last executing test programs: 2.342170754s ago: executing program 2 (id=1619): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 1.610947215s ago: executing program 1 (id=1625): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.488559387s ago: executing program 2 (id=1627): epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x138, 0x1a, 0x1, 0x3, 0x25dfdbfd, {{@in=@local, @in=@multicast1=0xac1414bb, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@broadcast, 0x4000000, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000000000}, {0x7b, 0x0, 0x2000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6b}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc75c2b196d661e27}, 0x0) 1.061301934s ago: executing program 0 (id=1633): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000180)) 1.037357444s ago: executing program 1 (id=1634): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 986.334845ms ago: executing program 0 (id=1635): add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f00000001c0)="bcfdc1", 0x3, 0xfffffffffffffffe) 929.374705ms ago: executing program 0 (id=1636): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) 929.139876ms ago: executing program 0 (id=1637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 928.985236ms ago: executing program 0 (id=1638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) 588.457241ms ago: executing program 2 (id=1640): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002192ea0845050c800a030102030109021275a8000000000904", @ANYBLOB="f548"], 0x0) 463.672063ms ago: executing program 3 (id=1644): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5893df66bf3ce816"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) 462.982883ms ago: executing program 3 (id=1645): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}]}}) 439.573473ms ago: executing program 3 (id=1646): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x100, 0x100}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) io_setup(0x1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 422.166453ms ago: executing program 3 (id=1647): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x110) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x4800) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005000000000000000000fffb00000000"]) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x160e) 361.406614ms ago: executing program 3 (id=1648): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0x8008770b, 0x2) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x84220, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x220a80, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x3, [0x0, 0x4, 0x5, 0x1, 0x8000, 0x2]}) 359.282564ms ago: executing program 3 (id=1649): setpgid(0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000004900)={{0x12, 0x1, 0x4a1, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x40, 0x4, 0x7}}}}}]}}]}}, &(0x7f0000004d80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000004a80)=@lang_id={0x4, 0x3, 0xe04}}, {0xb2, &(0x7f0000004c80)=@string={0xb2, 0x3, "6248a065268cbd5754f602bac31730ee4053aec505fedca30bf342a499007c04ca30fcc7a42071fb09b9e46d34862f20cd0be6a95f3b8ede52b865f3314b5f5a0b55bb1d1ab491fab86d7a2651275afeb7fd08882779f67446b80dbea9df1775cb87c64ec465a7223e9802b1c5fbb3cde376036b1547cecb9cdb5421618776dc1b4fbbaf890985d11c40e720e56bf1457b601c438f6326f55188d68caf2b868006021c9e420cf7dd2e654eac00c849d8"}}]}) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x8400ae8e, &(0x7f0000000080)=@x86={0xff, 0x0, 0x4, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfc, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5}) write(r0, &(0x7f00000000c0)="0df8c20102a87ca357842ef190a90a83b4354ba6634b779fba71c2426a1fbbd79a71a58ae4325ff2cbf6ba360843d2198c95", 0x32) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKRRPART(r6, 0x125f, 0x0) close(r6) 191.127647ms ago: executing program 1 (id=1650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) memfd_create(&(0x7f0000000140)='.\xdf*\'\x00', 0x4) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x13, 0x4}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x291, 0x0, 0x10000}]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, r4, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x10, 0x0, &(0x7f0000000540)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) 178.381617ms ago: executing program 1 (id=1651): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0]) unshare(0x62040200) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') read$FUSE(r2, &(0x7f0000008680)={0x2020}, 0x2020) (async, rerun: 64) syz_fuse_handle_req(r2, &(0x7f0000006680)="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", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) read$FUSE(r2, &(0x7f000000a6c0)={0x2020}, 0x2020) (async) chdir(&(0x7f0000000140)='./file0\x00') (async, rerun: 32) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) (async) request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xfffffffffffffffb) 109.355118ms ago: executing program 1 (id=1652): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x20000002}, 0x1c) recvfrom(r0, &(0x7f0000001180)=""/4096, 0x1000, 0x100, &(0x7f0000000000)=@l2={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1}, 0x80) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r1, r1, 0x0, 0x7ffff000) 107.465618ms ago: executing program 1 (id=1653): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xfffffffffffffdaf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000680)={@mcast2, 0x9884, 0x0, 0x3, 0x6, 0x4, 0xc7e}, 0x20) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYBLOB="c16cd022605593d3e21e2c7ab3d3f467b16be476bcb490f2", @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000e10193d57a5d21cb2e775095b020000000000000001090c0000000000000009010300000009210000000122120009050000010000000020d48006"], 0x0) clock_gettime(0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a04430002fb18000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0xfffffffffffffff7, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x1, 0x10001424, 0xbe2, 0x200, 0x6, 0x90, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f00000004c0)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000280)={0x1080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x21, @any, 0x0, 0x1}, 0xe) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/262, 0x106}], 0x1) 76.793939ms ago: executing program 0 (id=1654): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x6000) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000b40)=@fragment={0x62, 0x0, 0x4, 0x0, 0x0, 0xb, 0x66}, 0x8) r4 = socket(0x10, 0x803, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x17b, 0x0, 0xffffffffffffffff}]}) sendto(r4, &(0x7f00000005c0)="120000001200e7ef007b9fac0000000000a1", 0x12, 0x480c4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000007c0)=""/280, 0x118}, {&(0x7f0000004c40)=""/4097, 0x1001}, {&(0x7f0000000700)=""/129, 0x81}, {&(0x7f0000002300)=""/194, 0xc2}, {&(0x7f0000000280)=""/31, 0x1f}], 0x5}, 0x401}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x2, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000000380)=0x0) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000080)=0x16) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000240)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd, 0x10010, r0, 0xf3f69000) timer_delete(r9) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000480)=""/238, 0xee}], 0x7}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) socket$pptp(0x18, 0x1, 0x2) ioctl$VT_GETMODE(r10, 0x5601, &(0x7f0000000000)) 71.700889ms ago: executing program 2 (id=1655): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom1\x00', 0x1002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000001c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "2c5acccb5ca78cfd", "654b2c4cb38b155209781a102bc38846", "dc1c1e51", "3a1daa162b8443c9"}, 0x28) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000000000)=0x2, 0x4) r7 = socket$unix(0x1, 0x5, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = dup2(r7, r5) close_range(r8, 0xffffffffffffffff, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0xdf8, 0x16) 642.72µs ago: executing program 2 (id=1656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r4, 0xc048aeca, &(0x7f0000000040)=0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x0, 0x9, '\x00', 0x3}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x4004e502, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000000c0)=0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r7, 0x45809000) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_INTERRUPT(r4, 0xc048aeca, &(0x7f0000000040)=0x4) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x0, 0x9, '\x00', 0x3}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x4004e502, 0x0) (async) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000000c0)=0x28) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r7, 0x45809000) (async) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) 0s ago: executing program 2 (id=1657): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000002c0)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) kernel console output (not intermixed with test programs): usb 1-1: config 220 interface 76 has no altsetting 0 [ 48.679163][ T350] usb 1-1: config 220 interface 1 has no altsetting 0 [ 48.687440][ T350] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 48.696700][ T350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.704789][ T350] usb 1-1: Product: syz [ 48.709368][ T350] usb 1-1: Manufacturer: syz [ 48.714058][ T350] usb 1-1: SerialNumber: syz [ 48.726322][ T9] usb 4-1: device descriptor read/64, error -71 [ 48.966311][ T9] usb 4-1: device descriptor read/64, error -71 [ 48.976237][ T1059] rust_binder: Write failure EINVAL in pid:153 [ 49.206321][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 49.346384][ T9] usb 4-1: device descriptor read/64, error -71 [ 49.586420][ T9] usb 4-1: device descriptor read/64, error -71 [ 49.706407][ T9] usb usb4-port1: attempt power cycle [ 50.046392][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 50.067505][ T9] usb 4-1: device descriptor read/8, error -71 [ 50.197304][ T9] usb 4-1: device descriptor read/8, error -71 [ 50.446337][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 50.468301][ T9] usb 4-1: device descriptor read/8, error -71 [ 50.597515][ T9] usb 4-1: device descriptor read/8, error -71 [ 50.658699][ T31] usb 2-1: USB disconnect, device number 9 [ 50.707145][ T9] usb usb4-port1: unable to enumerate USB device [ 50.775489][ T36] audit: type=1400 audit(1750597245.162:380): avc: denied { create } for pid=1065 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 50.799892][ T36] audit: type=1400 audit(1750597245.192:381): avc: denied { write } for pid=1067 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.822669][ T36] audit: type=1400 audit(1750597245.212:382): avc: denied { ioctl } for pid=1067 comm="syz.1.233" path="pid:[4026532293]" dev="nsfs" ino=4026532293 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.016555][ T36] audit: type=1326 audit(1750597245.412:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1070 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca758e929 code=0x7ffc0000 [ 51.039958][ T36] audit: type=1326 audit(1750597245.412:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1070 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ca758e929 code=0x7ffc0000 [ 51.166324][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 51.186691][ T350] usb 1-1: selecting invalid altsetting 0 [ 51.196401][ T350] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 51.202847][ T350] usb 1-1: No valid video chain found. [ 51.212573][ T350] usb 1-1: USB disconnect, device number 16 [ 51.316336][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 51.322746][ T31] usb 2-1: config 5 has an invalid interface number: 5 but max is 1 [ 51.330819][ T31] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 51.339617][ T31] usb 2-1: config 5 has an invalid interface number: 231 but max is 1 [ 51.347967][ T31] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 51.357219][ T31] usb 2-1: config 5 has no interface number 0 [ 51.363492][ T31] usb 2-1: config 5 has no interface number 1 [ 51.370727][ T1083] fuse: Bad value for 'group_id' [ 51.375704][ T1083] fuse: Bad value for 'group_id' [ 51.380737][ T31] usb 2-1: config 5 interface 5 altsetting 6 endpoint 0xA has an invalid bInterval 128, changing to 7 [ 51.391952][ T31] usb 2-1: config 5 interface 5 altsetting 6 endpoint 0xD has an invalid bInterval 87, changing to 10 [ 51.402955][ T31] usb 2-1: config 5 interface 5 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 51.413505][ T31] usb 2-1: config 5 interface 5 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 51.424409][ T31] usb 2-1: config 5 interface 5 altsetting 6 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 51.435421][ T31] usb 2-1: config 5 interface 5 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 51.446348][ T31] usb 2-1: config 5 interface 5 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 51.456904][ T31] usb 2-1: config 5 interface 5 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 51.467465][ T31] usb 2-1: config 5 interface 231 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 51.478369][ T31] usb 2-1: config 5 interface 231 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 51.489162][ T31] usb 2-1: config 5 interface 231 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 51.500520][ T31] usb 2-1: config 5 interface 231 altsetting 7 bulk endpoint 0x5 has invalid maxpacket 1023 [ 51.511537][ T31] usb 2-1: config 5 interface 231 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 51.524256][ T31] usb 2-1: config 5 interface 5 has no altsetting 0 [ 51.530998][ T31] usb 2-1: config 5 interface 231 has no altsetting 0 [ 51.539501][ T31] usb 2-1: New USB device found, idVendor=19d2, idProduct=0077, bcdDevice=6d.cd [ 51.548702][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.557482][ T31] usb 2-1: Product: ᰁ [ 51.561733][ T31] usb 2-1: Manufacturer: 