last executing test programs: 1m13.225602106s ago: executing program 0 (id=395): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0x3f, 0x0, 0x7, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in6=@empty, @in6=@local, 0x2c, 0x0, 0x14}]}, 0x38}}, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000440)={0x1, &(0x7f00000003c0)=[{0x3, 0x0, 0x3, 0xff}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000000)={0x10003, 0x100, 0x300, 0x0}) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1a0, r3, 0x421, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x128, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4ae}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8e0}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffa}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x68}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9bc}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x90e}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xdb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xa}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4c040) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) r8 = dup(r6) ioctl$PTP_EXTTS_REQUEST2(r8, 0x3d13, &(0x7f0000000100)) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 1m13.096027478s ago: executing program 0 (id=396): lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000600), 0x0, 0xff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0xc000, 0x126) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001cc0)={0x2020}, 0x2020) openat(r0, 0x0, 0x28f8944cb5711a51, 0x190) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x5ea6, 0x802) r1 = socket$inet_tcp(0x2, 0x1, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="2f5067d8", 0x4}], 0x1, 0x8) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = dup(r3) fsetxattr$system_posix_acl(r4, &(0x7f0000000cc0)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) 1m13.095042758s ago: executing program 0 (id=397): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa201, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x5, &(0x7f0000000140)=[{0x300, 0xa, 0x3, 0x1}, {0x200, 0x5, 0x4, 0x6}, {0xa32e, 0xd, 0x8, 0x4fa}, {0x11, 0xf8, 0x15, 0x7f}, {0x0, 0x4, 0xd4, 0xffffffff}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000000)=""/71) (async) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000000)=""/71) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r4, 0xc004ae0a, &(0x7f0000000080)={0x23, [0x0, 0x0, 0x0]}) (async) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r4, 0xc004ae0a, &(0x7f0000000080)={0x23, [0x0, 0x0, 0x0]}) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close_range(r0, 0xffffffffffffffff, 0x0) 1m12.962446951s ago: executing program 0 (id=400): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x1000, 0x71, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x5, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0xe, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x316, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x0, 0x6, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x142, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x8, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x401, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x6d01, 0x5, 0x9, 0x800000, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x3, 0x4, 0x1c, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x0, 0xa, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x148, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x7, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x4, 0x5, 0xb1e, 0x9, 0x200, 0xffff3441, 0x7]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in6=@loopback, 0x4e20, 0x5, 0x4e21, 0x8, 0xa, 0x90, 0xa0, 0xc}, {0x1, 0xf, 0x40000000, 0x4, 0xffffffffffffffff, 0x9, 0x7, 0x8}, {0x80, 0x7, 0x1, 0x81}, 0x662a, 0x6e6bba, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x32}, 0x2, @in6=@mcast1, 0x3503, 0x2, 0x2, 0xd, 0x9, 0x5, 0x2}}, 0xe8) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000300)=[@request_death, @increfs], 0x33, 0x0, &(0x7f0000000340)="e114ddca46f77d5697129074f42cda34b1630edb163f2f75dfd97d6a5fb30457fe3225ad0cd2fcf143843ec9b3451c25579918"}) fcntl$setlease(r3, 0x400, 0x1) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000150a010200000000000000000100000108000340000000090c0006400000000000000003"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000840) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x8, 0x1, 0xc}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m12.804021324s ago: executing program 0 (id=404): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0xffffffffffffffb6) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000000c0)=""/60) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 1m12.803274794s ago: executing program 0 (id=405): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) syz_io_uring_setup(0x4797, &(0x7f0000000000)={0x0, 0x8a1a, 0x80, 0x3, 0x29c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_complete(r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close_range(r0, 0xffffffffffffffff, 0x0) 57.558814342s ago: executing program 32 (id=405): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) syz_io_uring_setup(0x4797, &(0x7f0000000000)={0x0, 0x8a1a, 0x80, 0x3, 0x29c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_complete(r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close_range(r0, 0xffffffffffffffff, 0x0) 56.304527626s ago: executing program 1 (id=539): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2b85fcf330ca9af6, 0x12, r0, 0x8ee42000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000001ac0)=@urb_type_iso={0x0, {0x8, 0x1}, 0x2, 0x3, 0x0, 0x0, 0x4, 0x100, 0x44, 0x5, 0x2, 0x0, [{0x7fffffff, 0x200000, 0x5}, {0x9, 0x9, 0xa}, {0x80000001, 0xffffffff, 0x1ff}, {0xf, 0x2, 0x1}, {0x7, 0x3, 0xffffffff}, {0x200, 0xc, 0x40}, {0x5, 0xf, 0xe800000}, {0x3, 0x100, 0x9}, {0x911e, 0x40, 0x4}, {0x5, 0x5, 0x3}, {0x9, 0x7, 0x1}, {0x0, 0xe0000, 0x5}, {0x0, 0x5, 0x6a}, {0x1, 0x400000, 0x900}, {0x7, 0x7fff, 0xfffffff8}, {0x8, 0x5}, {0x0, 0x4, 0xff}, {0x0, 0x1, 0x7ff}, {0x2, 0xfffff657, 0xd6}, {0x7630, 0xb, 0x73e}, {0x6, 0x8, 0x3}, {0x1ff, 0x10000, 0x9}, {0x8, 0x8, 0x80000001}, {0x1f, 0x2, 0x68}, {0x80, 0x40, 0x2}, {0x401, 0x7, 0xffffffff}, {0x314d, 0xf3, 0x4}, {0x2, 0x9, 0x1}, {0x1000, 0x8001, 0x2}, {0x5, 0x101, 0x4}, {0xadd, 0x3ff, 0x1}, {0x3, 0xfffffff9, 0x4}, {0xfffffffd, 0x2, 0x2}, {0x4, 0x7, 0x624}, {0x4, 0x2, 0xfffffff9}, {0x10, 0x1, 0x7}, {0x5, 0x5, 0x4}, {0x4, 0x1b, 0x7b3a}, {0x3, 0x8}, {0x4, 0xc}, {0x6, 0xbab, 0x9}, {0x3, 0x4, 0x9}, {0xfffffff7, 0xff, 0x6}, {0x6, 0x1, 0x6a}, {0x5, 0x401, 0x2}, {0xfff, 0x7}, {0x9, 0x9, 0x6}, {0x1, 0xea2a, 0x8}, {0x3d5, 0x9ba, 0x4}, {0x9, 0x3, 0x2}, {0x5, 0x100, 0x6}, {0x10001, 0x6, 0x4}, {0x100, 0x5, 0x81}, {0x7fffffff, 0xfffffff9, 0xfffffff5}, {0xb, 0x2, 0x1}, {0xd, 0x4, 0x9}, {0x6, 0x8, 0xffffffff}, {0x8, 0x7, 0x280000}, {0x7, 0x6, 0x9}, {0xe2, 0xfffffff8, 0x4}, {0x1ff, 0x4, 0x1}, {0x10af2c3f, 0x2, 0x1}, {0x7, 0xd5b, 0x3}, {0xd066, 0x8, 0x800}, {0x3, 0x8, 0x1dd}, {0xe, 0x7}, {0x6, 0x9, 0x5652}, {0x6, 0xb, 0x2}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x41, 0x4) 56.131644309s ago: executing program 1 (id=543): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xfe) unlinkat(r3, &(0x7f0000000080)='./file0\x00', 0x0) syz_usb_connect(0x2, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff0b050c0220000606030905071000020104070824"], 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r6 = syz_usb_connect$cdc_ncm(0x1, 0x7b, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x1, 0xe0, 0xbe, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "4f31c68ed5"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xaba, 0x3, 0xe8, 0x4}, {0x6, 0x24, 0x1a, 0x6, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x800, 0x1, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x6e, 0xf4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x64, 0x6, 0x53}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xe, 0x8, 0xf}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x97, 0x7, 0x3, 0x10, 0xc5}, 0x31, &(0x7f0000000280)={0x5, 0xf, 0x31, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0xd, 0x40, 0x7, 0x40, 0x44}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xf2, 0x1, 0x9, 0xf, 0xfffa, [0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xd8, 0x7, 0x6, 0x6, 0x5}, @ptm_cap={0x3}]}, 0x5, [{0x30, &(0x7f00000002c0)=@string={0x30, 0x3, "e7cbf7fc12dcf0ca7222ad5ade36c0d60a6d12409f8e366544df0579f9d65b73a52c708a047393d536f7a22a24ac"}}, {0x88, &(0x7f00000003c0)=@string={0x88, 0x3, "0aa9d8cd2413d3176105ba3d225c1fd829e237ef2ae1024b14cdce12028e488cdef7164097f678717c1dde1eb7b18c81623ce5824a850f53f3da10a035ef7b4ac50aa254e44a10b82d2d8a4382b0dd37184bce1c2299063db1365133d07b9517eb261850b14f834538cf07c57cd97d98f4d871d428b73c50377a8be652bac9c87b1d02c7dea1"}}, {0x1d, &(0x7f0000000300)=@string={0x1d, 0x3, "907d7bc8603a9d93a1e3549bfff72ddb32b1df93e69089b4e87c06"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41c}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000680)={0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="4007974116be1c1cb37f093d54ebe3cf5c4dd2b96ecf3a13d2e0aa8a3d6c1502079bcce7212ddbaef4ebd039a0fec709cceb4ac5bcc22da6805dd0cfdf151542c1bec1225d0fc7c696d479567249b792baa8021f5ba0227e3f779f1affff660adb73265f3ad0ca7dc4330ea9e98d951a30dd0ae02e862216fd37e266005c4cd1a78addf34bf1553ec403346dd20f5e31c4633f18cdde8ff60d3ddaa689bd5cabfd70c982e9f868e9b0f0501cb869db9d30642ca1f59dd2ee438d46c692448a5ab952a87aff29cea3daaf2d33aa4fe8102d1e232257163eb321739a66a0601aa80a51cdcbf2d2b4c5627b1e0bed0700000000000000"], &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x40, 0xfc9197c6e181992c, 0x6a, "d5c7ad9fea1e71f1f9ec872caae59921d403bce8da1ffeddc2880647bc9ededab4c2452e8fa3423aafd8ae1d4fddf94d1a63b96407f3a0e65a7fae081801c02ee2633f223a0fa1ff088700c33039c1358cad202a800fea3640a56c0d2e762466221487c4bf3fbd55aae1"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000007c0)={0x20, 0x80, 0x1c, {0x3, 0x32, 0x2, 0x0, 0x81, 0x2, 0x4, 0xc49, 0xe, 0x9, 0x1ff}}, &(0x7f0000000800)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000880)={0x20, 0x83, 0x2}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000900)={0x20, 0x89, 0x2, 0x1}}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 53.124358536s ago: executing program 1 (id=573): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x5853c2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x5) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x80, 0x7, 0x10001, 0x28d, {{0x18, 0x4, 0x3, 0x8, 0x60, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x4c, 0xf, 0x1, 0xd, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xfffffffe}, {@remote, 0x7ff}, {@empty, 0x45d}, {@loopback, 0x1}, {@loopback, 0x8}, {@multicast2, 0x9}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x9) memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1\xbf\x00nh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\xe5\x00\x00\x00', 0x0) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000080)) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000d80)={0x0, 0x5, 0x4, '}G\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000580)={0x84, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80001) setuid(0xee00) setuid(0x0) 50.966451737s ago: executing program 1 (id=611): r0 = socket(0x80000000000000a, 0x1, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x200000, 0x0, 0x2c}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 50.910323718s ago: executing program 1 (id=612): chdir(&(0x7f0000000000)='./file0\x00') (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x129800, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x9}) (async) r1 = socket$inet6(0xa, 0x4, 0x4) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4802, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x5, 0xfffffeff, 0x1, 0x9, 0x1b, "64dfaa20e2ebc14dc7e3ecc7850d622962ee81"}) r3 = dup3(r0, r2, 0x80000) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000140)={{0x3, 0x7fffffff}, {0xfffffffffffffff9, 0x8000}, 0x7fffffff}) (async) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, 0x464, 0x200, 0x70bd2a, 0x25dfdbfd, "863bf3fc198697f0b792e69abf0b1e79cd8b95b99cc21c84b66f71a2423af96b6eda6481b96b35f2442e0e7c7dded03be88d73d65b4d8dea95eb6f0448985eadba896a2320d39e9101b2a99e0783bb82a64a4cb0499f58137684004e42479fd5c7a21efdf02eeede6925a84d6cba575f7a792372178998cf5ad6a44f05e12be70bda8c679a071b9ef5efd9b21a800fbc57e3c0d122687b7bbe2159c0f8d95cca0c6e02cc5552c90d65d96ab8586319ea8a", ["", "", "", "", ""]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) close(r1) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000340)=0x401) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x400c814) (async) sendmsg$sock(r3, &(0x7f0000000700)={&(0x7f0000000480)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)="c8e6244e79ca3055e52ff032af82487bad812cd5a81ffb87a0f3291387cd9f70cd7fc39845ce551ea65423702bdddf20ac87ff5dad24be2828aa788bd87e1e6c9ee53d", 0x43}, {&(0x7f0000000580)="6f591ee1e90d2b3faa7f28dcc52b0daff909a5bc9868fa10b324befa98200dbfb148835e9127a8d8e0ff48c4e3f2e2c8f6720cfc2150af1bd5e472a4b2cece027f8f9095a6bcb26e8b8118ce2a6788cc4a20682e1e73065bb7ae9a52b09b726a517d96b4f2972b326d3ab193f9a87733a837175d9a", 0x75}, {&(0x7f0000000600)="ae737bb9abd081ab36872e8c077cbffb4f8b8eba2c406a92a5ed52d992b4cd3c1da439bc1dd70cf0ee680f6186a3c31cba5ff956055558009884261cc122a35b6c0170e8f49a56c724970c65f7ceb97d9a632b3c98ab8a6cc64adb7d20a7c5961d0887cbfafa613ed99749bd77df83", 0x6f}], 0x3, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0x7ff}}], 0x18}, 0x11) (async) readv(r2, &(0x7f0000001840)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/118, 0x76}, {&(0x7f00000017c0)=""/102, 0x66}], 0x3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x38, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001a00), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x34, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4005) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001b00)=0x5) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x24, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xff\xff'}]}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) (async) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000001c40)={0x5, 0x0, [{0xb, 0x7, 0x1, 0xf, 0x5, 0xffff3566, 0x19}, {0x40000000, 0x7, 0x2, 0x0, 0x2, 0x7, 0xd}, {0x80000008, 0x8000000, 0x2, 0xffff, 0x25c, 0x5, 0x10000000}, {0x80000000, 0x5, 0x0, 0x76, 0xffffff28, 0x7, 0x7}, {0x40000001, 0x9, 0x1553d3684f40c93c, 0xfffffbca, 0xb, 0x80000000, 0x200}]}) (async) rt_sigqueueinfo(0xffffffffffffffff, 0x32, &(0x7f0000001d40)={0x23, 0xe}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000001dc0)={0x10002000}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, 0x3, 0x8, 0x301, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0xcc00) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f40), r6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000002080)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x30, r9, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x30}}, 0x0) 50.908176268s ago: executing program 1 (id=613): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@directio}]}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r6) syz_usb_control_io(r5, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x11, 0x5, {0x5, 0xe, "2ff465"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='@\nB'], 0x0, 0x0, 0x0, 0x0}, 0x0) read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) 30.951916895s ago: executing program 33 (id=613): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@directio}]}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r6) syz_usb_control_io(r5, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x11, 0x5, {0x5, 0xe, "2ff465"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='@\nB'], 0x0, 0x0, 0x0, 0x0}, 0x0) read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) 3.136633361s ago: executing program 5 (id=975): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='-cpu '], 0xd) 3.136324791s ago: executing program 5 (id=978): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000002080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) 