_wifi: entered promiscuous mode [ 178.332103][ T7130] veth1_virt_wifi: entered allmulticast mode [ 178.339512][ T7130] veth0_virt_wifi: entered promiscuous mode [ 178.345435][ T7130] veth0_virt_wifi: entered allmulticast mode [ 178.352307][ T7130] veth1_vlan: entered promiscuous mode [ 178.357928][ T7130] veth1_vlan: entered allmulticast mode [ 178.363955][ T7130] veth0_vlan: left promiscuous mode [ 178.369214][ T7130] veth0_vlan: entered promiscuous mode [ 178.374690][ T7130] veth0_vlan: entered allmulticast mode [ 178.381474][ T7130] vlan0: entered promiscuous mode [ 178.386626][ T7130] vlan0: entered allmulticast mode [ 178.392044][ T7130] vlan1: entered promiscuous mode [ 178.397289][ T7130] vlan1: entered allmulticast mode [ 178.402714][ T7130] veth1_macvtap: left promiscuous mode [ 178.408266][ T7130] veth1_macvtap: entered promiscuous mode [ 178.414003][ T7130] veth1_macvtap: entered allmulticast mode [ 178.420384][ T7130] veth0_macvtap: entered promiscuous mode [ 178.426142][ T7130] veth0_macvtap: entered allmulticast mode [ 178.432351][ T7130] macsec0: entered promiscuous mode [ 178.437684][ T7130] macsec0: entered allmulticast mode [ 178.443381][ T7130] syztnl0: entered promiscuous mode [ 178.448640][ T7130] syztnl0: entered allmulticast mode [ 178.454479][ T7130] : entered promiscuous mode [ 178.464704][ T7130] : entered allmulticast mode [ 178.470982][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.478076][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.486320][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.493385][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.509949][ T36] audit: type=1400 audit(1762475879.959:775): avc: denied { relabelfrom } for pid=7156 comm="syz.1.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 178.511089][ T13] ip6_tunnel:  xmit: Local address not yet configured! [ 178.530594][ T1965] usb 4-1: USB disconnect, device number 58 [ 178.557087][ T36] audit: type=1400 audit(1762475879.959:776): avc: denied { relabelto } for pid=7156 comm="syz.1.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 178.626184][ T7172] __vm_enough_memory: pid: 7172, comm: syz.2.2285, bytes: 18014402804453376 not enough memory for the allocation [ 178.840333][ T7193] binder: Unknown parameter 'v' [ 178.905559][ T7198] /dev/rnullb0: Can't lookup blockdev [ 178.905602][ T7197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.936978][ T7201] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.953888][ T7201] netlink: 'syz.1.2295': attribute type 63 has an invalid length. [ 178.968799][ T7201] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2295'. [ 178.982541][ T7201] gretap0: entered allmulticast mode [ 178.990386][ T7201] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 179.006934][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 179.036943][ T7213] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.037516][ T7213] rust_binder: Error while translating object. [ 179.044000][ T7213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 179.050227][ T7213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1197 [ 179.085478][ T36] audit: type=1400 audit(1762475880.529:777): avc: denied { write } for pid=7222 comm="syz.1.2301" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 179.088692][ T7223] rust_binder: Write failure EFAULT in pid:1204 [ 179.095180][ T36] audit: type=1400 audit(1762475880.529:778): avc: denied { ioctl } for pid=7222 comm="syz.1.2301" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 179.185965][ T31] usb 3-1: device descriptor read/64, error -71 [ 179.240943][ T7232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.241117][ T7232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 179.247655][ T7232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1213 [ 179.276741][ T7236] SELinux: Context ϧ-):E2٭ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 179.297533][ T36] audit: type=1400 audit(1762475880.749:779): avc: denied { create } for pid=7235 comm="syz.1.2307" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=CFA7AE2DB729E73A45D832A1D9ADEC16D8BE08F229C4914A11753336B7D2C6DEA27B07E040986DFD5B [ 179.363118][ T7247] /dev/rnullb0: Can't lookup blockdev [ 179.369843][ T7249] 9pnet: Could not find request transport: xen [ 179.399270][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.407880][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.425863][ T31] usb 3-1: device descriptor read/64, error -71 [ 179.486879][ T7260] netlink: 'syz.0.2315': attribute type 4 has an invalid length. [ 179.494680][ T7260] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2315'. [ 179.504637][ T7260] netlink: 'syz.0.2315': attribute type 4 has an invalid length. [ 179.512443][ T7260] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2315'. [ 179.665860][ T31] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 179.796064][ T31] usb 3-1: device descriptor read/64, error -71 [ 179.883163][ T7277] rust_binder: Error while translating object. [ 179.883204][ T7277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.889630][ T7277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1171 [ 179.937748][ T7283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.945787][ T7284] rust_binder: Error while translating object. [ 179.953552][ T7284] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.959850][ T7287] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.960064][ T7284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1176 [ 179.994559][ T7291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.008112][ T7291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.015128][ T7291] rust_binder: Error while translating object. [ 180.021626][ T7291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 180.027869][ T7291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1230 [ 180.037355][ T31] usb 3-1: device descriptor read/64, error -71 [ 180.038013][ T7291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1230 [ 180.054530][ T7291] rust_binder: 1230: no such ref 3 [ 180.068994][ T7291] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 180.076079][ T7291] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 180.083116][ T7291] rust_binder: Write failure EFAULT in pid:1230 [ 180.115446][ T7295] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 180.144709][ T7300] x_tables: unsorted entry at hook 1 [ 180.155980][ T31] usb usb3-port1: attempt power cycle [ 180.495859][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 180.523882][ T7327] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 180.531187][ T7327] rust_binder: 1181: no such ref 2 [ 180.536642][ T7327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1181 [ 180.537263][ T31] usb 3-1: device descriptor read/8, error -71 [ 180.677508][ T31] usb 3-1: device descriptor read/8, error -71 [ 180.825873][ T1965] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 