last executing test programs: 1m34.721704799s ago: executing program 1 (id=42): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000002b80)={&(0x7f0000001580)={0xa, 0x4e21, 0x6, @mcast2, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x1288}, 0x20000001) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async, rerun: 64) ioctl$TCFLSH(r4, 0x400455c8, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0x7, 0x6, 0x3000000002, 0xffffffffffffffed]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) 1m31.709876234s ago: executing program 1 (id=66): r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x6, 0x4, 0x9, {0x77359400}, {r3, r4/1000+60000}, {0x4, 0x1, 0x1, 0x1}, 0x1, @can={{0x1}, 0x7, 0x1, 0x0, 0x0, "5f2c76861aa7c1b8"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x24) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r2}, 0xffffffffffffffd1) splice(r0, &(0x7f0000000000)=0x8, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x800, 0x5) mkdir(0x0, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000340)={0x18, 0x2, {0x2, @broadcast}}, 0xfffffffffffffeee) (async) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_WKALM_SET(r6, 0x40187014, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x1}}) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0x8004745a, 0x0) (async) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r9, &(0x7f0000000080)={0x80000002}) (async) close_range(r9, r1, 0x0) (async) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x301201, 0x0) ioctl$BLKBSZSET(r10, 0x40081271, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) sendfile(r8, r8, 0x0, 0x5e7d) 1m31.651450095s ago: executing program 1 (id=67): mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) r1 = syz_io_uring_complete(0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f0000000180)=[@exit_looper, @clear_death={0x400c630f, 0x2}, @increfs_done={0x40106308, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x6, 0x1, 0x3e}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}, 0x1000}], 0x52, 0x0, &(0x7f0000000200)="f1cd15bb18ee0a128a2ac9e1c6502d22a3064c892b5afed4347744a563f4ca12c361cd83547c45e5e8457b5ad6273316fea17fd87decb3fefb946c7d17c236a6a328e0e9803afa7e1a45c17387fbc8ce4346"}) 1m31.651270595s ago: executing program 1 (id=68): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x1}, [{0x2, 0x5}], {0x4, 0x4}, [], {0x10, 0x6}}, 0x2c, 0x1) close$binfmt(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0}) 1m31.650975784s ago: executing program 1 (id=69): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x20}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x214}) lseek(r0, 0x1000, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x8, 0x80000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0xa00000, &(0x7f0000000000)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=', @ANYRESDEC=r5, @ANYRESHEX=r4, @ANYRES32=r1, @ANYRES8=r5]) dup3(r0, r1, 0x80000) syz_clone(0x8400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m31.636401355s ago: executing program 1 (id=70): ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000080)={0x4, 0x8000}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xba, &(0x7f0000000040)) capset(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)={0xffffffe9, 0x80000000, 0x3, 0x156f, 0x2, 0x99}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x402, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 1m16.512273922s ago: executing program 32 (id=70): ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000080)={0x4, 0x8000}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xba, &(0x7f0000000040)) capset(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)={0xffffffe9, 0x80000000, 0x3, 0x156f, 0x2, 0x99}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x402, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 3.743222924s ago: executing program 4 (id=1277): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x84, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x51, 0x5}}}}}]}}]}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040), 0x0, 0xffffffffffffff06, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0xa, "16"}, @local=@item_4={0x3, 0x2, 0xa, "a2ee2464"}]}}, 0x0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "cbbf09c473ef3ee5", "d62cb2759e70ad75c3b50ef30b007511", "0894cb4c", "2a6f9fea1f1bb653"}, 0x28) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) getuid() r5 = dup2(r2, r3) close_range(r5, 0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) 2.078975479s ago: executing program 2 (id=1304): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x1a, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x28}, 0x800, 0x0, 0xff, 0x0, 0x0, 0xffff}, 0x20) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x28f}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xb, 0x2, 0x2}) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r8, &(0x7f0000000080)=""/93, 0xffffff6c) 1.824885672s ago: executing program 2 (id=1309): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x10, 0x200) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000040)={0x0, "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"}) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000180)=0x5) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000001c0)={'vxcan1\x00', {0x2, 0x0, @local}}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000200)={@local, @remote, 0x5, "2b1afc059ec95ed18972be1e0705c92dbbece92d731181e49d5c29cb777424dc", 0xfffffffc, 0x3, 0x1, 0x1457}, 0x3c) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000240)) read(r1, &(0x7f0000000280)=""/207, 0xcf) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0xfffffffffffffffe) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)=@usbdevfs_disconnect={0x7}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x10000, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000400), 0x10001, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000580)=@urb_type_bulk={0x3, {0x3}, 0x9, 0xa0, &(0x7f0000000440)="0797f3060345c141bb68042c74c80baafdb22a5282c8400693e42d549ef256883c30c9a12a2e2a22d53ea7be91be263c21022980c6a0847095e26949086df99848787fa507bd5a2681ecb5b8f9f5f294d85dc7a3c9c2", 0x56, 0x48, 0x200, 0x2, 0x595, 0x6, &(0x7f00000004c0)="e2429658592a26d072574d06acd531249a911d638286c81bf8032a05304cb50741b792be2ee6e4e9baa5fba727fb5006f6421ef3e62d3789af21f770104dcf0481f7095f96724b133e3a05f48eb17209add89d7fa70b8a54b9cc7ca3e7e1460f95ed004da51debcf2d2405b83ec570c45d338431be138b62d4ae6b914b827dc73038e03b6861195109b95319968e976152ebf3f0"}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) pwrite64(r1, &(0x7f0000000600)="53d26ec4e9dced83c71f289f6dab8a603bbbd606f094621e57538b74e0b93ce30ce5edf0b50c68a9e511cf91b199e620864bebeeb4cee1b2a57e7b024550c8d6b09b092337dd82b1b71e2dfe16117a49112d02ae7f119243633f89d8fe549c13c6fb0c07e44164b8cbc0ea1db0d86de8f1b28e78a50a99cc114cf33c8ba9e0f0a43bd4648f22fdd9747cf347a1e27e14335c55189583d947fb51e60aaf37f55b6267c7885b90", 0xa6, 0x1ff) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000006c0)=0x6, 0x4) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000700), 0x8200, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xd, 0x2a, [@supported_rates={0x1, 0x7, [{0x4, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}]}, @NL80211_ATTR_IE={0x1a, 0x2a, [@peer_mgmt={0x75, 0x14, {0x0, 0x7, @void, @void, @val="cb98a267a0dacdea6ae4515ddd7ed31c"}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) futimesat(r4, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000940)={{0x0, 0x2710}, {r6, r7/1000+10000}}) mount_setattr(r5, &(0x7f0000000980)='./file0\x00', 0x9800, &(0x7f00000009c0)={0x1, 0x100002, 0xa0000, {r4}}, 0x20) syz_usb_connect(0xb, 0x1b9, &(0x7f0000000a00)={{0x12, 0x1, 0x300, 0x35, 0x7e, 0x91, 0x20, 0xbb4, 0xa18, 0xf3ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a7, 0x1, 0x5, 0x2, 0x80, 0x3, [{{0x9, 0x4, 0xd2, 0x1, 0x4, 0x6e, 0x13, 0x34, 0x7, [@generic={0xb1, 0x21, "8b08ed4a85f09caf6ef2c75c920ba97fdfdbbcb2a00e3165dc00dd89138583b04cd708b62b0b3f8c3bb3fc4bebaf8fbe6f0c08e9e43f108aa3d6f657d7014c4cb2a95f9b04ca72e32869c2d1a662c5a9b1908b11e90d1fb3a27cb5296ae136cdafdfd05aa88bad7e863a591c3f795925ae23bb2ddc3297871572f3206945a748a3d9e819a4be93bf8d88247fb1de52fef51eaf2e71eed165527c5b87a36e67f07e97e377007b956bb6edf540ea9f20"}, @uac_control={{0xa, 0x24, 0x1, 0x990c, 0x5}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0x0, "d48b68e3c9"}]}], [{{0x9, 0x5, 0x13, 0x0, 0x10, 0x3, 0xf9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5}, @generic={0x4c, 0x5, "fe97a33149be0983d829ee9111ffadf04dce0b2393bb071609df3b873d0b4a5bae1fb08ec7bbae9dedea823084393ba36e97eee5c74573867e815914d59a80e62312919dfb17b1cc42b3"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x3, 0xf0, 0x5}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0x0, 0x8, 0xb, [@generic={0x34, 0x10, "f64309b90db8ff19c1c22df4db6dd3ce15531bdc56ac0eb9a95d3c664cb597f2b533825df179a5099d6c02a97051a642f2a0"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x2, 0xf1, 0x5, [@generic={0x1f, 0x31, "2a80192fffa1d99d44cec003dd497c8c01f3754fa7dfad2626a73a5a1e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x944}]}}]}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x201, 0x4, 0xf1, 0x80, 0x40, 0x9}, 0xd9, &(0x7f0000000c00)={0x5, 0xf, 0xd9, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x25, 0x3, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x3, 0x6}, @generic={0xbc, 0x10, 0x1, "0608585ec1f813d2a002972998c0ab6c749a4486aff8911dd68088eb5a096e6f5b56afd2bddc658a1898e33cad65a853eba299c149e38686a767031034ca17207622797f71d58bb5022ca0ab80d59dff39fa8ade71ac8f08b4d3d89ab48105ff816cacba5935e9f8f41e66663b283d05d80b975f052acc152aaaf56cedc53afbb36950ccaf51bf2b21d7df5a409f1ee4b43cd6a7adae86eef63c9778f2a036fb1c8c82194ac0ab164ae80dbb8962867bcbe2ab23dce3440aa4"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0x4, 0x5}]}, 0x7, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x7c35}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x455}}, {0xef, &(0x7f0000000e00)=@string={0xef, 0x3, "05409ac74ac105c3640f0fdd506c42fdaf90dca2d845e50ba56f9c1948f5da73f896c7a82abda759e256d08c125f3b9b15fd02ea898b742a24e4738863c965a33416bc871ad8d72753f0a90315a4de2abcb32b32e107328c7f2c7821e4a2c4df570cf2f9a3a034da83e322a7a6b0089de1552e7b6563b6714f45aab5591c6eaa9af751b1a1fc712d76857b50375f8d8a7e2234e607a836e2fcfa6706399cb835aa07a32feb523e62dd32253a2a88b038038610b6033279bf4cf0e72ddc7c8c3fcff857e39e982c8a24b7cab8cef5ac3b30f465c599e231992dc81d96d715f2470a1f8fe1d20363788be14ddcce"}}, {0xf4, &(0x7f0000000f00)=@string={0xf4, 0x3, "240c50ec62bcc01dc14d0780fb3db2894df834fd0323b69192dcd2a29d195a6652858b8e52bee042918790b6ba1d10154e311c34e8bbbf463efe0cfa9fa739cb43cc03e8fd56e53ecf57d44ed068196b1a69ee6e4d155d224f591dba4b75bac225db1f454e016eebcd8ec890fa5931c50b8af4da1b052d81c3a1b9a54d3153f15078a89c3251b0036b0d01af1f78f83705003842c9418ae729e663bfc4c2963c9013fa8583f8d4dd898c840276ad01a09bb358dd33ece5289a13870f3ab76ea49182a198e14617b10ac0efac8dafba6f32ca0f381c72b46b564e6804b99218db90b6e8c96541b5ceac37a6932fa7ee9a4532"}}, {0xad, &(0x7f0000001000)=@string={0xad, 0x3, "04a877d77733d6fc46f6378e8189526ec878c6ce6f3e28d9a6e93e5711977906a92b7cd669077708943471d517410dc848b84e2dee3dcd1a5377a5798afdeccdb590a42a9675751600ce256895272ec3bca517e3d8d63805119d9ec0ab74482804564ff5256b7c1dd4cd812aa174bf4557dd69dd9efb50b554896f9c2508b2117ec91efa0b8da9ea0d67e4cfdae6c174c99b0c97941846c71b9a7a3550f515a881907d6d3c4b3476fb228e"}}]}) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0xe}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x7, 0x8, "d57265"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4004) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000001240)=0x3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000001280)={0x1, 0x0, [{0xa53}]}) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000012c0)) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000001340)=0x6, 0x4) 1.048451774s ago: executing program 2 (id=1313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) fcntl$setflags(r1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x8) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x39) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000640)='E', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) recvfrom$unix(r6, &(0x7f00000001c0)=""/243, 0xf3, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$cont(0x9, r3, 0x7ffffffffffffffc, 0x3) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) r8 = getpid() r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000005c0)={0x44000100, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300), {0x23}, &(0x7f0000000340), 0x0, &(0x7f0000000140)=""/105, &(0x7f0000000340)=[r8], 0x1, {r9}}, 0x58) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) r10 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r10, &(0x7f0000fa0fe4)={0xa, 0x4e22, 0x6, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x40800, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 1.026778825s ago: executing program 0 (id=1316): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x200036, 0x4) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005500)={0x2020}, 0x2020) (async, rerun: 32) read$FUSE(r3, &(0x7f00000014c0)={0x2020}, 0x2020) (async, rerun: 32) read$FUSE(r3, &(0x7f0000009580)={0x2020}, 0x2020) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r4, 0x29, 0x7, &(0x7f0000000000)={0x7, {{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}}, {{0xa, 0x4e22, 0x18000, @remote, 0x8}}}, 0x108) (async) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f0000000140)) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') (rerun: 32) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000180)={0x6, 0x9}) (async) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000940)={{0x4, 0x0, 0x3ff, 0xa}, 'syz1\x00', 0x2001b}) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000040)={0x20, 0x1, 0x5, 0x2, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)=@buf={0x11b, &(0x7f0000000400)="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"}) (async, rerun: 64) r7 = inotify_init() fcntl$setlease(r7, 0x400, 0x1) 976.955235ms ago: executing program 0 (id=1317): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r1, &(0x7f0000000000)=""/47, 0x2f, 0x1, &(0x7f00000001c0)=@hci={0x1f, 0x3, 0x2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000600)={'ip6_vti0\x00', 0x0}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x8, 0xf, 0x6, 0x0, 0xfd, 0x0, 0x1, 0x5, 0x3, 0x9, 0xc0, 0x2, '\x00', 0x8, 0xfffffffffffffff2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) 975.277186ms ago: executing program 0 (id=1318): futex_waitv(&(0x7f00000006c0)=[{0x7, 0x0, 0x2, 0xca9a3b}], 0x1, 0x0, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x49800}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x0, &(0x7f00000001c0)={@flat, @fd, @fda={0x66646185, 0x6, 0x0, 0x50}}, 0x0}, 0x10}], 0x5e, 0x0, &(0x7f0000000280)="27340dbe79e8af432ff4fa2360c88df5a04d8e7eeb14f8d0fab09d900a6bb5bc0f07887e054cb7693ae1fb57bdf9173c6f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7123d2729933e63d78255ba0d07"}) 974.742806ms ago: executing program 0 (id=1319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0xc, 0x6, 0x6, 0xfffffffffffffffc, 0x0, 0x29]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)={[0xeeef0000, 0xdddd0000, 0xdddd0000, 0x1000], 0xc1}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) 439.137573ms ago: executing program 0 (id=1320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) keyctl$revoke(0x3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f0000000300)=[@increfs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 437.070243ms ago: executing program 0 (id=1321): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket(0x25, 0x4, 0x9) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x97c}, 0x0) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) read(0xffffffffffffffff, &(0x7f0000000000), 0x2002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x100801f9, 0x1, 0xb94}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xa400000000000000) sched_setscheduler(r3, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, &(0x7f0000000180)) sendfile(r0, r0, 0x0, 0x7ffff000) 436.546183ms ago: executing program 4 (id=1322): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) (async) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c"], 0x94}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000000c0)='system_u:object_r:printer_device_t:s0\x00', 0x9) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 436.425403ms ago: executing program 3 (id=1323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) dup3(r2, r1, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x619, 0x0, 0x9}]}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f0000000080)) 387.991084ms ago: executing program 4 (id=1324): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$bt_BT_DEFER_SETUP(r1, 0x10f, 0x7, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) mmap(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x0, 0x2010, 0xffffffffffffffff, 0x75f79000) 301.992255ms ago: executing program 2 (id=1325): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone3(&(0x7f0000002640)={0x240000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0, {0x11}, &(0x7f0000000440)=""/86, 0x56, &(0x7f0000000500)=""/74, &(0x7f0000002600)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002980)='./file0\x00', &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) statx(0xffffffffffffff9c, &(0x7f0000002a40)='./file0\x00', 0x2000, 0x200, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r11 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002e40)={0x0, 0x0}, &(0x7f0000002e80)=0xc) r13 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r13, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r14) newfstatat(0xffffffffffffff9c, &(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) syz_fuse_handle_req(r5, &(0x7f0000000600)="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", 0x2000, &(0x7f00000031c0)={&(0x7f0000000280)={0x50, 0x0, 0x7fffffffffffffff, {0x7, 0x2b, 0x4, 0x8400000, 0x1, 0x7, 0x5, 0x8d8e, 0x0, 0x0, 0x80, 0x1}}, &(0x7f0000000040)={0x18, 0x0, 0x2, {0x29}}, &(0x7f0000000100)={0x18, 0x0, 0xffffffff, {0xd}}, &(0x7f0000000300)={0x18, 0x0, 0x7fffffff, {0x1}}, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0x2, {0x10001}}, &(0x7f00000026c0)={0x28, 0x0, 0xf2, {{0x2, 0x9, 0x1, r6}}}, &(0x7f0000002700)={0x60, 0xfffffffffffffffe, 0x9, {{0xd71, 0x8, 0x3, 0x18000000, 0x400, 0x7fffffff, 0x3, 0xffff}}}, &(0x7f0000002780)={0x18, 0x0, 0x8, {0x3}}, &(0x7f00000027c0)={0x23, 0x0, 0xffffffff, {'./binderfs/binder0\x00'}}, &(0x7f0000002800)={0x20, 0x0, 0xf064, {0x0, 0x1}}, &(0x7f0000002900)={0x78, 0xfffffffffffffffe, 0x1, {0x7, 0x6, 0x0, {0x3, 0x486, 0x100000000, 0x3, 0x9, 0x1000, 0x40, 0x8, 0x9, 0x2000, 0xb, 0x0, r7, 0x384, 0xfffffffb}}}, &(0x7f0000002b80)={0x90, 0x0, 0x9, {0x0, 0x0, 0x9, 0x0, 0xfffffffa, 0x2, {0x6, 0x8000, 0x3, 0x4000, 0x4, 0xffff, 0x5, 0x7, 0x4, 0x8000, 0xfffffff3, r8, r9, 0x0, 0x100}}}, &(0x7f0000002c40)={0x78, 0xfffffffffffffffe, 0x3, [{0x0, 0x59f60443, 0x0, 0x6}, {0x4, 0x5, 0x2, 0x1, '[('}, {0x2, 0x5, 0x12, 0x5, ':-@(\x98/%}*--^/+g+\xcf]'}]}, &(0x7f0000002d80)={0xc0, 0x0, 0x6b5c, [{{0x5, 0x2, 0x7, 0x0, 0x3ff, 0x3, {0x0, 0x2959, 0x9, 0x1, 0x800, 0x9, 0x6, 0x5, 0x7fff, 0x8000, 0x5, r10, r11, 0x8001, 0xb5}}, {0x4, 0x5, 0x13, 0x2, './binderfs/binder0\x00'}}]}, &(0x7f0000002ec0)={0xa0, 0xfffffffffffffff5, 0x8000000000000001, {{0x3, 0x1, 0x4e7, 0x9, 0x2, 0x0, {0x0, 0x1, 0x9, 0x7fff, 0x101, 0x1, 0xe1ed, 0x5, 0x1, 0x6000, 0x7f, r12, 0xee00, 0x7, 0x1}}, {0x0, 0x2}}}, &(0x7f0000002f80)={0x20, 0x0, 0x8, {0x7, 0x4, 0xffff0000, 0x8}}, &(0x7f0000003080)={0x130, 0xfffffffffffffffe, 0xfffffffffffffffa, {0xc000000000000, 0x1, 0x0, '\x00', {0x1000, 0x0, 0x4, 0x0, r14, r15, 0x2000, '\x00', 0x3e94, 0x0, 0xe8, 0x8, {0x8001, 0xf}, {0x8, 0xaff}, {0xac51, 0x5}, {0xd2, 0x7050}, 0x3, 0x2a31, 0x9, 0x401}}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x0, 0x0, 0x16}, @flat=@binder={0x73622a85, 0xa, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 278.632256ms ago: executing program 4 (id=1326): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r1, 0x29, 0x15, &(0x7f0000000340)="d22eec477542500d45f3558dc6dac1a6b0debfd82e", 0x15) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) read$snapshot(r2, &(0x7f0000000000)=""/109, 0x6d) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 195.507837ms ago: executing program 4 (id=1327): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x404, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10a}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x20, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 195.174997ms ago: executing program 3 (id=1328): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r4, 0x4188aea7, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x0, 0x1, 0x159c2, 0x4}]}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, 0x15, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x10, &(0x7f0000000280)={[{@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x81}}, {@readahead={'readahead', 0x3d, 0x1}}, {@no_bf_cache}, {@readahead={'readahead', 0x3d, 0xfffffffffffff72d}}], [{@fowner_lt={'fowner<', r7}}]}) 194.824657ms ago: executing program 4 (id=1329): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0x108}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) (async) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008a04"]) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x200001) (async) r6 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x200001) ioctl$MON_IOCQ_URB_LEN(r6, 0x9201) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r5, 0xc215}], 0x1, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r7, 0x11, 0xb, 0x0, &(0x7f00000002c0)) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40b00, 0x0) preadv2(r8, &(0x7f0000000340)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1, 0xfffffff9, 0x7, 0x7) (async) preadv2(r8, &(0x7f0000000340)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1, 0xfffffff9, 0x7, 0x7) shutdown(r0, 0x3) (async) shutdown(r0, 0x3) 96.802318ms ago: executing program 3 (id=1330): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101}, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r2, &(0x7f0000001400)={0x2020}, 0x2020) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000080)) 77.690299ms ago: executing program 3 (id=1331): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) socket$inet6(0xa, 0x80000, 0xff) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x12, r0, 0x4d75a000) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 11.40998ms ago: executing program 3 (id=1332): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x8044, &(0x7f00000003c0)={0x11, 0x8906, r1, 0x1, 0x7, 0x6, @local}, 0x14) mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0xf, 0x0, [{0x4b564d02, 0x0, 0x7f}]}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'wlan0\x00', 0x800}) (async) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x100800, &(0x7f0000000140)={'trans=xen,', {[{@cache_mmap}, {@version_L}, {@cachetag={'cachetag', 0x3d, '$'}}], [{@context={'context', 0x3d, 'system_u'}}, {@flag='lazytime'}, {@fsname={'fsname', 0x3d, 'binder\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, './binderfs\x00'}}, {@euid_lt={'euid<', r3}}, {@fsname={'fsname', 0x3d, './binderfs\x00'}}, {@appraise}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, './binderfs\x00'}}, {@pcr}]}}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[]) 10.00388ms ago: executing program 2 (id=1333): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000200)="1c0000001a009b8a070000003b9b701f400004000000eb3f7a7f1de29a34", 0x1e) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000080)="6bccf4d3fa87085f6a01ddfbfd1f88", 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0xfffffff7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"}) socket(0x10, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) (async) write(r0, &(0x7f0000000200)="1c0000001a009b8a070000003b9b701f400004000000eb3f7a7f1de29a34", 0x1e) (async) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000080)="6bccf4d3fa87085f6a01ddfbfd1f88", 0xf) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0xfffffff7) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"}) (async) 9.5813ms ago: executing program 3 (id=1334): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) r2 = socket$inet6(0x10, 0x2, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "a5199fcdafdf3bb7cc4c8bc74a5ec2b0d07a2123b1ffffc2b5877ed2f506d04eb3c4c94c"}, 0x34) syz_usb_connect$cdc_ecm(0x0, 0x6e, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x5, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x13, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x800, 0x401, 0xfa}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x2, 0x3, 0x0, 0x1, 0x9}, @obex={0x5}, @dmm={0x7, 0x24, 0x14, 0x9a5b}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6b, 0xe3, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xe, 0x3, 0xa}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x76, 0x5, 0x9, 0x40, 0xe}, 0x46, &(0x7f00000003c0)={0x5, 0xf, 0x46, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x2000, 0xf0f, 0x9, [0xffc0, 0xffff30, 0x0, 0x30, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "3269483bcfbe08c08400db016e11d70e"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x1, 0x7ff}, @ptm_cap={0x3}]}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close_range(r4, r4, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008085}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) read(0xffffffffffffffff, &(0x7f0000000440)=""/137, 