3.130985861s ago: executing program 5 (id=979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x2c, r1, 0x101, 0x70bd2f, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) 3.110691692s ago: executing program 5 (id=980): ioperm(0x9, 0x9, 0x7) statfs(0x0, 0x0) 3.048336543s ago: executing program 5 (id=984): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') 3.048152283s ago: executing program 5 (id=985): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42042, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 821.234355ms ago: executing program 3 (id=1076): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x76, 0xfffff028}, {0x6, 0x2, 0x3, 0x20a}]}, 0x10) 756.817186ms ago: executing program 3 (id=1077): unshare(0x2040400) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) 745.223876ms ago: executing program 3 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x800000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbrt\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\xd3\xba\xc8\x87)\xc8\xc2Z[M\xaa2j\xac\xf6U\a\x06\x8eA\xc9\rEt\x84\x02L\x87b\x87', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 698.385507ms ago: executing program 3 (id=1079): futex(0x0, 0x100, 0x5, 0x0, 0x0, 0x2) 616.750729ms ago: executing program 3 (id=1080): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{&(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}, {&(0x7f0000000240)}, {0x0}], 0x3}}], 0x1, 0x2404c084) 616.602429ms ago: executing program 3 (id=1081): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000740)={0x0, 0x4a}) 523.2388ms ago: executing program 4 (id=1082): ioperm(0x4, 0x8, 0x4005) r0 = getpgrp(0x0) capset(&(0x7f0000000200)={0x20080522, r0}, 0x0) 460.807241ms ago: executing program 4 (id=1084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000066a000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 388.784743ms ago: executing program 4 (id=1090): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x2800) 388.613983ms ago: executing program 4 (id=1091): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 385.571253ms ago: executing program 4 (id=1092): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x4000, 0x0, 0x49, 0x1, 0x7, 0x4, 0xe, 0x0, 0x0, 0x8, 0x2}, {0xf000, 0xdddd0000, 0x0, 0x5, 0xbb, 0x5, 0x38, 0x8, 0x5, 0xfd, 0xd9, 0x2}, {0xeeef0000, 0x10000, 0xd, 0xe4, 0x3, 0xd, 0x6, 0x9, 0x0, 0x5, 0x0, 0xa}, {0x0, 0x8000000, 0xc, 0x9, 0x44, 0xcb, 0x5, 0x9, 0x40, 0x9, 0x1, 0x5}, {0xffff1000, 0x2000, 0xb, 0x7, 0xe, 0x42, 0x6, 0x8f, 0x1, 0xd, 0x5, 0x1}, {0x80a0001, 0x80a0000, 0xc, 0x5, 0x61, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x6, 0x4}, {0x3000, 0xeeee0000, 0x1b, 0xff, 0xbc, 0x80, 0x1, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x8000000, 0x8080000, 0xf, 0x3, 0x4, 0x6, 0x9, 0xfa, 0x7, 0xc6, 0x0, 0x80}, {0xf000, 0x1}, {0x2000, 0x8}, 0x40040001, 0x0, 0x4000, 0x20, 0x0, 0x4801, 0x33339800, [0x6, 0x1ff, 0x86d, 0x8001]}) 284.415365ms ago: executing program 4 (id=1096): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) syz_open_procfs$pagemap(0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 266.627606ms ago: executing program 34 (id=1096): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) syz_open_procfs$pagemap(0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 107.063288ms ago: executing program 2 (id=1106): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x3) 47.96523ms ago: executing program 2 (id=1107): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 47.836079ms ago: executing program 2 (id=1108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) 47.74651ms ago: executing program 2 (id=1109): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x3}, 0x1c) 29.59918ms ago: executing program 2 (id=1110): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x2) 0s ago: executing program 2 (id=1111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600060000000800090001000000050002"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): -1: device descriptor read/8, error -71 [ 46.941280][ T947] overlayfs: workdir and upperdir must be separate subtrees [ 47.041226][ T388] usb usb2-port1: unable to enumerate USB device [ 47.071086][ T503] usb 3-1: device descriptor read/8, error -71 [ 47.299762][ T36] audit: type=1400 audit(1757263640.250:396): avc: denied { mount } for pid=950 comm="syz.3.196" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 47.324454][ T952] overlayfs: upper fs does not support tmpfile. [ 47.331722][ T503] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 47.341299][ T36] audit: type=1400 audit(1757263640.280:397): avc: denied { mounton } for pid=950 comm="syz.3.196" path="/66/file0/bus" dev="bpf" ino=8273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 47.366317][ T503] usb 3-1: device descriptor read/8, error -71 [ 47.512942][ T503] usb 3-1: device descriptor read/8, error -71 [ 47.570485][ T36] audit: type=1326 audit(1757263640.520:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=905 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41718ebe9 code=0x7fc00000 [ 47.623771][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.623803][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.630765][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.638946][ T503] usb usb3-port1: unable to enumerate USB device [ 47.655370][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.655401][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.663419][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.671778][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.678762][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.685918][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.692973][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.700268][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.707295][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.714106][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.721232][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.728225][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.735497][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.742979][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.749597][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.751074][ T403] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 47.756701][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.771570][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.778473][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.786981][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.794030][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.801227][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.808601][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.816207][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.823425][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.830729][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.839206][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.846847][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.854779][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.862416][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.921078][ T403] usb 1-1: Using ep0 maxpacket: 16 [ 47.946387][ T403] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 47.961068][ T403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.969912][ T403] usb 1-1: Product: syz [ 47.975944][ T403] usb 1-1: Manufacturer: syz [ 47.980800][ T403] usb 1-1: SerialNumber: syz [ 47.986479][ T403] usb 1-1: config 0 descriptor?? [ 47.992771][ T403] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 48.003092][ T403] usb 1-1: Detected FT-X [ 48.074156][ T36] audit: type=1400 audit(1757263641.030:399): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 48.107272][ T967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:187 [ 48.199343][ T36] audit: type=1400 audit(1757263641.150:400): avc: denied { create } for pid=953 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.261471][ T979] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 48.276400][ T36] audit: type=1400 audit(1757263641.150:401): avc: denied { getopt } for pid=953 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.299457][ T36] audit: type=1400 audit(1757263641.200:402): avc: denied { create } for pid=974 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 48.301138][ T503] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 48.323693][ T36] audit: type=1400 audit(1757263641.220:403): avc: denied { bind } for pid=977 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.433135][ T403] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 48.441145][ T403] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 48.461122][ T503] usb 2-1: device descriptor read/64, error -71 [ 48.461233][ T403] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 48.478791][ T403] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 48.493695][ T403] usb 1-1: USB disconnect, device number 15 [ 48.511669][ T403] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 48.535050][ T403] ftdi_sio 1-1:0.0: device disconnected [ 48.638519][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 48.711151][ T503] usb 2-1: device descriptor read/64, error -71 [ 48.802957][ T31] usb 3-1: config 3 has an invalid interface number: 240 but max is 2 [ 48.816669][ T31] usb 3-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 48.826746][ T31] usb 3-1: config 3 has an invalid interface number: 19 but max is 2 [ 48.836719][ T31] usb 3-1: config 3 has an invalid interface number: 135 but max is 2 [ 48.845831][ T31] usb 3-1: config 3 has an invalid interface number: 110 but max is 2 [ 48.855441][ T31] usb 3-1: config 3 has 4 interfaces, different from the descriptor's value: 3 [ 48.866975][ T31] usb 3-1: config 3 has no interface number 0 [ 48.874915][ T31] usb 3-1: config 3 has no interface number 1 [ 48.882401][ T31] usb 3-1: config 3 has no interface number 2 [ 48.888750][ T31] usb 3-1: config 3 has no interface number 3 [ 48.896326][ T31] usb 3-1: config 3 interface 240 altsetting 11 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 48.908175][ T31] usb 3-1: config 3 interface 240 altsetting 11 bulk endpoint 0x2 has invalid maxpacket 1023 [ 48.920194][ T31] usb 3-1: config 3 interface 240 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 48.933244][ T31] usb 3-1: config 3 interface 240 altsetting 11 endpoint 0xA has invalid wMaxPacketSize 0 [ 48.946358][ T31] usb 3-1: config 3 interface 240 altsetting 11 bulk endpoint 0xF has invalid maxpacket 8 [ 48.957664][ T503] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 48.966328][ T31] usb 3-1: config 3 interface 240 altsetting 11 has a duplicate endpoint with address 0x2, skipping [ 48.990344][ T31] usb 3-1: config 3 interface 240 altsetting 11 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 49.005460][ T31] usb 3-1: config 3 interface 240 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 49.017066][ T31] usb 3-1: config 3 interface 240 altsetting 11 has a duplicate endpoint with address 0x2, skipping [ 49.023496][ T987] random: crng reseeded on system resumption [ 49.036192][ T989] rust_binder: inc_ref_done called when no active inc_refs [ 49.039947][ T31] usb 3-1: config 3 interface 240 altsetting 11 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 49.064022][ T31] usb 3-1: config 3 interface 240 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 49.079081][ T31] usb 3-1: config 3 interface 19 altsetting 52 has a duplicate endpoint with address 0xD, skipping [ 49.092993][ T31] usb 3-1: config 3 interface 19 altsetting 52 has a duplicate endpoint with address 0xA, skipping [ 49.107261][ T993] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.107301][ T993] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 49.107569][ T992] binder: Unknown parameter 'context' [ 49.118926][ T31] usb 3-1: config 3 interface 19 altsetting 52 has a duplicate endpoint with address 0x1, skipping [ 49.153988][ T503] usb 2-1: device descriptor read/64, error -71 [ 49.162032][ T31] usb 3-1: config 3 interface 19 altsetting 52 has a duplicate endpoint with address 0x3, skipping [ 49.174138][ T31] usb 3-1: config 3 interface 19 altsetting 52 has a duplicate endpoint with address 0x3, skipping [ 49.192885][ T998] rust_binder: Write failure EFAULT in pid:66 [ 49.212868][ T31] usb 3-1: config 3 interface 19 altsetting 52 endpoint 0xC has an invalid bInterval 255, changing to 11 [ 49.245202][ T31] usb 3-1: config 3 interface 19 altsetting 52 endpoint 0xC has invalid wMaxPacketSize 0 [ 49.258281][ T31] usb 3-1: config 3 interface 19 altsetting 52 has an invalid descriptor for endpoint zero, skipping [ 49.270311][ T31] usb 3-1: config 3 interface 19 altsetting 52 has an endpoint descriptor with address 0x6E, changing to 0xE [ 49.284946][ T31] usb 3-1: config 3 interface 19 altsetting 52 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 49.301918][ T31] usb 3-1: config 3 interface 19 altsetting 52 has an invalid descriptor for endpoint zero, skipping [ 49.314415][ T31] usb 3-1: config 3 interface 19 altsetting 52 endpoint 0xB has invalid maxpacket 959, setting to 64 [ 49.340240][ T31] usb 3-1: config 3 interface 19 altsetting 52 has a duplicate endpoint with address 0x5, skipping [ 49.364459][ T31] usb 3-1: config 3 interface 19 altsetting 52 has a duplicate endpoint with address 0xE, skipping [ 49.379291][ T31] usb 3-1: config 3 interface 19 altsetting 52 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 49.386658][ T1017] netlink: 'syz.3.217': attribute type 11 has an invalid length. [ 49.393094][ T31] usb 3-1: too many endpoints for config 3 interface 135 altsetting 100: 111, using maximum allowed: 30 [ 49.413694][ T31] usb 3-1: config 3 interface 135 altsetting 100 has a duplicate endpoint with address 0xF, skipping [ 49.426018][ T503] usb 2-1: device descriptor read/64, error -71 [ 49.434722][ T31] usb 3-1: config 3 interface 135 altsetting 100 has a duplicate endpoint with address 0x8, skipping [ 49.450470][ T31] usb 3-1: config 3 interface 135 altsetting 100 has 2 endpoint descriptors, different from the interface descriptor's value: 111 [ 49.465486][ T31] usb 3-1: config 3 interface 110 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 49.478773][ T31] usb 3-1: config 3 interface 110 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 49.491154][ T31] usb 3-1: config 3 interface 110 altsetting 11 has a duplicate endpoint with address 0xD, skipping [ 49.503108][ T31] usb 3-1: config 3 interface 240 has no altsetting 0 [ 49.510484][ T31] usb 3-1: config 3 interface 19 has no altsetting 0 [ 49.517901][ T31] usb 3-1: config 3 interface 135 has no altsetting 0 [ 49.525553][ T31] usb 3-1: config 3 interface 110 has no altsetting 0 [ 49.529633][ T1027] rust_binder: Failed copying remainder into alloc: EFAULT [ 49.533019][ T1027] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 49.534380][ T31] usb 3-1: New USB device found, idVendor=5050, idProduct=0b00, bcdDevice= 7.39 [ 49.541389][ T1027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 49.549867][ T503] usb usb2-port1: attempt power cycle [ 49.559291][ T1027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:80 [ 49.569682][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.594020][ T31] usb 3-1: Product: ю [ 49.598672][ T31] usb 3-1: Manufacturer: ꈻ냘齓쾫默恎‏ւ臅륙玼깚崶茈ꏍ雳䄨⻿넁횎薳감ꅩ閠ﭟ⊡諎뿪ꆚￔ紈᫳ᩞ⩃퇬꾅㓯擄两ࡠ欯厤創昅៥㞫⧇떠嵞䤵쪼◶⿹⁀ଣ嵲沛氋뮔ﶟ㯮奕窗콳ᒘ腷鎅⧁纲Ꚃ꥚࿳偀꩕毊멾혿ｌ쿘쵮4◽淅視䠒外赠䜧ၘ붍徑㉶螙ᛲ䊰쓢둾眮鸺 [ 49.641559][ T31] usb 3-1: SerialNumber: ṫ䅛᭹礼ﶜ脜Ⰷݱ뼿쵃ꋥ瑸漚숍㊧躎䵽瀌⼚㑛剞쇝익㫝匭俸ᇯꗥꍴ聪䪞䭈괒崔䊅됆娰箥冽硒뿽쯕ꔒﻦ닰㝌隁֞ꝼ囹卩ᒏ攗㇮褤怏鞌䱠薳롞䱓擷쾦ꭷ귌풂㗴힚䑺☻ŜᎼ몎ள늖⑹钇뷁鱈鋱⥏燛଒㚮鱛چ６昔躺悭㍗ꑏ [ 49.681795][ T981] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 49.684398][ T1034] binder: Unknown parameter 'dirsync$' [ 49.692516][ T981] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 49.699212][ T1034] overlay: ./bus is not a directory [ 49.941133][ T503] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 49.951133][ T403] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 49.962232][ T503] usb 2-1: device descriptor read/8, error -71 [ 50.092676][ T503] usb 2-1: device descriptor read/8, error -71 [ 50.102724][ T403] usb 1-1: config 15 has too many interfaces: 234, using maximum allowed: 32 [ 50.112088][ T403] usb 1-1: config 15 has 1 interface, different from the descriptor's value: 234 [ 50.122334][ T403] usb 1-1: config 15 has no interface number 0 [ 50.133511][ T403] usb 1-1: config 15 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 50.134714][ T31] ftdi_sio 3-1:3.240: FTDI USB Serial Device converter detected [ 50.147319][ T403] usb 1-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 50.155440][ T31] ftdi_sio ttyUSB0: unknown device type: 0x739 [ 50.169721][ T403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.179868][ T403] usb 1-1: Product: syz [ 50.180363][ T31] ftdi_sio 3-1:3.19: FTDI USB Serial Device converter detected [ 50.184477][ T403] usb 1-1: Manufacturer: syz [ 50.193567][ T31] ftdi_sio ttyUSB1: unknown device type: 0x739 [ 50.197780][ T403] usb 1-1: SerialNumber: syz [ 50.213505][ T31] ftdi_sio 3-1:3.135: FTDI USB Serial Device converter detected [ 50.243403][ T31] ftdi_sio ttyUSB2: unknown device type: 0x739 [ 50.254940][ T31] ftdi_sio 3-1:3.110: FTDI USB Serial Device converter detected [ 50.263390][ T31] ftdi_sio ttyUSB3: unknown device type: 0x739 [ 50.285553][ T31] usb 3-1: USB disconnect, device number 18 [ 50.294693][ T31] ftdi_sio 3-1:3.240: device disconnected [ 50.306271][ T31] ftdi_sio 3-1:3.19: device disconnected [ 50.314212][ T31] ftdi_sio 3-1:3.135: device disconnected [ 50.322050][ T31] ftdi_sio 3-1:3.110: device disconnected [ 50.341207][ T503] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 50.362537][ T503] usb 2-1: device descriptor read/8, error -71 [ 50.382389][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 50.382411][ T36] audit: type=1400 audit(1757263643.340:407): avc: denied { ioctl } for pid=1052 comm="syz.2.228" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 50.422144][ T1034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'. [ 50.444658][ T389] udevd[389]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:15.