180.858802][ T7333] >: renamed from veth0_vlan (while UP) [ 180.934791][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 180.955865][ T1965] usb 4-1: device descriptor read/64, error -71 [ 180.963442][ T31] usb 3-1: device descriptor read/8, error -71 [ 181.096873][ T31] usb 3-1: device descriptor read/8, error -71 [ 181.152929][ T7354] netlink: 'syz.0.2347': attribute type 12 has an invalid length. [ 181.205870][ T1965] usb 4-1: device descriptor read/64, error -71 [ 181.209451][ T31] usb usb3-port1: unable to enumerate USB device [ 181.401179][ T406] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 181.410675][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.419201][ T406] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 181.420603][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.445888][ T1965] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 181.576517][ T1965] usb 4-1: device descriptor read/64, error -71 [ 181.815905][ T1965] usb 4-1: device descriptor read/64, error -71 [ 181.826446][ T7379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253 [ 181.927207][ T1965] usb usb4-port1: attempt power cycle [ 182.089765][ T7412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2366'. [ 182.099158][ T7411] cgroup: release_agent respecified [ 182.111024][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.127109][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.139236][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 182.139254][ T36] audit: type=1326 audit(1762475883.589:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.1.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc638f8f6c9 code=0x7ffc0000 [ 182.177492][ T36] audit: type=1326 audit(1762475883.619:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.1.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc638f8f6c9 code=0x7ffc0000 [ 182.202577][ T36] audit: type=1326 audit(1762475883.619:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.1.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc638f8f6c9 code=0x7ffc0000 [ 182.226219][ T36] audit: type=1326 audit(1762475883.619:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.1.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc638f8f6c9 code=0x7ffc0000 [ 182.249612][ T36] audit: type=1326 audit(1762475883.629:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.1.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc638f8f6c9 code=0x7ffc0000 [ 182.273370][ T36] audit: type=1326 audit(1762475883.659:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.1.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc638f8f6c9 code=0x7ffc0000 [ 182.296827][ T1965] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 182.297485][ T36] audit: type=1326 audit(1762475883.659:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.1.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc638f8f6c9 code=0x7ffc0000 [ 182.306257][ T7415] netlink: 'syz.0.2367': attribute type 46 has an invalid length. [ 182.329062][ T36] audit: type=1326 audit(1762475883.659:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.1.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc638f8f6c9 code=0x7ffc0000 [ 182.359047][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 182.376872][ T1965] usb 4-1: device descriptor read/8, error -71 [ 182.386034][ T36] audit: type=1326 audit(1762475883.659:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.1.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc638f8f6c9 code=0x7ffc0000 [ 182.410714][ T36] audit: type=1326 audit(1762475883.659:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.1.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc638f8f6c9 code=0x7ffc0000 [ 182.506916][ T1965] usb 4-1: device descriptor read/8, error -71 [ 182.745853][ T1965] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 182.766835][ T1965] usb 4-1: device descriptor read/8, error -71 [ 182.896938][ T1965] usb 4-1: device descriptor read/8, error -71 [ 182.930528][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.939740][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.950044][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.959243][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.967765][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.976973][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.990576][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.999789][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 183.023781][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.033021][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 183.041407][ T1965] usb usb4-port1: unable to enumerate USB device [ 183.135708][ T7449] rust_binder: Write failure EFAULT in pid:1275 [ 183.154757][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.168826][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.175611][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.182633][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.189374][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.196059][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.202700][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.209306][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.216690][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.223258][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.229903][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.237086][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.243709][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.244534][ T7466] netlink: 'syz.0.2382': attribute type 27 has an invalid length. [ 183.259689][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.265527][ T7466] M: entered promiscuous mode [ 183.270713][ T7466] M: entered allmulticast mode [ 183.271059][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.276390][ T12] ip6_tunnel: M xmit: Local address not yet configured! [ 183.289708][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.296300][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.302817][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.309436][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.316035][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.322565][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.329120][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.335627][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.342567][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.349143][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.355753][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.362394][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.368921][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.375464][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.382072][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.388967][ T7453] overlayfs: maximum fs