촗鮊Í싶䅣촭䴓麢়羟鮢蚿飪䞓쁇힋㖻瀱ᶀ씼꺩嶛筱ﻅ먇 [ 51.562444][ T1093] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 51.573155][ T31] usb 2-1: SerialNumber: 쎯豗ꤽ喠甜尸뾨䈌Ҩ㽠豄ჾ뉘牵畅⼂估浥≱૛¸䙰﮸釀箲㘅㑾ꂀ⦢晭͙⺏㔻躅ே᥮ヅᷓ萂༊仒ᨇ驸髧 [ 51.853827][ T31] usb 2-1: USB disconnect, device number 10 [ 51.988432][ T1122] batadv_slave_1: entered promiscuous mode [ 51.995074][ T1121] batadv_slave_1: left promiscuous mode [ 52.103458][ T1132] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 52.115088][ T1132] overlayfs: missing 'lowerdir' [ 52.132898][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 52.132917][ T36] audit: type=1400 audit(1750597246.522:413): avc: denied { read } for pid=1133 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.400402][ T1151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.427091][ T36] audit: type=1400 audit(1750597246.822:414): avc: denied { write } for pid=1155 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.449836][ T36] audit: type=1400 audit(1750597246.822:415): avc: denied { ioctl } for pid=1155 comm="syz.1.260" path="socket:[8817]" dev="sockfs" ino=8817 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.482754][ T36] audit: type=1400 audit(1750597246.822:416): avc: denied { create } for pid=1155 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 52.504073][ T36] audit: type=1400 audit(1750597246.822:417): avc: denied { listen } for pid=1155 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.526103][ T1160] Dead loop on virtual device ip6_vti0, fix it urgently! [ 52.534622][ T1160] rust_binder: Write failure EFAULT in pid:198 [ 52.568716][ T1162] syzkaller0: entered promiscuous mode [ 52.580546][ T1162] syzkaller0: entered allmulticast mode [ 52.743524][ T1175] 9pnet: p9_errstr2errno: server reported unknown error MB.rsvd.u [ 52.795033][ T1179] netlink: 'syz.3.269': attribute type 4 has an invalid length. [ 52.803057][ T1179] netlink: 17 bytes leftover after parsing attributes in process `syz.3.269'. [ 52.813477][ T1179] fuse: Bad value for 'fd' [ 52.820259][ T1179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.049623][ T1187] syzkaller0: entered promiscuous mode [ 53.056331][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 53.061658][ T1187] syzkaller0: entered allmulticast mode [ 53.149094][ T1189] SELinux: security_context_str_to_sid () failed with errno=-22 [ 53.227887][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 53.235587][ T9] usb 4-1: can't read configurations, error -61 [ 53.248499][ T36] audit: type=1400 audit(1750597247.642:418): avc: denied { bind } for pid=1191 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.366328][ T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 53.517804][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 53.525497][ T9] usb 4-1: can't read configurations, error -61 [ 53.531977][ T9] usb usb4-port1: attempt power cycle [ 53.713500][ T36] audit: type=1400 audit(1750597248.102:419): avc: denied { mounton } for pid=1198 comm="syz.0.277" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 53.772384][ T1201] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.797416][ T1206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 53.872330][ T1208] syzkaller0: entered promiscuous mode [ 53.887021][ T1208] syzkaller0: entered allmulticast mode [ 53.890244][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 53.918230][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 53.925947][ T9] usb 4-1: can't read configurations, error -61 [ 54.044340][ T36] audit: type=1326 audit(1750597248.432:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1211 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca758e929 code=0x7ffc0000 [ 54.056369][ T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 54.068414][ T36] audit: type=1326 audit(1750597248.432:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1211 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca758e929 code=0x7ffc0000 [ 54.110279][ T36] audit: type=1326 audit(1750597248.442:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1211 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f4ca758e929 code=0x7ffc0000 [ 54.135966][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 54.143655][ T9] usb 4-1: can't read configurations, error -61 [ 54.150198][ T9] usb usb4-port1: unable to enumerate USB device [ 54.442831][ T1228] input: syz0 as /devices/virtual/input/input8 [ 54.504012][ T1239] syzkaller0: entered promiscuous mode [ 54.509543][ T1239] syzkaller0: entered allmulticast mode [ 54.594695][ T1241] rust_binder: Failed copying remainder into alloc: EFAULT [ 54.594715][ T1241] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 54.602126][ T1241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 54.610500][ T1241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:187 [ 54.998483][ T1264] 9pnet_fd: Insufficient options for proto=fd [ 55.040368][ T1268] netlink: 'syz.2.302': attribute type 29 has an invalid length. [ 55.133090][ T1276] netlink: 60 bytes leftover after parsing attributes in process `syz.2.306'. [ 55.492695][ T1285] syzkaller0: entered promiscuous mode [ 55.498319][ T1285] syzkaller0: entered allmulticast mode [ 55.733232][ T1298] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 55.733253][ T1298] rust_binder: Error while translating object. [ 55.743916][ T1298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.750337][ T1298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 55.782677][ T1300] netlink: 'syz.1.315': attribute type 15 has an invalid length. [ 55.822692][ T1300] syzkaller0: entered promiscuous mode [ 55.828667][ T1300] syzkaller0: entered allmulticast mode [ 55.877239][ T1300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 55.877278][ T1300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:219 [ 56.896410][ T9] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 57.057836][ T9] usb 4-1: config 0 has an invalid interface number: 127 but max is 0 [ 57.066197][ T9] usb 4-1: config 0 has no interface number 0 [ 57.072635][ T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 57.081908][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.094295][ T9] usb 4-1: config 0 descriptor?? [ 57.303795][ T1355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.306193][ T1355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:195 [ 57.453219][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 57.497168][ T1359] overlayfs: failed to clone upperpath [ 57.502848][ T1361] syzkaller0: entered promiscuous mode [ 57.506668][ T36] audit: type=1400 audit(1750597251.842:493): avc: denied { append } for pid=1356 comm="syz.0.337" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 57.508586][ T1361] syzkaller0: entered allmulticast mode [ 57.531807][ T36] audit: type=1400 audit(1750597251.852:494): avc: denied { execute } for pid=1356 comm="syz.0.337" path="/selinux/context" dev="selinuxfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 57.602512][ T1364] Zero length message leads to an empty skb [ 57.777827][ T36] audit: type=1400 audit(1750597252.172:495): avc: denied { write } for pid=1379 comm="syz.1.346" path="socket:[10834]" dev="sockfs" ino=10834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.779290][ T1383] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.817192][ T1385] rust_binder: Write failure EFAULT in pid:212 [ 57.846049][ T36] audit: type=1400 audit(1750597252.232:496): avc: denied { connect } for pid=1386 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.930491][ T36] audit: type=1400 audit(1750597252.322:497): avc: denied { create } for pid=1388 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.043650][ T1396] syzkaller0: entered promiscuous mode [ 58.049260][ T1396] syzkaller0: entered allmulticast mode [ 58.122108][ T36] audit: type=1400 audit(1750597252.512:498): avc: denied { nlmsg_read } for pid=1397 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.343063][ T1407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:238 [ 58.362390][ T36] audit: type=1326 audit(1750597252.752:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1410 comm="syz.2.359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ca758e929 code=0x0 [ 58.412437][ T36] audit: type=1326 audit(1750597252.802:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1410 comm="syz.2.359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ca758e929 code=0x0 [ 58.502509][ T1415] tipc: Started in network mode [ 58.510032][ T1415] tipc: Node identity 42f9ef88d6db, cluster identity 4711 [ 58.517965][ T1415] tipc: Enabled bearer , priority 0 [ 58.539784][ T1418] syzkaller0: entered promiscuous mode [ 58.545386][ T1418] syzkaller0: entered allmulticast mode [ 58.569652][ T1415] syzkaller0: entered promiscuous mode [ 58.575186][ T1415] syzkaller0: entered allmulticast mode [ 58.581558][ T1415] tipc: Resetting bearer [ 58.605409][ T1414] tipc: Resetting bearer [ 58.625525][ T1414] tipc: Disabling bearer [ 58.680541][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.824449][ T1446] syzkaller0: entered promiscuous mode [ 59.830344][ T1446] syzkaller0: entered allmulticast mode [ 59.879320][ T1448] process 'syz.2.372' launched './file1' with NULL argv: empty string added [ 59.904489][ T36] audit: type=1326 audit(1750597254.292:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca758e929 code=0x7ffc0000 [ 59.924042][ T1455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.947803][ T1453] tipc: Started in network mode [ 59.959412][ T1453] tipc: Node identity 4, cluster identity 4711 [ 59.965644][ T1453] tipc: Node number set to 4 [ 59.965834][ T9] asix 4-1:0.127 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 59.973922][ T36] audit: type=1326 audit(1750597254.332:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ca758e929 code=0x7ffc0000 [ 59.987140][ T9] asix 4-1:0.127 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 60.014608][ T9] asix 4-1:0.127: probe with driver asix failed with error -71 [ 60.024258][ T1458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.033147][ T1458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.041204][ T9] usb 4-1: USB disconnect, device number 15 [ 60.184495][ T1486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.289758][ T1499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.296819][ T1499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.346346][ T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 60.361907][ T1500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:279 [ 60.486346][ T9] usb 4-1: device descriptor read/64, error -71 [ 60.706359][ T594] Bluetooth: hci0: command 0x1003 tx timeout [ 60.706359][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.736340][ T9] usb 4-1: device descriptor read/64, error -71 [ 60.976319][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 61.066302][ T306] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 61.106382][ T9] usb 4-1: device descriptor read/64, error -71 [ 61.134482][ T1521] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 61.142736][ T1521] rust_binder: Write failure EINVAL in pid:282 [ 61.154307][ T1523] binder: Unknown parameter '@' [ 61.216321][ T306] usb 2-1: Using ep0 maxpacket: 16 [ 61.222721][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.233814][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.243655][ T306] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 61.252779][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.261508][ T306] usb 2-1: config 0 descriptor?? [ 61.346326][ T9] usb 4-1: device descriptor read/64, error -71 [ 61.456451][ T9] usb usb4-port1: attempt power cycle [ 61.669594][ T306] hid-multitouch 0003:1FD2:6007.0005: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 61.806369][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 61.827554][ T9] usb 4-1: device descriptor read/8, error -71 [ 61.869670][ T1512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.878214][ T1512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.890992][ T435] usb 2-1: USB disconnect, device number 11 [ 61.957419][ T9] usb 4-1: device descriptor read/8, error -71 [ 62.196418][ T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 62.217407][ T9] usb 4-1: device descriptor read/8, error -71 [ 62.347537][ T9] usb 4-1: device descriptor read/8, error -71 [ 62.456502][ T9] usb usb4-port1: unable to enumerate USB device [ 66.534187][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 66.534217][ T36] audit: type=1400 audit(1750597260.922:574): avc: denied { create } for pid=1531 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 66.591860][ T1535] tipc: Started in network mode [ 66.607775][ T1535] tipc: Node identity , cluster identity 4711 [ 66.617240][ T1547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1547 comm=syz.2.404 [ 66.636022][ T1549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:238 [ 66.699056][ T1560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.708575][ T1560] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 66.879407][ T435] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 67.046309][ T435] usb 4-1: Using ep0 maxpacket: 16 [ 67.052718][ T435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.064647][ T435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.074805][ T435] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 67.089062][ T435] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 67.100653][ T435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.112399][ T435] usb 4-1: config 0 descriptor?? [ 67.268332][ T1577] rust_binder: Error while translating object. [ 67.268395][ T1577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.274717][ T1577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:302 [ 67.302509][ T36] audit: type=1400 audit(1750597261.692:575): avc: denied { accept } for pid=1579 comm="syz.0.