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.464927][ T403] usb 1-1: USB disconnect, device number 16 [ 50.472027][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 50.502482][ T503] usb 2-1: device descriptor read/8, error -71 [ 50.611711][ T503] usb usb2-port1: unable to enumerate USB device [ 50.632719][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.645777][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.659171][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.676788][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.687748][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.697298][ T9] usb 4-1: config 0 descriptor?? [ 50.711270][ T31] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 50.861147][ T31] usb 3-1: Invalid ep0 maxpacket: 16 [ 50.911669][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 50.918823][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 50.922677][ T1057] /dev/rnullb0: Can't open blockdev [ 50.929322][ T9] usb 4-1: USB disconnect, device number 8 [ 50.953984][ T1059] netlink: 165 bytes leftover after parsing attributes in process `syz.3.230'. [ 50.991189][ T31] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 51.049620][ T1063] pim6reg1: entered promiscuous mode [ 51.056597][ T1063] pim6reg1: entered allmulticast mode [ 51.141193][ T31] usb 3-1: Invalid ep0 maxpacket: 16 [ 51.149139][ T31] usb usb3-port1: attempt power cycle [ 51.167908][ T1066] devpts: called with bogus options [ 51.174553][ T36] audit: type=1400 audit(1757263644.120:408): avc: denied { shutdown } for pid=1065 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.291174][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 51.364308][ T1073] rust_binder: Failed to allocate buffer. len:4294967808, is_oneway:false [ 51.364341][ T1073] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 51.374156][ T1073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:189 [ 51.379997][ T1075] tipc: Started in network mode [ 51.394650][ T1075] tipc: Node identity 5ee0a7973c79, cluster identity 4711 [ 51.407353][ T1075] tipc: Enabled bearer , priority 0 [ 51.434790][ T1075] syzkaller0: entered promiscuous mode [ 51.441950][ T1075] syzkaller0: entered allmulticast mode [ 51.450578][ T36] audit: type=1400 audit(1757263644.400:409): avc: denied { accept } for pid=1074 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.473614][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 51.473653][ T1074] tipc: Resetting bearer [ 51.480780][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 51.499067][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26112, setting to 1024 [ 51.501089][ T31] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 51.511445][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 51.524151][ T1074] tipc: Disabling bearer [ 51.530400][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.549841][ T9] usb 4-1: config 0 descriptor?? [ 51.551453][ T31] usb 3-1: Invalid ep0 maxpacket: 16 [ 51.556232][ T1059] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 51.579504][ T9] hub 4-1:0.0: USB hub found [ 51.630257][ T1082] rust_binder: Error while translating object. [ 51.630293][ T1082] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 51.638098][ T1082] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 51.649432][ T1082] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:195 [ 51.666306][ T403] rust_binder: 1081: removing orphan mapping 0:24 [ 51.691385][ T31] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 51.711501][ T31] usb 3-1: Invalid ep0 maxpacket: 16 [ 51.715433][ T1087] 8021q: VLANs not supported on ip_vti0 [ 51.717509][ T31] usb usb3-port1: unable to enumerate USB device [ 51.725586][ T1087] netlink: 84 bytes leftover after parsing attributes in process `syz.1.239'. [ 51.772629][ T9] hub 4-1:0.0: 1 port detected [ 51.828206][ T1093] /dev/rnullb0: Can't open blockdev [ 51.847689][ T1096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 52.001117][ T388] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 52.111259][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 52.152520][ T388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 52.165689][ T388] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 52.176213][ T388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.187020][ T388] usb 1-1: config 0 descriptor?? [ 52.293154][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.304611][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.316130][ T31] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 52.326908][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 52.336207][ T31] usb 2-1: SerialNumber: syz [ 52.550978][ T1098] rust_binder: Error while translating object. [ 52.551082][ T1098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 52.558518][ T1098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:209 [ 52.574710][ T31] usb 2-1: 0:2 : does not exist [ 52.591657][ T31] usb 2-1: unit 255 not found! [ 52.599301][ T388] logitech 0003:046D:CA03.0003: unbalanced delimiter at end of report description [ 52.611521][ T388] logitech 0003:046D:CA03.0003: parse failed [ 52.615050][ T31] usb 2-1: USB disconnect, device number 15 [ 52.619841][ T388] logitech 0003:046D:CA03.0003: probe with driver logitech failed with error -22 [ 52.800041][ T1089] rust_binder: Error while translating object. [ 52.800112][ T1089] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 52.806844][ T1089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:100 [ 52.817608][ T1099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.839451][ T31] usb 1-1: USB disconnect, device number 17 [ 52.849406][ T63] usb 4-1: USB disconnect, device number 9 [ 52.849474][ T9] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 52.863453][ T9] usb 4-1-port1: connect-debounce failed [ 52.911563][ T36] audit: type=1400 audit(1757263645.870:410): avc: denied { read } for pid=1105 comm="syz.0.246" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.939292][ T36] audit: type=1400 audit(1757263645.870:411): avc: denied { open } for pid=1105 comm="syz.0.246" path="/33/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.968412][ T36] audit: type=1400 audit(1757263645.870:412): avc: denied { ioctl } for pid=1105 comm="syz.0.246" path="/33/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.091570][ T1114] pim6reg1: entered promiscuous mode [ 53.097097][ T1114] pim6reg1: entered allmulticast mode [ 53.196546][ T1123] netlink: 104 bytes leftover after parsing attributes in process `syz.0.251'. [ 53.264757][ T1127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 53.275701][ T36] audit: type=1400 audit(1757263646.230:413): avc: denied { setopt } for pid=1126 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.297399][ T36] audit: type=1400 audit(1757263646.250:414): avc: denied { map } for pid=1128 comm="syz.1.254" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.340441][ T36] audit: type=1400 audit(1757263646.290:415): avc: denied { read write } for pid=1130 comm="syz.0.255" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 53.402378][ T1133] rust_binder: Error while translating object. [ 53.402414][ T1133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 53.409532][ T1133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:230 [ 53.492400][ T1160] rust_binder: Write failure EFAULT in pid:242 [ 53.670535][ T1176] syzkaller0: entered promiscuous mode [ 53.682754][ T1176] syzkaller0: entered allmulticast mode [ 53.791182][ T388] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 53.814759][ T1183] tipc: Enabled bearer , priority 0 [ 53.832393][ T1183] syzkaller0: entered promiscuous mode [ 53.838272][ T1183] syzkaller0: entered allmulticast mode [ 53.844761][ T1183] tipc: Resetting bearer [ 53.853055][ T1183] tipc: Resetting bearer [ 53.866198][ T1183] tipc: Disabling bearer [ 53.943902][ T388] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 53.954218][ T388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.965732][ T388] usb 3-1: config 0 descriptor?? [ 54.192891][ T388] usb 3-1: Cannot set MAC address [ 54.213476][ T388] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 54.214405][ T1207] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 54.237205][ T388] usb 3-1: USB disconnect, device number 23 [ 54.284586][ T1220] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 54.304377][ T1223] netlink: 72 bytes leftover after parsing attributes in process `syz.0.284'. [ 54.336409][ T1228] can0: slcan on ttyS3. [ 54.383240][ T1228] can0 (unregistered): slcan off ttyS3. [ 54.531104][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 54.631201][ T1224] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 54.677076][ T31] usb 4-1: device descriptor read/64, error -71 [ 54.744900][ T1272] syz.2.290 (1272): /proc/1271/oom_adj is deprecated, please use /proc/1271/oom_score_adj instead. [ 54.791130][ T1224] usb 1-1: Using ep0 maxpacket: 8 [ 54.798006][ T1224] usb 1-1: unable to get BOS descriptor or descriptor too short [ 54.806785][ T1224] usb 1-1: config 1 has an invalid interface number: 84 but max is 0 [ 54.815581][ T1224] usb 1-1: config 1 has no interface number 0 [ 54.822023][ T1224] usb 1-1: config 1 interface 84 has no altsetting 0 [ 54.831130][ T1224] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=3f.09 [ 54.840923][ T1224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.849140][ T1224] usb 1-1: Product: syz [ 54.853777][ T1224] usb 1-1: Manufacturer: syz [ 54.858475][ T1224] usb 1-1: SerialNumber: syz [ 54.931141][ T31] usb 4-1: device descriptor read/64, error -71 [ 55.067204][ T1224] ums-cypress 1-1:1.84: USB Mass Storage device detected [ 55.143777][ T1224] usb 1-1: USB disconnect, device number 18 [ 55.171115][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 55.311139][ T31] usb 4-1: device descriptor read/64, error -71 [ 55.511131][ T503] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 55.551139][ T31] usb 4-1: device descriptor read/64, error -71 [ 55.661099][ T503] usb 3-1: Using ep0 maxpacket: 16 [ 55.667156][ T31] usb usb4-port1: attempt power cycle [ 55.680518][ T503] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 55.692170][ T503] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 55.705927][ T503] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.717117][ T503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 55.727156][ T503] usb 3-1: SerialNumber: syz [ 55.736533][ T1280] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.745096][ T1280] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.958878][ T1280] rust_binder: 236: no such ref 3 [ 55.968023][ T503] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 55.986265][ T503] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 56.004586][ T503] usb 3-1: USB disconnect, device number 24 [ 56.011126][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 56.025821][ T1297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1297 comm=syz.0.297 [ 56.052371][ T31] usb 4-1: device descriptor read/8, error -71 [ 56.066062][ T1297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1297 comm=syz.0.297 [ 56.101189][ T1297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1297 comm=syz.0.297 [ 56.141159][ T1297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1297 comm=syz.0.297 [ 56.171122][ T1297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1297 comm=syz.0.297 [ 56.192172][ T31] usb 4-1: device descriptor read/8, error -71 [ 56.219558][ T1297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1297 comm=syz.0.297 [ 56.233297][ T1297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1297 comm=syz.0.297 [ 56.270616][ T1300] netlink: 104 bytes leftover after parsing attributes in process `syz.1.298'. [ 56.284577][ T1301] pim6reg1: entered promiscuous mode [ 56.288937][ T1297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1297 comm=syz.0.297 [ 56.290996][ T1301] pim6reg1: entered allmulticast mode [ 56.331213][ T1297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1297 comm=syz.0.297 [ 56.354303][ T1297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1297 comm=syz.0.297 [ 56.424089][ T1307] netlink: 'syz.1.300': attribute type 46 has an invalid length. [ 56.451074][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 56.472237][ T31] usb 4-1: device descriptor read/8, error -71 [ 56.583578][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 56.583592][ T36] audit: type=1400 audit(1757263649.540:449): avc: denied { setopt } for pid=1320 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.613715][ T31] usb 4-1: device descriptor read/8, error -71 [ 56.634301][ T1327] rust_binder: Error while translating object. [ 56.634350][ T1327] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 56.641092][ T1327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:238 [ 56.681087][ T63] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 56.731160][ T31] usb usb4-port1: unable to enumerate USB device [ 56.861101][ T63] usb 2-1: Using ep0 maxpacket: 8 [ 56.862256][ T1343] kvm: pic: non byte write [ 56.867722][ T63] usb 2-1: unable to get BOS descriptor or descriptor too short [ 56.881601][ T63] usb 2-1: config 0 has an invalid interface number: 93 but max is 0 [ 56.892442][ T63] usb 2-1: config 0 has no interface number 0 [ 56.899160][ T63] usb 2-1: config 0 interface 93 altsetting 4 endpoint 0xA has invalid maxpacket 1104, setting to 64 [ 56.911498][ T63] usb 2-1: config 0 interface 93 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 56.931068][ T63] usb 2-1: config 0 interface 93 has no altsetting 0 [ 56.942390][ T63] usb 2-1: New USB device found, idVendor=3285, idProduct=06b3, bcdDevice=64.3f [ 56.960131][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.968956][ T63] usb 2-1: Product: 跫鹿∼⥒볛僖ƛ⇿᪖儥먕픜蕤컭ᮞ⻍괻캆껁౮挥楺꼢⯹⌅キ퉦唜厯⿀𻼅챉謃ꀽ렂쪋歙ᵅ⩇킅헂蠕ꑏᰑ徶票ኜ念番ꠀ蛩꺡쏕⻓ꢁம紏퀷虀췯뮪빰ၬ싉鶷⎽鐊 [ 56.994550][ T63] usb 2-1: Manufacturer: Р [ 57.000801][ T63] usb 2-1: config 0 descriptor?? [ 57.064499][ T36] audit: type=1326 audit(1757263650.020:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.2.311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc21fd8ebe9 code=0x0 [ 57.119610][ T1352] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.119644][ T1352] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.146869][ T1357] GUP