stacking depth exceeded [ 183.413287][ T7471] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 183.421605][ T7471] rust_binder: Write failure EINVAL in pid:1281 [ 183.437340][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.452202][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.537709][ T7482] input: syz1 as /devices/virtual/input/input17 [ 183.835882][ T574] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 183.990110][ T574] usb 3-1: Using ep0 maxpacket: 32 [ 183.997229][ T574] usb 3-1: unable to get BOS descriptor or descriptor too short [ 184.005704][ T574] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 184.014644][ T574] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.026767][ T574] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.038453][ T574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.046780][ T574] usb 3-1: Product: syz [ 184.050999][ T574] usb 3-1: Manufacturer: syz [ 184.058190][ T574] usb 3-1: SerialNumber: syz [ 184.266836][ T7485] rust_binder: 266: no such ref 0 [ 184.278738][ T574] usb 3-1: USB disconnect, device number 23 [ 184.288590][ T2974] udevd[2974]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 184.789455][ T7519] rust_binder: Write failure EFAULT in pid:268 [ 185.045872][ T31] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 185.215903][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 185.222344][ T31] usb 3-1: config 5 has an invalid interface number: 241 but max is 2 [ 185.230720][ T31] usb 3-1: config 5 has an invalid interface number: 198 but max is 2 [ 185.239133][ T31] usb 3-1: config 5 has an invalid interface number: 222 but max is 2 [ 185.247365][ T31] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 185.256093][ T31] usb 3-1: config 5 has no interface number 0 [ 185.262173][ T31] usb 3-1: config 5 has no interface number 1 [ 185.268290][ T31] usb 3-1: config 5 has no interface number 2 [ 185.274416][ T31] usb 3-1: config 5 interface 198 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 185.288388][ T31] usb 3-1: config 5 interface 198 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 185.299788][ T31] usb 3-1: config 5 interface 198 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 185.310515][ T31] usb 3-1: config 5 interface 198 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 185.321702][ T31] usb 3-1: config 5 interface 198 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 185.332618][ T31] usb 3-1: config 5 interface 198 altsetting 4 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 185.343786][ T31] usb 3-1: config 5 interface 198 altsetting 4 has a duplicate endpoint with address 0x8E, skipping [ 185.354693][ T31] usb 3-1: config 5 interface 222 altsetting 147 has a duplicate endpoint with address 0x1, skipping [ 185.365613][ T31] usb 3-1: config 5 interface 222 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 185.376694][ T31] usb 3-1: config 5 interface 222 altsetting 147 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 185.387853][ T31] usb 3-1: config 5 interface 222 altsetting 147 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 185.399195][ T31] usb 3-1: config 5 interface 222 altsetting 147 has a duplicate endpoint with address 0x6, skipping [ 185.410106][ T31] usb 3-1: config 5 interface 222 altsetting 147 has a duplicate endpoint with address 0x8, skipping [ 185.420987][ T31] usb 3-1: config 5 interface 241 has no altsetting 0 [ 185.427813][ T31] usb 3-1: config 5 interface 198 has no altsetting 0 [ 185.434616][ T31] usb 3-1: config 5 interface 222 has no altsetting 0 [ 185.442825][ T31] usb 3-1: New USB device found, idVendor=1199, idProduct=90d3, bcdDevice=6d.cf [ 185.451922][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.458757][ T7551] fuse: Bad value for 'fd' [ 185.459940][ T31] usb 3-1: Product: 㨧﫛愈ˠ [ 185.469502][ T31] usb 3-1: Manufacturer: ᐇ [ 185.535867][ T1965] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 185.685650][ T31] usb 3-1: USB disconnect, device number 24 [ 185.685877][ T1965] usb 4-1: Using ep0 maxpacket: 8 [ 185.698569][ T1965] usb 4-1: config 246 has an invalid interface number: 224 but max is 2 [ 185.707036][ T1965] usb 4-1: config 246 has an invalid interface number: 95 but max is 2 [ 185.715311][ T1965] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 185.726373][ T1965] usb 4-1: config 246 has 2 interfaces, different from the descriptor's value: 3 [ 185.735509][ T1965] usb 4-1: config 246 has no interface number 0 [ 185.741861][ T1965] usb 4-1: config 246 has no interface number 1 [ 185.748191][ T1965] usb 4-1: config 246 interface 224 has no altsetting 0 [ 185.755156][ T1965] usb 4-1: config 246 interface 95 has no altsetting 0 [ 185.763674][ T1965] usb 4-1: New USB device found, idVendor=19d2, idProduct=0019, bcdDevice=41.b5 [ 185.772826][ T1965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.780870][ T1965] usb 4-1: Product: ఁ [ 185.785128][ T1965] usb 4-1: Manufacturer: Ј [ 185.792089][ T1965] usb 4-1: SerialNumber: syz [ 186.003732][ T1965] usb 4-1: USB disconnect, device number 63 [ 186.332808][ T7565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:277 [ 186.516746][ T7571] incfs: Options parsing error. -22 [ 186.531160][ T7571] incfs: mount failed -22 [ 187.207780][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 187.207794][ T36] audit: type=1400 audit(1762475888.659:807): avc: denied { listen } for pid=7581 comm="syz.2.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.445902][ T653] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 187.575872][ T653] usb 3-1: device descriptor read/64, error -71 [ 187.668452][ T7598] fuseblk: Bad value for 'fd' [ 187.715933][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 187.735332][ T36] audit: type=1326 audit(1762475889.179:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.1.2437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc638f8f6c9 code=0xffff0000 [ 187.835862][ T653] usb 3-1: device descriptor read/64, error -71 [ 188.075848][ T653] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 188.181143][ T7638] 9pnet_fd: Insufficient options for proto=fd [ 188.215876][ T653] usb 3-1: device descriptor read/64, error -71 [ 188.455866][ T653] usb 3-1: device descriptor read/64, error -71 [ 188.565993][ T653] usb usb3-port1: attempt power cycle [ 188.905854][ T653] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 188.926987][ T653] usb 3-1: device descriptor read/8, error -71 [ 188.945406][ T36] audit: type=1326 audit(1762475890.389:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.0.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10deb8f6c9 code=0x7fc00000 [ 188.968778][ T36] audit: type=1326 audit(1762475890.389:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.0.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f10deb8f6c9 code=0x7fc00000 [ 188.992018][ T36] audit: type=1326 audit(1762475890.389:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.0.