0x89) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x0) futex(&(0x7f0000000100)=0x2, 0x5, 0x2, 0x0, 0x0, 0x2) syz_clone3(&(0x7f0000001280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0x400}, {0x16}]}, 0x10) sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000140)=""/194, 0xc2) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 0s ago: executing program 2 (id=1335): stat(0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) fremovexattr(r2, &(0x7f0000000200)=@known='system.posix_acl_default\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) stat(0x0, 0x0) (async) getpid() (async) syz_pidfd_open(r0, 0x0) (async) setns(r1, 0x24020000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) (async) fremovexattr(r2, &(0x7f0000000200)=@known='system.posix_acl_default\x00') (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [ 24.202229][ T36] audit: type=1400 audit(1750605889.399:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.203414][ T281] cgroup: Unknown subsys name 'net' [ 24.231132][ T36] audit: type=1400 audit(1750605889.399:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.263640][ T36] audit: type=1400 audit(1750605889.439:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.263801][ T281] cgroup: Unknown subsys name 'devices' [ 24.448403][ T281] cgroup: Unknown subsys name 'hugetlb' [ 24.454343][ T281] cgroup: Unknown subsys name 'rlimit' [ 24.546708][ T36] audit: type=1400 audit(1750605889.749:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.573787][ T36] audit: type=1400 audit(1750605889.749:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.589751][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.601310][ T36] audit: type=1400 audit(1750605889.749:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.637072][ T36] audit: type=1400 audit(1750605889.809:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.638576][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.665629][ T36] audit: type=1400 audit(1750605889.809:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.706415][ T36] audit: type=1400 audit(1750605889.839:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.738924][ T36] audit: type=1400 audit(1750605889.839:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.509325][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.517645][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.525528][ T288] bridge_slave_0: entered allmulticast mode [ 25.533385][ T288] bridge_slave_0: entered promiscuous mode [ 25.540697][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.554959][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.565623][ T288] bridge_slave_1: entered allmulticast mode [ 25.573148][ T288] bridge_slave_1: entered promiscuous mode [ 25.714929][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.723690][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.732351][ T294] bridge_slave_0: entered allmulticast mode [ 25.739849][ T294] bridge_slave_0: entered promiscuous mode [ 25.747066][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.758169][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.765844][ T294] bridge_slave_1: entered allmulticast mode [ 25.774112][ T294] bridge_slave_1: entered promiscuous mode [ 25.788991][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.797333][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.805531][ T293] bridge_slave_0: entered allmulticast mode [ 25.812788][ T293] bridge_slave_0: entered promiscuous mode [ 25.824633][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.834903][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.843526][ T293] bridge_slave_1: entered allmulticast mode [ 25.851415][ T293] bridge_slave_1: entered promiscuous mode [ 25.871257][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.879364][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.888841][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.896889][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.920427][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.928678][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.936889][ T292] bridge_slave_0: entered allmulticast mode [ 25.943781][ T292] bridge_slave_0: entered promiscuous mode [ 25.953627][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.962009][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.970874][ T292] bridge_slave_1: entered allmulticast mode [ 25.977882][ T292] bridge_slave_1: entered promiscuous mode [ 26.104698][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.113207][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.138870][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.149609][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.158813][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.166822][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.226991][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.234569][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.245098][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.252797][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.268521][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.275819][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.290307][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.297719][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.308421][ T288] veth0_vlan: entered promiscuous mode [ 26.333918][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.342675][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.356866][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.365650][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.381298][ T292] veth0_vlan: entered promiscuous mode [ 26.390123][ T288] veth1_macvtap: entered promiscuous mode [ 26.426909][ T292] veth1_macvtap: entered promiscuous mode [ 26.437534][ T293] veth0_vlan: entered promiscuous mode [ 26.457889][ T294] veth0_vlan: entered promiscuous mode [ 26.475995][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.497705][ T293] veth1_macvtap: entered promiscuous mode [ 26.515747][ T294] veth1_macvtap: entered promiscuous mode [ 26.557720][ T311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 26.585658][ T311] overlayfs: conflicting lowerdir path [ 26.684775][ T326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.693961][ T328] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.863826][ T342] tun0: tun_chr_ioctl cmd 1074025675 [ 26.870526][ T342] tun0: persist disabled [ 26.916366][ T64] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 27.046340][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.066359][ T64] usb 4-1: Invalid ep0 maxpacket: 64 [ 27.099652][ T346] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.196311][ T9] usb 3-1: device descriptor read/64, error -71 [ 27.216281][ T64] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 27.256243][ T346] usb 1-1: Using ep0 maxpacket: 16 [ 27.266919][ T346] usb 1-1: config 0 interface 0 has no altsetting 0 [ 27.280917][ T346] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 27.292845][ T346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.303565][ T346] usb 1-1: config 0 descriptor?? [ 27.376245][ T64] usb 4-1: Invalid ep0 maxpacket: 64 [ 27.385029][ T64] usb usb4-port1: attempt power cycle [ 27.446286][ T9] usb 3-1: device descriptor read/64, error -71 [ 27.688775][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.726294][ T64] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 27.736525][ T346] hid (null): nested delimiters [ 27.742773][ T346] hid (null): report_id 0 is invalid [ 27.749348][ T346] hid (null): unknown global tag 0xd [ 27.756637][ T64] usb 4-1: Invalid ep0 maxpacket: 64 [ 27.770319][ T346] hid (null): invalid report_size 29797 [ 27.826325][ T9] usb 3-1: device descriptor read/64, error -71 [ 27.896336][ T64] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 27.926884][ T64] usb 4-1: Invalid ep0 maxpacket: 64 [ 27.933248][ T64] usb usb4-port1: unable to enumerate USB device [ 27.941301][ T10] usb 1-1: USB disconnect, device number 2 [ 28.040346][ T369] @: renamed from vlan0 (while UP) [ 28.063806][ T372] binder: Unknown parameter 's' [ 28.069665][ T9] usb 3-1: device descriptor read/64, error -71 [ 28.090292][ T374] binder: Bad value for 'defcontext' [ 28.186433][ T9] usb usb3-port1: attempt power cycle [ 28.308692][ T384] rust_binder: Write failure EFAULT in pid:50 [ 28.388468][ T392] syz.1.29: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 28.420555][ T392] CPU: 0 UID: 0 PID: 392 Comm: syz.1.29 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 28.420585][ T392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 28.420602][ T392] Call Trace: [ 28.420607][ T392] [ 28.420614][ T392] __dump_stack+0x21/0x30 [ 28.420642][ T392] dump_stack_lvl+0x10c/0x190 [ 28.420658][ T392] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.420675][ T392] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 28.420695][ T392] dump_stack+0x19/0x20 [ 28.420710][ T392] warn_alloc+0x1bc/0x2a0 [ 28.420724][ T392] ? kasan_save_free_info+0x4a/0x60 [ 28.420739][ T392] ? __cfi_warn_alloc+0x10/0x10 [ 28.420752][ T392] ? __get_vm_area_node+0x1dc/0x3a0 [ 28.420767][ T392] ? __vcalloc_noprof+0x3a/0x50 [ 28.420783][ T392] __vmalloc_node_range_noprof+0x68e/0x1420 [ 28.420798][ T392] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 28.420852][ T392] ? __se_sys_ioctl+0x132/0x1b0 [ 28.420871][ T392] ? __x64_sys_ioctl+0x7f/0xa0 [ 28.420888][ T392] ? x64_sys_call+0x1878/0x2ee0 [ 28.420905][ T392] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 28.420923][ T392] ? __vcalloc_noprof+0x3a/0x50 [ 28.420938][ T392] __vmalloc_noprof+0xfe/0x1d0 [ 28.420952][ T392] ? __vcalloc_noprof+0x3a/0x50 [ 28.420968][ T392] ? __cfi___vmalloc_noprof+0x10/0x10 [ 28.420981][ T392] ? mutex_lock+0x92/0x1c0 [ 28.420994][ T392] ? __cfi_mutex_lock+0x10/0x10 [ 28.421008][ T392] __vcalloc_noprof+0x3a/0x50 [ 28.421024][ T392] kvm_set_memslot+0x4c6/0x13f0 [ 28.421041][ T392] ? __kasan_kmalloc+0x96/0xb0 [ 28.421060][ T392] __kvm_set_memory_region+0x87c/0xb80 [ 28.421079][ T392] kvm_set_memory_region+0x2f/0x50 [ 28.421096][ T392] kvm_vm_ioctl+0x9ad/0xb80 [ 28.421112][ T392] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 28.421127][ T392] ? ioctl_has_perm+0x1aa/0x4d0 [ 28.421154][ T392] ? __asan_memcpy+0x5a/0x80 [ 28.421169][ T392] ? ioctl_has_perm+0x3e0/0x4d0 [ 28.421189][ T392] ? __cfi_futex_wake+0x10/0x10 [ 28.421210][ T392] ? selinux_file_ioctl+0x6e0/0x1360 [ 28.421230][ T392] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 28.421248][ T392] ? kfree+0x156/0x400 [ 28.421263][ T392] ? do_futex+0x356/0x500 [ 28.421281][ T392] ? __cfi_do_futex+0x10/0x10 [ 28.421297][ T392] ? anon_inode_getfile+0xfb/0x190 [ 28.421318][ T392] ? __fget_files+0x2c5/0x340 [ 28.421337][ T392] ? bpf_lsm_file_ioctl+0xd/0x20 [ 28.421352][ T392] ? security_file_ioctl+0x34/0xd0 [ 28.421371][ T392] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 28.421386][ T392] __se_sys_ioctl+0x132/0x1b0 [ 28.421404][ T392] __x64_sys_ioctl+0x7f/0xa0 [ 28.421422][ T392] x64_sys_call+0x1878/0x2ee0 [ 28.421439][ T392] do_syscall_64+0x58/0xf0 [ 28.421456][ T392] ? clear_bhb_loop+0x35/0x90 [ 28.421476][ T392] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.421495][ T392] RIP: 0033:0x7fd629b8e929 [ 28.421513][ T392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 28.421525][ T392] RSP: 002b:00007fd62aab6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.421541][ T392] RAX: ffffffffffffffda RBX: 00007fd629db5fa0 RCX: 00007fd629b8e929 [ 28.421553][ T392] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000005 [ 28.421563][ T392] RBP: 00007fd629c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 28.421572][ T392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.421581][ T392] R13: 0000000000000000 R14: 00007fd629db5fa0 R15: 00007ffea6f5c5b8 [ 28.421594][ T392] [ 28.421603][ T392] Mem-Info: [ 28.682111][ T402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 28.685822][ T392] active_anon:5106 inactive_anon:0 isolated_anon:0 [ 28.685822][ T392] active_file:15768 inactive_file:2235 isolated_file:0 [ 28.685822][ T392] unevictable:0 dirty:39 writeback:0 [ 28.685822][ T392] slab_reclaimable:3763 slab_unreclaimable:70451 [ 28.685822][ T392] mapped:26064 shmem:163 pagetables:763 [ 28.685822][ T392] sec_pagetables:0 bounce:0 [ 28.685822][ T392] kernel_misc_reclaimable:0 [ 28.685822][ T392] free:1534833 free_pcp:2875 free_cma:0 [ 28.877261][ T392] Node 0 active_anon:20432kB inactive_anon:0kB active_file:63072kB inactive_file:8940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104352kB dirty:156kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4376kB pagetables:3060kB sec_pagetables:0kB all_unreclaimable? no [ 28.877948][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.911157][ T392] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966004kB mlocked:0kB bounce:0kB free_pcp:5792kB local_pcp:0kB free_cma:0kB [ 28.937983][ T9] usb 3-1: device descriptor read/8, error -71 [ 28.953265][ T392] lowmem_reserve[]: 0 3921 3921 [ 28.963959][ T392] Normal free:3182188kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20432kB inactive_anon:0kB active_file:63072kB inactive_file:8740kB unevictable:0kB writepending:156kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3956kB local_pcp:180kB free_cma:0kB [ 29.000866][ T392] lowmem_reserve[]: 0 0 0 [ 29.006106][ T392] DMA32: 7*4kB (M) 3*8kB (M) 4*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 29.024575][ T392] Normal: 183*4kB (UME) 114*8kB (UME) 359*16kB (UME) 392*32kB (UME) 337*64kB (UME) 15*128kB (UME) 11*256kB (UME) 17*512kB (UME) 12*1024kB (UME) 7*2048kB (UME) 757*4096kB (M) = 3182236kB [ 29.047548][ T392] 18100 total pagecache pages [ 29.053644][ T392] 0 pages in swap cache [ 29.058927][ T392] Free swap = 124996kB [ 29.063960][ T392] Total swap = 124996kB [ 29.068689][ T392] 2097051 pages RAM [ 29.073092][ T392] 0 pages HighMem/MovableOnly [ 29.078117][ T392] 351520 pages reserved [ 29.082596][ T392] 0 pages cma reserved [ 29.088835][ T9] usb 3-1: device descriptor read/8, error -71 [ 29.096576][ T392] Memory allocations: [ 29.101151][ T392] 0 B 0 init/main.c:1370 func:do_initcalls [ 29.109864][ T392] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 29.118612][ T392] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 29.127056][ T392] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 29.136074][ T392] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 29.144825][ T392] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 29.154461][ T392] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 29.162932][ T392] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 29.173006][ T392] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 29.181695][ T392] 0 B 0 init/initramfs.c:101 func:find_link [ 29.292855][ T36] kauditd_printk_skb: 116 callbacks suppressed [ 29.292871][ T36] audit: type=1400 audit(1750605894.489:190): avc: denied { read } for pid=403 comm="syz.1.31" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.327145][ T36] audit: type=1400 audit(1750605894.489:191): avc: denied { open } for pid=403 comm="syz.1.31" path="/dev/input/event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.336441][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.377520][ T9] usb 3-1: device descriptor read/8, error -71 [ 29.507679][ T9] usb 3-1: device descriptor read/8, error -71 [ 29.604296][ T36] audit: type=1400 audit(1750605894.799:192): avc: denied { setopt } for pid=407 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.612463][ T411] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.625975][ T9] usb usb3-port1: unable to enumerate USB device [ 29.630909][ T36] audit: type=1400 audit(1750605894.799:193): avc: denied { ioctl } for pid=407 comm="syz.1.33" path="socket:[4552]" dev="sockfs" ino=4552 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.638773][ T411] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.679797][ T411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:16 [ 29.681440][ T36] audit: type=1400 audit(1750605894.879:194): avc: denied { create } for pid=408 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 29.728037][ T36] audit: type=1400 audit(1750605894.879:195): avc: denied { setopt } for pid=408 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 29.750222][ T36] audit: type=1400 audit(1750605894.879:196): avc: denied { getopt } for pid=408 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.758253][ T419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:70 [ 29.778175][ T419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.788348][ T419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:70 [ 29.800173][ T419] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.810714][ T419] rust_binder: Read failure Err(EFAULT) in pid:70 [ 29.838830][ T36] audit: type=1400 audit(1750605895.039:197): avc: denied { bind } for pid=421 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.848556][ T424] bridge0: port 3(syz_tun) entered blocking state [ 29.880364][ T424] bridge0: port 3(syz_tun) entered disabled state [ 29.891698][ T424] syz_tun: entered allmulticast mode [ 29.902208][ T424] syz_tun: entered promiscuous mode [ 29.926596][ T424] bridge0: port 3(syz_tun) entered blocking state [ 29.934794][ T424] bridge0: port 3(syz_tun) entered forwarding state [ 29.965256][ T36] audit: type=1400 audit(1750605895.159:198): avc: denied { bind } for pid=429 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.987977][ T64] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.002130][ T432] new mount options do not match the existing superblock, will be ignored [ 30.024395][ T434] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 30.041236][ T434] rust_binder: Write failure EINVAL in pid:12 [ 30.074668][ T438] Zero length message leads to an empty skb [ 30.156274][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 30.166109][ T64] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 30.181159][ T64] usb 1-1: config 0 has no interface number 0 [ 30.224819][ T64] usb 1-1: New USB device found, idVendor=12d1, idProduct=403f, bcdDevice=19.ae [ 30.237449][ T36] audit: type=1400 audit(1750605895.429:199): avc: denied { read } for pid=435 comm="syz.1.42" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.276509][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.301284][ T64] usb 1-1: Product: syz [ 30.307914][ T64] usb 1-1: Manufacturer: syz [ 30.313098][ T64] usb 1-1: SerialNumber: syz [ 30.324225][ T64] usb 1-1: config 0 descriptor?? [ 30.446251][ T346] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 30.616258][ T346] usb 4-1: Using ep0 maxpacket: 8 [ 30.625804][ T346] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024 [ 30.639739][ T346] usb 4-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 30.654883][ T346] usb 4-1: config 1 interface 0 has no altsetting 0 [ 30.669170][ T346] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 30.681316][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.691783][ T346] usb 4-1: Product: syz [ 30.696557][ T346] usb 4-1: Manufacturer: 鷰꠫荈쓣犚㱎 [ 30.704580][ T346] usb 4-1: SerialNumber: syz [ 30.712481][ T444] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 30.720793][ T444] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 30.857192][ T446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.45'. [ 30.889255][ T449] overlayfs: unescaped trailing colons in lowerdir mount option. [ 30.901779][ T449] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 30.901814][ T449] rust_binder: Error while translating object. [ 30.913723][ T449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.920997][ T449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 31.701354][ T346] usb 4-1: USB disconnect, device number 6 [ 31.823252][ T468] binder: Binderfs stats mode cannot be changed during a remount [ 31.833208][ T474] binder: Binderfs stats mode cannot be changed during a remount [ 31.935492][ T490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=490 comm=syz.3.57 [ 31.966993][ T490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 32.162140][ T495] kvm: MONITOR instruction emulated as NOP! [ 32.646253][ T64] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 32.742694][ T9] usb 1-1: USB disconnect, device number 3 [ 32.807583][ T64] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.825431][ T64] usb 4-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 32.836628][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.846548][ T64] usb 4-1: Product: syz [ 32.850912][ T64] usb 4-1: Manufacturer: syz [ 32.856116][ T64] usb 4-1: SerialNumber: syz [ 32.865725][ T64] usb 4-1: config 0 descriptor?? [ 32.872846][ T64] usb 4-1: bad CDC descriptors [ 32.878307][ T64] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 32.888144][ T64] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 32.895157][ T64] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 33.074578][ T508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.084569][ T508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.122965][ T527] binder: Binderfs stats mode cannot be changed during a remount [ 33.138332][ T306] usb 4-1: USB disconnect, device number 7 [ 33.153564][ T531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88 [ 33.216291][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 33.378024][ T9] usb 1-1: config 4 has an invalid interface number: 84 but max is 0 [ 33.387385][ T9] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 33.398170][ T9] usb 1-1: config 4 has an invalid interface number: 59 but max is 0 [ 33.407293][ T9] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 33.417995][ T9] usb 1-1: config 4 has an invalid interface number: 16 but max is 0 [ 33.426791][ T9] usb 1-1: config 4 has 3 interfaces, different from the descriptor's value: 1 [ 33.437835][ T9] usb 1-1: config 4 has no interface number 0 [ 33.444543][ T9] usb 1-1: config 4 has no interface number 1 [ 33.453169][ T9] usb 1-1: config 4 has no interface number 2 [ 33.461185][ T9] usb 1-1: config 4 interface 84 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 33.472897][ T9] usb 1-1: config 4 interface 84 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 33.496508][ T9] usb 1-1: config 4 interface 84 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 33.526248][ T9] usb 1-1: config 4 interface 84 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 33.545874][ T9] usb 1-1: too many endpoints for config 4 interface 59 altsetting 89: 247, using maximum allowed: 30 [ 33.557932][ T9] usb 1-1: config 4 interface 59 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 33.570641][ T9] usb 1-1: config 4 interface 59 altsetting 89 endpoint 0xD has invalid maxpacket 935, setting to 64 [ 33.583141][ T9] usb 1-1: config 4 interface 59 altsetting 89 has a duplicate endpoint with address 0x6, skipping [ 33.599057][ T9] usb 1-1: config 4 interface 59 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 33.612883][ T9] usb 1-1: config 4 interface 59 altsetting 89 has a duplicate endpoint with address 0xE, skipping [ 33.625419][ T9] usb 1-1: config 4 interface 59 altsetting 89 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 33.638523][ T9] usb 1-1: config 4 interface 59 altsetting 89 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 33.651268][ T9] usb 1-1: config 4 interface 59 altsetting 89 has 11 endpoint descriptors, different from the interface descriptor's value: 247 [ 33.678787][ T9] usb 1-1: too many endpoints for config 4 interface 16 altsetting 151: 142, using maximum allowed: 30 [ 33.699586][ T9] usb 1-1: config 4 interface 16 altsetting 151 has a duplicate endpoint with address 0xF, skipping [ 33.721595][ T9] usb 1-1: config 4 interface 16 altsetting 151 has a duplicate endpoint with address 0x5, skipping [ 33.734874][ T9] usb 1-1: config 4 interface 16 altsetting 151 has 2 endpoint descriptors, different from the interface descriptor's value: 142 [ 33.752291][ T539] rust_binder: Error while translating object. [ 33.752318][ T539] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 33.760818][ T539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:53 [ 33.775664][ T9] usb 1-1: config 4 interface 59 has no altsetting 0 [ 33.786771][ T539] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.793559][ T9] usb 1-1: config 4 interface 16 has no altsetting 0 [ 33.806959][ T541] rust_binder: Error while translating object. [ 33.826379][ T541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 33.826432][ T541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:53 [ 33.831646][ T9] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0107, bcdDevice=45.d3 [ 33.858439][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.874086][ T9] usb 1-1: Product: ᴛꃫ죽搚ᚫ鳯嗫鯖꤂皪똮鮈◭཭ਙ᫜ⶏ僖楌냲Ⅶᇁꬬﱮ髏ᗚ蟗ꗩ﮳㰎퀂騃㠐䇰抦處渁垭詬╿쐏灧檱䧪禭⬬孏霳㆟⤎ [ 33.896956][ T9] usb 1-1: Manufacturer: ࡡ [ 33.902146][ T9] usb 1-1: SerialNumber: ᑈ֮ቃ䠚졕 [ 33.920123][ T520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 33.994960][ T545] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 34.129287][ T518] capability: warning: `syz.0.65' uses deprecated v2 capabilities in a way that may be insecure [ 34.176264][ T555] rust_binder: Write failure EFAULT in pid:39 [ 34.186682][ T558] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.190850][ T9] usb 1-1: USB disconnect, device number 4 [ 34.296267][ T306] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 34.307994][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 34.308011][ T36] audit: type=1400 audit(1750605899.509:219): avc: denied { write } for pid=559 comm="syz.0.80" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.346013][ T560] fuse: Bad value for 'fd' [ 34.393079][ T36] audit: type=1400 audit(1750605899.539:220): avc: denied { open } for pid=559 comm="syz.0.80" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.436323][ T36] audit: type=1400 audit(1750605899.539:221): avc: denied { ioctl } for pid=559 comm="syz.0.80" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.458618][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.463367][ T36] audit: type=1400 audit(1750605899.549:222): avc: denied { getopt } for pid=559 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.486242][ T306] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 34.500961][ T36] audit: type=1400 audit(1750605899.549:223): avc: denied { lock } for pid=559 comm="syz.0.80" path="socket:[3784]" dev="sockfs" ino=3784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.526269][ T306] usb 4-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 34.550810][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.560451][ T306] usb 4-1: config 0 descriptor?? [ 34.766126][ T36] audit: type=1400 audit(1750605899.959:224): avc: denied { bind } for pid=577 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.816526][ T36] audit: type=1400 audit(1750605899.999:225): avc: denied { read } for pid=549 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.818487][ T578] overlayfs: option "workdir=./file1/file0" is useless in a non-upper mount, ignore [ 34.847431][ T578] overlayfs: missing 'lowerdir' [ 34.857643][ T36] audit: type=1400 audit(1750605900.059:226): avc: denied { setopt } for pid=549 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.896712][ T550] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.896856][ T550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:64 [ 35.040944][ T36] audit: type=1400 audit(1750605900.239:227): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.092464][ T36] audit: type=1400 audit(1750605900.279:228): avc: denied { create } for pid=584 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 35.339098][ T64] usb 4-1: USB disconnect, device number 8 [ 35.426357][ T346] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.566277][ T346] usb 3-1: device descriptor read/64, error -71 [ 35.606938][ T589] fuse: Bad value for 'fd' [ 35.643395][ T591] ======================================================= [ 35.643395][ T591] WARNING: The mand mount option has been deprecated and [ 35.643395][ T591] and is ignored by this kernel. Remove the mand [ 35.643395][ T591] option from the mount to silence this warning. [ 35.643395][ T591] ======================================================= [ 35.745043][ T601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.786647][ T601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:78 [ 35.816290][ T346] usb 3-1: device descriptor read/64, error -71 [ 35.920845][ T606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.921843][ T606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:57 [ 36.077710][ T346] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.089545][ T619] fuse: Bad value for 'fd' [ 36.134075][ T624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.189240][ T629] rust_binder: Error in use_page_slow: ESRCH [ 36.207389][ T629] rust_binder: use_range failure ESRCH [ 36.231589][ T629] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 36.238075][ T629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 36.246273][ T346] usb 3-1: device descriptor read/64, error -71 [ 36.248664][ T633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 36.286341][ T629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:66 [ 36.340218][ T640] binder: Unknown parameter 'coyBLV"i5ntext' [ 36.526306][ T346] usb 3-1: device descriptor read/64, error -71 [ 36.636364][ T346] usb usb3-port1: attempt power cycle [ 36.896277][ T64] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 36.981038][ T346] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 36.997614][ T673] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.013036][ T346] usb 3-1: device descriptor read/8, error -71 [ 37.046327][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 37.054018][ T64] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 37.064593][ T64] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 37.075541][ T64] usb 4-1: config 0 interface 0 has no altsetting 0 [ 37.083487][ T64] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 37.096109][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.112761][ T64] usb 4-1: config 0 descriptor?? [ 37.147258][ T346] usb 3-1: device descriptor read/8, error -71 [ 37.258828][ T688] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 37.415045][ T64] usbhid 4-1:0.0: can't add hid device: -71 [ 37.422514][ T346] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 37.431639][ T64] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 37.447061][ T64] usb 4-1: USB disconnect, device number 9 [ 37.460084][ T346] usb 3-1: device descriptor read/8, error -71 [ 37.597559][ T346] usb 3-1: device descriptor read/8, error -71 [ 37.706441][ T346] usb usb3-port1: unable to enumerate USB device [ 37.872268][ T703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 38.004850][ T710] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=710 comm=syz.3.136 [ 38.019937][ T710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:136 [ 38.147798][ T722] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.176509][ T722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 38.258902][ T728] netlink: 324 bytes leftover after parsing attributes in process `syz.3.142'. [ 38.326409][ T728] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 160, size: 64842) [ 38.326434][ T728] rust_binder: Error while translating object. [ 38.346436][ T728] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.353344][ T728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 38.427537][ T730] binder: Unknown parameter 'coyBLV"i5ntext' [ 38.586303][ T346] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 38.616919][ T735] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 38.757739][ T346] usb 3-1: unable to get BOS descriptor or descriptor too short [ 38.817478][ T346] usb 3-1: not running at top speed; connect to a high speed hub [ 38.847585][ T346] usb 3-1: config 3 has an invalid interface number: 93 but max is 1 [ 38.866399][ T346] usb 3-1: config 3 has an invalid interface number: 29 but max is 1 [ 38.886241][ T346] usb 3-1: config 3 has no interface number 0 [ 38.893130][ T346] usb 3-1: config 3 has no interface number 1 [ 38.906263][ T64] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 38.926250][ T346] usb 3-1: config 3 interface 29 has no altsetting 0 [ 38.934690][ T346] usb 3-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=5c.5c [ 38.956497][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.965503][ T346] usb 3-1: Product: syz [ 38.986232][ T346] usb 3-1: Manufacturer: syz [ 38.991071][ T346] usb 3-1: SerialNumber: syz [ 39.056241][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 39.116293][ T64] usb 4-1: config 0 interface 0 has no altsetting 0 [ 39.123943][ T64] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 39.156267][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.186482][ T64] usb 4-1: config 0 descriptor?? [ 39.233817][ T346] usb 3-1: USB disconnect, device number 10 [ 39.600301][ T64] hid (null): report_id 0 is invalid [ 39.801203][ T9] usb 4-1: USB disconnect, device number 10 [ 39.863501][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 39.863520][ T36] audit: type=1400 audit(1750605905.059:259): avc: denied { map } for pid=743 comm="syz.2.148" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.936776][ T36] audit: type=1400 audit(1750605905.099:260): avc: denied { read write } for pid=743 comm="syz.2.148" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.094268][ T747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.144955][ T747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.326247][ T346] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 40.439074][ T36] audit: type=1400 audit(1750605905.639:261): avc: denied { nlmsg_read } for pid=762 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.516268][ T346] usb 3-1: Using ep0 maxpacket: 16 [ 40.522845][ T346] usb 3-1: config 0 has no interfaces? [ 40.531315][ T346] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 40.547349][ T764] incfs: Can't find or create .index dir in ./file0 [ 40.550897][ T36] audit: type=1400 audit(1750605905.749:262): avc: denied { mounton } for pid=762 comm="syz.3.153" path="/56/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 40.554113][ T764] incfs: mount failed -30 [ 40.580064][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.580087][ T346] usb 3-1: Product: syz [ 40.621014][ T346] usb 3-1: Manufacturer: syz [ 40.641289][ T346] usb 3-1: SerialNumber: syz [ 40.658086][ T346] usb 3-1: config 0 descriptor?? [ 40.796310][ T36] audit: type=1400 audit(1750605905.999:263): avc: denied { ioctl } for pid=770 comm="syz.3.155" path="socket:[6664]" dev="sockfs" ino=6664 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.899121][ T36] audit: type=1400 audit(1750605906.099:264): avc: denied { read } for pid=746 comm="syz.2.149" name="msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 40.944440][ T36] audit: type=1400 audit(1750605906.099:265): avc: denied { open } for pid=746 comm="syz.2.149" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 41.056250][ T346] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 41.080220][ T306] usb 3-1: USB disconnect, device number 11 [ 41.237328][ T346] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 41.256243][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.282162][ T346] usb 4-1: config 0 descriptor?? [ 41.592936][ T36] audit: type=1400 audit(1750605906.789:266): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 41.702734][ T346] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 41.725200][ T346] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 41.736827][ T346] asix 4-1:0.0: probe with driver asix failed with error -71 [ 41.771756][ T346] usb 4-1: USB disconnect, device number 11 [ 41.996270][ T64] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 42.166255][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 42.188596][ T64] usb 3-1: config 0 interface 0 has no altsetting 0 [ 42.197917][ T64] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 42.226239][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.253924][ T64] usb 3-1: config 0 descriptor?? [ 42.446716][ T787] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.446748][ T787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 42.476001][ T792] fuse: Bad value for 'fd' [ 42.573225][ T797] capability: warning: `syz.0.164' uses 32-bit capabilities (legacy support in use) [ 42.675139][ T64] hid (null): report_id 0 is invalid [ 42.683564][ T64] hid (null): nested delimiters [ 42.688835][ T64] hid (null): nested delimiters [ 42.695145][ T64] hid (null): nested delimiters [ 42.776338][ T346] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 42.885967][ T64] usb 3-1: USB disconnect, device number 12 [ 42.942201][ T346] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.963607][ T346] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.976843][ T346] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.987211][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.995694][ T346] usb 4-1: Product: syz [ 43.000418][ T346] usb 4-1: Manufacturer: syz [ 43.005982][ T346] usb 4-1: SerialNumber: syz [ 43.334648][ T36] audit: type=1400 audit(1750605908.529:267): avc: denied { nlmsg_write } for pid=824 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 43.423970][ T829] syz.2.175: attempt to access beyond end of device [ 43.423970][ T829] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 43.456281][ T829] EXT4-fs (loop2): unable to read superblock [ 43.499111][ T346] usb 4-1: 0:2 : does not exist [ 43.512764][ T346] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 43.546370][ T346] usb 4-1: USB disconnect, device number 12 [ 43.567538][ T36] audit: type=1400 audit(1750605908.769:268): avc: denied { setopt } for pid=832 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.746946][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.298039][ T862] netlink: 'syz.0.185': attribute type 4 has an invalid length. [ 44.342597][ T862] netlink: 'syz.0.185': attribute type 4 has an invalid length. [ 44.426328][ T346] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 44.576249][ T346] usb 3-1: Using ep0 maxpacket: 16 [ 44.583374][ T346] usb 3-1: config 0 interface 0 has no altsetting 0 [ 44.590986][ T346] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 44.601701][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.614864][ T346] usb 3-1: config 0 descriptor?? [ 44.692146][ T883] FAULT_INJECTION: forcing a failure. [ 44.692146][ T883] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.707004][ T883] CPU: 1 UID: 0 PID: 883 Comm: syz.3.192 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 44.707035][ T883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.707045][ T883] Call Trace: [ 44.707050][ T883] [ 44.707057][ T883] __dump_stack+0x21/0x30 [ 44.707080][ T883] dump_stack_lvl+0x10c/0x190 [ 44.707099][ T883] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.707122][ T883] ? vfs_write+0x8ba/0xe80 [ 44.707142][ T883] dump_stack+0x19/0x20 [ 44.707159][ T883] should_fail_ex+0x3d9/0x530 [ 44.707177][ T883] should_fail+0xf/0x20 [ 44.707193][ T883] should_fail_usercopy+0x1e/0x30 [ 44.707212][ T883] _copy_from_user+0x22/0xb0 [ 44.707232][ T883] do_sock_getsockopt+0x1d7/0x6d0 [ 44.707256][ T883] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 44.707278][ T883] ? __fget_files+0x2c5/0x340 [ 44.707300][ T883] __x64_sys_getsockopt+0x1d5/0x280 [ 44.707323][ T883] x64_sys_call+0x10db/0x2ee0 [ 44.707343][ T883] do_syscall_64+0x58/0xf0 [ 44.707363][ T883] ? clear_bhb_loop+0x35/0x90 [ 44.707385][ T883] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.707407][ T883] RIP: 0033:0x7f224638e929 [ 44.707421][ T883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.707434][ T883] RSP: 002b:00007f2247143038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 44.707453][ T883] RAX: ffffffffffffffda RBX: 00007f22465b5fa0 RCX: 00007f224638e929 [ 44.707466][ T883] RDX: 0000000000000003 RSI: 0000000000000012 RDI: 0000000000000004 [ 44.707474][ T883] RBP: 00007f2247143090 R08: 0000200000000400 R09: 0000000000000000 [ 44.707485][ T883] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 44.707496][ T883] R13: 0000000000000000 R14: 00007f22465b5fa0 R15: 00007ffc4e96cb78 [ 44.707510][ T883] [ 45.146456][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 45.146471][ T36] audit: type=1400 audit(1750605910.349:273): avc: denied { write } for pid=886 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 45.186242][ T36] audit: type=1400 audit(1750605910.379:274): avc: denied { write } for pid=888 comm="syz.0.195" path="socket:[6078]" dev="sockfs" ino=6078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.216571][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 45.376276][ T31] usb 4-1: device descriptor read/64, error -71 [ 45.626265][ T31] usb 4-1: device descriptor read/64, error -71 [ 45.638102][ T346] usbhid 3-1:0.0: can't add hid device: -71 [ 45.644267][ T346] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 45.682741][ T346] usb 3-1: USB disconnect, device number 13 [ 45.686907][ T898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 45.863502][ T906] tipc: Enabling of bearer rejected, failed to enable media [ 45.873132][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 45.882761][ T906] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 45.895993][ T908] FAULT_INJECTION: forcing a failure. [ 45.895993][ T908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.919013][ T908] CPU: 1 UID: 0 PID: 908 Comm: syz.2.201 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 45.919045][ T908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.919056][ T908] Call Trace: [ 45.919062][ T908] [ 45.919069][ T908] __dump_stack+0x21/0x30 [ 45.919095][ T908] dump_stack_lvl+0x10c/0x190 [ 45.919113][ T908] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.919134][ T908] dump_stack+0x19/0x20 [ 45.919150][ T908] should_fail_ex+0x3d9/0x530 [ 45.919168][ T908] should_fail+0xf/0x20 [ 45.919184][ T908] should_fail_usercopy+0x1e/0x30 [ 45.919202][ T908] _copy_to_user+0x24/0xa0 [ 45.919222][ T908] simple_read_from_buffer+0xed/0x160 [ 45.919247][ T908] proc_fail_nth_read+0x19e/0x210 [ 45.919263][ T908] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 45.919279][ T908] ? selinux_socket_getsockopt+0x284/0x380 [ 45.919298][ T908] ? bpf_lsm_file_permission+0xd/0x20 [ 45.919316][ T908] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 45.919331][ T908] vfs_read+0x278/0xb60 [ 45.919348][ T908] ? __cfi_rfcomm_sock_getsockopt+0x10/0x10 [ 45.919371][ T908] ? __cfi_vfs_read+0x10/0x10 [ 45.919387][ T908] ? __kasan_check_write+0x18/0x20 [ 45.919405][ T908] ? mutex_lock+0x92/0x1c0 [ 45.919420][ T908] ? __cfi_mutex_lock+0x10/0x10 [ 45.919434][ T908] ? __fget_files+0x2c5/0x340 [ 45.919456][ T908] ksys_read+0x141/0x250 [ 45.919474][ T908] ? __cfi_ksys_read+0x10/0x10 [ 45.919491][ T908] ? __kasan_check_write+0x18/0x20 [ 45.919508][ T908] ? fput+0x1a5/0x240 [ 45.919529][ T908] ? __kasan_check_read+0x15/0x20 [ 45.919546][ T908] __x64_sys_read+0x7f/0x90 [ 45.919562][ T908] x64_sys_call+0x2638/0x2ee0 [ 45.919581][ T908] do_syscall_64+0x58/0xf0 [ 45.919601][ T908] ? clear_bhb_loop+0x35/0x90 [ 45.919623][ T908] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.919644][ T908] RIP: 0033:0x7f9dfa78d33c [ 45.919659][ T908] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 45.919672][ T908] RSP: 002b:00007f9dfb666030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 45.919691][ T908] RAX: ffffffffffffffda RBX: 00007f9dfa9b5fa0 RCX: 00007f9dfa78d33c [ 45.919704][ T908] RDX: 000000000000000f RSI: 00007f9dfb6660a0 RDI: 0000000000000003 [ 45.919715][ T908] RBP: 00007f9dfb666090 R08: 0000000000000000 R09: 0000000000000000 [ 45.919725][ T908] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 45.919736][ T908] R13: 0000000000000000 R14: 00007f9dfa9b5fa0 R15: 00007ffca2580b58 [ 45.919749][ T908] [ 46.239877][ T36] audit: type=1400 audit(1750605911.439:275): avc: denied { wake_alarm } for pid=910 comm="syz.0.203" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.286248][ T31] usb 4-1: device descriptor read/64, error -71 [ 46.425084][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.425111][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.433330][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.466283][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.466302][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.486328][ T918] rust_binder: Error in use_page_slow: ESRCH [ 46.495547][ T918] rust_binder: use_range failure ESRCH [ 46.502159][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.508891][ T918] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 46.515862][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.525786][ T918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 46.533593][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.543954][ T918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:120 [ 46.552067][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.556302][ T31] usb 4-1: device descriptor read/64, error -71 [ 46.576354][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.576464][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.583364][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.590775][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.597646][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.605243][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.612281][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.619563][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.626862][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.633992][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.640915][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.648947][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.656110][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.663475][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.670428][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.677464][ T31] usb usb4-port1: attempt power cycle [ 46.690322][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.690348][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.698101][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.705856][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.713123][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.720275][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.727507][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.735139][ T917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.819083][ T922] rust_binder: 921 RLIMIT_NICE not set [ 46.826298][ T36] audit: type=1400 audit(1750605912.019:276): avc: denied { getopt } for pid=920 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.046468][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 47.067334][ T31] usb 4-1: device descriptor read/8, error -71 [ 47.106263][ T346] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 47.154995][ T939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=939 comm=syz.0.213 [ 47.168621][ T939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=939 comm=syz.0.213 [ 47.182695][ T939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=939 comm=syz.0.213 [ 47.196363][ T939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=939 comm=syz.0.213 [ 47.211088][ T36] audit: type=1400 audit(1750605912.409:277): avc: denied { accept } for pid=938 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 47.237252][ T31] usb 4-1: device descriptor read/8, error -71 [ 47.238863][ T939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=939 comm=syz.0.213 [ 47.286485][ T346] usb 3-1: Using ep0 maxpacket: 16 [ 47.293729][ T346] usb 3-1: config 0 interface 0 has no altsetting 0 [ 47.301095][ T346] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 47.311533][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.322811][ T346] usb 3-1: config 0 descriptor?? [ 47.496291][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 47.537747][ T31] usb 4-1: device descriptor read/8, error -71 [ 47.668770][ T31] usb 4-1: device descriptor read/8, error -71 [ 47.733449][ T346] hid (null): report_id 0 is invalid [ 47.781351][ T31] usb usb4-port1: unable to enumerate USB device [ 47.934564][ T31] usb 3-1: USB disconnect, device number 14 [ 48.002236][ T949] netlink: 57 bytes leftover after parsing attributes in process `syz.3.217'. [ 48.017410][ T36] audit: type=1400 audit(1750605913.219:278): avc: denied { create } for pid=948 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.394295][ T36] audit: type=1400 audit(1750605913.589:279): avc: denied { getopt } for pid=956 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.761017][ T36] audit: type=1400 audit(1750605913.939:280): avc: denied { mounton } for pid=965 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.794722][ T46] bridge_slave_1: left allmulticast mode [ 48.802332][ T46] bridge_slave_1: left promiscuous mode [ 48.809077][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.820219][ T46] bridge_slave_0: left allmulticast mode [ 48.827227][ T46] bridge_slave_0: left promiscuous mode [ 48.833749][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.940556][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.953800][ T965] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.964796][ T965] bridge_slave_0: entered allmulticast mode [ 48.966346][ T985] rust_binder: Write failure EINVAL in pid:234 [ 48.971379][ T965] bridge_slave_0: entered promiscuous mode [ 48.975887][ T985] rust_binder: Read failure Err(EAGAIN) in pid:234 [ 48.978810][ T965] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.002376][ T965] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.011980][ T965] bridge_slave_1: entered allmulticast mode [ 49.019967][ T965] bridge_slave_1: entered promiscuous mode [ 49.027433][ T46] veth1_macvtap: left promiscuous mode [ 49.039243][ T46] veth0_vlan: left promiscuous mode [ 49.115041][ T965] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.122621][ T965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.132720][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.140700][ T965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.178376][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.186529][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.196362][ T36] audit: type=1400 audit(1750605914.389:281): avc: denied { block_suspend } for pid=986 comm="syz.2.229" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.235057][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.243346][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.254971][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.262962][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.293512][ T965] veth0_vlan: entered promiscuous mode [ 49.310996][ T965] veth1_macvtap: entered promiscuous mode [ 49.339867][ T36] audit: type=1400 audit(1750605914.539:282): avc: denied { mounton } for pid=965 