no longer grows the stack in syz.0.313 (1357): 200000001000-200000c01000 (200000000000) [ 57.164371][ T1357] CPU: 1 UID: 0 PID: 1357 Comm: syz.0.313 Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 57.164401][ T1357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.164410][ T1357] Call Trace: [ 57.164415][ T1357] [ 57.164421][ T1357] __dump_stack+0x21/0x30 [ 57.164442][ T1357] dump_stack_lvl+0x10c/0x190 [ 57.164457][ T1357] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.164472][ T1357] ? find_vma+0xcd/0x110 [ 57.164489][ T1357] ? update_cfs_group+0x260/0x260 [ 57.164501][ T1357] dump_stack+0x19/0x20 [ 57.164516][ T1357] __get_user_pages+0x1e34/0x22d0 [ 57.164532][ T1357] ? __kasan_check_write+0x18/0x20 [ 57.164553][ T1357] ? down_read_killable+0x79/0xf0 [ 57.164567][ T1357] ? populate_vma_page_range+0x230/0x230 [ 57.164580][ T1357] ? kernel_text_address+0xa9/0xe0 [ 57.164595][ T1357] __gup_longterm_locked+0xcb1/0x1580 [ 57.164609][ T1357] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 57.164626][ T1357] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 57.164643][ T1357] gup_fast_fallback+0x12ae/0x14a0 [ 57.164657][ T1357] ? kasan_save_track+0x4f/0x80 [ 57.164667][ T1357] ? kasan_save_track+0x3e/0x80 [ 57.164678][ T1357] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.164693][ T1357] ? get_user_pages_fast_only+0xc0/0xc0 [ 57.164708][ T1357] get_user_pages_fast+0x73/0xb0 [ 57.164722][ T1357] get_futex_key+0x24d/0x930 [ 57.164733][ T1357] ? __cfi_get_futex_key+0x10/0x10 [ 57.164744][ T1357] ? futex_setup_timer+0xb4/0xd0 [ 57.164755][ T1357] futex_lock_pi+0x1c0/0xa10 [ 57.164768][ T1357] ? futex_unqueue+0x136/0x160 [ 57.164779][ T1357] ? __cfi_futex_lock_pi+0x10/0x10 [ 57.164792][ T1357] ? __cfi_futex_wake_mark+0x10/0x10 [ 57.164806][ T1357] ? futex_setup_timer+0xb4/0xd0 [ 57.164816][ T1357] ? __cfi_futex_wake_mark+0x10/0x10 [ 57.164831][ T1357] do_futex+0x25c/0x500 [ 57.164842][ T1357] ? __cfi_do_futex+0x10/0x10 [ 57.164853][ T1357] ? signal_setup_done+0x202/0x2e0 [ 57.164868][ T1357] __se_sys_futex+0x28f/0x300 [ 57.164879][ T1357] ? __x64_sys_futex+0x110/0x110 [ 57.164891][ T1357] ? __kasan_check_write+0x18/0x20 [ 57.164906][ T1357] __x64_sys_futex+0xe9/0x110 [ 57.164917][ T1357] x64_sys_call+0x227f/0x2ee0 [ 57.164938][ T1357] do_syscall_64+0x58/0xf0 [ 57.164964][ T1357] ? clear_bhb_loop+0x50/0xa0 [ 57.164987][ T1357] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.165008][ T1357] RIP: 0033:0x7f0d7818ebe9 [ 57.165025][ T1357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.165037][ T1357] RSP: 002b:00007f0d76be3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 57.165056][ T1357] RAX: ffffffffffffffda RBX: 00007f0d783c5fa0 RCX: 00007f0d7818ebe9 [ 57.165072][ T1357] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000000 [ 57.165085][ T1357] RBP: 00007f0d78211e19 R08: 0000000000000000 R09: 0000000000000000 [ 57.165097][ T1357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.165110][ T1357] R13: 00007f0d783c6038 R14: 00007f0d783c5fa0 R15: 00007ffe8b11be48 [ 57.165126][ T1357] [ 57.505310][ T1216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.514300][ T1216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.560163][ T36] audit: type=1400 audit(1757263650.510:451): avc: denied { read write } for pid=1306 comm="syz.1.300" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 57.584432][ T36] audit: type=1400 audit(1757263650.510:452): avc: denied { open } for pid=1306 comm="syz.1.300" path="/85/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 57.618874][ T63] usb 2-1: USB disconnect, device number 17 [ 57.651198][ T503] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 57.696059][ T1366] rust_binder: Error while translating object. [ 57.696111][ T1366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 57.702802][ T1366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:178 [ 57.755064][ T1372] netlink: 165 bytes leftover after parsing attributes in process `syz.3.318'. [ 57.762391][ T1370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 57.812688][ T503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 57.828803][ T503] usb 3-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 57.840193][ T503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.851763][ T503] usb 3-1: config 0 descriptor?? [ 57.979656][ T1387] 9pnet_fd: Insufficient options for proto=fd [ 57.987283][ T1387] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 58.003221][ T1389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.323'. [ 58.022238][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 58.072490][ T1391] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3484950563 (55759209008 ns) > initial count (50642361344 ns). Using initial count to start timer. [ 58.074205][ T1389] proc: Bad value for 'gid' [ 58.181160][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 58.188776][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 58.201979][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26112, setting to 1024 [ 58.214331][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 58.254679][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.270008][ T9] usb 4-1: config 0 descriptor?? [ 58.276644][ T1372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.277017][ T503] waltop 0003:172F:0502.0004: unknown main item tag 0x0 [ 58.290777][ T9] hub 4-1:0.0: USB hub found [ 58.299892][ T503] waltop 0003:172F:0502.0004: item fetching failed at offset 4/5 [ 58.318335][ T503] waltop 0003:172F:0502.0004: probe with driver waltop failed with error -22 [ 58.324120][ T1399] netlink: 'syz.1.326': attribute type 4 has an invalid length. [ 58.356795][ T1401] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 58.356825][ T1401] rust_binder: Error while translating object. [ 58.367372][ T1401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.372913][ T1407] raw_sendmsg: syz.1.328 forgot to set AF_INET. Fix it! [ 58.388142][ T1401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:192 [ 58.480832][ T1358] binder: Unknown parameter 'fscontext?}' [ 58.490895][ T9] hub 4-1:0.0: 1 port detected [ 58.771137][ T503] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 58.921113][ T503] usb 2-1: Using ep0 maxpacket: 8 [ 58.928160][ T503] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 58.938984][ T503] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.950148][ T503] usb 2-1: config 0 descriptor?? [ 59.158649][ T503] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 59.523757][ T9] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 59.531676][ T1224] usb 4-1: USB disconnect, device number 14 [ 59.561725][ T503] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 59.572902][ T503] asix 2-1:0.0: probe with driver asix failed with error -61 [ 60.053141][ T1423] rust_binder: validate_parent_fixup: new_min_offset=8388636, sg_entry.length=19 [ 60.053171][ T1423] rust_binder: Error while translating object. [ 60.069660][ T1423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.076788][ T503] usb 3-1: USB disconnect, device number 25 [ 60.093877][ T1423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:291 [ 60.108388][ T1427] /dev/rnullb0: Can't open blockdev [ 60.157612][ T36] audit: type=1400 audit(1757263653.110:453): avc: denied { setopt } for pid=1426 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.241595][ T1429] netlink: 'syz.3.335': attribute type 46 has an invalid length. [ 60.302889][ T1435] __vm_enough_memory: pid: 1435, comm: syz.2.338, bytes: 18014402804453376 not enough memory for the allocation [ 60.347036][ T1429] support for cryptoloop has been removed. Use dm-crypt instead. [ 60.389165][ T1439] mmap: syz.2.339 (1439) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.474371][ T36] audit: type=1400 audit(1757263653.430:454): avc: denied { mount } for pid=1442 comm="syz.0.340" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.510333][ T36] audit: type=1400 audit(1757263653.460:455): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.596972][ T36] audit: type=1400 audit(1757263653.550:456): avc: denied { accept } for pid=1447 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.625263][ T36] audit: type=1400 audit(1757263653.580:457): avc: denied { ioctl } for pid=1447 comm="syz.3.342" path="socket:[11174]" dev="sockfs" ino=11174 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.661449][ T503] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 60.791098][ T31] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 60.822631][ T503] usb 3-1: config 0 has an invalid interface number: 189 but max is 0 [ 60.832027][ T503] usb 3-1: config 0 has no interface number 0 [ 60.838726][ T503] usb 3-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 60.850184][ T503] usb 3-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 60.863944][ T63] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 60.872422][ T503] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 60.885821][ T503] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 60.896854][ T503] usb 3-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 60.914065][ T503] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 60.924933][ T503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.944146][ T31] usb 1-1: device descriptor read/64, error -71 [ 60.952012][ T503] usb 3-1: Product: syz [ 60.956721][ T503] usb 3-1: Manufacturer: syz [ 60.961835][ T503] usb 3-1: SerialNumber: syz [ 60.967542][ T503] usb 3-1: config 0 descriptor?? [ 60.973584][ T1440] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 61.063287][ T63] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 61.073144][ T63] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.085110][ T63] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.096114][ T63] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.106165][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.115067][ T63] usb 4-1: Product: ࡠ [ 61.119543][ T63] usb 4-1: Manufacturer: ෙ휔囃훳㓧聜⬿㱰៟樸䝻쵡⁝諛瞟ꋟ㵈敛翭㤝鷩谉눚尷⊄羜ដ흴迱畽膒ẏ헾㼃冮㧭坢쵮脰릶䉝琙᢬뭂쥓嶩볘ｓ췚Ꮤ훆Ⴒ἖罴ံ➟뜯䝿혍쩱ଊ蕻䑄橑㼑眫햽꥛Ὑ [ 61.148740][ T63] usb 4-1: SerialNumber: പ혌襹㳟솬ᗚﮧࡃ爫胻喥헀紴츽縛㪚得￥ẅ㬶ꏿ褦꼧ț탊༭얪녤ꢠ猸ረ칆퀉诞붷ꢉ鲀騡咔폅叆莾㐴눛壍㪗樔剡䩐݉ꁫ舅⟶ྻ몷դ縵썀뚙濰﷯炙飂쟼ී⮐荑Ꙉ䔲쮙઼뎊耨嶿꒣则宕遫䵘⍘뢁쓷熬뙓̤쟾Ⱕ君㵗䍈鷣頝澵嘇昴儍 [ 61.181936][ T1439] rust_binder: Error in use_page_slow: ESRCH [ 61.182497][ T1439] rust_binder: use_range failure ESRCH [ 61.190529][ T1439] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 61.197226][ T1439] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 61.206956][ T1439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:265 [ 61.220167][ T503] ums-alauda 3-1:0.189: USB Mass Storage device detected [ 61.239953][ T503] scsi host1: usb-storage 3-1:0.189 [ 61.245855][ T31] usb 1-1: device descriptor read/64, error -71 [ 61.255160][ T503] usb 3-1: USB disconnect, device number 26 [ 61.397743][ T63] usb 4-1: 0:2 : does not exist [ 61.404792][ T63] usb 4-1: USB disconnect, device number 15 [ 61.413467][ T389] udevd[389]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.491228][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 61.621146][ T31] usb 1-1: device descriptor read/64, error -71 [ 61.747281][ T1458] netlink: 'syz.2.343': attribute type 27 has an invalid length. [ 61.871084][ T31] usb 1-1: device descriptor read/64, error -71 [ 61.921064][ T36] audit: type=1400 audit(1757263654.870:458): avc: denied { create } for pid=1465 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 61.991201][ T31] usb usb1-port1: attempt power cycle [ 62.181090][ T503] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 62.222621][ T63] usb 2-1: USB disconnect, device number 18 [ 62.331086][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 62.351093][ T503] usb 4-1: Using ep0 maxpacket: 8 [ 62.357772][ T31] usb 1-1: device descriptor read/8, error -71 [ 62.364906][ T503] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 211, changing to 11 [ 62.378090][ T503] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 62.389532][ T503] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 62.400117][ T503] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 62.413095][ T503] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.424313][ T503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.432877][ T503] usb 4-1: Product: Ѝ [ 62.437579][ T503] usb 4-1: Manufacturer: ┬䌞᥂ꝯ镖峉虪称䐝辡Ҽ贸ａ鶩ꨘ憐騩䠫胉ꮙᦞ⟻廰꼆䜮㗮ᰍ럌턤싓✻㴒䯛䙢딊핃 [ 62.453243][ T503] usb 4-1: SerialNumber: ⠁ [ 62.522373][ T31] usb 1-1: device descriptor read/8, error -71 [ 62.660617][ T1466] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 62.696141][ T1474] /dev/rnullb0: Can't open blockdev [ 62.720582][ T36] audit: type=1400 audit(1757263655.670:459): avc: denied { getopt } for pid=1476 comm="syz.2.350" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.781078][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 62.812097][ T31] usb 1-1: device descriptor read/8, error -71 [ 62.872161][ T1466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.882315][ T1466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.893215][ T503] cdc_ncm 4-1:1.0: bind() failure [ 62.899607][ T503] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 62.908895][ T503] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 62.921152][ T503] usb 4-1: USB disconnect, device number 16 [ 62.942274][ T31] usb 1-1: device descriptor read/8, error -71 [ 62.981832][ T36] audit: type=1400 audit(1757263655.940:460): avc: denied { mounton } for pid=1488 comm="syz.2.353" path="/85/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 63.051184][ T31] usb usb1-port1: unable to enumerate USB device [ 63.384878][ T1512] rust_binder: 1511 RLIMIT_NICE not set [ 63.388405][ T388] rust_binder: 1510: removing orphan mapping 0:4248 [ 63.543355][ T1523] random: crng reseeded on system resumption [ 63.567601][ T36] audit: type=1326 audit(1757263656.520:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7818ebe9 code=0x7ffc0000 [ 63.598791][ T36] audit: type=1326 audit(1757263656.550:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7818ebe9 code=0x7ffc0000 [ 63.636808][ T36] audit: type=1326 audit(1757263656.550:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0d7818ebe9 code=0x7ffc0000 [ 63.663902][ T36] audit: type=1326 audit(1757263656.550:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7818ebe9 code=0x7ffc0000 [ 63.690348][ T36] audit: type=1326 audit(1757263656.550:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7818ebe9 code=0x7ffc0000 [ 63.717619][ T36] audit: type=1326 audit(1757263656.550:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d7818ebe9 code=0x7ffc0000 [ 63.743797][ T36] audit: type=1326 audit(1757263656.550:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7818ebe9 code=0x7ffc0000 [ 64.021107][ T1224] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 64.161123][ T1224] usb 3-1: device descriptor read/64, error -71 [ 64.191122][ T388] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 64.342603][ T388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.354122][ T388] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 64.363696][ T388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.373604][ T388] usb 1-1: config 0 descriptor?? [ 64.398205][ T1538] /dev/rnullb0: Can't open blockdev [ 64.401143][ T1224] usb 3-1: device descriptor read/64, error -71 [ 64.545758][ T1547] rust_binder: Error while translating object. [ 64.545799][ T1547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.552867][ T1547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:316 [ 64.651113][ T1224] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 64.782342][ T388] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 64.791363][ T1224] usb 3-1: device descriptor read/64, error -71 [ 64.799530][ T388] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input6 [ 64.879184][ T388] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 65.031094][ T1224] usb 3-1: device descriptor read/64, error -71 [ 65.141299][ T1224] usb usb3-port1: attempt power cycle [ 65.199155][ T1536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.208741][ T1536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.220985][ T31] usb 1-1: USB disconnect, device number 23 [ 65.337341][ T1550] fuseblk: Bad value for 'fd' [ 