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10deb8f6c9 code=0x7fc00000 [ 189.015576][ T36] audit: type=1326 audit(1762475890.389:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.0.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10deb8f6c9 code=0x7fc00000 [ 189.039510][ T36] audit: type=1326 audit(1762475890.389:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.0.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10deb8f6c9 code=0x7fc00000 [ 189.051082][ T7674] audit: audit_backlog=65 > audit_backlog_limit=64 [ 189.062962][ T36] audit: type=1326 audit(1762475890.389:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.0.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10deb8f6c9 code=0x7fc00000 [ 189.069874][ T7674] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 189.104329][ T653] usb 3-1: device descriptor read/8, error -71 [ 189.126915][ T7680] overlayfs: failed to resolve './file0/file0': -13 [ 189.293843][ T7714] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2473'. [ 189.326642][ T7718] netlink: 'syz.0.2474': attribute type 2 has an invalid length. [ 189.345875][ T653] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 189.371754][ T653] usb 3-1: device descriptor read/8, error -71 [ 189.437917][ T7736] overlayfs: failed to clone upperpath [ 189.506862][ T653] usb 3-1: device descriptor read/8, error -71 [ 189.615986][ T653] usb usb3-port1: unable to enumerate USB device [ 189.699711][ T7749] kvm: kvm [7748]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 189.720433][ T7749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1209 [ 189.891399][ T7759] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2489'. [ 190.013131][ T7776] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2495'. [ 190.034350][ T7778] netlink: 'syz.0.2496': attribute type 11 has an invalid length. [ 190.275993][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 190.377687][ T7789] sit0: left allmulticast mode [ 190.384013][ T7789] netlink: 'syz.0.2499': attribute type 1 has an invalid length. [ 190.391831][ T7789] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2499'. [ 190.484797][ T7796] overlayfs: failed to resolve './file1': -2 [ 190.540804][ T7807] netlink: 'syz.1.2506': attribute type 4 has an invalid length. [ 190.615886][ T574] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 190.766965][ T574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.777998][ T574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.793335][ T574] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.806340][ T574] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.815450][ T574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.824170][ T574] usb 3-1: config 0 descriptor?? [ 190.914645][ T7814] netlink: 'syz.0.2508': attribute type 13 has an invalid length. [ 191.035891][ T653] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 191.185852][ T653] usb 4-1: Using ep0 maxpacket: 16 [ 191.192160][ T653] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.203276][ T653] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.213069][ T653] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 191.222151][ T653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.231216][ T653] usb 4-1: config 0 descriptor?? [ 191.232407][ T574] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 191.243702][ T574] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 191.251194][ T574] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 191.258753][ T574] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 191.266212][ T574] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 191.273744][ T574] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 191.281211][ T574] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 191.288702][ T574] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 191.296158][ T574] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 191.303614][ T574] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 191.311076][ T574] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 191.318512][ T574] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 191.326007][ T574] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 191.333530][ T574] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 191.340976][ T574] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 191.348568][ T574] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 191.357706][ T574] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 191.486456][ T574] usb 3-1: USB disconnect, device number 29 [ 191.644169][ T653] ntrig 0003:1B96:0008.002A: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.3-1/input0 [ 191.897095][ T653] usb 4-1: USB disconnect, device number 64 [ 192.142425][ T7854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.149703][ T7854] IPv6: NLM_F_CREATE should be set when creating new route [ 192.156956][ T7854] IPv6: NLM_F_CREATE should be set when creating new route [ 192.855171][ T7859] rust_binder: Error while translating object. [ 192.855209][ T7859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 192.861696][ T7859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:292 [ 193.165848][ T574] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 193.325845][ T574] usb 3-1: Using ep0 maxpacket: 32 [ 193.332300][ T574] usb 3-1: config 0 has an invalid interface number: 72 but max is 0 [ 193.340468][ T574] usb 3-1: config 0 has no interface number 0 [ 193.346615][ T574] usb 3-1: config 0 interface 72 has no altsetting 0 [ 193.354711][ T574] usb 3-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 193.363815][ T574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.371874][ T574] usb 3-1: Product: syz [ 193.376110][ T574] usb 3-1: Manufacturer: syz [ 193.380726][ T574] usb 3-1: SerialNumber: syz [ 193.386155][ T574] usb 3-1: config 0 descriptor?? [ 193.703014][ T574] usb 3-1: MIDIStreaming interface descriptor not found [ 193.712455][ T574] usb 3-1: USB disconnect, device number 30 [ 193.722470][ T2978] udevd[2978]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.72/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 193.871625][ T7884] 9pnet_fd: Insufficient options for proto=fd [ 194.145879][ T653] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 194.296894][ T653] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.308505][ T653] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 194.319460][ T653] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 194.329240][ T653] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.342214][ T653] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.351304][ T653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.360358][ T653] usb 4-1: config 0 descriptor?? [ 194.569452][ T653] plantronics 0003:047F:FFFF.002B: ignoring exceeding usage max [ 194.590329][ T653] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 194.601558][ T653] plantronics 0003:047F:FFFF.002B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 194.612037][ T7915] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 194.635576][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 194.635599][ T36] audit: type=1400 audit(2000000005.440:879): avc: denied { relabelto } for pid=7914 comm="syz.1.2541" name="rnullb0" dev="tmpfs" ino=2257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 194.635857][ T574] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 194.645682][ T36] audit: type=1400 audit(2000000005.440:880): avc: denied { associate } for pid=7914 comm="syz.1.2541" name="rnullb0" dev="tmpfs" ino=2257 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 194.700076][ T7928] futex_wake_op: syz.1.2544 tries to shift op by -1; fix this program [ 194.837270][ T7934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.845765][ T7893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.845872][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.862219][ T7893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.865847][ T574] usb 3-1: Using ep0 maxpacket: 16 [ 194.875954][ T653] usb 4-1: USB disconnect, device number 65 [ 194.879076][ T574] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 194.891044][ T574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.899135][ T574] usb 3-1: Product: syz [ 194.903369][ T574] usb 3-1: Manufacturer: syz [ 194.908008][ T574] usb 3-1: SerialNumber: syz [ 194.913335][ T574] usb 3-1: config 0 descriptor?? [ 194.919375][ T574] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 194.927157][ T574] usb 3-1: Detected FT-X [ 195.119340][ T574] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 195.128355][ T574] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 195.143243][ T574] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 195.152953][ T574] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 195.175759][ T574] usb 3-1: USB disconnect, device number 31 [ 195.184056][ T574] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 195.201443][ T574] ftdi_sio 3-1:0.0: device disconnected [ 195.251836][ T7954] netlink: 679 bytes leftover after parsing attributes in process `syz.1.2554'. [ 195.388739][ T36] audit: type=1400 audit(2000000006.200:881): avc: denied { append } for pid=7962 comm="syz.3.2557" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 195.390029][ T7963] rust_binder: Write failure EFAULT in pid:1245 [ 195.436757][ T7968] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 195.495968][ T574] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 195.645937][ T574] usb 3-1: Using ep0 maxpacket: 32 [ 195.652266][ T574] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 195.660329][ T574] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.670540][ T574] usb 3-1: config 0 has no interface number 0 [ 195.677599][ T574] usb 3-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 195.692571][ T574] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 195.707773][ T574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.716106][ T574] usb 3-1: Product: syz [ 195.720315][ T574] usb 3-1: Manufacturer: syz [ 195.724928][ T574] usb 3-1: SerialNumber: syz [ 195.730665][ T574] usb 3-1: config 0 descriptor?? [ 195.828955][ T7991] netlink: 5308 bytes leftover after parsing attributes in process `syz.1.2566'. [ 195.848725][ T36] audit: type=1400 audit(2000000006.660:882): avc: denied { read write } for pid=7992 comm="syz.1.2567" name="rnullb0" dev="tmpfs" ino=2257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 195.876472][ T36] audit: type=1400 audit(2000000006.660:883): avc: denied { open } for pid=7992 comm="syz.1.2567" path="/dev/rnullb0" dev="tmpfs" ino=2257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 195.902827][ T36] audit: type=1400 audit(2000000006.660:884): avc: denied { map } for pid=7992 comm="syz.1.2567" path="/dev/rnullb0" dev="tmpfs" ino=2257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 195.933832][ T36] audit: type=1400 audit(2000000006.660:885): avc: denied { execute } for pid=7992 comm="syz.1.2567" path="/dev/rnullb0" dev="tmpfs" ino=2257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 195.940419][ T7997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2569'. [ 195.965533][ T390] usb 3-1: USB disconnect, device number 32 [ 195.972837][ T7997] rust_binder: Error while translating object. [ 195.975256][ T7997] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.981683][ T7997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1271 [ 196.100781][ T8014] rust_binder: 1284: no such ref 3 [ 196.115189][ T8014] rust_binder: inc_ref_done called when no active inc_refs [ 196.115206][ T8014] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 196.129542][ T8014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1284 [ 196.160782][ T8020] binder: Unknown parameter 'fcontgxt00000000000000000000000' [ 196.404567][ T8040] 9pnet_fd: Insufficient options for proto=fd [ 196.626079][ T31] hid (null): unknown global tag 0xe [ 196.631455][ T31] hid (null): unknown global tag 0xd [ 196.636826][ T31] hid (null): invalid report_size 38233 [ 196.643639][ T31] hid-generic 0003:00F1:0000.002C: unknown main item tag 0x4 [ 196.651123][ T31] hid-generic 0003:00F1:0000.002C: unexpected long global item [ 196.658909][ T31] hid-generic 0003:00F1:0000.002C: probe with driver hid-generic failed with error -22 [ 196.686752][ T8073] sit0: entered promiscuous mode [ 196.693157][ T8073] netlink: 'syz.3.2595': attribute type 1 has an invalid length. [ 196.701187][ T8073] netlink: 'syz.3.2595': attribute type 3 has an invalid length. [ 196.746249][ T390] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 196.765186][ T8081] /dev/rnullb0: Can't lookup blockdev [ 196.920423][ T8114] netlink: 'syz.0.2609': attribute type 3 has an invalid length. [ 196.928481][ T8114] netlink: 944 bytes leftover after parsing attributes in process `syz.0.2609'. [ 196.930477][ T390] usb 3-1: Using ep0 maxpacket: 16 [ 196.950236][ T390] usb 3-1: config index 0 descriptor too short (expected 17170, got 18) [ 196.958733][ T390] usb 3-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 196.967714][ T390] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 196.978724][ T390] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 196.988130][ T390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.996169][ T390] usb 3-1: Product: syz [ 197.000403][ T390] usb 3-1: Manufacturer: syz [ 197.005001][ T390] usb 3-1: SerialNumber: syz [ 197.010270][ T390] usb 3-1: config 0 descriptor?? [ 197.016477][ T390] ums-freecom 3-1:0.0: USB Mass Storage device detected [ 197.025871][ T331] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 197.175851][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 197.183385][ T331] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 