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 67.303239][ T1580] tipc: Trying to set illegal importance in message [ 67.525294][ T435] microsoft 0003:045E:07DA.0006: unknown main item tag 0xd [ 67.532722][ T435] microsoft 0003:045E:07DA.0006: unknown global tag 0xc [ 67.539876][ T435] microsoft 0003:045E:07DA.0006: item 0 0 1 12 parsing failed [ 67.540501][ T1585] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 67.548025][ T435] microsoft 0003:045E:07DA.0006: parse failed [ 67.554634][ T1585] rust_binder: Write failure EINVAL in pid:311 [ 67.560929][ T435] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22 [ 67.634618][ T36] audit: type=1400 audit(1750597262.022:576): avc: denied { accept } for pid=1592 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.676608][ T1600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 67.680236][ T1602] rust_binder: Error while translating object. [ 67.685602][ T1602] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 67.691894][ T1602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:271 [ 67.708456][ T1604] binder: Bad value for 'max' [ 67.731966][ T1609] binder: Bad value for 'max' [ 67.737945][ T435] usb 4-1: USB disconnect, device number 20 [ 67.800474][ T36] audit: type=1326 audit(1750597262.192:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1615 comm="syz.0.427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe0e8d8e929 code=0x0 [ 68.266595][ T1639] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.350068][ T594] Bluetooth: hci0: sending frame failed (-49) [ 68.356397][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 68.651373][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.657820][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.946377][ T350] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 68.982455][ T1653] overlayfs: failed to clone upperpath [ 69.006725][ T36] audit: type=1400 audit(1750597263.392:578): avc: denied { nlmsg_tty_audit } for pid=1657 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 69.029716][ T1660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 69.110453][ T350] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.111569][ T1667] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 69.120351][ T350] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 69.138062][ T350] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.152388][ T350] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 69.161525][ T350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 69.169768][ T350] usb 1-1: Product: syz [ 69.174063][ T350] usb 1-1: Manufacturer: syz [ 69.178700][ T350] usb 1-1: SerialNumber: syz [ 69.389667][ T350] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 69.477292][ T350] hid-generic 0000:7054:10A8.0007: item fetching failed at offset 0/9 [ 69.477521][ T1678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:264 [ 69.486136][ T350] hid-generic 0000:7054:10A8.0007: probe with driver hid-generic failed with error -22 [ 69.587836][ T9] usb 1-1: USB disconnect, device number 17 [ 69.594538][ T9] usblp0: removed [ 70.106080][ T1698] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 70.199045][ T1708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 70.199085][ T1708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:345 [ 70.313618][ T36] audit: type=1400 audit(1750597264.702:579): avc: denied { name_bind } for pid=1717 comm="syz.2.460" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 70.349271][ T1723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:352 [ 70.354204][ T36] audit: type=1400 audit(1750597264.742:580): avc: denied { sqpoll } for pid=1722 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.386079][ T36] audit: type=1400 audit(1750597264.742:581): avc: denied { sqpoll } for pid=1722 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.676285][ T435] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 70.706315][ T594] Bluetooth: hci0: command 0x1003 tx timeout [ 70.706313][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.759849][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 70.777007][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.836312][ T435] usb 1-1: Using ep0 maxpacket: 16 [ 70.844957][ T435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.865082][ T435] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 70.896313][ T435] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 70.915236][ T435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.924944][ T435] usb 1-1: config 0 descriptor?? [ 70.937536][ T435] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 70.943010][ T1749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.006293][ T475] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 71.022000][ T36] audit: type=1400 audit(1750597265.422:582): avc: denied { map } for pid=1754 comm="syz.1.471" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 71.063144][ T36] audit: type=1400 audit(1750597265.442:583): avc: denied { create } for pid=1754 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 71.136972][ T1732] rust_binder: Write failure EFAULT in pid:359 [ 71.137238][ T9] usb 1-1: USB disconnect, device number 18 [ 71.176343][ T475] usb 4-1: Using ep0 maxpacket: 8 [ 71.181880][ T475] usb 4-1: too many configurations: 103, using maximum allowed: 8 [ 71.191135][ T475] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 71.198765][ T475] usb 4-1: can't read configurations, error -61 [ 71.296333][ T435] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 71.336327][ T475] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 71.446286][ T435] usb 2-1: Using ep0 maxpacket: 16 [ 71.452514][ T435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.463461][ T435] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 71.476372][ T435] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 71.485480][ T435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.494486][ T435] usb 2-1: config 0 descriptor?? [ 71.499558][ T475] usb 4-1: Using ep0 maxpacket: 8 [ 71.505764][ T475] usb 4-1: too many configurations: 103, using maximum allowed: 8 [ 71.514823][ T475] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 71.522461][ T475] usb 4-1: can't read configurations, error -61 [ 71.528876][ T475] usb usb4-port1: attempt power cycle [ 71.773094][ T1791] rust_binder: Write failure EFAULT in pid:374 [ 71.789725][ T1796] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 71.808939][ T1798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:381 [ 71.849462][ T36] audit: type=1400 audit(1750597266.242:584): avc: denied { execute_no_trans } for pid=1803 comm="syz.0.488" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.866336][ T475] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 71.907308][ T475] usb 4-1: Using ep0 maxpacket: 8 [ 71.915799][ T475] usb 4-1: too many configurations: 103, using maximum allowed: 8 [ 71.923967][ T36] audit: type=1400 audit(1750597266.322:585): avc: denied { connect } for pid=1810 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.925068][ T475] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 71.944742][ T36] audit: type=1400 audit(1750597266.342:586): avc: denied { mount } for pid=1810 comm="syz.0.490" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 71.951228][ T475] usb 4-1: can't read configurations, error -61 [ 71.979633][ T36] audit: type=1400 audit(1750597266.372:587): avc: denied { mounton } for pid=1810 comm="syz.0.490" path="/133/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 72.002497][ T36] audit: type=1400 audit(1750597266.402:588): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 72.012693][ T1813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.024014][ T1813] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 72.106310][ T475] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 72.122656][ T435] usbhid 2-1:0.0: can't add hid device: -71 [ 72.128682][ T435] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 72.136827][ T475] usb 4-1: Using ep0 maxpacket: 8 [ 72.142762][ T435] usb 2-1: USB disconnect, device number 12 [ 72.148784][ T475] usb 4-1: too many configurations: 103, using maximum allowed: 8 [ 72.158899][ T475] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 72.166582][ T475] usb 4-1: can't read configurations, error -61 [ 72.173001][ T475] usb usb4-port1: unable to enumerate USB device [ 72.244941][ T1817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'. [ 72.286354][ T65] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 72.437510][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.448476][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.458384][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.471326][ T65] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.480469][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.489235][ T65] usb 1-1: config 0 descriptor?? [ 72.633102][ T1822] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.897269][ T65] plantronics 0003:047F:FFFF.0009: global environment stack underflow [ 72.911975][ T65] plantronics 0003:047F:FFFF.0009: item 0 4 1 11 parsing failed [ 72.919865][ T65] plantronics 0003:047F:FFFF.0009: parse failed [ 72.926174][ T65] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22 [ 73.618437][ T1871] netlink: 72 bytes leftover after parsing attributes in process `syz.2.511'. [ 73.687854][ T65] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 73.695313][ T65] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 73.703432][ T65] hid-generic 0000:0003:0000.000A: hidraw0: HID v0.11 Device [syz0] on syz0 [ 73.759292][ T1885] can: request_module (can-proto-0) failed. [ 73.768295][ T1888] can: request_module (can-proto-0) failed. [ 73.811469][ T36] audit: type=1400 audit(1750597268.202:589): avc: denied { create } for pid=1897 comm="syz.3.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 73.831518][ T1898] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 73.831547][ T1898] rust_binder: Error while translating object. [ 73.859858][ T1898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.866176][ T1898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:282 [ 73.870668][ T1903] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.899459][ T36] audit: type=1326 audit(1750597268.292:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1906 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263f8e929 code=0x7ffc0000 [ 73.938270][ T1907] binder: Unknown parameter ''Z>~8W [ 73.938270][ T1907] ' [ 73.946287][ T36] audit: type=1326 audit(1750597268.292:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1906 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263f8e929 code=0x7ffc0000 [ 73.947959][ T1903] rust_binder: Error in use_page_slow: ESRCH [ 73.970111][ T1903] rust_binder: use_range failure ESRCH [ 73.979796][ T36] audit: type=1326 audit(1750597268.332:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1906 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9263f8e929 code=0x7ffc0000 [ 73.983727][ T1903] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 74.003764][ T36] audit: type=1326 audit(1750597268.332:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1906 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263f8e929 code=0x7ffc0000 [ 74.015925][ T1903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 74.040383][ T1903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:318 [ 74.170930][ T1918] rust_binder: Error in use_page_slow: ESRCH [ 74.180367][ T1914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.522'. [ 74.185739][ T1918] rust_binder: use_range failure ESRCH [ 74.195706][ T1914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.522'. [ 74.207721][ T1918] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 74.212627][ T1918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 74.221025][ T1918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:322 [ 74.486312][ T65] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 74.516317][ T350] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 74.666299][ T350] usb 2-1: Using ep0 maxpacket: 32 [ 74.672642][ T350] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 74.681025][ T350] usb 2-1: config 0 has no interface number 0 [ 74.687171][ T350] usb 2-1: config 0 interface 184 has no altsetting 0 [ 74.695453][ T350] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 74.704565][ T350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.712839][ T350] usb 2-1: Product: syz [ 74.717191][ T350] usb 2-1: Manufacturer: syz [ 74.721832][ T350] usb 2-1: SerialNumber: syz [ 74.727438][ T350] usb 2-1: config 0 descriptor?? [ 74.733553][ T350] smsc75xx v1.0.0 [ 75.055684][ T475] usb 1-1: USB disconnect, device number 19 [ 75.067896][ T1933] binder: Bad value for 'defcontext' [ 75.234463][ T1936] overlay: ./file0 is not a directory [ 75.240744][ T1936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 75.560026][ T1940] tipc: Enabling of bearer rejected, failed to enable media [ 75.942258][ T350] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -61 [ 75.953291][ T350] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 75.987747][ T1954] netlink: 104 bytes leftover after parsing attributes in process `syz.0.537'. [ 76.013430][ T1958] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 76.013457][ T1958] rust_binder: Error while translating object. [ 76.022299][ T1958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.028645][ T1958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:411 [ 76.249381][ T350] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 76.269705][ T350] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 76.279423][ T350] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 76.289735][ T350] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 76.299243][ T350] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 76.308748][ T350] usb 2-1: USB disconnect, device number 13 [ 76.873004][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 76.873022][ T36] audit: type=1400 audit(1750597271.262:605): avc: denied { execute } for pid=2009 comm="syz.2.556" path="/213/cgroup.controllers" dev="tmpfs" ino=1169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.036304][ T350] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 77.197374][ T350] usb 2-1: descriptor type invalid, skip [ 77.203443][ T350] usb 2-1: not running at top speed; connect to a high speed hub [ 77.212094][ T350] usb 2-1: config 0 has no interfaces? [ 77.219336][ T350] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 77.228649][ T350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.236855][ T350] usb 2-1: Product: syz [ 77.241104][ T350] usb 2-1: Manufacturer: syz [ 77.253350][ T350] usb 2-1: SerialNumber: syz [ 77.262660][ T350] usb 2-1: config 0 descriptor?? [ 77.474833][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.491119][ T2027] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 77.505344][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.506885][ T2027] rust_binder: Write failure EINVAL in pid:302 [ 77.542775][ T2038] overlayfs: conflicting options: userxattr,metacopy=on [ 78.126304][ T480] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 78.270467][ T2070] 9pnet_fd: Insufficient options for proto=fd [ 78.277758][ T480] usb 1-1: config 0 has an invalid interface number: 238 but max is 0 [ 78.285983][ T480] usb 1-1: config 0 has no interface number 0 [ 78.300683][ T480] usb 1-1: config 0 interface 238 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 78.315767][ T480] usb 1-1: config 0 interface 238 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 78.327309][ T480] usb 1-1: config 0 interface 238 has no altsetting 0 [ 78.335635][ T480] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 78.345050][ T480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.356301][ T480] usb 1-1: Product: syz [ 78.362755][ T480] usb 1-1: Manufacturer: syz [ 78.368912][ T480] usb 1-1: SerialNumber: syz [ 78.374588][ T480] usb 1-1: config 0 descriptor?? [ 78.381045][ T2045] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 78.388625][ T2045] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 78.398938][ T480] ums-usbat 1-1:0.238: USB Mass Storage device detected [ 78.407152][ T480] ums-usbat 1-1:0.238: Quirks match for vid 0781 pid 0005: 1 [ 79.501035][ T2081] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 79.509329][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.509454][ T2081] rust_binder: Write failure EINVAL in pid:424 [ 79.642861][ T2084] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 79.809057][ T723] usb 2-1: USB disconnect, device number 14 [ 79.929360][ T2092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.929394][ T2092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.931503][ T2093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337 [ 79.935933][ T2092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.977109][ T2099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.038549][ T2099] rust_binder: Error while translating object. [ 80.045049][ T2099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.051411][ T2099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:344 [ 80.274188][ T2108] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.284783][ T2108] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 80.291287][ T2108] rust_binder: Error while translating object. [ 80.301922][ T2108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.308162][ T2108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:353 [ 80.331704][ T36] audit: type=1400 audit(1750597274.730:606): avc: denied { ioctl } for pid=2109 comm="syz.1.590" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 80.383480][ T2110] support for cryptoloop has been removed. Use dm-crypt instead. [ 80.421605][ T2115] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.441875][ T2120] rust_binder: validate_parent_fixup: new_min_offset=34359738424, sg_entry.length=0 [ 80.448560][ T2120] rust_binder: Error while translating object. [ 80.458416][ T2120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.464691][ T2120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:309 [ 80.520972][ T2132] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.531313][ T2132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 80.537846][ T2132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:369 [ 80.609288][ T2140] rust_binder: Write failure EFAULT in pid:375 [ 80.635642][ T2143] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 80.641921][ T2143] rust_binder: Error while translating object. [ 80.652682][ T2143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.658965][ T2143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:377 [ 80.678151][ T36] audit: type=1400 audit(1750597275.080:607): avc: denied { getopt } for pid=2133 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.710767][ T480] ums-usbat 1-1:0.238: probe with driver ums-usbat failed with error -5 [ 80.729974][ T2148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.982783][ T2160] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.982933][ T2160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:388 [ 80.990139][ T2160] rust_binder: Error while translating object. [ 80.999376][ T2160] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.005648][ T2160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:388 [ 81.800534][ T2180] rust_binder: Read failure Err(EAGAIN) in pid:392 [ 81.853832][ T723] usb 1-1: USB disconnect, device number 20 [ 81.875254][ T2192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:429 [ 82.048591][ T2211] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.079218][ T2216] binder: Unknown parameter 'coyBLV"i5ntext' [ 82.106286][ T435] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 82.145456][ T2219] binder: Unknown parameter 'coyBLV"i5ntext' [ 82.191336][ T36] audit: type=1400 audit(1750597276.590:608): avc: denied { create } for pid=2220 comm="syz.1.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.220631][ T2223] __vm_enough_memory: pid: 2223, comm: syz.2.623, bytes: 21199866556416 not enough memory for the allocation [ 82.242620][ T2225] binder: Unknown parameter 'fscontext?}' [ 82.263045][ T2227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.287513][ T723] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 82.316284][ T435] usb 4-1: Using ep0 maxpacket: 16 [ 82.322843][ T435] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 82.331598][ T435] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.341868][ T435] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.352321][ T435] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.361475][ T435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.372050][ T435] usb 4-1: Product: syz [ 82.376511][ T435] usb 4-1: Manufacturer: syz [ 82.381143][ T435] usb 4-1: SerialNumber: syz [ 82.467398][ T723] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 82.468591][ T2239] netlink: 104 bytes leftover after parsing attributes in process `syz.1.632'. [ 82.476726][ T723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.494874][ T723] usb 1-1: config 0 descriptor?? [ 82.696500][ T2244] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.696600][ T2245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:440 [ 82.706896][ T723] usb 1-1: Cannot read MAC address [ 82.721882][ T723] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 82.737281][ T723] usb 1-1: USB disconnect, device number 21 [ 82.741674][ T2248] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.790155][ T2190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.805141][ T2257] binder: Unknown parameter 'defcontext01777777777777777777777' [ 82.808520][ T2190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.846696][ T435] usb 4-1: 0:2 : does not exist [ 82.904147][ T2268] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 82.914207][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.271080][ T2286] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.271130][ T2286] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.293376][ T2291] netlink: 'syz.0.649': attribute type 11 has an invalid length. [ 83.373760][ T2299] rust_binder: Write failure EFAULT in pid:447 [ 83.404280][ T36] audit: type=1400 audit(1750597277.800:609): avc: denied { append } for pid=2301 comm="syz.0.653" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.433537][ T36] audit: type=1400 audit(1750597277.810:610): avc: denied { connect } for pid=2301 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.523000][ T2309] overlay: Unknown parameter 'func' [ 83.736303][ T350] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 83.886310][ T350] usb 1-1: Using ep0 maxpacket: 32 [ 83.892646][ T350] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 83.900833][ T350] usb 1-1: config 0 has no interface number 0 [ 83.909350][ T350] usb 1-1: New USB device found, idVendor=e324, idProduct=9900, bcdDevice=c2.57 [ 83.918462][ T350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.926505][ T350] usb 1-1: Product: syz [ 83.930677][ T350] usb 1-1: Manufacturer: syz [ 83.935275][ T350] usb 1-1: SerialNumber: syz [ 83.940775][ T350] usb 1-1: config 0 descriptor?? [ 84.257476][ T2190] rust_binder: Error while translating object. [ 84.257501][ T2190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.263792][ T2190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:332 [ 84.277284][ T435] usb 4-1: 1:0: cannot get min/max values for control 6 (id 1) [ 84.297761][ T435] usb 4-1: USB disconnect, device number 26 [ 84.366214][ T36] audit: type=1400 audit(1750597278.760:611): avc: denied { setopt } for pid=2311 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.467001][ T1748] udevd[1748]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.844226][ T2317] x_tables: duplicate underflow at hook 1 [ 84.903976][ T2324] overlayfs: failed to clone upperpath [ 84.917410][ T36] audit: type=1400 audit(1750597279.320:612): avc: denied { map } for pid=2325 comm="syz.3.663" path="socket:[16774]" dev="sockfs" ino=16774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 84.946292][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 84.946319][ T594] Bluetooth: hci0: command 0x1003 tx timeout [ 85.016286][ T36] audit: type=1400 audit(1750597279.410:613): avc: denied { accept } for pid=2338 comm="syz.1.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 85.195177][ T36] audit: type=1400 audit(1750597279.590:614): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 85.225289][ T2365] rust_binder: Read failure Err(EAGAIN) in pid:344 [ 85.225406][ T2365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:344 [ 85.235271][ T36] audit: type=1400 audit(1750597279.620:615): avc: denied { setopt } for pid=2364 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.407221][ T2380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:483 [ 85.431556][ T2365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.675'. [ 85.498207][ T2365] rust_binder: Write failure EINVAL in pid:344 [ 85.506340][ T723] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 85.736314][ T65] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 85.887359][ T65] usb 2-1: config 1 has an invalid interface number: 229 but max is 1 [ 85.895600][ T65] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 85.905750][ T65] usb 2-1: config 1 has no interface number 0 [ 85.911890][ T65] usb 2-1: too many endpoints for config 1 interface 229 altsetting 255: 255, using maximum allowed: 30 [ 85.923211][ T65] usb 2-1: config 1 interface 229 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 85.923911][ T2384] syzkaller0: entered promiscuous mode [ 85.936963][ T65] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 85.942273][ T2384] syzkaller0: entered allmulticast mode [ 85.955310][ T65] usb 2-1: config 1 interface 229 has no altsetting 0 [ 85.967636][ T65] usb 2-1: config 1 interface 1 has no altsetting 0 [ 85.975859][ T65] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.985005][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.993072][ T65] usb 2-1: Product: syz [ 85.997287][ T65] usb 2-1: Manufacturer: syz [ 86.001896][ T65] usb 2-1: SerialNumber: syz [ 86.091560][ T2396] rust_binder: Error while translating object. [ 86.091618][ T2396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.106293][ T2396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:353 [ 86.204244][ T2405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 86.213820][ T2405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:358 [ 86.556341][ T723] usb 4-1: device descriptor read/64, error -71 [ 86.826289][ T723] usb 4-1: Using ep0 maxpacket: 16 [ 86.832820][ T723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.844075][ T723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.854018][ T723] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 86.863265][ T723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.872485][ T723] usb 4-1: config 0 descriptor?? [ 86.890250][ T2441] fuse: Unknown parameter 'gQoe^_id' [ 87.057358][ T350] usb 1-1: USB disconnect, device number 22 [ 87.171427][ T2460] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 87.178760][ T2460] rust_binder: Write failure EINVAL in pid:464 [ 87.193479][ T2462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.199758][ T2462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:466 [ 87.255841][ T2474] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 87.265055][ T2474] rust_binder: Error while translating object. [ 87.273853][ T2474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.280163][ T2474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:478 [ 87.293435][ T36] audit: type=1400 audit(1750597281.690:616): avc: denied { nlmsg_write } for pid=2473 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 87.359029][ T723] usbhid 4-1:0.0: can't add hid device: -71 [ 87.365075][ T723] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 87.376417][ T723] usb 4-1: USB disconnect, device number 27 [ 88.165384][ T2491] rust_binder: Failed copying remainder into alloc: EFAULT [ 88.165403][ T2491] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 88.172752][ T2491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 88.181109][ T2491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:483 [ 88.404622][ T2500] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 88.492098][ T723] usb 2-1: USB disconnect, device number 15 [ 88.518736][ T36] audit: type=1400 audit(1750597282.920:617): avc: denied { map } for pid=2508 comm="syz.1.723" path="pipe:[17676]" dev="pipefs" ino=17676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 88.541814][ T36] audit: type=1400 audit(1750597282.920:618): avc: denied { execute } for pid=2508 comm="syz.1.723" path="pipe:[17676]" dev="pipefs" ino=17676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 88.603495][ T2519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.608468][ T2519] rust_binder: Error while translating object. [ 88.615012][ T2519] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 88.621536][ T2519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:493 [ 88.635698][ T2515] SELinux: failed to load policy [ 88.701991][ T2521] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.703725][ T2521] rust_binder: Error while translating object. [ 88.710398][ T2521] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.716870][ T2521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:495 [ 88.772819][ T36] audit: type=1400 audit(1750597283.170:619): avc: denied { execute } for pid=2525 comm="syz.3.730" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.826659][ T2530] rust_binder: Error while translating object. [ 88.826684][ T2530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.832914][ T2530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:387 [ 88.842854][ T2531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.866021][ T36] audit: type=1400 audit(1750597283.260:620): avc: denied { write } for pid=2536 comm="syz.3.733" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.916964][ T36] audit: type=1400 audit(1750597283.260:621): avc: denied { open } for pid=2536 comm="syz.3.733" path="/129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.961775][ T36] audit: type=1400 audit(1750597283.320:622): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.058938][ T2548] binder: Bad value for 'max' [ 89.139760][ T36] audit: type=1400 audit(1750597283.540:623): avc: denied { read write } for pid=2549 comm="syz.0.738" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.152535][ T2552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 89.165451][ T36] audit: type=1400 audit(1750597283.540:624): avc: denied { open } for pid=2549 comm="syz.0.738" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.195590][ T36] audit: type=1400 audit(1750597283.540:625): avc: denied { ioctl } for pid=2549 comm="syz.0.738" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.823915][ T2587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.824816][ T2587] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 89.829942][ T2591] netlink: 64 bytes leftover after parsing attributes in process `syz.2.756'. [ 90.632980][ T2611] binder: Unknown parameter '' [ 90.677608][ T65] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz1 [ 90.677815][ T2614] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.715646][ T2620] fido_id[2620]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.746388][ T2626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:505 [ 90.757656][ T2628] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 90.779008][ T2628] rust_binder: Write failure EINVAL in pid:409 [ 90.936400][ T350] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 91.101377][ T350] usb 2-1: not running at top speed; connect to a high speed hub [ 91.114915][ T350] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 91.123195][ T350] usb 2-1: can't read configurations, error -22 [ 91.256544][ T350] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 91.386309][ T480] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 91.407102][ T350] usb 2-1: not running at top speed; connect to a high speed hub [ 91.416020][ T350] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 91.424123][ T350] usb 2-1: can't read configurations, error -22 [ 91.430670][ T350] usb usb2-port1: attempt power cycle [ 91.516325][ T480] usb 1-1: device descriptor read/64, error -71 [ 91.536314][ T306] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 91.686284][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 91.692573][ T306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.702955][ T306] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.713288][ T306] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.722599][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.730668][ T306] usb 4-1: Product: syz [ 91.734857][ T306] usb 4-1: Manufacturer: syz [ 91.739487][ T306] usb 4-1: SerialNumber: syz [ 91.756314][ T480] usb 1-1: device descriptor read/64, error -71 [ 91.776366][ T350] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 91.797358][ T350] usb 2-1: not running at top speed; connect to a high speed hub [ 91.806157][ T350] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 91.814166][ T350] usb 2-1: can't read configurations, error -22 [ 91.946343][ T350] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 91.948823][ T2661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.962550][ T2661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.967542][ T350] usb 2-1: not running at top speed; connect to a high speed hub [ 91.979548][ T350] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 91.987955][ T350] usb 2-1: can't read configurations, error -22 [ 91.994476][ T350] usb usb2-port1: unable to enumerate USB device [ 92.001134][ T480] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 92.136290][ T480] usb 1-1: device descriptor read/64, error -71 [ 92.376286][ T480] usb 1-1: device descriptor read/64, error -71 [ 92.486585][ T480] usb usb1-port1: attempt power cycle [ 92.826290][ T480] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 92.847401][ T480] usb 1-1: device descriptor read/8, error -71 [ 92.977312][ T480] usb 1-1: device descriptor read/8, error -71 [ 93.216289][ T480] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 93.237308][ T480] usb 1-1: device descriptor read/8, error -71 [ 93.367451][ T480] usb 1-1: device descriptor read/8, error -71 [ 93.476412][ T480] usb usb1-port1: unable to enumerate USB device [ 93.833774][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 93.833792][ T36] audit: type=1400 audit(1750597288.230:632): avc: denied { bpf } for pid=2663 comm="syz.1.782" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.172038][ T2677] rust_binder: Error while translating object. [ 94.172077][ T2677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 94.178432][ T2677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:536 [ 94.311323][ T306] usb 4-1: 0:2 : does not exist [ 94.317365][ T36] audit: type=1400 audit(1750597288.710:633): avc: denied { ioctl } for pid=2691 comm="syz.3.791" path="socket:[19615]" dev="sockfs" ino=19615 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.330417][ T306] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 94.381030][ T36] audit: type=1400 audit(1750597288.780:634): avc: denied { mount } for pid=2698 comm="syz.3.793" name="/" dev="ramfs" ino=18666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 94.388930][ T306] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 94.403761][ T36] audit: type=1400 audit(1750597288.790:635): avc: denied { mounton } for pid=2698 comm="syz.3.793" path="/file0" dev="ramfs" ino=18670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 94.419820][ T306] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 94.445468][ T306] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 94.456352][ T306] usb 4-1: USB disconnect, device number 28 [ 94.562744][ T2705] netlink: 'syz.2.794': attribute type 12 has an invalid length. [ 94.602592][ T2700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.612056][ T2700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.636908][ T1748] udevd[1748]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.666285][ T65] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 95.234101][ T2732] mmap: syz.2.803 (2732) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.286357][ T435] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 95.348266][ T2736] cgroup: fork rejected by pids controller in /syz3 [ 95.426281][ T435] usb 2-1: device descriptor read/64, error -71 [ 95.676278][ T435] usb 2-1: device descriptor read/64, error -71 [ 95.936345][ T435] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 96.066314][ T435] usb 2-1: device descriptor read/64, error -71 [ 96.135038][ T36] audit: type=1400 audit(1750597290.530:636): avc: denied { create } for pid=2806 comm="syz.3.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 96.316658][ T435] usb 2-1: device descriptor read/64, error -71 [ 96.436290][ T435] usb usb2-port1: attempt power cycle [ 96.648299][ T2810] binder: Unknown parameter 'defcontext01777777777777777777777' [ 96.695376][ T36] audit: type=1400 audit(1750597291.090:637): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 96.715733][ T36] audit: type=1400 audit(1750597291.110:638): avc: denied { getopt } for pid=2815 comm="syz.3.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.740866][ T2820] overlayfs: failed to resolve './file1': -2 [ 96.747702][ T36] audit: type=1400 audit(1750597291.150:639): avc: denied { append } for pid=2819 comm="syz.3.811" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.748373][ T2820] loop9: detected capacity change from 0 to 7 [ 96.777325][ T435] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 96.778050][ T2820] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.792901][ T2820] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.797392][ T435] usb 2-1: device descriptor read/8, error -71 [ 96.800791][ T2820] loop9: unable to read partition table [ 96.812654][ T2820] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 96.812654][ T2820] U) failed (rc=-5) [ 96.851988][ T2823] rust_binder: Write failure EFAULT in pid:509 [ 96.871385][ T2826] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 96.887332][ T2828] overlay: Unknown parameter 'mounts' [ 96.908112][ T2830] overlayfs: conflicting options: userxattr,redirect_dir=on [ 96.917604][ T2830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 96.917654][ T2830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:516 [ 96.928376][ T2831] overlayfs: conflicting options: userxattr,redirect_dir=on [ 96.937538][ T435] usb 2-1: device descriptor read/8, error -71 [ 96.964855][ T2836] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.176286][ T435] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 97.196337][ T10] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 97.207272][ T435] usb 2-1: device descriptor read/8, error -71 [ 97.337308][ T435] usb 2-1: device descriptor read/8, error -71 [ 97.347616][ T10] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.357457][ T10] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.370468][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.377166][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 97.386283][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.395316][ T10] usb 4-1: config 0 descriptor?? [ 97.447745][ T435] usb usb2-port1: unable to enumerate USB device [ 97.461364][ T2841] rust_binder: Error while translating object. [ 97.461409][ T2841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 97.467762][ T2841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:557 [ 97.529503][ T2850] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 97.802449][ T10] hid-rmi 0003:17EF:6085.000C: unknown main item tag 0x0 [ 97.809568][ T10] hid-rmi 0003:17EF:6085.000C: unknown main item tag 0x0 [ 97.816695][ T10] hid-rmi 0003:17EF:6085.000C: unknown main item tag 0x0 [ 97.823754][ T10] hid-rmi 0003:17EF:6085.000C: unknown main item tag 0x0 [ 97.830838][ T10] hid-rmi 0003:17EF:6085.000C: unknown main item tag 0x0 [ 97.837933][ T10] hid-rmi 0003:17EF:6085.000C: unknown main item tag 0x0 [ 97.844991][ T10] hid-rmi 0003:17EF:6085.000C: unknown main item tag 0x0 [ 97.852076][ T10] hid-rmi 0003:17EF:6085.000C: unknown main item tag 0x0 [ 97.859157][ T10] hid-rmi 0003:17EF:6085.000C: unknown main item tag 0x0 [ 97.866196][ T10] hid-rmi 0003:17EF:6085.000C: unknown main item tag 0x0 [ 97.873288][ T10] hid-rmi 0003:17EF:6085.000C: unknown main item tag 0x0 [ 97.881097][ T10] hid-rmi 0003:17EF:6085.000C: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.3-1/input0 [ 98.001792][ T2836] rust_binder: Error while translating object. [ 98.001800][ T2835] rust_binder: Error while translating object. [ 98.001822][ T2836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 98.008044][ T2835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 98.014349][ T2836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:521 [ 98.023911][ T2835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:521 [ 98.046789][ T306] usb 4-1: USB disconnect, device number 29 [ 98.107852][ T36] audit: type=1326 audit(1750597292.510:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2859 comm="syz.1.823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89fd98e929 code=0x0 [ 98.274919][ T36] audit: type=1400 audit(1750597292.670:641): avc: denied { getopt } for pid=2868 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.301205][ T2875] overlay: Unknown parameter 'subj_type' [ 98.594419][ T2880] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 98.785310][ T2889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 98.787796][ T2889] rust_binder: Read failure Err(EFAULT) in pid:534 [ 98.950703][ T2895] netlink: 68 bytes leftover after parsing attributes in process `syz.0.835'. [ 99.256319][ T45] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 99.419591][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 99.429611][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 99.442300][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 99.451638][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.460222][ T45] usb 1-1: Product: syz [ 99.464636][ T45] usb 1-1: Manufacturer: syz [ 99.469568][ T45] usb 1-1: SerialNumber: syz [ 99.475434][ T45] usb 1-1: config 0 descriptor?? [ 99.693801][ T45] usb 1-1: USB disconnect, device number 28 [ 99.837856][ T2915] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 