65.481155][ T1224] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 65.502394][ T1224] usb 3-1: device descriptor read/8, error -71 [ 65.611183][ T63] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 65.632532][ T1224] usb 3-1: device descriptor read/8, error -71 [ 65.751120][ T63] usb 4-1: device descriptor read/64, error -71 [ 65.755347][ T1562] /dev/rnullb0: Can't open blockdev [ 65.881597][ T1224] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 65.902220][ T1224] usb 3-1: device descriptor read/8, error -71 [ 65.918103][ T1564] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 65.918135][ T1564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 65.926477][ T1564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:234 [ 65.991077][ T63] usb 4-1: device descriptor read/64, error -71 [ 66.034177][ T1570] rust_binder: Failed copying into alloc: EFAULT [ 66.034199][ T1570] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 66.040755][ T1570] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 66.042191][ T1224] usb 3-1: device descriptor read/8, error -71 [ 66.050064][ T1570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:240 [ 66.079759][ T1572] tipc: Enabled bearer , priority 0 [ 66.097816][ T1572] tipc: Disabling bearer [ 66.161272][ T1224] usb usb3-port1: unable to enumerate USB device [ 66.241291][ T63] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 66.371166][ T388] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 66.371178][ T63] usb 4-1: device descriptor read/64, error -71 [ 66.522585][ T388] usb 1-1: config 218 has an invalid interface number: 229 but max is 3 [ 66.531592][ T388] usb 1-1: config 218 contains an unexpected descriptor of type 0x1, skipping [ 66.544837][ T388] usb 1-1: config 218 has an invalid interface number: 23 but max is 3 [ 66.553848][ T388] usb 1-1: config 218 has an invalid interface number: 215 but max is 3 [ 66.563289][ T388] usb 1-1: config 218 has an invalid interface number: 98 but max is 3 [ 66.572455][ T388] usb 1-1: config 218 contains an unexpected descriptor of type 0x2, skipping [ 66.581825][ T388] usb 1-1: config 218 contains an unexpected descriptor of type 0x2, skipping [ 66.592300][ T388] usb 1-1: config 218 has no interface number 0 [ 66.599253][ T388] usb 1-1: config 218 has no interface number 1 [ 66.606471][ T388] usb 1-1: config 218 has no interface number 2 [ 66.613334][ T388] usb 1-1: config 218 has no interface number 3 [ 66.620451][ T388] usb 1-1: config 218 interface 229 altsetting 8 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 66.632814][ T388] usb 1-1: config 218 interface 229 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 66.641120][ T63] usb 4-1: device descriptor read/64, error -71 [ 66.645227][ T388] usb 1-1: config 218 interface 229 altsetting 8 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 66.663725][ T388] usb 1-1: config 218 interface 229 altsetting 8 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 66.676583][ T388] usb 1-1: config 218 interface 229 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 66.688778][ T388] usb 1-1: config 218 interface 229 altsetting 8 has an endpoint descriptor with address 0x6B, changing to 0xB [ 66.702626][ T388] usb 1-1: config 218 interface 229 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 66.713730][ T388] usb 1-1: config 218 interface 229 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 66.725246][ T388] usb 1-1: config 218 interface 229 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 66.737248][ T388] usb 1-1: config 218 interface 229 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 66.748883][ T388] usb 1-1: config 218 interface 229 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 66.760338][ T388] usb 1-1: config 218 interface 229 altsetting 8 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 66.774954][ T388] usb 1-1: config 218 interface 23 altsetting 248 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 66.781236][ T63] usb usb4-port1: attempt power cycle [ 66.786830][ T388] usb 1-1: config 218 interface 23 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 66.805439][ T388] usb 1-1: config 218 interface 98 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 66.817202][ T388] usb 1-1: config 218 interface 98 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 66.828907][ T388] usb 1-1: config 218 interface 98 altsetting 2 endpoint 0x7 has invalid wMaxPacketSize 0 [ 66.840668][ T388] usb 1-1: config 218 interface 98 altsetting 2 has an endpoint descriptor with address 0x59, changing to 0x9 [ 66.854417][ T388] usb 1-1: config 218 interface 98 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 66.866899][ T388] usb 1-1: config 218 interface 98 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 66.880477][ T388] usb 1-1: config 218 interface 98 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 66.892720][ T388] usb 1-1: config 218 interface 98 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 66.904479][ T388] usb 1-1: config 218 interface 98 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 66.916178][ T388] usb 1-1: config 218 interface 98 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 66.919859][ T1581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 66.928370][ T388] usb 1-1: config 218 interface 98 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 66.938278][ T31] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 66.955786][ T388] usb 1-1: config 218 interface 229 has no altsetting 0 [ 66.978214][ T388] usb 1-1: config 218 interface 23 has no altsetting 0 [ 66.986293][ T388] usb 1-1: config 218 interface 215 has no altsetting 0 [ 66.993742][ T388] usb 1-1: config 218 interface 98 has no altsetting 0 [ 67.004415][ T388] usb 1-1: New USB device found, idVendor=12d1, idProduct=635f, bcdDevice=e8.ee [ 67.016595][ T388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.025786][ T388] usb 1-1: Product: ᐄ [ 67.030430][ T388] usb 1-1: Manufacturer: ᠁ [ 67.035859][ T388] usb 1-1: SerialNumber: 租쵳䖨ॾ䰺쐟觻㺖馪믑렅큺틣㇏曧᠈᫓专鿉迥僴࿫⨦㩆⍅┡㳮ኬ줷鵁쮬鞚鋵糇裮冉歆뼬↓멃ᶤ纤ᣚ鋈❶嬻犙꫇Ţ攴䙪噑撋ۦﶱｖ賲罥쾟ⷒ㴵纩ﻝ阩着玑鎜蹃⨎⬋瓫퟉틷돢捀 [ 67.067832][ T1572] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 67.075765][ T1572] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 67.112679][ T31] usb 2-1: config 1 interface 0 altsetting 14 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 67.128832][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 67.138516][ T31] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.40 [ 67.148159][ T63] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 67.156714][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.165644][ T31] usb 2-1: Product: 㹍䖷揇䐬⦼૾⼗杘ꚣ꺗魏現層닊ꪳᡏ㻛ห⳸⒉鎷箬蒘ᯖǨᕢ衐㲲솦䱤ᒣ蠀䈏쒋筰罙杨潖앍ꂜং骗춋ᗢ [ 67.183729][ T31] usb 2-1: Manufacturer: 庀斊㎉짴쎵쁈ꂇꣅ쉲罺섐땔欶浼啞ꐟꫩ战䰉₳䖾恘㶧鮭榍㩁겪恆邥욪裙≭鴘ጽ⮡ḥ殒婅侀酎㇆꼊鈹䟑ળ獗튒લ䮣䪈薜ᴬ뫠ᥭ恗铵ｊ틾ᢁ㆚㸉冎㧽曭鶉跉ꒁ咆半䴻倯뛏돋疡宂䐗ﯼ밪䏬秋刜ᣢ壐೭ჼ볩礌 [ 67.215849][ T31] usb 2-1: SerialNumber: 뼶 [ 67.221734][ T63] usb 4-1: device descriptor read/8, error -71 [ 67.229529][ T1577] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 67.258786][ T1593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:314 [ 67.352741][ T63] usb 4-1: device descriptor read/8, error -71 [ 67.439214][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 67.439235][ T36] audit: type=1400 audit(1757263660.390:516): avc: denied { write } for pid=1576 comm="syz.1.384" name="raw" dev="proc" ino=4026532331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 67.466865][ T1577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.481241][ T1577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.491708][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 67.509358][ T388] usb 1-1: USB disconnect, device number 24 [ 67.621103][ T63] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 67.642308][ T63] usb 4-1: device descriptor read/8, error -71 [ 67.651102][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 67.658724][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.672003][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 67.683828][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 67.696468][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 67.706534][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.716711][ T9] usb 3-1: config 0 descriptor?? [ 67.722392][ T1594] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 67.730843][ T9] hub 3-1:0.0: USB hub found [ 67.772239][ T63] usb 4-1: device descriptor read/8, error -71 [ 67.881227][ T63] usb usb4-port1: unable to enumerate USB device [ 67.931179][ T9] hub 3-1:0.0: 2 ports detected [ 67.944181][ T9] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 67.951310][ T9] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 67.961216][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 67.969051][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 67.972795][ T1598] rust_binder: Error while translating object. [ 67.977506][ T1598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 67.984560][ T1598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:319 [ 67.991493][ T9] usb 3-1: USB disconnect, device number 31 [ 68.016678][ T31] usbhid 2-1:1.0: can't add hid device: -71 [ 68.043906][ T31] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 68.055573][ T31] usb 2-1: USB disconnect, device number 19 [ 68.073988][ T1606] SELinux: security_context_str_to_sid () failed with errno=-22 [ 68.135548][ T1600] netlink: 'syz.1.392': attribute type 46 has an invalid length. [ 68.155073][ T1614] tipc: Enabled bearer , priority 0 [ 68.162958][ T1615] tipc: Enabling of bearer rejected, already enabled [ 68.181615][ T1614] syzkaller0: entered promiscuous mode [ 68.187918][ T1614] syzkaller0: entered allmulticast mode [ 68.194170][ T1614] tipc: Resetting bearer [ 68.200743][ T1614] tipc: Resetting bearer [ 68.224735][ T1614] tipc: Disabling bearer [ 68.236598][ T1618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.237303][ T1618] SELinux: policydb string length 1836477231 does not match expected length 8 [ 68.253838][ T36] audit: type=1400 audit(1757263661.190:517): avc: denied { load_policy } for pid=1617 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 68.275347][ T1618] SELinux: failed to load policy [ 68.309952][ T1622] rust_binder: Error while translating object. [ 68.310076][ T1622] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.319327][ T1622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 68.329418][ T36] audit: type=1400 audit(1757263661.270:518): avc: denied { lock } for pid=1623 comm="syz.2.401" path="socket:[12738]" dev="sockfs" ino=12738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 68.373173][ T36] audit: type=1400 audit(1757263661.330:519): avc: denied { create } for pid=1623 comm="syz.2.401" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.435658][ T36] audit: type=1400 audit(1757263661.390:520): avc: denied { setattr } for pid=290 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.591303][ T1638] kvm: user requested TSC rate below hardware speed [ 68.645981][ T1641] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 68.654563][ T1636] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 68.654631][ T1641] rust_binder: Write failure EINVAL in pid:330 [ 68.671173][ T1636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 68.697865][ T36] audit: type=1400 audit(1757263661.650:521): avc: denied { connect } for pid=1640 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.785085][ T36] audit: type=1400 audit(1757263661.740:522): avc: denied { mounton } for pid=1645 comm="syz.1.409" path="/108/file0" dev="tmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 68.864676][ T1646] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.865056][ T1646] rust_binder: Error in use_page_slow: ESRCH [ 68.872282][ T1646] rust_binder: use_range failure ESRCH [ 68.878716][ T1646] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 68.890811][ T1646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 68.899702][ T1646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:342 [ 68.999053][ T1655] rust_binder: Error while translating object. [ 69.008751][ T1655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 69.015261][ T1655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:340 [ 69.050053][ T1657] /dev/rnullb0: Can't open blockdev [ 69.145644][ T36] audit: type=1400 audit(1757263662.100:523): avc: denied { unlink } for pid=289 comm="syz-executor" name="file2" dev="tmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.298760][ T1671] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 230) [ 69.298805][ T1671] rust_binder: Error while translating object. [ 69.312654][ T1671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.319273][ T1671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347 [ 69.491103][ T403] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 69.590530][ T63] rust_binder: 1678: removing orphan mapping 0:112 [ 69.603577][ T63] rust_binder: 0: removing orphan mapping 112:24 [ 69.652277][ T403] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 69.666750][ T403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.691937][ T403] usb 3-1: config 0 descriptor?? [ 70.211083][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 70.302191][ T36] audit: type=1400 audit(1757263663.260:524): avc: denied { write } for pid=1668 comm="syz.2.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 70.372288][ T9] usb 4-1: config 252 has an invalid interface number: 4 but max is 1 [ 70.381478][ T9] usb 4-1: config 252 has an invalid interface number: 154 but max is 1 [ 70.390714][ T9] usb 4-1: config 252 has no interface number 0 [ 70.397573][ T9] usb 4-1: config 252 has no interface number 1 [ 70.404792][ T9] usb 4-1: config 252 interface 4 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 70.431096][ T9] usb 4-1: config 252 interface 4 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 70.461069][ T9] usb 4-1: config 252 interface 4 has no altsetting 0 [ 70.471230][ T9] usb 4-1: config 252 interface 154 has no altsetting 0 [ 70.480460][ T9] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=81.2d [ 70.490761][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.499985][ T9] usb 4-1: Product: syz [ 70.505536][ T9] usb 4-1: Manufacturer: syz [ 70.510888][ T9] usb 4-1: SerialNumber: syz [ 70.909159][ T403] usb 3-1: Cannot set autoneg [ 70.917284][ T403] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 70.935027][ T403] usb 3-1: USB disconnect, device number 32 [ 71.815107][ T1702] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 71.815146][ T1702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 71.824090][ T1703] rust_binder: Read failure Err(EAGAIN) in pid:343 [ 71.834417][ T1702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:343 [ 71.937677][ T1710] netlink: 'syz.2.427': attribute type 4 has an invalid length. [ 71.984678][ T1712] rust_binder: Write failure EFAULT in pid:345 [ 71.994131][ T1714] netlink: 165 bytes leftover after parsing attributes in process `syz.2.429'. [ 72.221089][ T388] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 72.251084][ T63] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 72.392321][ T388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.411063][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 72.417989][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 72.421092][ T388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.430939][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26112, setting to 1024 [ 72.454130][ T63] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 72.461063][ T388] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 72.465462][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.483663][ T388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.502011][ T63] usb 3-1: config 0 descriptor?? [ 72.512859][ T388] usb 2-1: config 0 descriptor?? [ 72.519254][ T1714] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 72.531720][ T63] hub 3-1:0.0: USB hub found [ 72.728602][ T63] hub 3-1:0.0: 1 port detected [ 72.822519][ T9] usb 4-1: unknown interface protocol 0xe1, assuming v1 [ 72.830868][ T9] usb 4-1: cannot find UAC_HEADER [ 72.855301][ T9] snd-usb-audio 4-1:252.4: probe with driver snd-usb-audio