comm="syz-executor" path="/root/syzkaller.3UAZaQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.486272][ T306] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 49.549243][ T1015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 49.549620][ T1015] rust_binder: Error while translating object. [ 49.560687][ T1015] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.567466][ T1015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 49.618765][ T1019] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.629827][ T1020] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 49.666386][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 49.685159][ T306] usb 3-1: config 0 interface 0 has no altsetting 0 [ 49.693132][ T306] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 49.703373][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.714719][ T306] usb 3-1: config 0 descriptor?? [ 50.085906][ T1035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 50.140756][ T306] hid (null): report_id 0 is invalid [ 50.231203][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 50.231218][ T36] audit: type=1400 audit(1750605915.429:291): avc: denied { read write } for pid=1045 comm="syz.4.248" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 50.270239][ T36] audit: type=1400 audit(1750605915.429:292): avc: denied { open } for pid=1045 comm="syz.4.248" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 50.304266][ T36] audit: type=1400 audit(1750605915.429:293): avc: denied { mount } for pid=1045 comm="syz.4.248" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.336468][ T36] audit: type=1400 audit(1750605915.429:294): avc: denied { search } for pid=1045 comm="syz.4.248" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.341272][ T346] usb 3-1: USB disconnect, device number 15 [ 50.467526][ T36] audit: type=1400 audit(1750605915.669:295): avc: denied { getopt } for pid=1049 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.490472][ T1050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.784242][ T36] audit: type=1400 audit(1750605915.979:296): avc: denied { ioctl } for pid=1059 comm="syz.0.253" path="socket:[8647]" dev="sockfs" ino=8647 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.992106][ T36] audit: type=1400 audit(1750605916.189:297): avc: denied { write } for pid=1069 comm="syz.2.257" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 50.992106][ T1071] random: crng reseeded on system resumption [ 51.022261][ T36] audit: type=1400 audit(1750605916.189:298): avc: denied { open } for pid=1069 comm="syz.2.257" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 51.063671][ T36] audit: type=1400 audit(1750605916.259:299): avc: denied { connect } for pid=1076 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.063984][ T1074] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1707671823 (3415343646 ns) > initial count (2 ns). Using initial count to start timer. [ 51.106615][ T1079] input: syz0 as /devices/virtual/input/input6 [ 51.119219][ T1074] binder: Unknown parameter '4seclabel' [ 51.119240][ T36] audit: type=1400 audit(1750605916.319:300): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=471 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.175513][ T1082] rust_binder: Write failure EINVAL in pid:147 [ 51.175592][ T1082] rust_binder: Read failure Err(EAGAIN) in pid:147 [ 51.200935][ T1085] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 51.213456][ T1085] rust_binder: Read failure Err(EFAULT) in pid:150 [ 51.446426][ T346] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 51.516466][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 51.606280][ T346] usb 4-1: Using ep0 maxpacket: 16 [ 51.614050][ T346] usb 4-1: config 0 interface 0 has no altsetting 0 [ 51.622531][ T346] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 51.633258][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.643880][ T346] usb 4-1: config 0 descriptor?? [ 51.656260][ T31] usb 3-1: device descriptor read/64, error -71 [ 51.906307][ T31] usb 3-1: device descriptor read/64, error -71 [ 52.054016][ T346] hid (null): report_id 0 is invalid [ 52.146274][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 52.158969][ T1117] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 52.158988][ T1117] rust_binder: Error while translating object. [ 52.170541][ T1117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.179897][ T1117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 52.255634][ T64] usb 4-1: USB disconnect, device number 17 [ 52.286514][ T31] usb 3-1: device descriptor read/64, error -71 [ 52.436331][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.526317][ T31] usb 3-1: device descriptor read/64, error -71 [ 52.586298][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 52.593286][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 52.602791][ T9] usb 5-1: config 0 has no interface number 0 [ 52.609308][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 52.619506][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 52.629502][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.639668][ T9] usb 5-1: Product: syz [ 52.644614][ T9] usb 5-1: Manufacturer: syz [ 52.646367][ T31] usb usb3-port1: attempt power cycle [ 52.651105][ T9] usb 5-1: SerialNumber: syz [ 52.662958][ T9] usb 5-1: config 0 descriptor?? [ 52.669986][ T9] smsc75xx v1.0.0 [ 52.996303][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 53.028078][ T31] usb 3-1: device descriptor read/8, error -71 [ 53.157520][ T31] usb 3-1: device descriptor read/8, error -71 [ 53.274269][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 53.287464][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 53.408055][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 53.437565][ T31] usb 3-1: device descriptor read/8, error -71 [ 53.577686][ T31] usb 3-1: device descriptor read/8, error -71 [ 53.637971][ T1151] usb usb9: usbfs: process 1151 (syz.3.286) did not claim interface 0 before use [ 53.696380][ T31] usb usb3-port1: unable to enumerate USB device [ 54.108230][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 54.120673][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 54.133615][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 54.146527][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 54.160146][ T9] usb 5-1: USB disconnect, device number 2 [ 54.297983][ T1155] rust_binder: Write failure EFAULT in pid:162 [ 54.546550][ T1169] SELinux: security_context_str_to_sid () failed with errno=-22 [ 54.667078][ T306] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 54.806688][ T306] usb 3-1: device descriptor read/64, error -71 [ 55.046267][ T306] usb 3-1: device descriptor read/64, error -71 [ 55.296272][ T306] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 55.426297][ T306] usb 3-1: device descriptor read/64, error -71 [ 55.445575][ T1186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 55.466123][ T1186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 55.480368][ T1186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 55.492291][ T1186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 55.502226][ T1186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 55.513277][ T1186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 55.546074][ T1197] overlay: Unknown parameter 'uid<00000000000000060929' [ 55.562301][ T1203] TCP: TCP_TX_DELAY enabled [ 55.581891][ T1205] tipc: Started in network mode [ 55.587695][ T1205] tipc: Node identity ac14140f, cluster identity 4711 [ 55.597711][ T1205] tipc: New replicast peer: 255.255.255.255 [ 55.606124][ T1205] tipc: Enabled bearer , priority 10 [ 55.615449][ T1205] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 55.626960][ T1205] rust_binder: Write failure EINVAL in pid:281 [ 55.638488][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 55.638506][ T36] audit: type=1400 audit(1750605920.839:311): avc: denied { mount } for pid=1207 comm="syz.4.305" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 55.690293][ T306] usb 3-1: device descriptor read/64, error -71 [ 55.697426][ T36] audit: type=1400 audit(1750605920.889:312): avc: denied { unmount } for pid=965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 55.806367][ T306] usb usb3-port1: attempt power cycle [ 55.838717][ T36] audit: type=1400 audit(1750605921.039:313): avc: denied { listen } for pid=1220 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.887392][ T1219] rust_binder: Error while translating object. [ 55.887422][ T1219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 55.893776][ T1219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:286 [ 56.002344][ T1226] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 56.012320][ T1226] rust_binder: Error while translating object. [ 56.022009][ T1226] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.028596][ T1226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:291 [ 56.107284][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.156511][ T306] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 56.177685][ T306] usb 3-1: device descriptor read/8, error -71 [ 56.277654][ T9] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.290091][ T9] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.305234][ T9] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 56.327254][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.336061][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 56.347044][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.358698][ T306] usb 3-1: device descriptor read/8, error -71 [ 56.366888][ T9] usb 5-1: config 0 descriptor?? [ 56.606277][ T306] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 56.627680][ T306] usb 3-1: device descriptor read/8, error -71 [ 56.716357][ T535] tipc: Node number set to 2886997007 [ 56.757706][ T306] usb 3-1: device descriptor read/8, error -71 [ 56.778448][ T9] logitech 0003:046D:C294.0007: unknown main item tag 0x0 [ 56.786170][ T9] logitech 0003:046D:C294.0007: unknown main item tag 0x0 [ 56.796760][ T9] logitech 0003:046D:C294.0007: unknown main item tag 0x0 [ 56.806325][ T9] logitech 0003:046D:C294.0007: unknown main item tag 0x0 [ 56.815391][ T9] logitech 0003:046D:C294.0007: unknown main item tag 0x0 [ 56.823455][ T9] logitech 0003:046D:C294.0007: unknown main item tag 0x0 [ 56.832069][ T9] logitech 0003:046D:C294.0007: unknown main item tag 0x0 [ 56.841527][ T9] logitech 0003:046D:C294.0007: hidraw0: USB HID v0.03 Device [HID 046d:c294] on usb-dummy_hcd.4-1/input0 [ 56.854893][ T9] logitech 0003:046D:C294.0007: no inputs found [ 56.866386][ T306] usb usb3-port1: unable to enumerate USB device [ 56.939262][ T1242] fuse: Unknown parameter 'root0000000000d' [ 56.958775][ T1246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.958888][ T1246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305 [ 56.967497][ T36] audit: type=1400 audit(1750605922.169:314): avc: denied { write } for pid=1245 comm="syz.3.318" path="socket:[9287]" dev="sockfs" ino=9287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.982302][ T1221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.983636][ T36] audit: type=1400 audit(1750605922.169:315): avc: denied { lock } for pid=1245 comm="syz.3.318" path="socket:[9287]" dev="sockfs" ino=9287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.019795][ T1221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.147193][ T9] usb 5-1: USB disconnect, device number 3 [ 57.206278][ T306] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 57.358565][ T1264] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 57.359115][ T36] audit: type=1400 audit(1750605922.559:316): avc: denied { load_policy } for pid=1263 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 57.369943][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.404592][ T1264] SELinux: failed to load policy [ 57.421307][ T306] usb 4-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 57.432315][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.452343][ T306] usb 4-1: config 0 descriptor?? [ 57.483316][ T36] audit: type=1400 audit(1750605922.679:317): avc: denied { ioctl } for pid=1272 comm="syz.2.327" path="uts:[4026532407]" dev="nsfs" ino=4026532407 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.483776][ T1273] fuse: Invalid rootmode [ 57.539758][ T1276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 57.597852][ T36] audit: type=1326 audit(1750605922.799:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1288 comm="syz.0.332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd0998e929 code=0x0 [ 57.683160][ T1292] netlink: 'syz.0.332': attribute type 8 has an invalid length. [ 57.685758][ T1291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.693445][ T1295] netlink: 'syz.2.334': attribute type 4 has an invalid length. [ 57.711510][ T1295] netlink: 'syz.2.334': attribute type 4 has an invalid length. [ 57.722179][ T1291] netlink: 'syz.2.334': attribute type 4 has an invalid length. [ 57.735838][ T1291] netlink: 'syz.2.334': attribute type 4 has an invalid length. [ 57.744207][ T1295] netlink: 'syz.2.334': attribute type 4 has an invalid length. [ 57.801663][ T1302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.821219][ T1305] binder: Unknown parameter 'fscontext?}' [ 58.059755][ T1246] rust_binder: Error while translating object. [ 58.059813][ T1246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.066934][ T1246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305 [ 58.085810][ T306] usbhid 4-1:0.0: can't add hid device: -71 [ 58.103795][ T306] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 58.117046][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 58.131085][ T306] usb 4-1: USB disconnect, device number 18 [ 58.287393][ T9] usb 3-1: config 0 has an invalid descriptor of length 125, skipping remainder of the config [ 58.302579][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 58.313108][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.322120][ T9] usb 3-1: Product: syz [ 58.326863][ T9] usb 3-1: Manufacturer: syz [ 58.331971][ T9] usb 3-1: SerialNumber: syz [ 58.343134][ T9] usb 3-1: config 0 descriptor?? [ 58.351095][ T9] cdc_acm 3-1:0.0: skipping garbage [ 58.542519][ T1313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.553508][ T31] usb 3-1: USB disconnect, device number 24 [ 58.557535][ T1317] input: syz0 as /devices/virtual/input/input7 [ 58.576750][ T1317] input: failed to attach handler leds to device input7, error: -6 [ 58.586660][ T1317] binder: Unknown parameter '' [ 58.622156][ T1322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.624891][ T1322] rust_binder: Write failure EFAULT in pid:307 [ 58.866280][ T45] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 58.866280][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 59.017737][ T45] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 59.026803][ T45] usb 4-1: config 0 has no interface number 0 [ 59.033150][ T45] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 59.044998][ T45] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 59.046239][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 59.058412][ T45] usb 4-1: config 0 interface 230 has no altsetting 0 [ 59.068840][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.073731][ T45] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 59.082826][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 59.097920][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.101701][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.115234][ T45] usb 4-1: Product: syz [ 59.122073][ T9] usb 5-1: config 0 descriptor?? [ 59.129154][ T45] usb 4-1: Manufacturer: syz [ 59.129195][ T36] audit: type=1400 audit(1750605924.329:319): avc: denied { read } for pid=1324 comm="syz.2.343" dev="sockfs" ino=10245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.136071][ T45] usb 4-1: SerialNumber: syz [ 59.166985][ T45] usb 4-1: config 0 descriptor?? [ 59.175729][ T1322] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.185861][ T1322] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.198312][ T45] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 59.212200][ T45] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 59.763858][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 59.777684][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 59.789182][ T9] usb 5-1: USB disconnect, device number 4 [ 59.906315][ T346] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 60.057984][ T346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.069623][ T346] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 60.087540][ T346] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 60.103866][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.115938][ T346] usb 3-1: config 0 descriptor?? [ 60.301300][ T1334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:307 [ 60.406226][ T1340] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 60.441489][ T36] audit: type=1400 audit(1750605925.639:320): avc: denied { shutdown } for pid=1341 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.513749][ T1343] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 60.513772][ T1343] rust_binder: Read failure Err(EFAULT) in pid:98 [ 60.531597][ T346] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 60.735764][ T1331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.750813][ T1331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.770149][ T1331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.791219][ T1331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.009300][ T346] kovaplus 0003:1E7D:2D50.0008: couldn't init struct kovaplus_device [ 61.028400][ T346] kovaplus 0003:1E7D:2D50.0008: couldn't install mouse [ 61.039212][ T346] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -71 [ 61.053179][ T346] usb 3-1: USB disconnect, device number 25 [ 61.088831][ T1361] fido_id[1361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 61.195933][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 61.195968][ T36] audit: type=1400 audit(1750605926.389:322): avc: denied { getopt } for pid=1362 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.289254][ T36] audit: type=1400 audit(1750605926.489:323): avc: denied { execute } for pid=1367 comm="syz.4.358" name="file0" dev="ramfs" ino=9531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 61.289361][ T1368] process 'syz.4.358' launched './file0' with NULL argv: empty string added [ 61.331589][ T36] audit: type=1400 audit(1750605926.529:324): avc: denied { execute_no_trans } for pid=1367 comm="syz.4.358" path="/file0" dev="ramfs" ino=9531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 61.412115][ T36] audit: type=1400 audit(1750605926.609:325): avc: denied { create } for pid=1381 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 61.488467][ T45] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 61.548118][ T36] audit: type=1400 audit(1750605926.749:326): avc: denied { execute } for pid=1386 comm="syz.2.366" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.608470][ T1394] binder: Bad value for 'stats' [ 61.631682][ T9] usb 4-1: USB disconnect, device number 19 [ 61.638512][ T1396] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.646407][ T1396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220 [ 61.653769][ T1398] syz.3.370 uses obsolete (PF_INET,SOCK_PACKET) [ 61.727020][ T1401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.781278][ T1405] rust_binder: Error in use_page_slow: ESRCH [ 61.792601][ T1405] rust_binder: use_range failure ESRCH [ 61.808342][ T1404] kvm_intel: kvm [1403]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 61.843220][ T1405] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 61.843239][ T1405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 61.874522][ T1405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:222 [ 61.882054][ T36] audit: type=1400 audit(1750605927.069:327): avc: denied { getopt } for pid=1409 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.940644][ T1414] binder: Unknown parameter 'coyBLV"i5ntext' [ 61.996375][ T1419] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.996724][ T36] audit: type=1400 audit(1750605927.199:328): avc: denied { setattr } for pid=1418 comm="syz.3.377" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.088602][ T1421] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.125274][ T36] audit: type=1400 audit(1750605927.319:329): avc: denied { setattr } for pid=1425 comm="syz.2.380" name="NETLINK" dev="sockfs" ino=9816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.196242][ T36] audit: type=1400 audit(1750605927.379:330): avc: denied { connect } for pid=1429 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.247898][ T36] audit: type=1400 audit(1750605927.389:331): avc: denied { bind } for pid=1429 comm="syz.4.381" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.356266][ T367] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 62.510956][ T367] usb 3-1: config 3 has an invalid interface number: 2 but max is 0 [ 62.521243][ T367] usb 3-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 62.531601][ T367] usb 3-1: config 3 has no interface number 0 [ 62.540473][ T367] usb 3-1: config 3 interface 2 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 62.557943][ T367] usb 3-1: config 3 interface 2 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 62.581380][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 62.592286][ T367] usb 3-1: config 3 interface 2 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 62.607254][ T367] usb 3-1: config 3 interface 2 altsetting 0 endpoint 0x6 has invalid maxpacket 600, setting to 64 [ 62.621908][ T367] usb 3-1: config 3 interface 2 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 62.637874][ T367] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01d6, bcdDevice=45.94 [ 62.647529][ T367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.657111][ T367] usb 3-1: Product: ѕ [ 62.661833][ T367] usb 3-1: Manufacturer: 䃅츖궘㍮싕䩍燤㉲竚Ⰲ㞟௥杀马똲ꢉ᪓℈삣࿎徼鲾ᩧ뿷寚죒缾▼캣碟ᯉ㣼悆⓷璷ڽ苠騐뚓䊥ᕁ﻾ݏ캊ꉀ簉줨䥽⍱㑻ᲃⲻ樏썰禙 [ 62.684924][ T367] usb 3-1: SerialNumber: 瘼鿹ꉆ眢剭㞣ﲙ䷑ﴓꀞ⤖⺂퇪舏蘜ᾤꢉ魴▭㮀鋔 [ 62.797876][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.818017][ T9] usb 5-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 62.822078][ T1442] syzkaller0: entered promiscuous mode [ 62.830502][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.834794][ T1442] syzkaller0: entered allmulticast mode [ 62.848030][ T9] usb 5-1: Product: syz [ 62.858346][ T9] usb 5-1: Manufacturer: syz [ 62.863432][ T9] usb 5-1: SerialNumber: syz [ 62.872345][ T9] usb 5-1: config 0 descriptor?? [ 62.885776][ T9] usb 5-1: bad CDC descriptors [ 62.904850][ T367] ftdi_sio 3-1:3.2: FTDI USB Serial Device converter detected [ 62.915579][ T367] ftdi_sio ttyUSB0: unknown device type: 0x4594 [ 62.925127][ T367] usb 3-1: USB disconnect, device number 26 [ 62.934515][ T367] ftdi_sio 3-1:3.2: device disconnected [ 63.084390][ T1439] binder: Unknown parameter 'fscontext?