99.837889][ T2915] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 99.846114][ T2915] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:543 [ 99.867831][ T1554] udevd[1554]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 99.977530][ T2928] rust_binder: Write failure EINVAL in pid:555 [ 99.977861][ T2928] SELinux: security_context_str_to_sid (inder0) failed with errno=-22 [ 100.059750][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 100.059774][ T36] audit: type=1400 audit(1750597294.460:643): avc: denied { append } for pid=2933 comm="syz.3.845" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.191372][ T2951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.192499][ T2951] rust_binder: Error in use_page_slow: ESRCH [ 100.199016][ T2951] rust_binder: use_range failure ESRCH [ 100.205339][ T2951] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 100.211570][ T2951] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 100.219604][ T2951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:572 [ 100.260114][ T2957] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 100.294185][ T2962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.315277][ T2966] binder: Bad value for 'max' [ 100.414973][ T2981] binder: Bad value for 'defcontext' [ 100.492819][ T2987] tipc: Cannot configure node identity twice [ 100.511621][ T2987] rust_binder: Failed copying remainder into alloc: EFAULT [ 100.511645][ T2987] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 100.511745][ T36] audit: type=1400 audit(1750597294.910:644): avc: denied { accept } for pid=2984 comm="syz.0.862" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.519706][ T2987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 100.548881][ T2987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:591 [ 100.597831][ T2989] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 100.607146][ T2989] rust_binder: Error while translating object. [ 100.616291][ T2989] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 100.622774][ T2989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:594 [ 100.690357][ T36] audit: type=1400 audit(1750597295.090:645): avc: denied { mount } for pid=2991 comm="syz.0.864" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 100.730134][ T36] audit: type=1400 audit(1750597295.130:646): avc: denied { mounton } for pid=2991 comm="syz.0.864" path="/199/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 100.752671][ T36] audit: type=1400 audit(1750597295.130:647): avc: denied { read } for pid=2991 comm="syz.0.864" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 100.774117][ T36] audit: type=1400 audit(1750597295.130:648): avc: denied { open } for pid=2991 comm="syz.0.864" path="/199/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 100.850224][ T36] audit: type=1400 audit(1750597295.250:649): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 100.883412][ T2999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:604 [ 100.883562][ T2999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:604 [ 101.011376][ T3012] rust_binder: Write failure EFAULT in pid:617 [ 101.106876][ T3017] rust_binder: Error while translating object. [ 101.119751][ T3017] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 101.134840][ T3017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:622 [ 101.225141][ T36] audit: type=1400 audit(1750597295.610:650): avc: denied { getopt } for pid=3019 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.359541][ T3032] overlayfs: failed to resolve './file1/file0': -2 [ 101.396578][ T3039] 9pnet_fd: Insufficient options for proto=fd [ 101.522716][ T3053] proc: Unknown parameter 'tmpfs' [ 101.539044][ T3036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 101.556572][ T3036] IPv6: NLM_F_CREATE should be specified when creating new route [ 101.931443][ T36] audit: type=1400 audit(1750597296.330:651): avc: denied { getopt } for pid=3069 comm="syz.2.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 102.019302][ T36] audit: type=1400 audit(1750597296.420:652): avc: denied { execute_no_trans } for pid=3073 comm="syz.2.897" path="/315/file2" dev="tmpfs" ino=1713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.191938][ T3088] incfs: Error accessing: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 102.192232][ T3088] incfs: mount failed -36 [ 102.352196][ T3100] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1765 sclass=netlink_tcpdiag_socket pid=3100 comm=syz.2.906 [ 102.368601][ T3104] rust_binder: Write failure EFAULT in pid:635 [ 102.475339][ T3117] binder: Unknown parameter 'mao$Zx' [ 102.536283][ T65] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 102.696312][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 102.704847][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.718321][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.736024][ T65] usb 4-1: New USB device found, idVendor=1fd2, idProduct=4507, bcdDevice= 0.00 [ 102.746794][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.756807][ T65] usb 4-1: config 0 descriptor?? [ 103.082864][ T3160] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@qkp [ 103.082864][ T3160] C<+ [ 103.168838][ T65] hid-generic 0003:1FD2:4507.000D: item fetching failed at offset 0/5 [ 103.177681][ T65] hid-generic 0003:1FD2:4507.000D: probe with driver hid-generic failed with error -22 [ 103.383287][ T3090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.391932][ T3090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.536085][ T350] usb 4-1: USB disconnect, device number 30 [ 103.543442][ T45] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 103.698719][ T45] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 103.708042][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.716084][ T45] usb 1-1: Product: syz [ 103.720388][ T45] usb 1-1: Manufacturer: syz [ 103.725000][ T45] usb 1-1: SerialNumber: syz [ 103.730330][ T45] usb 1-1: config 0 descriptor?? [ 103.933733][ T3178] binder: Bad value for 'defcontext' [ 103.948826][ T45] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 103.959066][ T45] asix 1-1:0.0: probe with driver asix failed with error -71 [ 103.969016][ T45] usb 1-1: USB disconnect, device number 29 [ 103.991061][ T3182] cgroup: Invalid name [ 104.229062][ T3204] 9pnet_fd: Insufficient options for proto=fd [ 105.443415][ T3270] rust_binder: Write failure EFAULT in pid:651 [ 105.466261][ T3272] tipc: Started in network mode [ 105.477584][ T3272] tipc: Node identity fa3293e31425, cluster identity 4711 [ 105.485098][ T3272] tipc: Enabled bearer , priority 0 [ 105.492924][ T3272] tipc: Disabling bearer [ 105.628452][ T3292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:665 [ 105.679661][ T3293] rust_binder: Write failure EINVAL in pid:665 [ 105.814569][ T3310] overlayfs: failed to clone lowerpath [ 105.866293][ T350] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 106.016298][ T350] usb 2-1: Using ep0 maxpacket: 32 [ 106.022728][ T350] usb 2-1: config 1 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 106.034038][ T350] usb 2-1: config 1 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.043910][ T350] usb 2-1: config 1 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.056898][ T350] usb 2-1: config 1 interface 0 has no altsetting 0 [ 106.065039][ T350] usb 2-1: New USB device found, idVendor=046e, idProduct=5578, bcdDevice= 0.40 [ 106.074193][ T350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.082274][ T350] usb 2-1: Product: ж [ 106.086405][ T350] usb 2-1: Manufacturer:   [ 106.091026][ T350] usb 2-1: SerialNumber: Ч [ 106.300895][ T3291] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 106.313489][ T350] usbhid 2-1:1.0: can't add hid device: -71 [ 106.319556][ T350] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 106.328311][ T350] usb 2-1: USB disconnect, device number 24 [ 106.717976][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 106.717994][ T36] audit: type=1326 audit(1750597301.120:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3328 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263f8e929 code=0x7fc00000 [ 106.829324][ T3348] input: syz0 as /devices/virtual/input/input14 [ 106.835691][ T3348] input: failed to attach handler leds to device input14, error: -6 [ 107.028355][ T3351] rust_binder: Write failure EINVAL in pid:671 [ 107.040662][ T3353] usb usb8: usbfs: process 3353 (syz.0.990) did not claim interface 0 before use [ 107.086313][ T350] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 107.216426][ T350] usb 2-1: device descriptor read/64, error -71 [ 107.296393][ T45] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 107.446611][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 107.453087][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.461677][ T45] usb 1-1: config 40 has an invalid interface number: 49 but max is 0 [ 107.469916][ T350] usb 2-1: device descriptor read/64, error -71 [ 107.476180][ T45] usb 1-1: config 40 has no interface number 0 [ 107.482487][ T45] usb 1-1: config 40 interface 49 has no altsetting 0 [ 107.490987][ T45] usb 1-1: New USB device found, idVendor=0af0, idProduct=7706, bcdDevice= a.96 [ 107.500301][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.508348][ T45] usb 1-1: Product: syz [ 107.512530][ T45] usb 1-1: Manufacturer: syz [ 107.517184][ T45] usb 1-1: SerialNumber: syz [ 107.706278][ T350] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 107.727853][ T45] usb 1-1: USB disconnect, device number 30 [ 107.836300][ T350] usb 2-1: device descriptor read/64, error -71 [ 108.076288][ T350] usb 2-1: device descriptor read/64, error -71 [ 108.156296][ T10] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 108.187238][ T350] usb usb2-port1: attempt power cycle [ 108.219956][ T3379] netlink: 'syz.3.998': attribute type 5 has an invalid length. [ 108.227733][ T3379] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.998'. [ 108.248416][ T3381] netlink: 60 bytes leftover after parsing attributes in process `syz.3.999'. [ 108.308448][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.316679][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 108.325432][ T10] usb 1-1: config 40 has an invalid interface number: 49 but max is 0 [ 108.333830][ T10] usb 1-1: config 40 has no interface number 0 [ 108.340560][ T10] usb 1-1: config 40 interface 49 has no altsetting 0 [ 108.349359][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7706, bcdDevice= a.96 [ 108.358740][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.366943][ T10] usb 1-1: Product: syz [ 108.371205][ T10] usb 1-1: Manufacturer: syz [ 108.375812][ T10] usb 1-1: SerialNumber: syz [ 108.526310][ T350] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 108.547442][ T350] usb 2-1: device descriptor read/8, error -71 [ 108.677479][ T350] usb 2-1: device descriptor read/8, error -71 [ 108.787433][ T36] audit: type=1400 audit(1750597304.189:658): avc: denied { map } for pid=3400 comm="syz.3.1005" path="socket:[22793]" dev="sockfs" ino=22793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 108.822291][ T3404] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1006'. [ 108.831316][ T3404] 0{X: renamed from gretap0 (while UP) [ 108.838246][ T3404] 0{X: entered allmulticast mode [ 108.843970][ T3404] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 108.895691][ T3412] @: renamed from vlan0 (while UP) [ 108.909562][ T36] audit: type=1400 audit(1750597304.309:659): avc: denied { mount } for pid=3413 comm="syz.3.1011" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 108.916333][ T350] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 108.945740][ T36] audit: type=1400 audit(1750597304.339:660): avc: denied { create } for pid=3420 comm="syz.3.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 108.968033][ T350] usb 2-1: device descriptor read/8, error -71 [ 108.976070][ T3423] overlayfs: failed to clone upperpath [ 109.037459][ T3439] SELinux: Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped). [ 109.047854][ T36] audit: type=1400 audit(1750597304.449:661): avc: denied { relabelto } for pid=3438 comm="syz.2.1018" name="file0" dev="tmpfs" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 109.084085][ T36] audit: type=1400 audit(1750597304.469:662): avc: denied { associate } for pid=3438 comm="syz.2.1018" name="file0" dev="tmpfs" ino=1964 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:udev_helper_exec_t:s0" [ 109.112883][ T350] usb 2-1: device descriptor read/8, error -71 [ 109.211369][ T3460] bridge0: entered promiscuous mode [ 109.218105][ T3459] bridge0: left promiscuous mode [ 109.223163][ T3462] overlayfs: failed to resolve './file1': -2 [ 109.229345][ T350] usb usb2-port1: unable to enumerate USB device [ 109.390251][ T36] audit: type=1400 audit(1750597304.789:663): avc: denied { accept } for pid=3352 comm="syz.0.