failed with error -22 [ 72.867299][ T9] usb 4-1: unknown interface protocol 0xc4, assuming v1 [ 72.874870][ T9] usb 4-1: cannot find UAC_HEADER [ 72.883460][ T9] snd-usb-audio 4-1:252.154: probe with driver snd-usb-audio failed with error -22 [ 72.907444][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:252.154/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.926335][ T9] usb 4-1: USB disconnect, device number 21 [ 72.991877][ T36] audit: type=1400 audit(1757263665.950:525): avc: denied { read } for pid=1711 comm="syz.1.428" path="socket:[14282]" dev="sockfs" ino=14282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.133470][ T388] usbhid 2-1:0.0: can't add hid device: -71 [ 73.140036][ T388] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 73.162584][ T388] usb 2-1: USB disconnect, device number 20 [ 73.765853][ T31] usb 3-1: USB disconnect, device number 33 [ 73.772347][ T63] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 73.797773][ T36] audit: type=1400 audit(1757263666.750:526): avc: denied { listen } for pid=1728 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.836970][ T36] audit: type=1400 audit(1757263666.770:527): avc: denied { ioctl } for pid=1728 comm="syz.3.433" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 73.887323][ T1735] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.887358][ T1735] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.952299][ T36] audit: type=1400 audit(1757263666.910:528): avc: denied { getopt } for pid=1739 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.110010][ T1744] rust_binder: Write failure EFAULT in pid:393 [ 74.301435][ T1751] binder: Unknown parameter 'sK' [ 74.366865][ T36] audit: type=1400 audit(1757263667.320:529): avc: denied { bind } for pid=1753 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.531136][ T388] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 74.692274][ T388] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 74.721079][ T388] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 74.732189][ T388] usb 2-1: config 220 has no interface number 2 [ 74.739785][ T388] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 74.754513][ T388] usb 2-1: config 220 interface 0 has no altsetting 0 [ 74.761844][ T388] usb 2-1: config 220 interface 76 has no altsetting 0 [ 74.769169][ T388] usb 2-1: config 220 interface 1 has no altsetting 0 [ 74.778449][ T388] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 74.788413][ T388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.796823][ T388] usb 2-1: Product: syz [ 74.801572][ T388] usb 2-1: Manufacturer: syz [ 74.806518][ T388] usb 2-1: SerialNumber: syz [ 75.122181][ T388] usb 2-1: selecting invalid altsetting 0 [ 75.138370][ T388] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 75.148420][ T388] usb 2-1: No valid video chain found. [ 75.168698][ T388] usb 2-1: USB disconnect, device number 21 [ 75.199087][ T1766] netlink: 40 bytes leftover after parsing attributes in process `syz.3.445'. [ 75.333705][ T36] audit: type=1326 audit(1757263668.290:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1768 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21fd8ebe9 code=0x7fc00000 [ 75.336434][ T1775] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 75.368806][ T1775] syzkaller0: linktype set to 800 [ 75.391074][ T36] audit: type=1326 audit(1757263668.320:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1768 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc21fd8ebe9 code=0x7fc00000 [ 75.415196][ T36] audit: type=1326 audit(1757263668.320:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1768 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21fd8ebe9 code=0x7fc00000 [ 75.439223][ T36] audit: type=1326 audit(1757263668.320:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1768 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21fd8ebe9 code=0x7fc00000 [ 75.465051][ T36] audit: type=1326 audit(1757263668.320:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1768 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21fd8ebe9 code=0x7fc00000 [ 75.818998][ T1793] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 76.730061][ T1826] kvm: pic: non byte write [ 76.783098][ T13] bridge_slave_1: left allmulticast mode [ 76.788808][ T13] bridge_slave_1: left promiscuous mode [ 76.812526][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.832090][ T13] bridge_slave_0: left allmulticast mode [ 76.841042][ T13] bridge_slave_0: left promiscuous mode [ 76.857299][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.964983][ T13] tipc: Left network mode [ 76.970669][ T13] veth1_macvtap: left promiscuous mode [ 76.977079][ T13] veth0_vlan: left promiscuous mode [ 77.043093][ T31] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 77.231074][ T31] usb 2-1: Invalid ep0 maxpacket: 16 [ 77.371061][ T31] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 77.551086][ T31] usb 2-1: Invalid ep0 maxpacket: 16 [ 77.557003][ T31] usb usb2-port1: attempt power cycle [ 77.931113][ T31] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 77.961451][ T31] usb 2-1: Invalid ep0 maxpacket: 16 [ 78.101105][ T31] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 78.132584][ T31] usb 2-1: Invalid ep0 maxpacket: 16 [ 78.138352][ T31] usb usb2-port1: unable to enumerate USB device [ 78.840629][ T36] kauditd_printk_skb: 90 callbacks suppressed [ 78.840647][ T36] audit: type=1400 audit(1757263671.786:625): avc: denied { mounton } for pid=1832 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 78.890612][ T1832] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.898259][ T1832] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.905998][ T1832] bridge_slave_0: entered allmulticast mode [ 78.912665][ T1832] bridge_slave_0: entered promiscuous mode [ 78.919699][ T1832] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.927869][ T1832] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.935593][ T1832] bridge_slave_1: entered allmulticast mode [ 78.942531][ T1832] bridge_slave_1: entered promiscuous mode [ 79.020183][ T1832] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.027374][ T1832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.034932][ T1832] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.042584][ T1832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.075803][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.084849][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.103220][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.110722][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.119906][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.127689][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.158911][ T1832] veth0_vlan: entered promiscuous mode [ 79.195103][ T1832] veth1_macvtap: entered promiscuous mode [ 79.236461][ T36] audit: type=1400 audit(1757263672.186:626): avc: denied { mounton } for pid=1832 comm="syz-executor" path="/root/syzkaller.1SPr8Z/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 79.298277][ T36] audit: type=1400 audit(1757263672.246:627): avc: denied { create } for pid=1847 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.324932][ T36] audit: type=1400 audit(1757263672.276:628): avc: denied { accept } for pid=1847 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.376723][ T1848] 9pnet_fd: p9_fd_create_unix (1848): problem connecting socket: ./file0: -111 [ 79.426506][ T44] bridge_slave_1: left allmulticast mode [ 79.432752][ T44] bridge_slave_1: left promiscuous mode [ 79.439047][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.472312][ T44] bridge_slave_0: left allmulticast mode [ 79.478066][ T44] bridge_slave_0: left promiscuous mode [ 79.501472][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.617972][ T1857] netlink: 'syz.2.468': attribute type 5 has an invalid length. [ 79.637018][ T1857] netlink: 'syz.2.468': attribute type 5 has an invalid length. [ 79.653266][ T1857] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.468'. [ 79.681420][ T1856] netlink: 'syz.2.468': attribute type 5 has an invalid length. [ 79.689611][ T1856] netlink: 'syz.2.468': attribute type 5 has an invalid length. [ 79.697984][ T1856] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.468'. [ 79.726860][ T44] veth1_macvtap: left promiscuous mode [ 79.732582][ T44] veth0_vlan: left promiscuous mode [ 79.841913][ T1865] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.914444][ T1861] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.943243][ T1861] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.950753][ T1861] bridge_slave_0: entered allmulticast mode [ 79.961743][ T1861] bridge_slave_0: entered promiscuous mode [ 79.968727][ T1861] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.976226][ T1861] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.984086][ T1861] bridge_slave_1: entered allmulticast mode [ 79.990864][ T1861] bridge_slave_1: entered promiscuous mode [ 80.001046][ T36] audit: type=1400 audit(1757263672.946:629): avc: denied { sqpoll } for pid=1873 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.147646][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.154853][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.171755][ T63] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 80.185618][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.193007][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.231785][ T1861] veth0_vlan: entered promiscuous mode [ 80.247199][ T1861] veth1_macvtap: entered promiscuous mode [ 80.301594][ T1884] batadv_slave_1: entered promiscuous mode [ 80.315597][ T1883] batadv_slave_1: left promiscuous mode [ 80.352619][ T63] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 80.363709][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.381387][ T63] usb 2-1: config 0 descriptor?? [ 80.452975][ T1891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.478'. [ 80.858569][ T36] audit: type=1400 audit(1757263673.806:630): avc: denied { bind } for pid=1892 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.300790][ T1909] Dead loop on virtual device ip6_vti0, fix it urgently! [ 81.319733][ T1911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 81.319743][ T1912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 81.333393][ T36] audit: type=1400 audit(1757263674.286:631): avc: denied { getopt } for pid=1908 comm="syz.2.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.427097][ T1907] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.599478][ T1872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.624685][ T1872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.640466][ T63] usb 2-1: Cannot set autoneg [ 81.646731][ T63] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 81.669478][ T63] usb 2-1: USB disconnect, device number 26 [ 81.701073][ T9] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 81.861822][ T9] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 81.872706][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 81.879361][ T9] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 81.888845][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.898736][ T9] usb 3-1: config 0 descriptor?? [ 82.038890][ T63] rtc_cmos 00:00: Alarms can be up to one day in the future [ 82.053500][ T63] rtc_cmos 00:00: Alarms can be up to one day in the future [ 82.071443][ T63] rtc_cmos 00:00: Alarms can be up to one day in the future [ 82.093743][ T63] rtc_cmos 00:00: Alarms can be up to one day in the future [ 82.103348][ T63] rtc rtc0: __rtc_set_alarm: err=-22 [ 82.114237][ T1932] netlink: 108 bytes leftover after parsing attributes in process `syz.3.490'. [ 82.141705][ T1934] netlink: 104 bytes leftover after parsing attributes in process `syz.3.491'. [ 82.152848][ T1934] 9pnet_fd: Insufficient options for proto=fd [ 82.153019][ T36] audit: type=1400 audit(1757263675.106:632): avc: denied { nlmsg_write } for pid=1933 comm="syz.3.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 82.229856][ T1941] overlayfs: failed to clone upperpath [ 82.314539][ T9] usb 3-1: string descriptor 0 read error: -71 [ 82.328924][ T9] usb 3-1: USB disconnect, device number 34 [ 82.441088][ T388] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 82.591054][ T388] usb 2-1: Using ep0 maxpacket: 32 [ 82.597797][ T388] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 82.607404][ T388] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 82.618769][ T388] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 82.629004][ T388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.651316][ T388] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.663063][ T388] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 82.677826][ T388] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 82.689933][ T388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.704337][ T388] usb 2-1: config 0 descriptor?? [ 82.914005][ T388] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 82.934029][ T388] usb 2-1: USB disconnect, device number 27 [ 82.942716][ T388] usblp0: removed [ 83.284682][ T36] audit: type=1400 audit(1757263676.236:633): avc: denied { ioctl } for pid=1969 comm="syz.3.506" path="socket:[16062]" dev="sockfs" ino=16062 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.371080][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 83.531065][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 83.537819][ T31] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 83.547904][ T31] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 83.557201][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 83.566891][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.577596][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 83.589144][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 83.604088][ T31] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 83.614573][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.624640][ T31] usb 2-1: config 0 descriptor?? [ 83.809098][ T1977] netlink: 165 bytes leftover after parsing attributes in process `syz.3.509'. [ 83.861805][ T1978] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.869861][ T1978] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.877555][ T1978] bridge_slave_0: entered allmulticast mode [ 83.885196][ T1978] bridge_slave_0: entered promiscuous mode [ 83.898850][ T1978] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.906836][ T1978] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.914222][ T1978] bridge_slave_1: entered allmulticast mode [ 83.921402][ T1978] bridge_slave_1: entered promiscuous mode [ 84.013882][ T1978] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.021885][ T1978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.029214][ T1978] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.036559][ T1978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.048271][ T31] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 84.062087][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.067052][ T31] usb 2-1: USB disconnect, device number 28 [ 84.076001][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.077307][ T31] usblp0: removed [ 84.093770][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.101171][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.111201][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.118741][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.137832][ T2000] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 84.156202][ T1978] veth0_vlan: entered promiscuous mode [ 84.179468][ T1978] veth1_macvtap: entered promiscuous mode [ 84.196886][ T2004] netlink: 'syz.2.514': attribute type 22 has an invalid length. [ 84.208895][ T2004] can0: slcan on ttyS3. [ 84.262122][ T2003] can0 (unregistered): slcan off ttyS3. [ 84.300512][ T2016] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 84.311582][ T36] audit: type=1400 audit(1757263677.266:634): avc: denied { map } for pid=2018 comm="syz.4.517" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.395808][ T2030] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 241) [ 84.395838][ T2030] rust_binder: Error while translating object. [ 84.417496][ T2030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.424051][ T2037] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 84.424723][ T36] audit: type=1400 audit(1757263677.366:635): avc: denied { create } for pid=2036 comm="syz.3.