197.192592][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.200643][ T331] usb 4-1: Product: syz [ 197.205000][ T331] usb 4-1: Manufacturer: syz [ 197.209638][ T331] usb 4-1: SerialNumber: syz [ 197.220796][ T390] usb 3-1: USB disconnect, device number 33 [ 197.315919][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 197.415772][ T8083] tmpfs: Unknown parameter '0x0000000000000000' [ 197.421880][ T8084] tmpfs: Unknown parameter '0x0000000000000000' [ 197.432897][ T331] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 197.442876][ T331] usb 4-1: USB disconnect, device number 66 [ 197.450446][ T2974] udevd[2974]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 197.543838][ T8133] 9pnet_fd: Insufficient options for proto=fd [ 197.704773][ T8152] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 197.768410][ T8157] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 197.775768][ T8157] rust_binder: Write failure EINVAL in pid:334 [ 197.948849][ T8179] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2632'. [ 197.964760][ T8179] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2632'. [ 197.974076][ T8179] netlink: 'syz.3.2632': attribute type 4 has an invalid length. [ 197.983142][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2632'. [ 198.064283][ T8186] overlayfs: empty lowerdir [ 198.081110][ T8188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.087320][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.101546][ T8193] netlink: 'syz.3.2636': attribute type 27 has an invalid length. [ 198.116524][ T8193] rust_binder: 1359: no such ref 1 [ 198.121666][ T8193] rust_binder: 1359: no such ref 3 [ 198.126865][ T8193] rust_binder: 1359: no such ref 3 [ 198.132002][ T8193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1359 [ 198.405872][ T574] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 198.430426][ T36] audit: type=1400 audit(2000000009.240:886): avc: denied { audit_write } for pid=8204 comm="syz.0.2641" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 198.451867][ T36] audit: type=1107 audit(2000000009.240:887): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 198.567694][ T574] usb 4-1: unable to get BOS descriptor or descriptor too short [ 198.575974][ T574] usb 4-1: not running at top speed; connect to a high speed hub [ 198.584589][ T574] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 198.593050][ T574] usb 4-1: config 1 has no interface number 0 [ 198.595083][ T8226] /dev/loop0: Can't lookup blockdev [ 198.599525][ T574] usb 4-1: config 1 interface 138 has no altsetting 0 [ 198.612845][ T574] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 198.622014][ T574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.631644][ T574] usb 4-1: Product: syz [ 198.640324][ T574] usb 4-1: Manufacturer: syz [ 198.644979][ T574] usb 4-1: SerialNumber: syz [ 198.678618][ T36] audit: type=1326 audit(2000000009.490:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8234 comm="syz.2.2653" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c50f8f6c9 code=0x0 [ 198.863134][ T574] usb 4-1: USB disconnect, device number 67 [ 198.874609][ T2978] udevd[2978]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.138/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 198.965872][ T331] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 199.081443][ T8245] incfs: Error accessing: %. [ 199.086293][ T8245] incfs: mount failed -2 [ 199.119989][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 199.131220][ T331] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 199.140716][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.151044][ T8256] 9pnet_fd: Insufficient options for proto=fd [ 199.153814][ T331] usb 3-1: config 0 descriptor?? [ 199.162751][ T8237] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 199.447927][ T8277] rust_binder: Failed to allocate buffer. len:200, is_oneway:true [ 199.579915][ T331] hid-generic 0003:04F3:0755.002D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 200.241431][ T8317] cgroup: fork rejected by pids controller in /syz0 [ 200.805849][ T331] usb 3-1: reset full-speed USB device number 34 using dummy_hcd [ 201.586539][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 201.586559][ T36] audit: type=1400 audit(2000000012.400:891): avc: denied { ioctl } for pid=8439 comm="syz.1.2703" path="/dev/rnullb0" dev="tmpfs" ino=2257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 201.728365][ T8458] fuse: Invalid rootmode [ 201.960380][ T8466] netlink: 'syz.2.2711': attribute type 2 has an invalid length. [ 202.423673][ T8473] /dev/loop0: Can't lookup blockdev [ 202.430766][ T8475] /dev/loop0: Can't lookup blockdev [ 202.467072][ T574] usb 3-1: USB disconnect, device number 34 [ 202.537403][ T8489] overlayfs: missing 'lowerdir' [ 202.542839][ T8489] rust_binder: Write failure EFAULT in pid:1385 [ 202.679138][ T574] hid-generic 0008:FFFFFFFF:000B.002E: item fetching failed at offset 13/83 [ 202.716048][ T574] hid-generic 0008:FFFFFFFF:000B.002E: probe with driver hid-generic failed with error -22 [ 202.777955][ T8507] /dev/rnullb0: Can't lookup blockdev [ 203.029516][ T8540] incfs: Error accessing: ./file0. [ 203.034698][ T8540] incfs: mount failed -20 [ 203.104482][ T8545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.108678][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2744'. [ 203.377827][ T8559] netlink: 'syz.3.2746': attribute type 4 has an invalid length. [ 203.396911][ T8559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28337 sclass=netlink_route_socket pid=8559 comm=syz.3.2746 [ 203.410737][ T8559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8559 comm=syz.3.2746 [ 203.424489][ T8559] rust_binder: 1415: no such ref 0 [ 203.429667][ T8559] rust_binder: 1415: no such ref 2 [ 203.434885][ T8559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1415 [ 203.521054][ T8564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1418 [ 203.542833][ T8566] rust_binder: Error in use_page_slow: ESRCH [ 203.542853][ T8566] rust_binder: use_range failure ESRCH [ 203.554765][ T8566] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 203.554797][ T8566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 203.563152][ T8566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1418 [ 203.669075][ T8583] cgroup: release_agent respecified [ 203.706174][ T8589] rust_binder: Error while translating object. [ 203.706227][ T8589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 203.712445][ T8589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1422 [ 203.728954][ T8595] overlayfs: missing 'lowerdir' [ 203.851303][ T8617] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 203.862326][ T8617] /dev/rnullb0: Can't lookup blockdev [ 203.883344][ T8625] /dev/rnullb0: Can't lookup blockdev [ 204.230194][ T36] audit: type=1400 audit(2000000015.040:892): avc: denied { execute } for pid=8647 comm="syz.2.2781" path="/memory.events.local" dev="ramfs" ino=38757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 204.542116][ T36] audit: type=1400 audit(2000000015.350:893): avc: denied { bind } for pid=8669 comm="syz.0.