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.895773][ T3505] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3505 comm=syz.2.1042 [ 109.932133][ T3510] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1044'. [ 110.402622][ T45] usb 1-1: USB disconnect, device number 31 [ 110.751963][ T36] audit: type=1400 audit(1750597306.149:664): avc: denied { write } for pid=3570 comm="syz.0.1067" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.106287][ T65] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 111.267488][ T65] usb 1-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.280922][ T65] usb 1-1: config 1 interface 0 has no altsetting 0 [ 111.289662][ T65] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 111.299328][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.307710][ T65] usb 1-1: Product: syz [ 111.312084][ T65] usb 1-1: Manufacturer: syz [ 111.317093][ T65] usb 1-1: SerialNumber: syz [ 111.324528][ T3593] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.545369][ T65] usb 1-1: USB disconnect, device number 32 [ 111.966284][ T65] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 112.057676][ T3605] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 112.092013][ T3609] SELinux: ebitmap: truncated map [ 112.108106][ T3609] SELinux: failed to load policy [ 112.117731][ T3609] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 112.136435][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 112.151703][ T65] usb 2-1: config 67 has an invalid interface number: 104 but max is 2 [ 112.161032][ T65] usb 2-1: config 67 has an invalid interface number: 156 but max is 2 [ 112.169499][ T65] usb 2-1: config 67 has an invalid interface number: 186 but max is 2 [ 112.177976][ T65] usb 2-1: config 67 has no interface number 0 [ 112.184233][ T65] usb 2-1: config 67 has no interface number 1 [ 112.190719][ T65] usb 2-1: config 67 has no interface number 2 [ 112.197121][ T65] usb 2-1: config 67 interface 104 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 112.213287][ T65] usb 2-1: config 67 interface 104 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 112.224340][ T65] usb 2-1: config 67 interface 104 altsetting 3 endpoint 0x3 has invalid maxpacket 1088, setting to 64 [ 112.235683][ T65] usb 2-1: config 67 interface 104 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 112.246859][ T65] usb 2-1: config 67 interface 104 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 112.257977][ T65] usb 2-1: config 67 interface 104 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 112.268851][ T65] usb 2-1: config 67 interface 104 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 112.279684][ T65] usb 2-1: config 67 interface 104 altsetting 3 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 112.290792][ T65] usb 2-1: config 67 interface 156 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 112.301620][ T65] usb 2-1: config 67 interface 186 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 112.312570][ T65] usb 2-1: config 67 interface 186 altsetting 0 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 112.324528][ T65] usb 2-1: config 67 interface 186 altsetting 0 has a duplicate endpoint with address 0x8F, skipping [ 112.335591][ T65] usb 2-1: config 67 interface 186 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 112.346710][ T65] usb 2-1: config 67 interface 186 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 112.357532][ T65] usb 2-1: config 67 interface 186 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 112.368387][ T65] usb 2-1: config 67 interface 186 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 112.379208][ T65] usb 2-1: config 67 interface 186 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 112.392360][ T65] usb 2-1: config 67 interface 104 has no altsetting 0 [ 112.399255][ T65] usb 2-1: config 67 interface 156 has no altsetting 0 [ 112.407696][ T65] usb 2-1: Dual-Role OTG device on HNP port [ 112.413805][ T65] usb 2-1: New USB device found, idVendor=19d2, idProduct=1087, bcdDevice=11.00 [ 112.422889][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.430939][ T65] usb 2-1: Manufacturer: 뀬볹❬⬲陵ํ㧞꽝쟆瀙曇閗᠏鐟풢촰蝈੡꘿㉊ʅ弔⸴꫖ꔏ⸗亥꿻窎㆚躌귽ϊ簔祢꜀ӊ䉿뀢ᔿ㕆譀戴剈␖྇䕅 [ 112.448479][ T65] usb 2-1: SerialNumber: syz [ 113.163734][ T3625] fuse: blksize only supported for fuseblk [ 114.253363][ T3642] overlayfs: failed to clone upperpath [ 114.686011][ T65] usb 2-1: USB disconnect, device number 29 [ 114.784203][ T3648] vcan0: entered allmulticast mode [ 114.784199][ T36] audit: type=1400 audit(1750597310.179:665): avc: denied { ioctl } for pid=3647 comm="syz.3.1096" path="socket:[23191]" dev="sockfs" ino=23191 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.831298][ T3648] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1096'. [ 114.966611][ T36] audit: type=1400 audit(1750597310.369:666): avc: denied { listen } for pid=3656 comm="syz.2.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.031801][ T3676] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1099'. [ 115.042989][ T3658] cgroup: fork rejected by pids controller in /syz2 [ 115.144066][ T3690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3690 comm=syz.1.1101 [ 115.176752][ T36] audit: type=1400 audit(1750597310.579:667): avc: denied { accept } for pid=3689 comm="syz.1.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.294499][ T3712] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1106'. [ 115.316017][ T3714] cgroup: Unknown subsys name 'measure' [ 115.325181][ T3714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:739 [ 115.460405][ T3725] binder: Bad value for 'stats' [ 115.486277][ T65] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 115.543133][ T3736] overlayfs: failed to clone upperpath [ 115.646268][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 115.658060][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.677690][ T65] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 115.696263][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.704332][ T65] usb 2-1: Product: syz [ 115.708764][ T65] usb 2-1: Manufacturer: syz [ 115.713413][ T65] usb 2-1: SerialNumber: syz [ 115.727257][ T65] usb 2-1: config 0 descriptor?? [ 115.936960][ T65] usb 2-1: USB disconnect, device number 30 [ 115.974298][ T3768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3768 comm=syz.1.1123 [ 115.991271][ T3768] syzkaller0: entered promiscuous mode [ 115.997047][ T3768] syzkaller0: entered allmulticast mode [ 116.356295][ T65] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 116.506283][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 116.513152][ T65] usb 2-1: config 4 has an invalid interface number: 127 but max is 2 [ 116.521531][ T65] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 116.530275][ T65] usb 2-1: config 4 has an invalid interface number: 86 but max is 2 [ 116.538399][ T65] usb 2-1: config 4 has an invalid interface number: 4 but max is 2 [ 116.546446][ T65] usb 2-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 116.556561][ T65] usb 2-1: config 4 has no interface number 0 [ 116.562630][ T65] usb 2-1: config 4 has no interface number 1 [ 116.568744][ T65] usb 2-1: config 4 has no interface number 2 [ 116.574849][ T65] usb 2-1: config 4 interface 127 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 116.585741][ T65] usb 2-1: config 4 interface 127 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 116.596492][ T65] usb 2-1: config 4 interface 127 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 116.607404][ T65] usb 2-1: config 4 interface 127 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 116.618126][ T65] usb 2-1: config 4 interface 127 altsetting 4 endpoint 0xA has an invalid bInterval 218, changing to 11 [ 116.629377][ T65] usb 2-1: config 4 interface 127 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 116.640108][ T65] usb 2-1: config 4 interface 86 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 116.650744][ T65] usb 2-1: config 4 interface 86 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 116.661414][ T65] usb 2-1: config 4 interface 86 altsetting 5 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 116.672238][ T65] usb 2-1: config 4 interface 86 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 116.682867][ T65] usb 2-1: config 4 interface 86 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 116.693614][ T65] usb 2-1: config 4 interface 4 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.706508][ T65] usb 2-1: config 4 interface 127 has no altsetting 0 [ 116.713283][ T65] usb 2-1: config 4 interface 86 has no altsetting 0 [ 116.719994][ T65] usb 2-1: config 4 interface 4 has no altsetting 0 [ 116.728160][ T65] usb 2-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=3f.94 [ 116.737283][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.745339][ T65] usb 2-1: Manufacturer: ❩⠶閄꧕ꝑ豆ᎋЩⰱⰜ䷷ᥟ⯤哽躵麈ɘ鄈 [ 116.754566][ T65] usb 2-1: SerialNumber: syz [ 116.969203][ T36] audit: type=1400 audit(1750597312.369:668): avc: denied { shutdown } for pid=3781 comm="syz.1.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.014062][ T3783] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1127'. [ 117.128651][ T65] usb 2-1: USB disconnect, device number 31 [ 117.556321][ T65] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 117.607379][ T3863] tipc: Enabling of bearer rejected, failed to enable media [ 117.706268][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 117.713662][ T65] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 117.723223][ T65] usb 1-1: config 4 has no interface number 0 [ 117.729418][ T65] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.740677][ T65] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.750801][ T65] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 117.759926][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.776856][ T65] hub 1-1:4.128: USB hub found [ 117.971264][ T65] hub 1-1:4.128: 2 ports detected [ 117.976424][ T65] hub 1-1:4.128: Using single TT (err -22) [ 118.173874][ T65] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 118.180507][ T65] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 118.206690][ T65] usb 1-1: USB disconnect, device number 33 [ 118.936304][ T350] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 118.956301][ T2837] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 119.086311][ T350] usb 1-1: Using ep0 maxpacket: 16 [ 119.086315][ T2837] usb 2-1: device descriptor read/64, error -71 [ 119.088362][ T350] usb 1-1: config 4 has an invalid interface number: 127 but max is 2 [ 119.105990][ T350] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 119.114754][ T350] usb 1-1: config 4 has an invalid interface number: 86 but max is 2 [ 119.123024][ T350] usb 1-1: config 4 has an invalid interface number: 4 but max is 2 [ 119.131066][ T350] usb 1-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 119.141190][ T350] usb 1-1: config 4 has no interface number 0 [ 119.147336][ T350] usb 1-1: config 4 has no interface number 1 [ 119.153447][ T350] usb 1-1: config 4 has no interface number 2 [ 119.159622][ T350] usb 1-1: config 4 interface 127 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 119.170770][ T350] usb 1-1: config 4 interface 127 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 119.181688][ T350] usb 1-1: config 4 interface 127 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 119.192755][ T350] usb 1-1: config 4 interface 127 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 119.203639][ T350] usb 1-1: config 4 interface 127 altsetting 4 endpoint 0xA has an invalid bInterval 218, changing to 11 [ 119.214917][ T350] usb 1-1: config 4 interface 127 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 119.225656][ T350] usb 1-1: config 4 interface 86 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 119.236289][ T350] usb 1-1: config 4 interface 86 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 119.246995][ T350] usb 1-1: config 4 interface 86 altsetting 5 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 119.257869][ T350] usb 1-1: config 4 interface 86 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 119.268557][ T350] usb 1-1: config 4 interface 86 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 119.284700][ T350] usb 1-1: config 4 interface 4 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.297804][ T350] usb 1-1: config 4 interface 127 has no altsetting 0 [ 119.304612][ T350] usb 1-1: config 4 interface 86 has no altsetting 0 [ 119.311546][ T350] usb 1-1: config 4 interface 4 has no altsetting 0 [ 119.323911][ T350] usb 1-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=3f.94 [ 119.333823][ T350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.342103][ T350] usb 1-1: Manufacturer: ❩⠶閄꧕ꝑ豆ᎋЩⰱⰜ䷷ᥟ⯤哽躵麈ɘ鄈 [ 119.346298][ T2837] usb 2-1: device descriptor read/64, error -71 [ 119.351426][ T350] usb 1-1: SerialNumber: syz [ 119.433497][ T3907] fuse: Unknown parameter 'roopmode' [ 119.596319][ T2837] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 119.604313][ T3885] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1163'. [ 119.726311][ T2837] usb 2-1: device descriptor read/64, error -71 [ 119.742065][ T350] usb 1-1: USB disconnect, device number 34 [ 119.976331][ T2837] usb 2-1: device descriptor read/64, error -71 [ 120.092963][ T2837] usb usb2-port1: attempt power cycle [ 120.238980][ T3980] overlayfs: failed to clone upperpath [ 120.292018][ T36] audit: type=1400 audit(1750597315.689:669): avc: denied { append } for pid=3983 comm="syz.0.1202" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 120.417749][ T3989] SELinux: security_context_str_to_sid () failed with errno=-22 [ 120.446334][ T2837] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 120.477407][ T2837] usb 2-1: device descriptor read/8, error -71 [ 120.617392][ T2837] usb 2-1: device descriptor read/8, error -71 [ 120.816329][ T65] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 120.866929][ T2837] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 120.887353][ T2837] usb 2-1: device descriptor read/8, error -71 [ 120.977417][ T65] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 120.985633][ T65] usb 1-1: config 1 has no interface number 0 [ 120.991796][ T65] usb 1-1: config 1 interface 105 has no altsetting 0 [ 121.000128][ T65] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 121.009260][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.017345][ T65] usb 1-1: Product: syz [ 121.021544][ T65] usb 1-1: Manufacturer: syz [ 121.026265][ T65] usb 1-1: SerialNumber: syz [ 121.031533][ T2837] usb 2-1: device descriptor read/8, error -71 [ 121.146367][ T2837] usb usb2-port1: unable to enumerate USB device [ 121.760916][ T36] audit: type=1400 audit(1750597318.152:670): avc: denied { map } for pid=4116 comm="syz.2.1247" path="socket:[24530]" dev="sockfs" ino=24530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.784408][ T36] audit: type=1400 audit(1750597318.152:671): avc: denied { read } for pid=4116 comm="syz.2.1247" path="socket:[24528]" dev="sockfs" ino=24528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.845075][ T65] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 121.895302][ T4129] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 121.907210][ T4129] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1253'. [ 121.919953][ T4129] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 121.934141][ T4129] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 121.948770][ T4129] overlayfs: overlapping lowerdir path [ 122.051976][ T4132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4132 comm=syz.1.1254 [ 122.064579][ T65] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 122.078634][ T65] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 72:29:86:b4:98:05 [ 122.093362][ T65] usb 1-1: USB disconnect, device number 35 [ 122.099901][ T65] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 122.147366][ T65] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 122.156962][ T65] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 122.166566][ T65] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 122.580024][ T4138] rust_binder: Write failure EINVAL in pid:791 [ 122.591953][ T4141] random: crng reseeded on system resumption [ 122.594561][ T36] audit: type=1400 audit(1750597318.982:672): avc: denied { write } for pid=4140 comm="syz.0.1258" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.634491][ T36] audit: type=1400 audit(1750597318.982:673): avc: denied { open } for pid=4140 comm="syz.0.1258" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.658147][ T36] audit: type=1400 audit(1750597319.032:674): avc: denied { ioctl } for pid=4140 comm="syz.0.1258" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.714402][ T4146] rust_binder: Error while translating object. [ 122.714434][ T4146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 122.720737][ T4146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:794 [ 122.796731][ T36] audit: type=1400 audit(1750597319.192:675): avc: denied { create } for pid=4152 comm="syz.1.