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.463085][ T2030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:449 [ 84.479893][ T36] audit: type=1400 audit(1757263677.426:636): avc: denied { write } for pid=2043 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 84.483685][ T2044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.518863][ T2049] netlink: 165 bytes leftover after parsing attributes in process `syz.3.529'. [ 84.520834][ T2044] rust_binder: 19: no such ref 2 [ 84.535412][ T2052] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:451 [ 84.541242][ T2051] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.543993][ T2044] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 84.551447][ T2052] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 84.561271][ T2044] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 84.571272][ T2051] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 84.589974][ T36] audit: type=1400 audit(1757263677.536:637): avc: denied { ioctl } for pid=2050 comm="syz.2.528" path="socket:[16364]" dev="sockfs" ino=16364 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.600247][ T2044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:19 [ 84.663869][ T2063] netlink: 40 bytes leftover after parsing attributes in process `syz.4.532'. [ 84.686941][ T2063] binder: Unknown parameter '' [ 84.758132][ T36] audit: type=1400 audit(1757263677.706:638): avc: denied { append } for pid=2069 comm="syz.1.535" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.768669][ T2068] rust_binder: Error while translating object. [ 84.783831][ T2068] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.790389][ T2068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 84.902970][ T2077] binder: Bad value for 'max' [ 84.983248][ T2079] batadv_slave_1: entered promiscuous mode [ 85.051136][ T388] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.064127][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 85.075853][ T2078] batadv_slave_1: left promiscuous mode [ 85.201168][ T388] usb 5-1: Using ep0 maxpacket: 32 [ 85.207796][ T388] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 194, changing to 11 [ 85.219985][ T388] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 85.231658][ T388] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 85.244318][ T388] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.253888][ T388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.262292][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 85.268907][ T388] usb 5-1: Product: syz [ 85.273838][ T388] usb 5-1: Manufacturer: ⫶樮ꘈ撰粢幒뿸륅ﻊ塬䃛䛲냥돆搯⿙尐橴죝ɨគ䙁賿ুﰌ鰀ፇఎ⽰獌蠓烩ꆭ⩦ꆆ锉퀮꜖媆ꤸᒳ顓固枳䜲ຣ㏬Ⓩꣷ萚軍ᑍﯸ륻胭崃鸜蹤⾢䘭铋ｍ䁝컥叟샋ꉮ拟ꄍ↡沅⃪姜茒℅倚ꉉ畜櫓켻婈洋鎿熒⧇͢袢乺좕氛녆惷넳䩺ũ쇖힮 [ 85.309649][ T388] usb 5-1: SerialNumber: syz [ 85.314967][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.326843][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.338056][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 85.348887][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.358871][ T9] usb 3-1: config 0 descriptor?? [ 85.365633][ T9] hub 3-1:0.0: USB hub found [ 85.391193][ T10] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 85.542313][ T10] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 85.551437][ T10] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 85.562462][ T10] usb 2-1: config 8 has no interface number 0 [ 85.568915][ T9] hub 3-1:0.0: 1 port detected [ 85.574825][ T10] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 85.592238][ T10] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 85.603090][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.612088][ T10] usb 2-1: Product: syz [ 85.616308][ T10] usb 2-1: Manufacturer: syz [ 85.621149][ T10] usb 2-1: SerialNumber: syz [ 85.753388][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.761448][ T2073] incfs: Options parsing error. -22 [ 85.767689][ T2073] incfs: mount failed -22 [ 85.853801][ T2090] syzkaller0: entered promiscuous mode [ 85.860443][ T2090] syzkaller0: entered allmulticast mode [ 85.892155][ T10] usb 2-1: USB disconnect, device number 29 [ 85.958685][ T36] audit: type=1400 audit(1757263678.906:639): avc: denied { name_bind } for pid=2095 comm="syz.3.546" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 86.381850][ T10] hub 3-1:0.0: activate --> -90 [ 86.517959][ T2100] netlink: 165 bytes leftover after parsing attributes in process `syz.3.548'. [ 86.894298][ T9] usb 3-1: USB disconnect, device number 35 [ 87.201061][ T2111] cgroup: Unknown subsys name 'net_cls' [ 87.212187][ T36] audit: type=1400 audit(1757263680.166:640): avc: denied { bind } for pid=2110 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.236119][ T36] audit: type=1400 audit(1757263680.166:641): avc: denied { setopt } for pid=2110 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.300293][ T2115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'. [ 87.372727][ T2122] netlink: 165 bytes leftover after parsing attributes in process `syz.3.557'. [ 87.425007][ T2129] rust_binder: Write failure EFAULT in pid:470 [ 87.459457][ T36] audit: type=1400 audit(1757263680.406:642): avc: denied { map } for pid=2132 comm="syz.2.561" path="socket:[17719]" dev="sockfs" ino=17719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.497553][ T36] audit: type=1400 audit(1757263680.406:643): avc: denied { read } for pid=2132 comm="syz.2.561" path="socket:[17719]" dev="sockfs" ino=17719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.811095][ T646] Bluetooth: hci0: command 0x1003 tx timeout [ 87.811095][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.830711][ T388] cdc_ncm 5-1:1.0: bind() failure [ 87.837705][ T388] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 87.851265][ T388] cdc_ncm 5-1:1.1: bind() failure [ 87.859417][ T388] usb 5-1: USB disconnect, device number 2 [ 88.351063][ T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 88.503720][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 88.510723][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 88.524272][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26112, setting to 1024 [ 88.536832][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.553813][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.571507][ T31] usb 2-1: config 0 descriptor?? [ 88.578179][ T2166] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 88.592595][ T31] hub 2-1:0.0: USB hub found [ 88.674875][ T2192] 9pnet_fd: Insufficient options for proto=fd [ 88.749862][ T2204] rust_binder: Error while translating object. [ 88.749912][ T2204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 88.758546][ T2204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45 [ 88.789405][ T31] hub 2-1:0.0: 1 port detected [ 88.802544][ T2214] overlayfs: lower data-only dirs require metacopy support. [ 88.811648][ T2216] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.855830][ T2224] syz.4.593: attempt to access beyond end of device [ 88.855830][ T2224] loop4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 88.894050][ T2224] syzkaller0: entered promiscuous mode [ 88.899741][ T2224] syzkaller0: entered allmulticast mode [ 89.291077][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.364556][ T2234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 89.451057][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 89.458464][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 97, changing to 10 [ 89.473068][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 24915, setting to 1024 [ 89.477149][ T2245] overlayfs: failed to clone upperpath [ 89.487258][ T9] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 89.501943][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.511072][ T9] usb 5-1: Product: syz [ 89.515709][ T9] usb 5-1: Manufacturer: syz [ 89.520631][ T9] usb 5-1: SerialNumber: syz [ 89.528703][ T9] usb 5-1: config 0 descriptor?? [ 89.536959][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 89.544674][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 89.575191][ T2245] selinux_netlink_send: 23 callbacks suppressed [ 89.575213][ T2245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2245 comm=syz.3.601 [ 89.610668][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 89.610687][ T36] audit: type=1400 audit(1757263682.556:652): avc: denied { bind } for pid=2246 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.739708][ T9] usb 5-1: USB disconnect, device number 3 [ 89.794046][ T63] usb 2-1: USB disconnect, device number 30 [ 89.801086][ T31] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 90.227941][ T2276] 9pnet_fd: Insufficient options for proto=fd [ 90.531260][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.621094][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 90.771088][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 90.779035][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.788393][ T9] usb 2-1: config 0 has no interface number 0 [ 90.794881][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 90.806852][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 90.818861][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 90.828811][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.838362][ T9] usb 2-1: config 0 descriptor?? [ 90.941321][ T2321] netlink: 'syz.3.625': attribute type 4 has an invalid length. [ 90.958176][ T2321] netlink: 'syz.3.625': attribute type 4 has an invalid length. [ 91.181092][ T403] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 91.332895][ T403] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 91.344417][ T403] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.454551][ T9] uclogic 0003:28BD:0071.0006: pen parameters not found [ 91.462160][ T9] uclogic 0003:28BD:0071.0006: interface is invalid, ignoring [ 91.586459][ T2342] fuse: Bad value for 'group_id' [ 91.592586][ T2342] fuse: Bad value for 'group_id' [ 92.281163][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 92.332935][ T36] audit: type=1400 audit(1757263685.286:653): avc: denied { mount } for pid=2357 comm="syz.3.639" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 92.360231][ T2358] 9pnet_fd: Insufficient options for proto=fd [ 92.434065][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 92.443645][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.453552][ T10] usb 3-1: Product: syz [ 92.458209][ T10] usb 3-1: Manufacturer: syz [ 92.463368][ T10] usb 3-1: SerialNumber: syz [ 93.953089][ T403] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.963578][ T403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.972273][ T36] audit: type=1400 audit(1757263686.916:654): avc: denied { map } for pid=2372 comm="syz.4.645" path="pipe:[17392]" dev="pipefs" ino=17392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 93.996825][ T36] audit: type=1400 audit(1757263686.916:655): avc: denied { execute } for pid=2372 comm="syz.4.645" path="pipe:[17392]" dev="pipefs" ino=17392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 94.021652][ T403] usb 5-1: can't set config #1, error -71 [ 94.028220][ T403] usb 5-1: USB disconnect, device number 4 [ 94.059123][ T2377] netlink: 'syz.4.646': attribute type 2 has an invalid length. [ 94.692304][ T36] audit: type=1400 audit(1757263687.646:656): avc: denied { create } for pid=2383 comm="syz.3.649" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 94.964878][ T2408] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 94.976279][ T2410] netlink: 68 bytes leftover after parsing attributes in process `syz.4.659'. [ 94.996326][ T2410] fuse: Unknown parameter '0x00000000000000000x0000000000000009' [ 95.007163][ T2410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 95.050376][ T31] usb 3-1: USB disconnect, device number 36 [ 95.088634][ T2421] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 95.089008][ T36] audit: type=1400 audit(1757263688.036:657): avc: denied { setattr } for pid=2419 comm="syz.2.662" name="PACKET" dev="sockfs" ino=18598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.248025][ T36] audit: type=1400 audit(1757263688.196:658): avc: denied { create } for pid=2425 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 95.671173][ T31] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 95.686375][ T2436] /dev/loop0: Can't lookup blockdev [ 95.822584][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 95.833492][ T31] usb 3-1: New USB device found, idVendor=24b8, idProduct=0020, bcdDevice= 0.40 [ 95.843740][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.853198][ T31] usb 3-1: Product: 䤾륺累榯댗섿଱翀︂墪ꕃ浱䚴杩仺ᴽ趯釷⏱ӽꤍ璇鯯ᦀ鉈붃习㘐臭ꐪ [ 95.870514][ T31] usb 3-1: Manufacturer: ఄ [ 95.875656][ T31] usb 3-1: SerialNumber: 𢎹垉䰝돵鳊琼愊倦ⶭ蕪鴉蚭䃴骺욘蘒͂⌷瀸곕﯇弡ᜀ娷ᢀ菕㷁ᘉ礞싀祎挋⌬貑䷤窸岲⫬툪岦 [ 96.181707][ T31] usbhid 3-1:1.0: can't add hid device: -71 [ 96.188906][ T31] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 96.201618][ T31] usb 3-1: USB disconnect, device number 37 [ 110.339302][ T2457] tmpfs: Unknown parameter 'hash' [ 110.347607][ T2457] rust_binder: Error while translating object. [ 110.347671][ T2457] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 110.358288][ T2457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:522 [ 110.371391][ T2457] rust_binder: 522: no such ref 1 [ 110.401060][ T2457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:522 [ 110.428748][ T36] audit: type=1400 audit(1757263703.376:659): avc: denied { setattr } for pid=2466 comm="syz.2.675" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 110.432668][ T2467] rust_binder: Error while translating object. [ 110.514936][ T2467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.539504][ T2467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:525 [ 110.564227][ T2463] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.597306][ T2463] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.608370][ T2463] bridge_slave_0: entered allmulticast mode [ 110.618971][ T2463] bridge_slave_0: entered promiscuous mode [ 110.630625][ T2463] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.644359][ T36] audit: type=1400 audit(1757263703.596:660): avc: denied { create } for pid=2476 comm="syz.2.676" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 110.644968][ T2477] cgroup: No subsys list or none specified [ 110.680595][ T2463] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.689694][ T2463] bridge_slave_1: entered allmulticast mode [ 110.698093][ T36] audit: type=1400 audit(1757263703.596:661): avc: denied { mounton } for pid=2476 comm="syz.2.676" path="/file0" dev="tmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 110.701923][ T2463] bridge_slave_1: entered promiscuous mode [ 110.881226][ T2463] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.891112][ T2463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.901266][ T2463] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.908866][ T2463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.988047][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.997898][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.011774][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.019139][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.036331][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.044857][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.077133][ T2463] veth0_vlan: entered promiscuous mode [ 111.094272][ T2463] veth1_macvtap: entered promiscuous mode [ 111.222238][ T2462] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 111.241271][ T2519] cgroup: Unknown subsys name 'measure' [ 111.251341][ T2462] overlayfs: missing 'lowerdir' [ 111.428409][ T2462] devpts: called with bogus options [ 111.790016][ T36] audit: type=1400 audit(1757263704.736:662): avc: denied { getopt } for pid=2533 comm="syz.5.