}' [ 63.091691][ T9] usb 5-1: USB disconnect, device number 5 [ 63.290467][ T1464] netlink: 104 bytes leftover after parsing attributes in process `syz.0.393'. [ 63.415739][ T1473] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.425650][ T1473] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.705495][ T1495] rust_binder: Error while translating object. [ 63.713757][ T1495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.720986][ T1495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 63.743678][ T1497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 63.755892][ T1497] rust_binder: Error while translating object. [ 63.765857][ T1497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.773527][ T1497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 63.836421][ T1502] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 63.924471][ T1511] tipc: Started in network mode [ 63.931096][ T1511] tipc: Node identity , cluster identity 4711 [ 64.022402][ T1511] tipc: Started in network mode [ 64.028267][ T1511] tipc: Node identity , cluster identity 4711 [ 64.063881][ T1524] 9pnet_fd: Insufficient options for proto=fd [ 64.121281][ T1528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:157 [ 64.140097][ T1535] netlink: 'syz.3.419': attribute type 12 has an invalid length. [ 64.163387][ T1541] netlink: 'syz.3.419': attribute type 12 has an invalid length. [ 64.215848][ T1548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.217188][ T1548] fuse: Bad value for 'user_id' [ 64.232124][ T1548] fuse: Bad value for 'user_id' [ 64.263223][ T1561] binder: Bad value for 'max' [ 64.279253][ T1563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.323736][ T1566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235 [ 64.486260][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 64.646265][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 64.653451][ T45] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 64.662616][ T45] usb 5-1: config 0 has no interface number 0 [ 64.669481][ T45] usb 5-1: config 0 interface 113 has no altsetting 0 [ 64.680367][ T45] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 64.691081][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.700168][ T45] usb 5-1: Product: syz [ 64.704925][ T45] usb 5-1: Manufacturer: syz [ 64.710023][ T45] usb 5-1: SerialNumber: syz [ 64.716154][ T45] usb 5-1: config 0 descriptor?? [ 64.924946][ T45] usb 5-1: USB disconnect, device number 6 [ 65.124041][ T1572] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.130400][ T1572] rust_binder: Write failure EINVAL in pid:358 [ 65.236492][ T1585] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.308283][ T1592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.330962][ T1592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.449004][ T1600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:166 [ 65.449881][ T1600] rust_binder: Error while translating object. [ 65.463331][ T1600] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.472264][ T1600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:166 [ 65.549022][ T367] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 65.608830][ T1604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:370 [ 65.676427][ T1606] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 65.696337][ T367] usb 3-1: device descriptor read/64, error -71 [ 65.720483][ T1606] rust_binder: Write failure EINVAL in pid:170 [ 65.876653][ T1613] cgroup: fork rejected by pids controller in /syz4 [ 65.966315][ T367] usb 3-1: device descriptor read/64, error -71 [ 66.047764][ T1238] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 66.206264][ T1238] usb 5-1: Using ep0 maxpacket: 16 [ 66.216972][ T1238] usb 5-1: config 0 has no interfaces? [ 66.225079][ T1238] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 66.238496][ T367] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 66.246595][ T1238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.256926][ T1238] usb 5-1: Product: syz [ 66.261292][ T1238] usb 5-1: Manufacturer: syz [ 66.270905][ T1238] usb 5-1: SerialNumber: syz [ 66.283121][ T1238] usb 5-1: config 0 descriptor?? [ 66.406714][ T367] usb 3-1: device descriptor read/64, error -71 [ 66.494487][ T1612] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 66.510516][ T1612] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 66.527194][ T1612] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 66.542721][ T1612] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 66.558412][ T1612] overlayfs: maximum fs stacking depth exceeded [ 66.574222][ T1360] usb 5-1: USB disconnect, device number 7 [ 66.656331][ T367] usb 3-1: device descriptor read/64, error -71 [ 66.766377][ T367] usb usb3-port1: attempt power cycle [ 67.088032][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 67.088048][ T36] audit: type=1400 audit(1750605932.289:343): avc: denied { unmount } for pid=965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.118701][ T367] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 67.149116][ T367] usb 3-1: device descriptor read/8, error -71 [ 67.287850][ T367] usb 3-1: device descriptor read/8, error -71 [ 67.526488][ T367] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 67.548045][ T367] usb 3-1: device descriptor read/8, error -71 [ 67.677517][ T367] usb 3-1: device descriptor read/8, error -71 [ 67.786418][ T367] usb usb3-port1: unable to enumerate USB device [ 69.675379][ T1690] binder: Bad value for 'stats' [ 69.695257][ T1690] binder: Bad value for 'stats' [ 69.743220][ T1701] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.823551][ T1722] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 69.859443][ T1726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 69.872975][ T1727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.888478][ T1720] rust_binder: Error in use_page_slow: ESRCH [ 69.895903][ T1720] rust_binder: use_range failure ESRCH [ 69.903768][ T1720] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 69.910896][ T1720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 69.920705][ T1720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:382 [ 69.950546][ T1736] overlayfs: failed to clone upperpath [ 69.976291][ T45] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 70.061713][ T36] audit: type=1400 audit(1750605935.259:344): avc: denied { read } for pid=1756 comm="syz.3.474" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.092293][ T36] audit: type=1400 audit(1750605935.259:345): avc: denied { open } for pid=1756 comm="syz.3.474" path="/dev/usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.127533][ T36] audit: type=1400 audit(1750605935.289:346): avc: denied { ioctl } for pid=1756 comm="syz.3.474" path="/dev/usbmon6" dev="devtmpfs" ino=109 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.176967][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 70.194507][ T45] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.215908][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 70.230308][ T45] usb 3-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.40 [ 70.236332][ T367] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 70.243453][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.262068][ T45] usb 3-1: Product: syz [ 70.267062][ T45] usb 3-1: Manufacturer: syz [ 70.272017][ T45] usb 3-1: SerialNumber: syz [ 70.376332][ T367] usb 5-1: device descriptor read/64, error -71 [ 70.482014][ T1701] rust_binder: validate_parent_fixup: new_min_offset=96, sg_entry.length=0 [ 70.482033][ T1701] rust_binder: Error while translating object. [ 70.491764][ T1701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.498245][ T1701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 70.616361][ T367] usb 5-1: device descriptor read/64, error -71 [ 70.642047][ T45] usbhid 3-1:1.0: can't add hid device: -71 [ 70.649224][ T45] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 70.661556][ T45] usb 3-1: USB disconnect, device number 31 [ 70.704474][ T36] audit: type=1400 audit(1750605935.899:347): avc: denied { mount } for pid=1774 comm="syz.0.479" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.876364][ T367] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 70.946381][ T306] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 71.016432][ T367] usb 5-1: device descriptor read/64, error -71 [ 71.223208][ T1780] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.223333][ T1780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:259 [ 71.239863][ T306] usb 4-1: unable to get BOS descriptor or descriptor too short [ 71.265756][ T367] usb 5-1: device descriptor read/64, error -71 [ 71.283112][ T306] usb 4-1: no configurations [ 71.290392][ T306] usb 4-1: can't read configurations, error -22 [ 71.312255][ T36] audit: type=1400 audit(1750605936.509:348): avc: denied { read } for pid=1787 comm="syz.0.484" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.386421][ T367] usb usb5-port1: attempt power cycle [ 71.496359][ T45] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 71.556835][ T36] audit: type=1400 audit(1750605936.759:349): avc: denied { setattr } for pid=1791 comm="syz.0.485" name="RAWv6" dev="sockfs" ino=11842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.656787][ T45] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 71.675264][ T45] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 71.685742][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 71.696874][ T45] usb 3-1: Product: syz [ 71.701825][ T45] usb 3-1: Manufacturer: syz [ 71.708041][ T45] usb 3-1: SerialNumber: syz [ 71.715182][ T45] usb 3-1: config 0 descriptor?? [ 71.727805][ T367] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 71.757488][ T367] usb 5-1: device descriptor read/8, error -71 [ 71.789160][ T36] audit: type=1400 audit(1750605936.989:350): avc: denied { create } for pid=1798 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 71.800050][ T1804] bridge0: port 3(syz_tun) entered blocking state [ 71.822526][ T1804] bridge0: port 3(syz_tun) entered disabled state [ 71.831016][ T1804] syz_tun: entered allmulticast mode [ 71.847098][ T1804] syz_tun: entered promiscuous mode [ 71.853904][ T1804] bridge0: port 3(syz_tun) entered blocking state [ 71.861825][ T1804] bridge0: port 3(syz_tun) entered forwarding state [ 71.875744][ T36] audit: type=1400 audit(1750605937.069:351): avc: denied { associate } for pid=1807 comm="syz.3.490" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.917271][ T367] usb 5-1: device descriptor read/8, error -71 [ 71.934127][ T36] audit: type=1400 audit(1750605937.129:352): avc: denied { read } for pid=1779 comm="syz.2.481" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.938313][ T45] usb 3-1: bad CDC descriptors [ 71.971197][ T45] usb 3-1: USB disconnect, device number 32 [ 71.979885][ T1820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.980074][ T1820] rust_binder: Write failure EINVAL in pid:423 [ 72.166477][ T367] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 72.197636][ T367] usb 5-1: device descriptor read/8, error -71 [ 72.327534][ T367] usb 5-1: device descriptor read/8, error -71 [ 72.346418][ T306] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 72.436489][ T367] usb usb5-port1: unable to enumerate USB device [ 72.493256][ T1837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.494145][ T1839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:263 [ 72.508900][ T306] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 72.531296][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.542213][ T306] usb 4-1: Product: syz [ 72.546900][ T306] usb 4-1: Manufacturer: syz [ 72.552259][ T306] usb 4-1: SerialNumber: syz [ 72.558435][ T306] usb 4-1: config 0 descriptor?? [ 72.772425][ T306] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 72.784920][ T1824] overlayfs: statfs failed on './file0' [ 72.792423][ T306] asix 4-1:0.0: probe with driver asix failed with error -71 [ 72.803645][ T306] usb 4-1: USB disconnect, device number 21 [ 72.860931][ T1866] binder: Bad value for 'max' [ 72.866398][ T1866] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.126408][ T1360] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 73.166430][ T1877] overlayfs: failed to clone upperpath [ 73.173484][ T1875] rust_binder: Write failure EFAULT in pid:267 [ 73.199589][ T1886] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 73.224429][ T1888] overlayfs: failed to clone upperpath [ 73.286291][ T1360] usb 3-1: Using ep0 maxpacket: 8 [ 73.293965][ T1360] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 73.304671][ T1360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.316517][ T1360] usb 3-1: config 0 descriptor?? [ 73.323172][ T1902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:429 [ 73.556420][ T306] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 73.575147][ T367] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 73.726366][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 73.732986][ T367] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 73.747439][ T367] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 73.757634][ T306] usb 4-1: config 0 has no interfaces? [ 73.764461][ T367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.776070][ T306] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.786610][ T367] usb 5-1: config 0 descriptor?? [ 73.794338][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.805095][ T306] usb 4-1: Product: syz [ 73.812139][ T306] usb 4-1: Manufacturer: syz [ 73.821472][ T306] usb 4-1: SerialNumber: syz [ 73.836175][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 73.845805][ T306] usb 4-1: config 0 descriptor?? [ 73.854408][ T36] audit: type=1326 audit(1750605939.029:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.0.527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd0998e929 code=0x0 [ 73.899063][ T1913] overlay: Unknown parameter 'mounts' [ 73.906696][ T1913] overlay: Unknown parameter 'mounts' [ 73.914282][ T1913] overlay: Unknown parameter 'mounts' [ 73.923778][ T1913] overlay: Unknown parameter 'mounts' [ 73.923981][ T1360] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 73.946336][ T1360] asix 3-1:0.0: probe with driver asix failed with error -61 [ 73.946359][ T1913] overlay: Unknown parameter 'mounts' [ 73.960691][ T1913] overlay: Unknown parameter 'mounts' [ 73.968030][ T1913] overlay: Unknown parameter 'mounts' [ 73.975808][ T1913] overlay: Unknown parameter 'mounts' [ 73.983943][ T1913] overlay: Unknown parameter 'mounts' [ 73.990929][ T1913] overlay: Unknown parameter 'mounts' [ 73.997841][ T1913] overlay: Unknown parameter 'mounts' [ 74.005331][ T1913] overlay: Unknown parameter 'mounts' [ 74.014324][ T1913] overlay: Unknown parameter 'mounts' [ 74.022524][ T1913] overlay: Unknown parameter 'mounts' [ 74.030871][ T1913] overlay: Unknown parameter 'mounts' [ 74.039106][ T1913] overlay: Unknown parameter 'mounts' [ 74.050919][ T1913] overlay: Unknown parameter 'mounts' [ 74.057910][ T1913] overlay: Unknown parameter 'mounts' [ 74.059454][ T1902] netlink: 40 bytes leftover after parsing attributes in process `syz.3.524'. [ 74.078067][ T1913] overlay: Unknown parameter 'mounts' [ 74.080900][ T1902] netlink: 'syz.3.524': attribute type 4 has an invalid length. [ 74.093007][ T1913] overlay: Unknown parameter 'mounts' [ 74.095643][ T1902] rust_binder: Read failure Err(EFAULT) in pid:429 [ 74.099547][ T1913] overlay: Unknown parameter 'mounts' [ 74.100646][ T9] usb 4-1: USB disconnect, device number 22 [ 74.123367][ T1913] overlay: Unknown parameter 'mounts' [ 74.129983][ T1913] overlay: Unknown parameter 'mounts' [ 74.136792][ T1913] overlay: Unknown parameter 'mounts' [ 74.143671][ T1913] overlay: Unknown parameter 'mounts' [ 74.150676][ T1913] overlay: Unknown parameter 'mounts' [ 74.160980][ T1913] overlay: Unknown parameter 'mounts' [ 74.169766][ T1913] overlay: Unknown parameter 'mounts' [ 74.178096][ T1913] overlay: Unknown parameter 'mounts' [ 74.185524][ T1913] overlay: Unknown parameter 'mounts' [ 74.191402][ T1913] overlay: Unknown parameter 'mounts' [ 74.197978][ T1913] overlay: Unknown parameter 'mounts' [ 74.206371][ T1913] overlay: Unknown parameter 'mounts' [ 74.208007][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.221775][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.221813][ T1913] overlay: Unknown parameter 'mounts' [ 74.229348][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.244483][ T1913] overlay: Unknown parameter 'mounts' [ 74.244488][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.244516][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.265855][ T1913] overlay: Unknown parameter 'mounts' [ 74.265877][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.265903][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.286910][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.287044][ T1913] overlay: Unknown parameter 'mounts' [ 74.294863][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.294895][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.294917][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.324736][ T1913] overlay: Unknown parameter 'mounts' [ 74.325325][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.338905][ T1913] overlay: Unknown parameter 'mounts' [ 74.338956][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.352701][ T1913] overlay: Unknown parameter 'mounts' [ 74.354941][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.365832][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.366277][ T1913] overlay: Unknown parameter 'mounts' [ 74.373311][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.389554][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.389672][ T1913] overlay: Unknown parameter 'mounts' [ 74.397363][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.411606][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.411751][ T1913] overlay: Unknown parameter 'mounts' [ 74.420699][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.420725][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.420747][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.442875][ T1904] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.449667][ T36] audit: type=1400 audit(1750605939.639:355): avc: denied { write } for pid=1903 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.449798][ T1913] overlay: Unknown parameter 'mounts' [ 74.457817][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.483095][ T1904] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 74.487164][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.512179][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.512259][ T1913] overlay: Unknown parameter 'mounts' [ 74.523173][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.536792][ T1913] overlay: Unknown parameter 'mounts' [ 74.536981][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.551046][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.551161][ T1913] overlay: Unknown parameter 'mounts' [ 74.559655][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.575752][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.575856][ T1913] overlay: Unknown parameter 'mounts' [ 74.584039][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.599015][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.599178][ T1913] overlay: Unknown parameter 'mounts' [ 74.608851][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.623633][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.623747][ T1913] overlay: Unknown parameter 'mounts' [ 74.631980][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.648976][ T1913] overlay: Unknown parameter 'mounts' [ 74.649077][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.664292][ T1913] overlay: Unknown parameter 'mounts' [ 74.672911][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.683740][ T367] apple 0003:05AC:0245.0009: unknown main item tag 0x0 [ 74.695864][ T1913] overlay: Unknown parameter 'mounts' [ 74.702987][ T1917] binder: Bad value for 'stats' [ 74.716978][ T1913] overlay: Unknown parameter 'mounts' [ 74.724125][ T1913] overlay: Unknown parameter 'mounts' [ 74.726184][ T367] apple 0003:05AC:0245.0009: hidraw0: USB HID v0.0b Device [HID 05ac:0245] on usb-dummy_hcd.4-1/input0 [ 74.774262][ T36] audit: type=1400 audit(1750605939.969:356): avc: denied { connect } for pid=1919 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.804383][ T367] usb 5-1: USB disconnect, device number 12 [ 74.978121][ T1945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1945 comm=syz.0.535 [ 75.028504][ T1952] rust_binder: Error in use_page_slow: ESRCH [ 75.028529][ T1952] rust_binder: use_range failure ESRCH [ 75.036442][ T1952] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 75.042806][ T1952] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 75.055289][ T1952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:447 [ 75.071445][ T36] audit: type=1400 audit(1750605940.269:357): avc: denied { name_bind } for pid=1959 comm="syz.0.542" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 75.127283][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.128066][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.137950][ T1969] rust_binder: Write failure EINVAL in pid:450 [ 75.144628][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.152076][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.159740][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.160074][ T1965] input: syz1 as /devices/virtual/input/input8 [ 75.176756][ T1965] input: failed to attach handler leds to device input8, error: -6 [ 75.183578][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.201208][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.201237][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.211077][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.219302][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.219420][ T1966] binder: Bad value for 'max' [ 75.226838][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.244684][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.248017][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.256510][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.262160][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.270086][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.290560][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.290592][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.299328][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.306914][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.314485][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.322870][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.330636][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.337586][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.344992][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.352712][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.360639][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.370490][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.378160][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.386058][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.395001][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.403297][ T1963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.473989][ T1979] input: syz1 as /devices/virtual/input/input9 [ 75.529937][ T1984] fuse: Unknown parameter '' [ 76.234897][ T36] audit: type=1400 audit(1750605941.429:358): avc: denied { execute_no_trans } for pid=1990 comm="syz.4.550" path="/78/file0" dev="tmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.612548][ T36] audit: type=1326 audit(1750605941.809:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2009 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a98e929 code=0x7ffc0000 [ 76.637790][ T36] audit: type=1326 audit(1750605941.819:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2009 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a98e929 code=0x7ffc0000 [ 76.662715][ T36] audit: type=1326 audit(1750605941.819:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2009 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b9a98e929 code=0x7ffc0000 [ 76.687820][ T36] audit: type=1326 audit(1750605941.819:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2009 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a98e929 code=0x7ffc0000 [ 76.694671][ T367] usb 3-1: USB disconnect, device number 33 [ 76.713812][ T36] audit: type=1326 audit(1750605941.819:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2009 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b9a98e929 code=0x7ffc0000 [ 76.746001][ T2011] binder: Unknown parameter 'context' [ 76.845162][ T2022] binder: Unknown parameter 'smackfsdef' [ 76.894850][ T2015] binder: Unknown parameter 'xfrm0' [ 76.931780][ T2020] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 76.933869][ T2031] binder: Unknown parameter '00000000000000000000003' [ 76.964662][ T2038] binder: Unknown parameter 'defcontext01777777777777777777777' [ 76.999349][ T2042] rust_binder: Write failure EINVAL in pid:308 [ 77.004659][ T2040] rust_binder: Error while translating object. [ 77.011374][ T2040] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 77.019332][ T2040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:477 [ 77.042692][ T2047] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 77.053132][ T2050] binder: Unknown parameter 'defcontext;%ǣD(BO@' [ 77.317144][ T2085] binder: Unknown parameter 'processor : 0 [ 77.317144][ T2085] vendor_id : GenuineIntel [ 77.317144][ T2085] cpu family : 6 [ 77.317144][ T2085] model : 79 [ 77.317144][ T2085] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 77.317144][ T2085] stepping : 0 [ 77.317144][ T2085] microcode : 0xffffffff [ 77.317144][ T2085] cpu MHz : 2200.170 [ 77.317144][ T2085] cache size : 56320 KB [ 77.317144][ T2085] physical id : 0 [ 77.317144][ T2085] siblings : 2 [ 77.317144][ T2085] core id : 0 [ 77.317144][ T2085] cpu cores : 1 [ 77.317144][ T2085] apicid : 0 [ 77.317144][ T2085] initial apicid : 0 [ 77.317144][ T2085] fpu : yes [ 77.317144][ T2085] fpu_exception : yes [ 77.317144][ T2085] cpuid level : 13 [ 77.317144][ T2085] wp : yes [ 77.317144][ T2085] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 77.317144][ T2085] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 77.482157][ T2101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 77.629348][ T2100] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 77.639599][ T2100] rust_binder: Error in use_page_slow: EBUSY [ 77.651316][ T2100] rust_binder: use_range failure EBUSY [ 77.659720][ T2100] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 77.669791][ T2100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 77.679229][ T2100] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 77.692808][ T306] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 77.725704][ T2100] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:306 [ 77.739512][ T2103] binder: Bad value for 'max' [ 77.827319][ T2109] 9pnet_virtio: no channels available for device 127.0.0.1 [ 77.856791][ T2115] FAT-fs (rnullb0): bogus number of reserved sectors [ 77.863512][ T2115] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 77.876229][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 77.896741][ T306] usb 4-1: config 0 has an invalid interface number: 27 but max is 0 [ 77.915822][ T306] usb 4-1: config 0 has no interface number 0 [ 77.923727][ T306] usb 4-1: config 0 interface 27 has no altsetting 0 [ 77.945003][ T306] usb 4-1: New USB device found, idVendor=04a5, idProduct=4027, bcdDevice=f2.12 [ 77.954726][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.963531][ T306] usb 4-1: Product: syz [ 77.968709][ T306] usb 4-1: Manufacturer: syz [ 77.973733][ T306] usb 4-1: SerialNumber: syz [ 77.993343][ T306] usb 4-1: config 0 descriptor?? [ 78.001640][ T2130] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not '' [ 78.048984][ T2142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.601'. [ 78.211385][ T2095] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 78.211404][ T2095] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 78.221092][ T2095] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 78.254633][ T2153] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 78.256279][ T367] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 78.267105][ T2152] binder: Bad value for 'max' [ 78.291548][ T306] pl2303 4-1:0.27: required endpoints missing [ 78.299756][ T306] usb 4-1: USB disconnect, device number 23 [ 78.416332][ T367] usb 5-1: device descriptor read/64, error -71 [ 78.656313][ T367] usb 5-1: device descriptor read/64, error -71 [ 78.804485][ T306] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 78.826909][ T306] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.896309][ T367] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 79.009387][ T2176] SELinux: security_context_str_to_sid () failed with errno=-22 [ 79.034041][ T2178] rust_binder: Error while translating object. [ 79.034067][ T2178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.041414][ T367] usb 5-1: device descriptor read/64, error -71 [ 79.062222][ T2178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:504 [ 79.103621][ T2187] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 79.113249][ T2187] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:512 [ 79.210692][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 79.210709][ T36] audit: type=1326 audit(1750605944.409:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.3.620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f224638e929 code=0x0 [ 79.306303][ T367] usb 5-1: device descriptor read/64, error -71 [ 79.416404][ T367] usb usb5-port1: attempt power cycle [ 79.437364][ T2210] netlink: 'syz.0.623': attribute type 4 has an invalid length. [ 79.459317][ T2212] overlayfs: failed to clone upperpath [ 79.756303][ T367] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 79.777936][ T367] usb 5-1: device descriptor read/8, error -71 [ 79.858308][ T2224] binder: Unknown parameter ';Ctx~m&)|k}d' [ 79.878493][ T36] audit: type=1400 audit(1750605945.079:375): avc: denied { map } for pid=2223 comm="syz.2.629" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 79.917572][ T367] usb 5-1: device descriptor read/8, error -71 [ 79.966037][ T36] audit: type=1400 audit(1750605945.159:376): avc: denied { append } for pid=2228 comm="syz.2.631" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.143986][ T2236] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.144051][ T2235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:526 [ 80.166313][ T367] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 80.185916][ T2235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.207867][ T367] usb 5-1: device descriptor read/8, error -71 [ 80.216396][ T2235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.231654][ T2237] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 80.231679][ T2237] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 80.240816][ T2237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:342 [ 80.338052][ T367] usb 5-1: device descriptor read/8, error -71 [ 80.416272][ T306] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 80.466430][ T367] usb usb5-port1: unable to enumerate USB device [ 80.567780][ T306] usb 4-1: config 0 has no interfaces? [ 80.575515][ T306] usb 4-1: New USB device found, idVendor=093a, idProduct=2470, bcdDevice=3d.04 [ 80.585941][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.594527][ T306] usb 4-1: Product: syz [ 80.599302][ T306] usb 4-1: Manufacturer: syz [ 80.604176][ T306] usb 4-1: SerialNumber: syz [ 80.614171][ T306] usb 4-1: config 0 descriptor?? [ 80.821635][ T2235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.832361][ T2235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.841368][ T306] usb 4-1: USB disconnect, device number 24 [ 80.875561][ T2266] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:347 [ 80.895729][ T2268] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 80.907365][ T2268] rust_binder: Read failure Err(EFAULT) in pid:349 [ 81.056383][ T2275] rust_binder: Error while translating object. [ 81.066083][ T2275] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.074013][ T2275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:351 [ 81.084164][ T2282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.647'. [ 81.141729][ T2293] /dev/loop0: Can't lookup blockdev [ 81.155925][ T2296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'. [ 81.282186][ T2308] futex_wake_op: syz.0.655 tries to shift op by -1; fix this program [ 81.293957][ T36] audit: type=1400 audit(1750605946.489:377): avc: denied { getopt } for pid=2307 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.313838][ T346] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 81.467506][ T346] usb 4-1: config index 0 descriptor too short (expected 36, got 9) [ 81.475625][ T346] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 81.486324][ T346] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 81.496122][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.504390][ T346] usb 4-1: Product: syz [ 81.508696][ T346] usb 4-1: Manufacturer: syz [ 81.513293][ T346] usb 4-1: SerialNumber: syz [ 81.518487][ T346] usb 4-1: config 0 descriptor?? [ 81.792583][ T306] usb 4-1: USB disconnect, device number 25 [ 81.860566][ T36] audit: type=1400 audit(1750605947.059:378): avc: denied { append } for pid=2348 comm="syz.3.668" name="pfkey" dev="proc" ino=4026532561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 81.972615][ T2369] rust_binder: Error while translating object. [ 81.972638][ T2369] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 81.979414][ T2369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:341 [ 82.216871][ T306] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 82.256342][ T346] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 82.377659][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.389018][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.403139][ T306] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.412325][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.416255][ T346] usb 5-1: Using ep0 maxpacket: 32 [ 82.426709][ T306] usb 4-1: config 0 descriptor?? [ 82.432823][ T346] usb 5-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 82.442657][ T346] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.454156][ T346] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 33 [ 82.465893][ T346] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 82.476145][ T346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.485822][ T346] usb 5-1: Product: syz [ 82.490695][ T346] usb 5-1: Manufacturer: syz [ 82.496610][ T346] usb 5-1: SerialNumber: syz [ 82.502702][ T346] usb 5-1: config 0 descriptor?? [ 82.834158][ T306] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 82.843577][ T306] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 82.854138][ T306] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 83.090138][ T346] usb 4-1: USB disconnect, device number 26 [ 83.422906][ T346] usb 5-1: USB disconnect, device number 17 [ 83.518089][ T2415] rust_binder: inc_ref_done called when no active inc_refs [ 83.527278][ T2417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:372 [ 83.538244][ T45] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 83.566521][ T45] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.688315][ T36] audit: type=1400 audit(1750605948.889:379): avc: denied { listen } for pid=2425 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.713748][ T2426] binder: Unknown parameter '' [ 83.736293][ T346] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 83.751391][ T2428] binder: Unknown parameter 'processor : 0 [ 83.751391][ T2428] vendor_id : GenuineIntel [ 83.751391][ T2428] cpu family : 6 [ 83.751391][ T2428] model : 79 [ 83.751391][ T2428] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 83.751391][ T2428] stepping : 0 [ 83.751391][ T2428] microcode : 0xffffffff [ 83.751391][ T2428] cpu MHz : 2200.170 [ 83.751391][ T2428] cache size : 56320 KB [ 83.751391][ T2428] physical id : 0 [ 83.751391][ T2428] siblings : 2 [ 83.751391][ T2428] core id : 0 [ 83.751391][ T2428] cpu cores : 1 [ 83.751391][ T2428] apicid : 0 [ 83.751391][ T2428] initial apicid : 0 [ 83.751391][ T2428] fpu : yes [ 83.751391][ T2428] fpu_exception : yes [ 83.751391][ T2428] cpuid level : 13 [ 83.751391][ T2428] wp : yes [ 83.751391][ T2428] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 83.751391][ T2428] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 83.846337][ T2455] rust_binder: Write failure EINVAL in pid:382 [ 83.873142][ T2459] rust_binder: Write failure EINVAL in pid:559 [ 84.012594][ T36] audit: type=1400 audit(1750605949.209:380): avc: denied { read } for pid=2458 comm="syz.3.707" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.058317][ T346] usb 5-1: not running at top speed; connect to a high speed hub [ 84.067684][ T346] usb 5-1: config 1 interface 0 has no altsetting 0 [ 84.077317][ T346] usb 5-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.40 [ 84.087687][ T346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.096168][ T346] usb 5-1: Product: syz [ 84.100957][ T346] usb 5-1: Manufacturer: syz [ 84.105609][ T346] usb 5-1: SerialNumber: syz [ 84.135903][ T2473] binder: Bad value for 'max' [ 84.155980][ T2475] fuse: Unknown parameter 'dO0x0000000000000007' [ 84.219900][ T2477] support for the xor transformation has been removed. [ 84.227763][ T2477] rust_binder: Error while translating object. [ 84.227800][ T2477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 84.234744][ T2477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:394 [ 84.318902][ T346] usbhid 5-1:1.0: can't add hid device: -71 [ 84.335326][ T346] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 84.345250][ T346] usb 5-1: USB disconnect, device number 18 [ 84.845471][ T36] audit: type=1400 audit(1750605950.039:381): avc: denied { create } for pid=2564 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.957796][ T2563] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 85.173685][ T2571] rust_binder: Error in use_page_slow: ESRCH [ 85.180692][ T2578] tipc: Started in network mode [ 85.181916][ T2571] rust_binder: use_range failure ESRCH [ 85.188148][ T2578] tipc: Node identity ac14142f, cluster identity 4711 [ 85.193214][ T2571] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 85.199312][ T2578] tipc: Enabling of bearer rejected, failed to enable media [ 85.205962][ T2571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 85.205991][ T2571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:399 [ 85.235734][ T2578] netlink: 'syz.0.737': attribute type 4 has an invalid length. [ 85.252939][ T2578] netlink: 17 bytes leftover after parsing attributes in process `syz.0.737'. [ 85.273645][ T36] audit: type=1400 audit(1750605950.469:382): avc: denied { create } for pid=2579 comm="syz.0.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 85.319655][ T2586] netlink: 596 bytes leftover after parsing attributes in process `syz.0.741'. [ 85.359805][ T36] audit: type=1400 audit(1750605950.559:383): avc: denied { bind } for pid=2591 comm="syz.0.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.796558][ T367] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 85.893263][ T36] audit: type=1326 audit(1750605951.089:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2604 comm="syz.0.750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd0998e929 code=0x0 [ 85.926369][ T1238] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 85.976343][ T45] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 86.066272][ T1238] usb 5-1: device descriptor read/64, error -71 [ 86.127164][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 86.138636][ T45] usb 3-1: config index 0 descriptor too short (expected 32914, got 146) [ 86.152597][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.169988][ T45] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 86.182369][ T45] usb 3-1: config 1 has no interface number 1 [ 86.192570][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 86.213590][ T45] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 86.232871][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.243588][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.253573][ T45] usb 3-1: Product: syz [ 86.258313][ T45] usb 3-1: Manufacturer: syz [ 86.263556][ T45] usb 3-1: SerialNumber: syz [ 86.306373][ T1238] usb 5-1: device descriptor read/64, error -71 [ 86.546289][ T1238] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 86.686425][ T1238] usb 5-1: device descriptor read/64, error -71 [ 86.936290][ T1238] usb 5-1: device descriptor read/64, error -71 [ 87.047450][ T1238] usb usb5-port1: attempt power cycle [ 87.386258][ T1238] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 87.407785][ T1238] usb 5-1: device descriptor read/8, error -71 [ 87.421908][ T2614] overlayfs: failed to clone upperpath [ 87.429081][ T36] audit: type=1400 audit(1750605952.629:385): avc: denied { create } for pid=2613 comm="syz.0.752" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 87.547536][ T1238] usb 5-1: device descriptor read/8, error -71 [ 87.786238][ T1238] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 87.807840][ T1238] usb 5-1: device descriptor read/8, error -71 [ 87.937387][ T1238] usb 5-1: device descriptor read/8, error -71 [ 88.057057][ T1238] usb usb5-port1: unable to enumerate USB device [ 88.587236][ T2634] overlayfs: failed to clone upperpath [ 88.675399][ T367] usb 4-1: unable to get BOS descriptor set [ 88.718491][ T367] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 88.735364][ T367] usb 4-1: can't read configurations, error -71 [ 88.991541][ T45] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 89.001049][ T45] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 89.027893][ T45] usb 3-1: USB disconnect, device number 34 [ 89.066634][ T2655] input: syz0 as /devices/virtual/input/input10 [ 89.086278][ T2655] input: failed to attach handler leds to device input10, error: -6 [ 89.106274][ T367] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 89.229288][ T1332] udevd[1332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 89.278145][ T367] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.289816][ T367] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 89.306236][ T367] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.316762][ T367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.321463][ T2669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.775'. [ 89.335304][ T367] usb 4-1: config 0 descriptor?? [ 89.348249][ T367] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 89.545877][ T2642] netlink: 'syz.3.765': attribute type 27 has an invalid length. [ 89.555101][ T31] usb 4-1: USB disconnect, device number 28 [ 89.576354][ T45] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 89.727755][ T45] usb 5-1: config index 0 descriptor too short (expected 5668, got 36) [ 89.738644][ T45] usb 5-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 89.747927][ T45] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 89.757778][ T45] usb 5-1: config 3 has no interface number 0 [ 89.764078][ T45] usb 5-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 89.775366][ T45] usb 5-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.787547][ T45] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 89.797669][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.806744][ T45] usb 5-1: Product: syz [ 89.811691][ T45] usb 5-1: Manufacturer: syz [ 89.817473][ T45] usb 5-1: SerialNumber: syz [ 89.824408][ T2672] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 89.963124][ T36] audit: type=1400 audit(1750605955.159:386): avc: denied { ioctl } for pid=2680 comm="syz.2.780" path="socket:[16915]" dev="sockfs" ino=16915 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.036660][ T2672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.046440][ T2672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.056780][ T2672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.069483][ T2672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.083803][ T2672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.104883][ T2672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.122478][ T2703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 90.136887][ T2672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.141662][ T2703] binder: Bad value for 'max' [ 90.154210][ T2672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.164450][ T2672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.173782][ T2672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.189418][ T45] usb-storage 5-1:3.20: USB Mass Storage device detected [ 90.198142][ T2715] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 90.199845][ T45] usb-storage 5-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 90.374997][ T2729] netlink: 'syz.3.794': attribute type 30 has an invalid length. [ 90.399125][ T2732] rust_binder: Error in use_page_slow: ESRCH [ 90.399147][ T2732] rust_binder: use_range failure ESRCH [ 90.406093][ T2732] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 90.414651][ T2732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 90.420972][ T2729] binder: Bad value for 'stats' [ 90.423215][ T45] scsi host1: usb-storage 5-1:3.20 [ 90.445272][ T2732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:368 [ 90.600213][ T31] usb 5-1: USB disconnect, device number 23 [ 90.766332][ T306] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 90.917272][ T306] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 90.928442][ T306] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 90.938403][ T306] usb 4-1: config 220 interface 0 has no altsetting 0 [ 90.947138][ T306] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 90.956304][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.964946][ T306] usb 4-1: Product: syz [ 90.971942][ T306] usb 4-1: Manufacturer: syz [ 90.977059][ T306] usb 4-1: SerialNumber: syz [ 91.207933][ T2735] kvm: emulating exchange as write [ 91.433081][ T306] usb 4-1: USB disconnect, device number 29 [ 91.756247][ T367] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 91.896273][ T367] usb 5-1: device descriptor read/64, error -71 [ 91.966631][ T2765] rust_binder: got new transaction with bad transaction stack [ 91.966672][ T2765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:618 [ 92.025831][ T36] audit: type=1400 audit(1750605957.219:387): avc: denied { mount } for pid=2770 comm="syz.3.808" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 92.088288][ T2771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:624 [ 92.094272][ T36] audit: type=1400 audit(1750605957.219:388): avc: denied { remount } for pid=2770 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 92.134907][ T36] audit: type=1400 audit(1750605957.319:389): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 92.142261][ T2777] binder: Bad value for 'stats' [ 92.159869][ T36] audit: type=1400 audit(1750605957.329:390): avc: denied { map } for pid=2772 comm="syz.0.809" path="socket:[16137]" dev="sockfs" ino=16137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.175201][ T367] usb 5-1: device descriptor read/64, error -71 [ 92.406746][ T2795] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 92.446297][ T367] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 92.602205][ T367] usb 5-1: device descriptor read/64, error -71 [ 92.656118][ T36] audit: type=1400 audit(1750605957.849:391): avc: denied { mounton } for pid=2796 comm="syz.2.817" path="/proc/440/task" dev="proc" ino=17411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 92.715507][ T2802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.819'. [ 92.729524][ T2802] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 92.742671][ T2804] input: syz1 as /devices/virtual/input/input11 [ 92.819849][ T36] audit: type=1400 audit(1750605959.018:392): avc: denied { lock } for pid=2803 comm="syz.2.820" path="socket:[16287]" dev="sockfs" ino=16287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.856442][ T367] usb 5-1: device descriptor read/64, error -71 [ 92.966360][ T367] usb usb5-port1: attempt power cycle [ 93.104716][ T2808] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 93.268991][ T36] audit: type=1400 audit(1750605959.468:393): avc: denied { name_bind } for pid=2836 comm="syz.0.833" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 93.293138][ T36] audit: type=1400 audit(1750605959.468:394): avc: denied { node_bind } for pid=2836 comm="syz.0.833" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 93.317913][ T367] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 93.320189][ T36] audit: type=1400 audit(1750605959.498:395): avc: denied { write } for pid=2838 comm="syz.0.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.349760][ T367] usb 5-1: device descriptor read/8, error -71 [ 93.487650][ T367] usb 5-1: device descriptor read/8, error -71 [ 93.726313][ T367] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 93.742004][ T2867] binder: Bad value for 'max' [ 93.748147][ T367] usb 5-1: device descriptor read/8, error -71 [ 93.882332][ T367] usb 5-1: device descriptor read/8, error -71 [ 93.923487][ T2875] binder: Unknown parameter '000000000000000000030x000000000000000018446744073709551615 [ 93.923487][ T2875] ' [ 93.996489][ T367] usb usb5-port1: unable to enumerate USB device [ 94.052060][ T2883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.052091][ T2883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.060264][ T2883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.088473][ T2890] 9pnet_fd: Insufficient options for proto=fd [ 94.295946][ T2913] syzkaller0: entered promiscuous mode [ 94.301909][ T2913] syzkaller0: entered allmulticast mode [ 94.465916][ T2928] overlayfs: failed to clone upperpath [ 95.069441][ T2954] raw_sendmsg: syz.0.872 forgot to set AF_INET. Fix it! [ 95.314539][ T2964] binder: Bad value for 'max' [ 95.481333][ T2969] syz.4.878(2969): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 95.566283][ T346] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 95.716303][ T346] usb 4-1: Using ep0 maxpacket: 16 [ 95.723409][ T346] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 95.735253][ T346] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.745764][ T346] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.757766][ T31] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 95.768709][ T346] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.779155][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.787497][ T346] usb 4-1: Product: syz [ 95.791951][ T346] usb 4-1: Manufacturer: syz [ 95.796997][ T346] usb 4-1: SerialNumber: syz [ 95.916319][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 95.924422][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.937315][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.949097][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice=f8.00 [ 95.951123][ T2978] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 95.959752][ T31] usb 5-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 95.959917][ T2978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:479 [ 95.969805][ T31] usb 5-1: Manufacturer: syz [ 95.979360][ T2978] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 95.993825][ T2978] rust_binder: Read failure Err(EFAULT) in pid:479 [ 95.996378][ T31] usb 5-1: config 0 descriptor?? [ 96.015579][ T31] usbhid 5-1:0.0: can't add hid device: -22 [ 96.022565][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 96.126488][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 96.126508][ T36] audit: type=1400 audit(1750605962.328:398): avc: denied { ioctl } for pid=2979 comm="syz.0.883" path="socket:[17889]" dev="sockfs" ino=17889 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.181183][ T2982] 9pnet_fd: Insufficient options for proto=fd [ 96.215051][ T346] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 96.224729][ T36] audit: type=1400 audit(1750605962.418:399): avc: denied { sqpoll } for pid=2986 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.255560][ T2973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.266589][ T2989] fuse: Unknown parameter '>J%};6%)' [ 96.267403][ T2973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.285579][ T2973] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 96.285603][ T2973] rust_binder: Read failure Err(EFAULT) in pid:388 [ 96.296758][ T31] usb 5-1: USB disconnect, device number 28 [ 96.838494][ T3012] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 96.838522][ T3012] rust_binder: Read failure Err(EFAULT) in pid:392 [ 97.048681][ T2967] rust_binder: Write failure EFAULT in pid:681 [ 97.055732][ T346] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 97.072520][ T346] usb 4-1: USB disconnect, device number 30 [ 97.106317][ T306] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 97.236839][ T1332] udevd[1332]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.256818][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 97.263993][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.276983][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.287988][ T306] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 97.302950][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.312247][ T306] usb 3-1: config 0 descriptor?? [ 97.386979][ T36] audit: type=1400 audit(1750605963.588:400): avc: denied { getopt } for pid=3033 comm="syz.0.