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 204.736016][ T8689] overlayfs: failed to clone upperpath [ 204.807258][ T8691] !@: renamed from xfrm0 (while UP) [ 204.865905][ T8704] netlink: 5308 bytes leftover after parsing attributes in process `syz.3.2801'. [ 204.876506][ T8704] rust_binder: Write failure EINVAL in pid:1457 [ 204.903597][ T8708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1461 [ 204.915106][ T8708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 204.924387][ T8708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1461 [ 205.195887][ T574] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 205.361551][ T574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.375885][ T36] audit: type=1400 audit(2000000016.180:894): avc: denied { append } for pid=8752 comm="syz.1.2818" name="rnullb0" dev="tmpfs" ino=2257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 205.393137][ T574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.412625][ T574] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.445836][ T574] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.459407][ T574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.480850][ T574] usb 4-1: config 0 descriptor?? [ 205.505152][ T36] audit: type=1326 audit(2000000016.310:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8767 comm="syz.0.2824" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10deb8f6c9 code=0x0 [ 205.557921][ T36] audit: type=1326 audit(2000000016.370:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8767 comm="syz.0.2824" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10deb8f6c9 code=0x0 [ 205.636133][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 205.906399][ T8712] netlink: 'syz.3.2805': attribute type 4 has an invalid length. [ 205.916472][ T8712] netlink: 'syz.3.2805': attribute type 17 has an invalid length. [ 205.935034][ T8712] input: syz0 as /devices/virtual/input/input18 [ 206.093785][ T36] audit: type=1400 audit(2000000016.900:897): avc: denied { read } for pid=8788 comm="syz.2.2830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.337210][ T8805] overlayfs: failed to clone upperpath [ 206.345204][ T8805] overlayfs: failed to resolve './file0': -2 [ 206.467421][ T8825] fuse: Unknown parameter '' [ 206.526592][ T8832] binder: Unknown parameter 'fscontext?}' [ 206.578956][ T36] audit: type=1404 audit(2000000017.390:898): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 206.606934][ T36] audit: type=1400 audit(2000000017.410:899): avc: denied { read write } for pid=295 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 206.639993][ T36] audit: type=1400 audit(2000000017.450:900): avc: denied { read write } for pid=295 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 206.668339][ T36] audit: type=1400 audit(2000000017.480:901): avc: denied { read write } for pid=8839 comm="syz.3.2850" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 206.693563][ T36] audit: type=1400 audit(2000000017.480:902): avc: denied { read write } for pid=8839 comm="syz.3.2850" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 206.729721][ T36] audit: type=1400 audit(2000000017.530:903): avc: denied { mounton } for pid=8839 comm="syz.3.2850" path="/495" dev="tmpfs" ino=2684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 206.752222][ T36] audit: type=1400 audit(2000000017.540:904): avc: denied { read write } for pid=295 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 206.780208][ T36] audit: type=1400 audit(2000000017.590:905): avc: denied { sys_module } for pid=8841 comm="syz.3.2851" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 206.809487][ T36] audit: type=1400 audit(2000000017.620:906): avc: denied { read write } for pid=295 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 206.844365][ T36] audit: type=1400 audit(2000000017.650:907): avc: denied { read write } for pid=8844 comm="syz.3.2852" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 206.869146][ T36] audit: type=1400 audit(2000000017.670:908): avc: denied { read } for pid=8844 comm="syz.3.2852" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 207.248204][ T8884] futex_wake_op: syz.3.2866 tries to shift op by 144; fix this program [ 208.444358][ T8972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8972 comm=syz.0.2895 [ 208.628876][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2908'. [ 208.950723][ T9018] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 210.756630][ T574] usbhid 4-1:0.0: can't add hid device: -32 [ 210.765081][ T574] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 211.568881][ T574] usb 2-1: USB disconnect, device number 48 [ 211.634181][ T36] kauditd_printk_skb: 335 callbacks suppressed [ 211.634201][ T36] audit: type=1400 audit(2000000022.440:1244): avc: denied { name_bind } for pid=9240 comm="syz.2.2994" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 211.665971][ T36] audit: type=1400 audit(2000000022.440:1245): avc: denied { execmem } for pid=9239 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 211.692451][ T36] audit: type=1400 audit(2000000022.470:1246): avc: denied { mounton } for pid=9240 comm="syz.2.2994" path="/173/file0" dev="tmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 211.715280][ T36] audit: type=1400 audit(2000000022.470:1247): avc: denied { mounton } for pid=9240 comm="syz.2.2994" path="/173/file0" dev="tmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 211.738049][ T36] audit: type=1400 audit(2000000022.480:1248): avc: denied { mounton } for pid=9240 comm="syz.2.2994" path="/173/file0" dev="tmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 211.968786][ T36] audit: type=1400 audit(2000000022.780:1249): avc: denied { read write } for pid=295 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 212.052857][ T36] audit: type=1400 audit(2000000022.860:1250): avc: denied { execmem } for pid=9244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 212.075824][ T36] audit: type=1400 audit(2000000022.860:1251): avc: denied { create } for pid=9246 comm="syz.2.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 212.096493][ T36] audit: type=1400 audit(2000000022.870:1252): avc: denied { create } for pid=9246 comm="syz.2.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 212.116995][ T36] audit: type=1400 audit(2000000022.870:1253): avc: denied { create } for pid=9246 comm="syz.2.