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.790216][ T2534] /dev/rnullb0: Can't open blockdev [ 111.864008][ T2537] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000003 not found [ 111.872916][ T2537] rust_binder: Write failure EINVAL in pid:11 [ 111.906833][ T36] audit: type=1400 audit(1757263704.856:663): avc: denied { read } for pid=2540 comm="syz.5.693" name="file0" dev="ramfs" ino=19844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 111.937886][ T36] audit: type=1400 audit(1757263704.856:664): avc: denied { watch } for pid=2540 comm="syz.5.693" path="/file0" dev="ramfs" ino=19844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 112.147977][ T2553] tipc: Started in network mode [ 112.153321][ T2553] tipc: Node identity ac14142f, cluster identity 4711 [ 112.161399][ T2553] tipc: Enabling of bearer rejected, failed to enable media [ 112.887388][ T2576] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551607) [ 112.887416][ T2576] rust_binder: Error while translating object. [ 112.900428][ T2576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.907318][ T2576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 113.090292][ T36] audit: type=1400 audit(1757263706.036:665): avc: denied { execute } for pid=2597 comm="syz.5.711" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.131348][ T2600] /dev/loop0: Can't lookup blockdev [ 113.131520][ T2602] binder: Bad value for 'max' [ 113.166331][ T2609] /dev/rnullb0: Can't open blockdev [ 113.174137][ T2609] /dev/rnullb0: Can't open blockdev [ 113.191861][ T36] audit: type=1400 audit(1757263706.146:666): avc: denied { setattr } for pid=2615 comm="syz.5.716" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 113.236038][ T36] audit: type=1400 audit(1757263706.186:667): avc: denied { remount } for pid=2618 comm="syz.5.717" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 113.236621][ T2619] option changes via remount are deprecated (pid=2618 comm=syz.5.717) [ 113.257175][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.305465][ T2623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88 [ 113.317144][ T2625] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.419335][ T36] audit: type=1400 audit(1757263706.366:668): avc: denied { connect } for pid=2632 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.821075][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.972790][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 113.980178][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 113.990731][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.001673][ T10] usb 5-1: config 0 descriptor?? [ 114.173151][ T2663] rust_binder: Write failure EFAULT in pid:60 [ 114.410230][ T10] isku 0003:1E7D:3264.0007: hidraw0: USB HID vf.fe Device [HID 1e7d:3264] on usb-dummy_hcd.4-1/input0 [ 114.591101][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 114.664772][ T390] usb 5-1: USB disconnect, device number 5 [ 114.741061][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 114.747796][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 114.759267][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26112, setting to 1024 [ 114.771651][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.781382][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.790945][ T31] usb 6-1: config 0 descriptor?? [ 114.796709][ T2667] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 114.805286][ T31] hub 6-1:0.0: USB hub found [ 115.005536][ T31] hub 6-1:0.0: 1 port detected [ 115.210611][ T2680] tipc: Enabling of bearer rejected, failed to enable media [ 115.265239][ T2676] rust_binder: Failed to allocate buffer. len:1072, is_oneway:false [ 115.339546][ T2697] overlayfs: failed to resolve './file1': -2 [ 115.411571][ T2709] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 115.431140][ T2713] overlay: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa is not a directory [ 115.445713][ T2715] netlink: 'syz.4.755': attribute type 25 has an invalid length. [ 115.482452][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 115.482470][ T36] audit: type=1400 audit(1757263708.436:672): avc: denied { map } for pid=2717 comm="syz.3.756" path="socket:[20346]" dev="sockfs" ino=20346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 115.528470][ T2721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 116.013163][ T31] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 116.021231][ T390] usb 6-1: USB disconnect, device number 2 [ 116.347680][ T2728] pim6reg1: entered promiscuous mode [ 116.353898][ T2728] pim6reg1: entered allmulticast mode [ 116.517762][ T2739] veth1: entered allmulticast mode [ 116.559048][ T2737] veth1: left allmulticast mode [ 116.601299][ T2749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.781921][ T2771] binder: Unknown parameter '' [ 117.003630][ T2783] netlink: 124 bytes leftover after parsing attributes in process `syz.3.777'. [ 117.404466][ T36] audit: type=1400 audit(1757263710.356:673): avc: denied { execmod } for pid=2803 comm="syz.2.783" path="/183/blkio.bfq.io_merged" dev="tmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.475886][ T2810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.481310][ T2810] rust_binder: Read failure Err(EAGAIN) in pid:75 [ 117.490941][ T2813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.520430][ T2819] binder: Bad value for 'max' [ 117.562046][ T2829] netlink: 'syz.3.792': attribute type 4 has an invalid length. [ 117.573999][ T2831] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.593692][ T2833] batadv_slave_1: entered promiscuous mode [ 117.608841][ T2832] batadv_slave_1: left promiscuous mode [ 134.110039][ T2839] futex_wake_op: syz.4.795 tries to shift op by -1; fix this program [ 134.234950][ T2869] netlink: 'syz.5.805': attribute type 1 has an invalid length. [ 134.428715][ T36] audit: type=1400 audit(1757263727.376:674): avc: denied { read } for pid=2895 comm="syz.5.819" path="socket:[21696]" dev="sockfs" ino=21696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.482141][ T36] audit: type=1400 audit(1757263727.436:675): avc: denied { read } for pid=2899 comm="syz.2.821" name="/" dev="configfs" ino=1901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.516129][ T36] audit: type=1400 audit(1757263727.436:676): avc: denied { open } for pid=2899 comm="syz.2.821" path="/" dev="configfs" ino=1901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.623517][ T2919] netlink: 'syz.2.829': attribute type 4 has an invalid length. [ 134.674278][ T2910] kvm_intel: kvm [2907]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x46d7 [ 134.689065][ T2910] kvm: kvm [2907]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x24d7 [ 134.702322][ T2910] kvm: kvm [2907]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x55c2 [ 134.716808][ T2910] kvm: kvm [2907]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x825b [ 134.731341][ T2910] kvm: kvm [2907]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1946 [ 134.741543][ T2910] kvm: kvm [2907]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xba32 [ 134.885967][ T2951] netlink: 21 bytes leftover after parsing attributes in process `syz.2.845'. [ 135.043629][ T36] audit: type=1400 audit(1757263727.996:677): avc: denied { setattr } for pid=2976 comm="syz.4.858" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.161142][ T2992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.864'. [ 135.985390][ T3032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 137.034134][ T36] audit: type=1326 audit(1757263729.986:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3136 comm="syz.3.930" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2874f8ebe9 code=0x0 [ 137.724688][ T36] audit: type=1400 audit(1757263730.676:679): avc: denied { create } for pid=3173 comm="syz.5.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 137.806301][ T3188] overlayfs: failed to clone upperpath [ 137.884234][ T3199] overlayfs: failed to clone upperpath [ 137.936857][ T36] audit: type=1326 audit(1757263730.886:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3210 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21fd8ebe9 code=0x7ffc0000 [ 137.972719][ T36] audit: type=1326 audit(1757263730.886:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3210 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21fd8ebe9 code=0x7ffc0000 [ 137.998047][ T36] audit: type=1326 audit(1757263730.916:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3210 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc21fd8d550 code=0x7ffc0000 [ 138.023653][ T36] audit: type=1326 audit(1757263730.916:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3210 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21fd8ebe9 code=0x7ffc0000 [ 138.207558][ T3255] overlayfs: failed to clone upperpath [ 138.377035][ T3277] syzkaller0: entered promiscuous mode [ 138.383347][ T3277] syzkaller0: entered allmulticast mode [ 139.747821][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 139.747843][ T36] audit: type=1400 audit(1757263732.686:697): avc: denied { write } for pid=3377 comm="syz.3.1039" name="/" dev="configfs" ino=1901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.786108][ T36] audit: type=1400 audit(1757263732.726:698): avc: denied { mounton } for pid=3381 comm="syz.3.1040" path="/217/file0" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.933119][ T3417] overlayfs: failed to clone upperpath [ 140.396511][ T36] audit: type=1400 audit(1757263733.346:699): avc: denied { name_bind } for pid=3452 comm="syz.3.1074" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 140.541746][ T36] audit: type=1400 audit(1757263733.496:700): avc: denied { execute } for pid=3460 comm="syz.3.1078" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.574797][ T36] audit: type=1400 audit(1757263733.496:701): avc: denied { execute_no_trans } for pid=3460 comm="syz.3.1078" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.766485][ T3473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 140.948726][ T44] bridge_slave_1: left allmulticast mode [ 140.957536][ T44] bridge_slave_1: left promiscuous mode [ 140.964518][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.973003][ T44] bridge_slave_0: left allmulticast mode [ 140.978841][ T44] bridge_slave_0: left promiscuous mode [ 140.985088][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.039768][ T36] audit: type=1400 audit(1757263733.986:702): avc: denied { setattr } for pid=3502 comm="syz.2.1099" name="file0" dev="tmpfs" ino=1635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 141.098946][ T3510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1102'. [ 141.148972][ T44] veth1_macvtap: left promiscuous mode [ 141.155447][ T44] veth0_vlan: left promiscuous mode [ 141.216677][ T9] kernel write not supported for file /155/clear_refs (pid: 9 comm: kworker/0:0) [ 141.259231][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.270435][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.281103][ T3506] bridge_slave_0: entered allmulticast mode [ 141.288130][ T3506] bridge_slave_0: entered promiscuous mode [ 141.295149][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.303189][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.312452][ T3506] bridge_slave_1: entered allmulticast mode [ 141.319951][ T3506] bridge_slave_1: entered promiscuous mode [ 141.345332][ T3257] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI [ 141.345798][ T36] audit: type=1400 audit(1757263734.296:703): avc: denied { getopt } for pid=3534 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.358949][ T3257] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 141.358978][ T3257] CPU: 1 UID: 0 PID: 3257 Comm: syz.5.985 Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 141.359006][ T3257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.359018][ T3257] RIP: 0010:fuse_file_release+0x29e/0x400 [ 141.382240][ T36] audit: type=1400 audit(1757263734.296:704): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 141.390011][ T3257] Code: 00 74 12 48 89 df e8 61 f0 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 14 ef a0 ff 48 ba 00 00 00 00 00 fc [ 141.402900][ T36] audit: type=1400 audit(1757263734.296:705): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.413280][ T3257] RSP: 0018:ffffc9000dc7fae0 EFLAGS: 00010202 [ 141.413312][ T3257] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff88811f004c00 [ 141.413327][ T3257] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff8881264ce678 [ 141.413342][ T3257] RBP: ffffc9000dc7fb28 R08: 0000000000000003 R09: 0000000000000004 [ 141.413355][ T3257] R10: dffffc0000000000 R11: fffff52001b8ff2c R12: 000000000004a802 [ 141.420052][ T36] audit: type=1400 audit(1757263734.296:706): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.445136][ T3257] R13: ffff88811e840900 R14: ffff8881264ce600 R15: 00000000000000c8 [ 141.445164][ T3257] FS: 000055557598f500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 141.445189][ T3257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.445203][ T3257] CR2: 00007ffd79507d58 CR3: 000000010139e000 CR4: 00000000003526b0 [ 141.445223][ T3257] Call Trace: [ 141.445230][ T3257] [ 141.445239][ T3257] ? call_rcu+0x14/0x20 [ 141.445263][ T3257] fuse_release+0x13e/0x1b0 [ 141.445282][ T3257] ? __cfi_fuse_release+0x10/0x10 [ 141.619955][ T3257] __fput+0x1fe/0xa00 [ 141.624802][ T3257] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 141.630733][ T3257] ____fput+0x20/0x30 [ 141.635195][ T3257] task_work_run+0x1e3/0x250 [ 141.640199][ T3257] ? __cfi_task_work_run+0x10/0x10 [ 141.645956][ T3257] ? __kasan_check_write+0x18/0x20 [ 141.651990][ T3257] ? task_work_add+0x258/0x3f0 [ 141.656973][ T3257] get_signal+0x1307/0x14f0 [ 141.661841][ T3257] ? __kasan_check_write+0x18/0x20 [ 141.667428][ T3257] ? _raw_spin_lock+0x8c/0x120 [ 141.672457][ T3257] ? __cfi__raw_spin_lock+0x10/0x10 [ 141.677756][ T3257] ? fput+0x1ac/0x240 [ 141.681939][ T3257] arch_do_signal_or_restart+0x96/0x720 [ 141.688112][ T3257] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 141.694814][ T3257] ? __kasan_check_write+0x18/0x20 [ 141.700293][ T3257] syscall_exit_to_user_mode+0x58/0xb0 [ 141.706023][ T3257] do_syscall_64+0x64/0xf0 [ 141.710527][ T3257] ? clear_bhb_loop+0x50/0xa0 [ 141.715717][ T3257] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 141.722263][ T3257] RIP: 0033:0x7fed9c58ebe9 [ 141.728028][ T3257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.749726][ T3257] RSP: 002b:00007ffd795082e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 141.758588][ T3257] RAX: 0000000000000000 RBX: 00007fed9c7c7da0 RCX: 00007fed9c58ebe9 [ 141.766998][ T3257] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 141.775605][ T3257] RBP: 00007fed9c7c7da0 R08: 00000000000000a4 R09: 00000009795085df [ 141.784692][ T3257] R10: 00007fed9c7c7cb0 R11: 0000000000000246 R12: 0000000000021ef6 [ 141.793215][ T3257] R13: 00007ffd795083e0 R14: ffffffffffffffff R15: 00007ffd79508400 [ 141.802283][ T3257] [ 141.805480][ T3257] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 141.809897][ T3257] ---[ end trace 0000000000000000 ]--- [ 141.816921][ T3257] RIP: 0010:fuse_file_release+0x29e/0x400 [ 141.823629][ T3257] Code: 00 74 12 48 89 df e8 61 f0 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 14 ef a0 ff 48 ba 00 00 00 00 00 fc [ 141.831641][ T3538] overlayfs: failed to clone upperpath [ 141.864190][ T3257] RSP: 0018:ffffc9000dc7fae0 EFLAGS: 00010202 [ 141.870611][ T3257] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff88811f004c00 [ 141.884642][ T3257] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff8881264ce678 [ 141.906737][ T3257] RBP: ffffc9000dc7fb28 R08: 0000000000000003 R09: 0000000000000004 [ 141.931035][ T3257] R10: dffffc0000000000 R11: fffff52001b8ff2c R12: 000000000004a802 [ 141.940040][ T3257] R13: ffff88811e840900 R14: ffff8881264ce600 R15: 00000000000000c8 [ 141.969007][ T3257] FS: 000055557598f500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 142.001650][ T3257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.008613][ T3257] CR2: 0000564efc1b6b98 CR3: 000000010139e000 CR4: 00000000003526b0 [ 142.020070][ T3257] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 142.029961][ T3257] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 142.040095][ T31] rust_binder: 0: removing orphan mapping 0:4120 [ 142.047152][ T3257] Kernel panic - not syncing: Fatal exception [ 142.055197][ T3257] Kernel Offset: disabled [ 142.059977][ T3257] Rebooting in 86400 seconds..