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.594189][ T3052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.805758][ T306] usbhid 3-1:0.0: can't add hid device: -71 [ 97.834815][ T306] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 97.855094][ T306] usb 3-1: USB disconnect, device number 35 [ 97.861597][ T9] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 98.037309][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 98.056125][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 98.076032][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.098770][ T9] usb 4-1: Product: syz [ 98.114283][ T9] usb 4-1: Manufacturer: syz [ 98.119777][ T9] usb 4-1: SerialNumber: syz [ 98.421248][ T3072] rust_binder: Error while translating object. [ 98.421288][ T3072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 98.433518][ T3072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:413 [ 98.495050][ T3079] ip6_vti0: entered promiscuous mode [ 98.544168][ T3083] overlayfs: failed to clone upperpath [ 98.545768][ T3081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=3081 comm=syz.4.921 [ 98.665783][ T3095] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 98.665808][ T3095] rust_binder: Error while translating object. [ 98.676080][ T3095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.683362][ T3095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:417 [ 98.744194][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 98.795990][ T3121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3121 comm=syz.0.935 [ 98.810191][ T3121] overlay: ./file0 is not a directory [ 98.816380][ T3121] fuse: Bad value for 'fd' [ 98.888795][ T36] audit: type=1400 audit(1750605965.088:401): avc: denied { search } for pid=3124 comm="syz.4.937" name="/" dev="configfs" ino=1527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.097151][ T3130] rust_binder: Write failure EINVAL in pid:683 [ 99.097242][ T3130] rust_binder: Write failure EINVAL in pid:683 [ 99.128001][ T3131] input: syz1 as /devices/virtual/input/input13 [ 99.147211][ T3131] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ4 [ 99.858743][ T3155] overlayfs: failed to clone upperpath [ 99.944879][ T36] audit: type=1400 audit(1750605966.138:402): avc: denied { bind } for pid=3174 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.962422][ T3175] tmpfs: Unknown parameter 'noswap#.-' [ 100.277868][ T36] audit: type=1400 audit(1750605966.478:403): avc: denied { map } for pid=3181 comm="syz.4.955" path="socket:[20579]" dev="sockfs" ino=20579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.297694][ T3182] rust_binder: Error while translating object. [ 100.300951][ T3182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 100.300986][ T36] audit: type=1400 audit(1750605966.478:404): avc: denied { read } for pid=3181 comm="syz.4.955" path="socket:[20579]" dev="sockfs" ino=20579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.307658][ T3182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:458 [ 100.316814][ T36] audit: type=1400 audit(1750605966.498:405): avc: denied { write } for pid=3181 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.395841][ T3184] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 100.405900][ T3184] SELinux: failed to load policy [ 100.411390][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 100.417876][ T3060] Bluetooth: hci0: command 0x1003 tx timeout [ 100.447917][ T3186] overlayfs: conflicting lowerdir path [ 100.477871][ T3188] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 100.515692][ T36] audit: type=1400 audit(1750605966.708:406): avc: denied { map } for pid=3193 comm="syz.0.959" path="socket:[19726]" dev="sockfs" ino=19726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.591057][ T367] usb 4-1: USB disconnect, device number 31 [ 100.607877][ T367] usblp0: removed [ 100.635741][ T3203] rust_binder: Write failure EFAULT in pid:495 [ 100.706262][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 100.740798][ T3215] xfrm0: mtu less than device minimum [ 100.876343][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 100.884561][ T9] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 100.893321][ T9] usb 5-1: config 0 has no interface number 0 [ 100.900606][ T9] usb 5-1: config 0 interface 49 has no altsetting 0 [ 100.911662][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=500b, bcdDevice= 5.19 [ 100.921801][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.930552][ T9] usb 5-1: Product: syz [ 100.935519][ T9] usb 5-1: Manufacturer: syz [ 100.941257][ T9] usb 5-1: SerialNumber: syz [ 100.946790][ T9] usb 5-1: config 0 descriptor?? [ 100.955622][ T9] snd-usb-audio 5-1:0.49: probe with driver snd-usb-audio failed with error -2 [ 100.969884][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.49/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.986889][ T346] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 101.136274][ T346] usb 3-1: Using ep0 maxpacket: 8 [ 101.143662][ T346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 22, changing to 8 [ 101.158717][ T3186] cgroup: Name too long [ 101.163120][ T346] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.181753][ T346] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 101.191438][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.201066][ T346] usb 3-1: config 0 descriptor?? [ 101.251927][ T36] audit: type=1400 audit(1750605967.448:407): avc: denied { ioctl } for pid=3263 comm="syz.0.982" path="socket:[20767]" dev="sockfs" ino=20767 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 101.283946][ T36] audit: type=1400 audit(1750605967.478:408): avc: denied { write } for pid=3263 comm="syz.0.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 101.311532][ T3269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.312475][ T3269] rust_binder: Error in use_page_slow: ESRCH [ 101.320725][ T3269] rust_binder: use_range failure ESRCH [ 101.326854][ T3269] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 101.332920][ T3269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 101.342499][ T3269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:695 [ 101.373293][ T367] usb 5-1: USB disconnect, device number 29 [ 101.611129][ T346] itetech 0003:06CB:73F5.000D: unknown main item tag 0x0 [ 101.619231][ T346] itetech 0003:06CB:73F5.000D: hidraw0: USB HID v0.07 Device [HID 06cb:73f5] on usb-dummy_hcd.2-1/input0 [ 101.630898][ T31] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 101.787542][ T31] usb 4-1: config 0 has an invalid interface number: 226 but max is 0 [ 101.796278][ T31] usb 4-1: config 0 has no interface number 0 [ 101.802805][ T31] usb 4-1: config 0 interface 226 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.814385][ T3217] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3217 comm=syz.2.965 [ 101.814486][ T31] usb 4-1: config 0 interface 226 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.814513][ T31] usb 4-1: config 0 interface 226 has no altsetting 0 [ 101.828753][ T3217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:500 [ 101.838925][ T31] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 101.845908][ T3210] rust_binder: Write failure EINVAL in pid:500 [ 101.855830][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.886218][ T346] usb 3-1: USB disconnect, device number 36 [ 101.909194][ T31] usb 4-1: config 0 descriptor?? [ 102.156307][ T45] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 102.286388][ T45] usb 5-1: device descriptor read/64, error -71 [ 102.316296][ T346] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 102.325864][ T31] uclogic 0003:256C:006D.000E: interface is invalid, ignoring [ 102.477616][ T346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.489025][ T346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.499736][ T346] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.514402][ T346] usb 3-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 102.524010][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.532829][ T45] usb 5-1: device descriptor read/64, error -71 [ 102.540310][ T346] usb 3-1: config 0 descriptor?? [ 102.771411][ T36] audit: type=1400 audit(1750605968.968:409): avc: denied { shutdown } for pid=3310 comm="syz.0.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.794650][ T45] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 102.927190][ T45] usb 5-1: device descriptor read/64, error -71 [ 103.149178][ T3282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:508 [ 103.150932][ T346] usbhid 3-1:0.0: can't add hid device: -71 [ 103.171369][ T346] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 103.180749][ T45] usb 5-1: device descriptor read/64, error -71 [ 103.189965][ T346] usb 3-1: USB disconnect, device number 37 [ 103.306387][ T45] usb usb5-port1: attempt power cycle [ 103.646338][ T45] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 103.675358][ T3325] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.675458][ T3325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:512 [ 103.678240][ T45] usb 5-1: device descriptor read/8, error -71 [ 103.683090][ T3325] rust_binder: Error while translating object. [ 103.699992][ T3325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.707941][ T3325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:512 [ 103.763285][ T3327] kvm: pic: non byte write [ 103.780841][ T3327] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.815758][ T36] audit: type=1400 audit(1750605970.008:410): avc: denied { link } for pid=294 comm="syz-executor" name="#1f" dev="tmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.818330][ T45] usb 5-1: device descriptor read/8, error -71 [ 103.822733][ T36] audit: type=1400 audit(1750605970.008:411): avc: denied { rename } for pid=294 comm="syz-executor" name="#20" dev="tmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.904662][ T3330] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.106309][ T45] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 104.137493][ T45] usb 5-1: device descriptor read/8, error -71 [ 104.267451][ T45] usb 5-1: device descriptor read/8, error -71 [ 104.320839][ T31] usb 4-1: USB disconnect, device number 32 [ 104.355647][ T3339] overlayfs: missing 'lowerdir' [ 104.376457][ T45] usb usb5-port1: unable to enumerate USB device [ 104.478809][ T3346] tmpfs: Bad value for 'nr_inodes' [ 104.485791][ T3346] rust_binder: Write failure EFAULT in pid:707 [ 104.537916][ T3355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.556030][ T3355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.691862][ T36] audit: type=1326 audit(1750605970.888:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3359 comm="syz.0.1014" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd0998e929 code=0x0 [ 104.952204][ T36] audit: type=1400 audit(1750605971.148:413): avc: denied { execute } for pid=3363 comm="syz.4.1015" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 105.021145][ T3366] rust_binder: Write failure EFAULT in pid:471 [ 105.549860][ T36] audit: type=1400 audit(1750605971.748:414): avc: denied { create } for pid=3388 comm="syz.0.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 105.592986][ T3395] x_tables: duplicate underflow at hook 1 [ 105.596262][ T36] audit: type=1400 audit(1750605971.758:415): avc: denied { read } for pid=3390 comm="syz.2.1025" name="/" dev="configfs" ino=1527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.646267][ T36] audit: type=1400 audit(1750605971.758:416): avc: denied { open } for pid=3390 comm="syz.2.1025" path="/" dev="configfs" ino=1527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.775707][ T3407] 9pnet_fd: Insufficient options for proto=fd [ 105.917958][ T3422] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.923089][ T3422] rust_binder: Error in use_page_slow: ESRCH [ 105.937071][ T3422] rust_binder: use_range failure ESRCH [ 105.944333][ T3422] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 105.955075][ T3422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 105.964265][ T3422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:724 [ 106.023078][ T3430] fuse: Unknown parameter '0xffffffffffffffff' [ 106.074629][ T3432] rust_binder: Write failure EINVAL in pid:727 [ 106.082651][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.092170][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.100216][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.108073][ T3436] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.115522][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.122359][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.122376][ T3437] rust_binder: Write failure EINVAL in pid:730 [ 106.126341][ T45] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 106.129424][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.152361][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.156268][ T31] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 106.159195][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.175142][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.183196][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.190411][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.198010][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.205170][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.212231][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.219490][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.227494][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.238047][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.245879][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.253597][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.261015][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.267980][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.276104][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.282867][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.289776][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.299910][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.306262][ T45] usb 5-1: Invalid ep0 maxpacket: 64 [ 106.306821][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.319909][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.328122][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.335436][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.338146][ T31] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 106.343218][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.350569][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.361470][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.376705][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.376919][ T31] usb 3-1: config 0 descriptor?? [ 106.383355][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.383377][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.383389][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.411262][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.418281][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.425239][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.432242][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.439912][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.446642][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.455203][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.456275][ T45] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 106.462440][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.478441][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.488482][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.496410][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.503913][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.513633][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.521210][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.528794][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.536858][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.546671][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.554112][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.561574][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.573978][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.580938][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.587544][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.594109][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.605920][ T3427] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.622998][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.623023][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.630199][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.637917][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.638929][ T3427] binder: Bad value for 'max' [ 106.644718][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.652345][ T45] usb 5-1: Invalid ep0 maxpacket: 64 [ 106.666481][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.669750][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.677752][ T31] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.696537][ T45] usb usb5-port1: attempt power cycle [ 106.702590][ T31] asix 3-1:0.0: probe with driver asix failed with error -71 [ 106.713911][ T31] usb 3-1: USB disconnect, device number 39 [ 106.758205][ T3449] binder: Bad value for 'defcontext' [ 106.809966][ T3458] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1045'. [ 107.036362][ T45] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 107.056893][ T45] usb 5-1: Invalid ep0 maxpacket: 64 [ 107.186594][ T45] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 107.206983][ T45] usb 5-1: Invalid ep0 maxpacket: 64 [ 107.213672][ T45] usb usb5-port1: unable to enumerate USB device [ 107.276557][ T3471] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.339593][ T3476] incfs: Error accessing: ./file0. [ 107.352030][ T3476] incfs: mount failed -20 [ 107.368564][ T3478] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.369080][ T3478] rust_binder: Error in use_page_slow: ESRCH [ 107.375807][ T3478] rust_binder: use_range failure ESRCH [ 107.382103][ T3478] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 107.389279][ T3478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 107.397804][ T3478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:575 [ 107.476095][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 107.476110][ T36] audit: type=1326 audit(1750605973.668:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3480 comm="syz.2.1051" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9dfa78e929 code=0x0 [ 107.705089][ T3507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.727003][ T3507] rust_binder: Write failure EINVAL in pid:750 [ 108.056348][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 108.217729][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.229775][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.240777][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.250683][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.259269][ T9] usb 4-1: SerialNumber: syz [ 108.471348][ T9] usb 4-1: 0:2 : does not exist [ 108.479570][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 108.499090][ T9] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 108.509941][ T9] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 108.524976][ T9] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 108.545367][ T9] usb 4-1: USB disconnect, device number 33 [ 108.612123][ T3533] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.612490][ T3533] rust_binder: Error while translating object. [ 108.621007][ T3533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.628202][ T3533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:594 [ 108.717094][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.035924][ T3554] xt_NFQUEUE: number of total queues is 0 [ 109.085084][ T3556] 9pnet_fd: Insufficient options for proto=fd [ 109.130703][ T3562] tipc: Started in network mode [ 109.136286][ T3562] tipc: Node identity , cluster identity 4711 [ 109.276407][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 109.426329][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 109.433841][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 109.445064][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.454348][ T9] usb 3-1: config 0 descriptor?? [ 109.476303][ T45] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 109.606321][ T45] usb 5-1: device descriptor read/64, error -71 [ 109.680297][ T3571] overlayfs: failed to clone upperpath [ 109.803602][ T3585] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.804139][ T3585] rust_binder: Error in use_page_slow: ESRCH [ 109.811325][ T3585] rust_binder: use_range failure ESRCH [ 109.818232][ T3585] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 109.824708][ T3585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 109.834178][ T3585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:757 [ 109.846897][ T45] usb 5-1: device descriptor read/64, error -71 [ 109.869276][ T3587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.869690][ T3587] rust_binder: Error in use_page_slow: ESRCH [ 109.877371][ T3587] rust_binder: use_range failure ESRCH [ 109.884064][ T3587] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 109.890247][ T3587] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 109.899492][ T3587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:759 [ 109.916347][ T3589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.096362][ T45] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 110.168643][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 110.176417][ T31] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 110.181128][ T9] asix 3-1:0.0: probe with driver asix failed with error -61 [ 110.246428][ T45] usb 5-1: device descriptor read/64, error -71 [ 110.263263][ T3604] fuse: Bad value for 'group_id' [ 110.268844][ T3604] fuse: Bad value for 'group_id' [ 110.337676][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.349859][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.360313][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.376147][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.386062][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.395037][ T31] usb 4-1: Product: syz [ 110.399875][ T31] usb 4-1: Manufacturer: syz [ 110.404894][ T31] usb 4-1: SerialNumber: syz [ 110.412078][ T31] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 110.419878][ T31] cdc_ncm 4-1:1.0: bind() failure [ 110.496332][ T45] usb 5-1: device descriptor read/64, error -71 [ 110.606398][ T45] usb usb5-port1: attempt power cycle [ 110.614660][ T3594] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.615122][ T3594] rust_binder: Error in use_page_slow: ESRCH [ 110.621943][ T3594] rust_binder: use_range failure ESRCH [ 110.628197][ T3594] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 110.635705][ T3594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 110.645386][ T3594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:766 [ 110.658689][ T31] usb 4-1: USB disconnect, device number 34 [ 110.946335][ T45] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 110.967603][ T45] usb 5-1: device descriptor read/8, error -71 [ 111.097691][ T45] usb 5-1: device descriptor read/8, error -71 [ 111.135603][ T3613] overlayfs: failed to clone upperpath [ 111.346282][ T45] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 111.367325][ T45] usb 5-1: device descriptor read/8, error -71 [ 111.443888][ T36] audit: type=1400 audit(1750605977.638:422): avc: denied { ioctl } for pid=3645 comm="syz.3.1110" path="socket:[22391]" dev="sockfs" ino=22391 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.452427][ T3651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.478002][ T36] audit: type=1400 audit(1750605977.678:423): avc: denied { ioctl } for pid=3650 comm="syz.3.1111" path="socket:[22850]" dev="sockfs" ino=22850 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.527436][ T45] usb 5-1: device descriptor read/8, error -71 [ 111.579941][ T3656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.619058][ T3656] rust_binder: Error in use_page_slow: ESRCH [ 111.619076][ T3656] rust_binder: use_range failure ESRCH [ 111.627533][ T3656] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 111.633874][ T3656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 111.636838][ T45] usb usb5-port1: unable to enumerate USB device [ 111.644389][ T3656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:784 [ 111.696712][ T3659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.708602][ T3659] rust_binder: Error in use_page_slow: ESRCH [ 111.716744][ T3659] rust_binder: use_range failure ESRCH [ 111.724082][ T3659] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 111.730583][ T3659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 111.740990][ T3659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:787 [ 111.761314][ T3661] fuse: Bad value for 'fd' [ 111.782722][ T36] audit: type=1326 audit(1750605977.978:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.3.1115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f224638e929 code=0x0 [ 112.033727][ T36] audit: type=1326 audit(1750605978.228:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfa78e929 code=0x7fc00000 [ 112.061193][ T306] usb 3-1: USB disconnect, device number 40 [ 112.149636][ T3684] fuse: Unknown parameter '' [ 112.184317][ T3688] syzkaller0: entered promiscuous mode [ 112.190330][ T3688] syzkaller0: entered allmulticast mode [ 112.303835][ T3700] input: syz0 as /devices/virtual/input/input15 [ 112.312696][ T3700] input: failed to attach handler