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 213.901036][ T9274] netlink: 'syz.0.3002': attribute type 1 has an invalid length. [ 213.911847][ T9274] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3002'. [ 215.646684][ T9289] netlink: 'syz.0.3009': attribute type 16 has an invalid length. [ 215.654873][ T9289] wg1: left promiscuous mode [ 215.659774][ T9289] wg1: left allmulticast mode [ 215.666375][ T9289] netlink: 'syz.0.3009': attribute type 6 has an invalid length. [ 216.515952][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 216.652282][ T36] kauditd_printk_skb: 139 callbacks suppressed [ 216.652301][ T36] audit: type=1400 audit(2000000027.460:1393): avc: denied { execmem } for pid=9295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 216.687042][ T36] audit: type=1400 audit(2000000027.470:1394): avc: denied { create } for pid=9297 comm="syz.3.3014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 216.707613][ T36] audit: type=1400 audit(2000000027.500:1395): avc: denied { read write } for pid=295 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.731688][ T36] audit: type=1400 audit(2000000027.500:1396): avc: denied { create } for pid=9299 comm="syz.0.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 216.751382][ T36] audit: type=1400 audit(2000000027.500:1397): avc: denied { create } for pid=9299 comm="syz.0.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 216.771006][ T36] audit: type=1400 audit(2000000027.560:1398): avc: denied { create } for pid=9299 comm="syz.0.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 216.791652][ T36] audit: type=1400 audit(2000000027.560:1399): avc: denied { create } for pid=9299 comm="syz.0.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 216.812097][ T36] audit: type=1400 audit(2000000027.560:1400): avc: denied { create } for pid=9299 comm="syz.0.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 216.832544][ T36] audit: type=1400 audit(2000000027.570:1401): avc: denied { create } for pid=9299 comm="syz.0.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 217.792453][ T36] audit: type=1400 audit(2000000028.600:1402): avc: denied { execmem } for pid=9304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 221.748912][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 221.749138][ T36] audit: type=1400 audit(2000000032.560:1424): avc: denied { block_suspend } for pid=9333 comm="syz.0.3025" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 221.777006][ T36] audit: type=1400 audit(2000000032.560:1425): avc: denied { write } for pid=9334 comm="syz.3.3027" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 221.780905][ T9337] bridge0: port 3(veth0_to_team) entered blocking state [ 221.800222][ T36] audit: type=1400 audit(2000000032.560:1426): avc: denied { create } for pid=9336 comm="syz.2.3026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 221.807268][ T9337] bridge0: port 3(veth0_to_team) entered disabled state [ 221.826736][ T36] audit: type=1400 audit(2000000032.560:1427): avc: denied { write } for pid=9334 comm="syz.3.3027" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 221.834570][ T9337] bridge0: port 3(veth0_to_team) entered blocking state [ 221.856679][ T36] audit: type=1400 audit(2000000032.560:1428): avc: denied { read } for pid=9334 comm="syz.3.3027" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 221.863168][ T9337] bridge0: port 3(veth0_to_team) entered forwarding state [ 221.886408][ T36] audit: type=1400 audit(2000000032.560:1429): avc: denied { read } for pid=9334 comm="syz.3.3027" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 221.915656][ T36] audit: type=1400 audit(2000000032.560:1430): avc: denied { create } for pid=9336 comm="syz.2.3026" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 221.937231][ T36] audit: type=1400 audit(2000000032.560:1431): avc: denied { read } for pid=9334 comm="syz.3.3027" dev="nsfs" ino=4026532502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 221.958424][ T36] audit: type=1400 audit(2000000032.560:1432): avc: denied { create } for pid=9336 comm="syz.2.3026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 221.978190][ T36] audit: type=1400 audit(2000000032.560:1433): avc: denied { execmem } for pid=9332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 224.198121][ T329] bridge_slave_1: left allmulticast mode [ 224.203814][ T329] bridge_slave_1: left promiscuous mode [ 224.209519][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.217252][ T329] bridge_slave_0: left allmulticast mode [ 224.222900][ T329] bridge_slave_0: left promiscuous mode [ 224.228654][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.337441][ T329] tipc: Left network mode [ 224.342860][ T329] veth1_macvtap: left promiscuous mode [ 224.348436][ T329] veth0_vlan: left promiscuous mode [ 228.412512][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 228.412535][ T36] audit: type=1400 audit(2000000039.220:1460): avc: denied { execmem } for pid=9372 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 228.439265][ T36] audit: type=1400 audit(2000000039.220:1461): avc: denied { read } for pid=9376 comm="syz.3.3039" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 228.462158][ T36] audit: type=1400 audit(2000000039.230:1462): avc: denied { create } for pid=9376 comm="syz.3.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 228.482528][ T36] audit: type=1400 audit(2000000039.230:1463): avc: denied { read } for pid=9376 comm="syz.3.3039" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 228.505872][ T36] audit: type=1400 audit(2000000039.230:1464): avc: denied { read write } for pid=295 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 228.530256][ T36] audit: type=1400 audit(2000000039.230:1465): avc: denied { execmem } for pid=9373 comm="syz.0.3037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 230.321345][ T36] audit: type=1400 audit(2000000041.130:1466): avc: denied { execmem } for pid=9382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 230.354832][ T36] audit: type=1400 audit(2000000041.130:1467): avc: denied { create } for pid=9383 comm="syz.0.3040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 230.374525][ T36] audit: type=1400 audit(2000000041.130:1468): avc: denied { create } for pid=9383 comm="syz.0.3040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 230.395011][ T36] audit: type=1400 audit(2000000041.130:1469): avc: denied { create } for pid=9383 comm="syz.0.3040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 232.827814][ T7162] bridge_slave_1: left allmulticast mode [ 232.833521][ T7162] bridge_slave_1: left promiscuous mode [ 232.849339][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.857863][ T7162] bridge_slave_0: left allmulticast mode [ 232.863530][ T7162] bridge_slave_0: left promiscuous mode [ 232.869174][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.009553][ T7162] veth1_macvtap: left promiscuous mode [ 233.015111][ T7162] veth0_vlan: left promiscuous mode [ 233.347165][ T7162] bridge0: port 3(veth0_to_team) entered disabled state [ 233.354600][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.362136][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state