leds to device input15, error: -6 [ 112.328502][ T36] audit: type=1326 audit(1750605978.528:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfa78e929 code=0x7ffc0000 [ 112.357375][ T3703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.367906][ T3703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.377882][ T36] audit: type=1326 audit(1750605978.548:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9dfa78e929 code=0x7ffc0000 [ 112.404083][ T36] audit: type=1326 audit(1750605978.548:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfa78e929 code=0x7ffc0000 [ 112.429559][ T36] audit: type=1326 audit(1750605978.548:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9dfa78e929 code=0x7ffc0000 [ 112.463644][ T36] audit: type=1326 audit(1750605978.548:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfa78e929 code=0x7ffc0000 [ 112.496294][ T36] audit: type=1326 audit(1750605978.548:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f9dfa78e929 code=0x7ffc0000 [ 112.509924][ T3714] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 112.522065][ T3714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:626 [ 112.527601][ T36] audit: type=1326 audit(1750605978.548:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfa78e929 code=0x7ffc0000 [ 112.535446][ T3714] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 112.550635][ T36] audit: type=1326 audit(1750605978.548:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9dfa78e929 code=0x7ffc0000 [ 112.569665][ T3714] rust_binder: Read failure Err(EFAULT) in pid:626 [ 112.577921][ T3713] rust_binder: Read failure Err(EAGAIN) in pid:508 [ 112.612612][ T36] audit: type=1326 audit(1750605978.548:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfa78e929 code=0x7ffc0000 [ 112.620779][ T3719] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 168, size: 255) [ 112.650756][ T36] audit: type=1326 audit(1750605978.558:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9dfa78d290 code=0x7ffc0000 [ 112.655310][ T3719] rust_binder: Error while translating object. [ 112.667300][ T36] audit: type=1326 audit(1750605978.558:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9dfa78e52b code=0x7ffc0000 [ 112.693205][ T3719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.710450][ T36] audit: type=1326 audit(1750605978.558:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9dfa78e52b code=0x7ffc0000 [ 112.723774][ T3719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:508 [ 112.732768][ T36] audit: type=1326 audit(1750605978.558:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9dfa78e52b code=0x7ffc0000 [ 112.794976][ T36] audit: type=1326 audit(1750605978.558:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9dfa78e52b code=0x7ffc0000 [ 112.888183][ T3743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:635 [ 112.963942][ T36] audit: type=1400 audit(1750605979.158:440): avc: denied { setcheckreqprot } for pid=3742 comm="syz.2.1142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 113.067064][ T306] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 113.175457][ T3758] kvm: pic: non byte write [ 113.183518][ T3758] random: crng reseeded on system resumption [ 113.238187][ T306] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 113.247320][ T306] usb 5-1: config 0 has no interface number 0 [ 113.254434][ T306] usb 5-1: config 0 interface 41 has no altsetting 0 [ 113.268604][ T306] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 113.274734][ T3762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.278777][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.283075][ T3762] rust_binder: Error in use_page_slow: ESRCH [ 113.289088][ T306] usb 5-1: Product: syz [ 113.296526][ T3762] rust_binder: use_range failure ESRCH [ 113.301515][ T306] usb 5-1: Manufacturer: syz [ 113.306653][ T3762] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 113.312841][ T306] usb 5-1: SerialNumber: syz [ 113.318091][ T3762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 113.332086][ T306] usb 5-1: config 0 descriptor?? [ 113.333375][ T3762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:800 [ 113.403071][ T3774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.413900][ T3774] rust_binder: Error in use_page_slow: ESRCH [ 113.420926][ T3774] rust_binder: use_range failure ESRCH [ 113.427504][ T3774] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 113.433677][ T3774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 113.443128][ T3774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:812 [ 113.568998][ T3779] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 113.820166][ T3787] binder: Bad value for 'stats' [ 114.147223][ T306] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 114.361978][ T3728] rust_binder: Error while translating object. [ 114.362034][ T3728] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 114.369821][ T3728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:513 [ 114.382104][ T306] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 114.402835][ T306] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 114.411564][ T3811] : renamed from vlan0 (while UP) [ 114.412954][ T306] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 114.440333][ T3816] binder: Bad value for 'stats' [ 114.440796][ T306] usb 5-1: USB disconnect, device number 42 [ 114.509374][ T3839] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.560510][ T3848] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=58 sclass=netlink_xfrm_socket pid=3848 comm=syz.0.1178 [ 114.581099][ T3848] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=56 sclass=netlink_xfrm_socket pid=3848 comm=syz.0.1178 [ 114.594230][ T3848] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57 sclass=netlink_xfrm_socket pid=3848 comm=syz.0.1178 [ 114.607571][ T3848] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55 sclass=netlink_xfrm_socket pid=3848 comm=syz.0.1178 [ 114.635287][ T3851] tipc: Enabling of bearer rejected, failed to enable media [ 114.663964][ T3855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 115.054557][ T3876] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.064817][ T3876] rust_binder: Error in use_page_slow: ESRCH [ 115.064833][ T3876] rust_binder: use_range failure ESRCH [ 115.071358][ T3876] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 115.077426][ T3876] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 115.086270][ T3876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:835 [ 115.115541][ T3881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3881 comm=syz.3.1188 [ 115.139423][ T3881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3881 comm=syz.3.1188 [ 115.166540][ T45] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 115.182024][ T3884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.317889][ T45] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.337524][ T45] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.350080][ T45] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 115.361657][ T45] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 115.372073][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.382283][ T3873] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.407200][ T3907] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1194'. [ 115.432187][ T3900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.441705][ T3900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.509637][ T3912] overlayfs: failed to clone upperpath [ 115.594423][ T3926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1201'. [ 115.647352][ T3935] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3935 comm=syz.0.1205 [ 115.997474][ T45] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 116.006049][ T45] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input16 [ 116.024138][ T45] usb 5-1: USB disconnect, device number 43 [ 116.213774][ T3977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.302263][ T3991] fuse: Unknown parameter '0x0000000000000006' [ 116.656244][ T306] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 116.827741][ T306] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 116.839703][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.850476][ T306] usb 4-1: config 0 descriptor?? [ 117.054998][ T4036] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 117.055024][ T4036] rust_binder: Error in use_page_slow: EBUSY [ 117.070650][ T4036] rust_binder: use_range failure EBUSY [ 117.077556][ T4036] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 117.083809][ T4036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 117.092793][ T4036] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 117.104550][ T4036] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:545 [ 117.134230][ T4041] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 117.157271][ T4041] rust_binder: Write failure EFAULT in pid:548 [ 117.296456][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 117.396323][ T45] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 117.457849][ T10] usb 3-1: config 160 has an invalid interface number: 52 but max is 0 [ 117.467341][ T10] usb 3-1: config 160 has no interface number 0 [ 117.474945][ T10] usb 3-1: config 160 interface 52 altsetting 6 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 117.488289][ T10] usb 3-1: config 160 interface 52 has no altsetting 0 [ 117.499087][ T10] usb 3-1: New USB device found, idVendor=ad15, idProduct=0725, bcdDevice=47.e1 [ 117.508881][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.517115][ T10] usb 3-1: Product: syz [ 117.522715][ T10] usb 3-1: Manufacturer: syz [ 117.527998][ T10] usb 3-1: SerialNumber: syz [ 117.558338][ T45] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 117.568927][ T45] usb 5-1: config 1 has no interface number 0 [ 117.576560][ T45] usb 5-1: config 1 interface 105 has no altsetting 0 [ 117.589600][ T45] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 117.604285][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.614770][ T45] usb 5-1: Product: syz [ 117.621019][ T45] usb 5-1: Manufacturer: syz [ 117.626859][ T45] usb 5-1: SerialNumber: syz [ 117.790750][ T10] rndis_host 3-1:160.52: skipping garbage [ 117.801309][ T10] usb 3-1: bad CDC descriptors [ 117.808461][ T10] usb 3-1: USB disconnect, device number 41 [ 117.821064][ T4048] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.823322][ T4049] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.869538][ T4004] fuse: Unknown parameter 'roo[!e' [ 117.876663][ T4057] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.888655][ T306] usb 4-1: Cannot set autoneg [ 117.889209][ T4058] rust_binder: Error while translating object. [ 117.897602][ T306] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 117.903197][ T4058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 117.911402][ T306] usb 4-1: USB disconnect, device number 36 [ 117.925422][ T4058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:677 [ 117.957193][ T4061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.974296][ T4061] rust_binder: Failed to allocate buffer. len:18446744073709551000, is_oneway:false [ 117.984706][ T4061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 117.996471][ T4061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:681 [ 118.031041][ T4063] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.064815][ T4065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.125000][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 118.125023][ T36] audit: type=1400 audit(1750605984.318:447): avc: denied { map } for pid=4076 comm="syz.2.1248" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 118.443941][ T45] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 118.612568][ T4099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.613083][ T4099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 118.620363][ T4099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:714 [ 118.651667][ T4101] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.661488][ T45] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 118.662477][ T4102] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.673059][ T45] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 5e:36:d8:9d:60:e9 [ 118.689305][ T4101] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1255'. [ 118.711234][ T45] usb 5-1: USB disconnect, device number 44 [ 118.715602][ T4101] rust_binder: Write failure EINVAL in pid:716 [ 118.730164][ T45] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 118.797445][ T45] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 118.809423][ T45] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 118.828789][ T45] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 119.008670][ T36] audit: type=1400 audit(1750605985.208:448): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 119.294449][ T36] audit: type=1400 audit(1750605985.488:449): avc: denied { append } for pid=4114 comm="syz.2.1261" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.450324][ T4119] support for the xor transformation has been removed. [ 119.496339][ T306] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 119.515079][ T4123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.567653][ T4124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:726 [ 119.631848][ T36] audit: type=1326 audit(1750605985.828:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0998e929 code=0x7ffc0000 [ 119.671366][ T36] audit: type=1326 audit(1750605985.828:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0998e929 code=0x7ffc0000 [ 119.703215][ T36] audit: type=1326 audit(1750605985.858:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd0998e929 code=0x7ffc0000 [ 119.734346][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 119.740625][ T36] audit: type=1326 audit(1750605985.858:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0998e929 code=0x7ffc0000 [ 119.747922][ T306] usb 4-1: config 0 has an invalid interface number: 82 but max is 0 [ 119.777478][ T36] audit: type=1326 audit(1750605985.858:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0998e929 code=0x7ffc0000 [ 119.789647][ T306] usb 4-1: config 0 has no interface number 0 [ 119.820395][ T36] audit: type=1326 audit(1750605985.858:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd0998e929 code=0x7ffc0000 [ 119.829018][ T306] usb 4-1: New USB device found, idVendor=0436, idProduct=0005, bcdDevice= 1.00 [ 119.857133][ T36] audit: type=1326 audit(1750605985.858:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0998e929 code=0x7ffc0000 [ 119.867931][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.908198][ T306] usb 4-1: config 0 descriptor?? [ 119.915336][ T306] ums-sddr09 4-1:0.82: USB Mass Storage device detected [ 120.123774][ T306] usb 4-1: USB disconnect, device number 37 [ 120.486493][ T4152] input: syz0 as /devices/virtual/input/input18 [ 120.498560][ T4152] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 120.706329][ T31] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 120.867458][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.879032][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.893855][ T45] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 120.893897][ T31] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 120.916652][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.929511][ T31] usb 3-1: config 0 descriptor?? [ 121.076463][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 121.086157][ T45] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 121.098945][ T45] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 121.113692][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.124711][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.136191][ T45] usb 4-1: Product: 봍ယ攨璓㒱宆ྋ먷륓绹猰쑽ฏ㷶䃽꽱汻軜ꨬ⯀鄣๮밷酎㮒堦곍ﭑ司뎢툤禹Ⴒ㺰亃⛹轘뒞 [ 121.156654][ T45] usb 4-1: Manufacturer: ј [ 121.161868][ T45] usb 4-1: SerialNumber: 蠥ᐺꙪ네臈졞턁쓗肝舅氡瞐᤿ꄐ瀻类믚䁕ꈢ﹥迫㏸◌駚ک⦼韆鲐⎉蝑ᎁ뤨蒘흫䓰솙歁鐝宨苜ퟐᦽණ룫꺁抣퓇၂费녆辯쐀ў辶⍐꩔瞯ꨫꈘᇺ纉鉬샙贊ᑐ涞兄ﲶ뚙砶酼↳玲旭ᶒ笼஋쵒笉繵韕鹩枟⤢噂涂⾷᯷곙풢嫮噷꛱♑⼉綀烎玟꧁㼘ᇂ㓲첈㸨 [ 121.173817][ T4168] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.201933][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 121.207547][ T4168] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.211901][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 121.221060][ T4168] rust_binder: Failed to allocate buffer. len:4208, is_oneway:true [ 121.232807][ T31] usb 3-1: USB disconnect, device number 42 [ 121.244896][ T4168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 121.253784][ T4168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:740 [ 121.276261][ T367] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 121.367501][ T4184] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.369160][ T4184] rust_binder: Write failure EINVAL in pid:756 [ 121.446375][ T367] usb 5-1: Using ep0 maxpacket: 32 [ 121.456350][ T45] cdc_ncm 4-1:1.0: bind() failure [ 121.459890][ T367] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.467979][ T45] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 121.490301][ T367] usb 5-1: config 0 interface 0 has no altsetting 0 [ 121.495748][ T45] cdc_ncm 4-1:1.1: bind() failure [ 121.498322][ T367] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 121.514431][ T367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.520109][ T45] usb 4-1: USB disconnect, device number 38 [ 121.525374][ T367] usb 5-1: config 0 descriptor?? [ 121.570844][ T4190] SELinux: security_context_str_to_sid () failed with errno=-22 [ 121.585541][ T4190] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.589801][ T4190] bridge0: port 4(gretap0) entered blocking state [ 121.612303][ T4190] bridge0: port 4(gretap0) entered disabled state [ 121.624793][ T4190] gretap0: entered allmulticast mode [ 121.633852][ T4190] gretap0: entered promiscuous mode [ 121.647714][ T4190] bridge0: port 4(gretap0) entered blocking state [ 121.654797][ T4190] bridge0: port 4(gretap0) entered forwarding state [ 121.669380][ T4190] rust_binder: Write failure EFAULT in pid:905 [ 121.932186][ T4206] rust_binder: Write failure EFAULT in pid:763 [ 121.942952][ T367] hid-picolcd 0003:04D8:F002.000F: unbalanced delimiter at end of report description [ 121.973684][ T367] hid-picolcd 0003:04D8:F002.000F: device report parse failed [ 122.015551][ T367] hid-picolcd 0003:04D8:F002.000F: probe with driver hid-picolcd failed with error -22 Stopping sshd: stopped /usr/sbin/sshd (pid 200) OK [ 122.264217][ T4226] binder: Bad value for 'max' [ 122.315487][ T4228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.316023][ T4228] rust_binder: Error in use_page_slow: ESRCH Stopping crond: [ 122.345355][ T4228] rust_binder: use_range failure ESRCH stopped /usr/sbin/crond (pid 193) OK [ 122.360093][ T4228] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 122.376407][ T4228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) [ 122.396282][ T4228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:920 Stopping network: [ 122.489808][ T4243] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.544314][ T4243] rust_binder: Error in use_page_slow: ESRCH [ 122.563493][ T4243] rust_binder: use_range failure ESRCH [ 122.604770][ T4243] rust_binder: Failed to allocate buffer. len:160, is_oneway:true [ 122.659630][ T4243] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } OK [ 122.687848][ T4243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:925 Stopping iptable[ 122.790215][ T4275] SELinux: security_context_str_to_sid () failed with errno=-22 s: OK [ 122.873809][ T4282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4282 comm=syz.0.1308 Stopping system message bus: [ 122.895113][ T4282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4282 comm=syz.0.1308 [ 122.909550][ T4282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4282 comm=syz.0.1308 [ 122.956426][ T4282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4282 comm=syz.0.1308 done [ 122.961398][ T4287] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.096810][ T4297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:934 [ 123.123235][ T4297] random: crng reseeded on system resumption Stopping klogd: OK [ 123.262939][ T4304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.263618][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 123.263634][ T36] audit: type=1400 audit(1750605989.458:503): avc: denied { call } for pid=4303 comm="syz.3.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 123.302126][ T4304] rust_binder: Error in use_page_slow: ESRCH Stopping acpid: [ 123.302148][ T4304] rust_binder: use_range failure ESRCH [ 123.309120][ T4304] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 123.322715][ T4304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 123.332789][ T4304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:937 [ 123.347074][ T36] audit: type=1400 audit(1750605989.548:504): avc: denied { write } for pid=94 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.382361][ T36] audit: type=1400 audit(1750605989.548:505): avc: denied { remove_name } for pid=94 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.408524][ T36] audit: type=1400 audit(1750605989.548:506): avc: denied { unlink } for pid=94 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.709863][ T4314] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4314 comm=syz.0.1314 [ 123.726325][ T36] audit: type=1400 audit(1750605989.908:507): avc: denied { nlmsg_read } for pid=4313 comm="syz.0.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 124.038122][ T367] usb 5-1: USB disconnect, device number 45 OK [ 124.376330][ T36] audit: type=1400 audit(1750605990.568:508): avc: denied { map } for pid=4339 comm="syz.4.1322" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Stopping syslogd: stopped /sbin/syslogd (pid 91) OK [ 124.442810][ T4349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 124.442842][ T4349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:570 [ 124.453117][ T36] audit: type=1400 audit(1750605990.638:509): avc: denied { set_context_mgr } for pid=4348 comm="syz.4.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 124.505259][ T4349] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 124.505284][ T4349] rust_binder: Read failure Err(EFAULT) in pid:570 [ 124.523283][ T36] audit: type=1400 audit(1750605990.718:510): avc: denied { read write } for pid=965 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.531273][ T4358] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.573164][ T4362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:575 [ 124.579822][ T36] audit: type=1400 audit(1750605990.718:511): avc: denied { open } for pid=965 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.616426][ T4358] rust_binder: Error in use_page_slow: ESRCH [ 124.616904][ T4358] rust_binder: use_range failure ESRCH [ 124.638563][ T4364] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 124.642108][ T4358] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 124.644519][ T36] audit: type=1400 audit(1750605990.718:512): avc: denied { ioctl } for pid=965 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.653439][ T4358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } umount: can't remount debugfs read-only [ 124.691641][ T4358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:776 [ 124.754046][ T4377] binder: Unknown parameter 'wlan0' umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /deSent SIGTERM to all processes Connection to 10.128.1.155 closed by remote host. [ 124.784569][ T4381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:779 [ 125.041813][ T3505] bridge0: port 3(syz_tun) entered disabled state [ 125.062295][ T3505] syz_tun (unregistering): left allmulticast mode [ 125.069632][ T3505] syz_tun (unregistering): left promiscuous mode [ 125.076437][ T3505] bridge0: port 3(syz_tun) entered disabled state [ 125.086637][ T1200] bridge0: port 3(syz_tun) entered disabled state [ 125.094543][ T1200] syz_tun (unregistering): left allmulticast mode [ 125.102002][ T1200] syz_tun (unregistering): left promiscuous mode [ 125.109556][ T1200] bridge0: port 3(syz_tun) entered disabled state [ 125.129271][ T46] bridge_slave_1: left allmulticast mode [ 125.135309][ T46] bridge_slave_1: left promiscuous mode [ 125.141451][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.149397][ T46] bridge_slave_0: left allmulticast mode [ 125.155264][ T46] bridge_slave_0: left promiscuous mode [ 125.161645][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.348975][ T46] veth1_macvtap: left promiscuous mode [ 125.354871][ T46] veth0_vlan: left promiscuous mode [ 125.627959][ T46] gretap0: left allmulticast mode [ 125.633532][ T46] gretap0: left promiscuous mode [ 125.638895][ T46] bridge0: port 4(gretap0) entered disabled state [ 125.646065][ T46] bridge_slave_1: left allmulticast mode [ 125.652315][ T46] bridge_slave_1: left promiscuous mode [ 125.658216][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.666872][ T46] bridge_slave_0: left allmulticast mode [ 125.672856][ T46] bridge_slave_0: left promiscuous mode [ 125.678927][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.788047][ T46] tipc: Disabling bearer [ 125.793875][ T46] tipc: Left network mode [ 125.799152][ T46] veth1_macvtap: left promiscuous mode [ 125.805382][ T46] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 126.937944][ T4388] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 126.944800][ T4388] ACPI: PM: Preparing to enter system sleep state S5 [ 126.952237][ T4388] kvm: exiting hardware virtualization [ 126.957834][ T4388] reboot: Power down serialport: VM disconnected.