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.844241][ T4159] rust_binder: Write failure EINVAL in pid:799 [ 122.844864][ T4160] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.568921][ T4194] 9pnet_fd: Insufficient options for proto=fd [ 123.582133][ T4194] rust_binder: Read failure Err(EAGAIN) in pid:815 [ 123.720948][ T4196] exfat: Unknown parameter 'workdir' [ 123.829575][ T4211] netlink: 'syz.2.1281': attribute type 3 has an invalid length. [ 123.866797][ T4218] tipc: Enabled bearer , priority 10 [ 124.123968][ T36] audit: type=1326 audit(1750597320.512:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e8d8e929 code=0x7fc00000 [ 124.274517][ T4318] overlayfs: missing 'lowerdir' [ 124.338475][ T4333] overlayfs: failed to clone upperpath [ 124.863724][ T36] audit: type=1400 audit(1750597321.252:677): avc: denied { setattr } for pid=4373 comm="syz.2.1328" path="socket:[25445]" dev="sockfs" ino=25445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.518192][ T36] audit: type=1326 audit(1750597321.912:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fd98e929 code=0x7ffc0000 [ 125.554080][ T36] audit: type=1326 audit(1750597321.912:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fd98e929 code=0x7ffc0000 [ 125.577655][ T36] audit: type=1326 audit(1750597321.912:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89fd98e929 code=0x7ffc0000 [ 125.601194][ T36] audit: type=1326 audit(1750597321.912:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fd98e929 code=0x7ffc0000 [ 125.633947][ T36] audit: type=1326 audit(1750597321.912:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fd98e929 code=0x7ffc0000 [ 125.675949][ T36] audit: type=1326 audit(1750597321.912:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f89fd98e929 code=0x7ffc0000 [ 125.699335][ T36] audit: type=1326 audit(1750597321.912:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fd98e929 code=0x7ffc0000 [ 125.722860][ T36] audit: type=1326 audit(1750597321.912:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89fd98d290 code=0x7ffc0000 [ 125.746616][ T36] audit: type=1326 audit(1750597321.912:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fd98e929 code=0x7ffc0000 [ 125.770167][ T36] audit: type=1326 audit(1750597321.912:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89fd98e929 code=0x7ffc0000 [ 125.994340][ T4430] overlayfs: failed to clone lowerpath [ 126.548544][ T4457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 127.374474][ T4471] netlink: 'syz.0.1362': attribute type 4 has an invalid length. [ 127.387987][ T4471] netlink: 'syz.0.1362': attribute type 5 has an invalid length. [ 127.396571][ T4471] netlink: 'syz.0.1362': attribute type 1 has an invalid length. [ 127.477599][ T4477] overlay: Unknown parameter 'fsname' [ 127.600878][ T4490] SELinux: security_context_str_to_sid (unconfned_u) failed with errno=-22 [ 127.672998][ T4507] overlayfs: failed to clone upperpath [ 128.055949][ T4524] overlayfs: failed to clone upperpath [ 128.161176][ T4530] cgroup: fork rejected by pids controller in /syz1 [ 128.978244][ T4597] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 129.083422][ T4600] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 129.091446][ T4600] rust_binder: Error while translating object. [ 129.100415][ T4600] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.106896][ T4600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:865 [ 129.120996][ T4606] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1401'. [ 129.142058][ T4608] binder: Unknown parameter 'context' [ 129.506500][ T480] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 129.656308][ T480] usb 1-1: Using ep0 maxpacket: 16 [ 129.662702][ T480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.673703][ T480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.683503][ T480] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 129.692646][ T480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.701458][ T480] usb 1-1: config 0 descriptor?? [ 129.924208][ T480] usbhid 1-1:0.0: can't add hid device: -71 [ 129.936832][ T480] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 129.956069][ T480] usb 1-1: USB disconnect, device number 36 [ 130.081655][ T4672] overlayfs: failed to clone upperpath [ 130.187409][ T4682] sock: sock_set_timeout: `syz.2.1429' (pid 4682) tries to set negative timeout [ 130.246306][ T480] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 130.376329][ T480] usb 1-1: device descriptor read/64, error -71 [ 130.616303][ T480] usb 1-1: device descriptor read/64, error -71 [ 130.768700][ T4739] fuse: Bad value for 'fd' [ 130.857926][ T480] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 130.983353][ T4757] fuse: Bad value for 'fd' [ 131.016280][ T480] usb 1-1: device descriptor read/64, error -71 [ 131.116325][ T4747] @: renamed from vlan0 (while UP) [ 131.176387][ T4760] syz.2.1456 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 131.266264][ T480] usb 1-1: device descriptor read/64, error -71 [ 131.392207][ T480] usb usb1-port1: attempt power cycle [ 131.556660][ T4795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'. [ 131.566394][ T4795] Invalid ELF header len 16 [ 131.576428][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 131.576445][ T36] audit: type=1400 audit(1750597327.952:702): avc: denied { module_load } for pid=4794 comm="syz.2.1470" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 131.736589][ T480] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 131.767283][ T480] usb 1-1: device descriptor read/8, error -71 [ 131.897350][ T480] usb 1-1: device descriptor read/8, error -71 [ 132.136270][ T480] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 132.157379][ T480] usb 1-1: device descriptor read/8, error -71 [ 132.287319][ T480] usb 1-1: device descriptor read/8, error -71 [ 132.396419][ T480] usb usb1-port1: unable to enumerate USB device [ 132.711477][ T36] audit: type=1400 audit(1750597329.102:703): avc: denied { create } for pid=4888 comm="syz.3.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 132.898281][ T4922] 8021q: VLANs not supported on xfrm0 [ 133.032164][ T4933] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 133.032210][ T4933] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 133.040160][ T4933] rust_binder: Read failure Err(EFAULT) in pid:880 [ 133.847659][ T4964] rust_binder: Error while translating object. [ 133.854412][ T4964] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 133.860890][ T4964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:901 [ 134.158209][ T4982] netlink: 'syz.3.1534': attribute type 4 has an invalid length. [ 134.180044][ T4982] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1534'. [ 134.194489][ T36] audit: type=1326 audit(1750597330.592:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.2.1535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ca758e929 code=0x0 [ 134.253716][ T4997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1538'. [ 134.339232][ T36] audit: type=1400 audit(1750597330.732:705): avc: denied { associate } for pid=5012 comm="syz.2.1543" name="fuse" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 134.372838][ T36] audit: type=1400 audit(1750597330.762:706): avc: denied { mounton } for pid=5012 comm="syz.2.1543" path="/file0" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 134.435775][ T36] audit: type=1400 audit(1750597330.822:707): avc: denied { search } for pid=5020 comm="syz.2.1546" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 134.465414][ T36] audit: type=1400 audit(1750597330.822:708): avc: denied { write } for pid=5020 comm="syz.2.1546" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 134.487773][ T36] audit: type=1400 audit(1750597330.822:709): avc: denied { add_name } for pid=5020 comm="syz.2.1546" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 134.508698][ T36] audit: type=1400 audit(1750597330.822:710): avc: denied { create } for pid=5020 comm="syz.2.1546" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 134.664881][ T36] audit: type=1400 audit(1750597331.052:711): avc: denied { read append } for pid=5049 comm="syz.0.1558" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 134.926283][ T350] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 135.076292][ T350] usb 1-1: Using ep0 maxpacket: 32 [ 135.082795][ T350] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.093830][ T350] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.104791][ T350] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 135.113926][ T350] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 135.122367][ T350] usb 1-1: Product: syz [ 135.126579][ T350] usb 1-1: Manufacturer: syz [ 135.132805][ T350] hub 1-1:4.0: USB hub found [ 135.332673][ T350] hub 1-1:4.0: 9 ports detected [ 135.337854][ T350] hub 1-1:4.0: insufficient power available to use all downstream ports [ 135.566179][ T5111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1578'. [ 135.621126][ T350] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 135.628157][ T350] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 135.656684][ T350] usb 1-1: USB disconnect, device number 41 [ 136.488419][ T5168] overlayfs: failed to clone upperpath [ 136.515543][ T5172] 9pnet_virtio: no channels available for device syz [ 136.546293][ T65] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 136.676692][ T5179] tipc: New replicast peer: 10.1.1.2 [ 136.682347][ T5179] tipc: Enabled bearer , priority 10 [ 136.707328][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.720147][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 136.733520][ T65] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 136.742907][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 136.751317][ T65] usb 1-1: SerialNumber: syz [ 136.759820][ T65] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 136.778568][ T65] usb-storage 1-1:1.0: USB Mass Storage device detected [ 136.788763][ T65] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 136.803880][ T65] scsi host1: usb-storage 1-1:1.0 [ 137.403413][ T5203] netlink: 664 bytes leftover after parsing attributes in process `syz.3.1613'. [ 137.798143][ T65] tipc: Node number set to 3994522595 [ 138.028167][ T65] usb 1-1: USB disconnect, device number 42 [ 138.963197][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 138.963216][ T36] audit: type=1400 audit(1750597335.352:721): avc: denied { write } for pid=5247 comm="syz.0.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.622189][ T36] audit: type=1400 audit(1750597336.012:722): avc: denied { sys_module } for pid=5274 comm="syz.3.1641" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 139.735825][ T5287] overlayfs: failed to resolve './file1': -2 [ 140.015727][ T5304] fuse: Bad value for 'fd' [ 140.020986][ T5304] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1653'. [ 140.111173][ T5306] SELinux: failed to load policy [ 140.123911][ T36] audit: type=1400 audit(1750597336.512:723): avc: denied { map } for pid=5305 comm="syz.0.1654" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.140729][ T5306] binder: Bad value for 'max' [ 140.153652][ T36] audit: type=1400 audit(1750597336.512:724): avc: denied { execute } for pid=5305 comm="syz.0.1654" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.241064][ T480] ================================================================== [ 140.249195][ T480] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 140.256007][ T480] Write of size 8 at addr 0000000000000098 by task kworker/1:5/480 [ 140.263933][ T480] [ 140.266291][ T480] CPU: 1 UID: 0 PID: 480 Comm: kworker/1:5 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 140.266322][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.266337][ T480] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 140.266396][ T480] Call Trace: [ 140.266403][ T480] [ 140.266413][ T480] __dump_stack+0x21/0x30 [ 140.266440][ T480] dump_stack_lvl+0x10c/0x190 [ 140.266465][ T480] ? __cfi_dump_stack_lvl+0x10/0x10 [ 140.266491][ T480] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x3aa/0x810 [ 140.266530][ T480] print_report+0x3d/0x70 [ 140.266548][ T480] kasan_report+0x163/0x1a0 [ 140.266578][ T480] ? down_write+0x83/0x2a0 [ 140.266601][ T480] ? down_write+0x83/0x2a0 [ 140.266622][ T480] kasan_check_range+0x299/0x2a0 [ 140.266652][ T480] __kasan_check_write+0x18/0x20 [ 140.266674][ T480] down_write+0x83/0x2a0 [ 140.266695][ T480] ? __cfi_down_write+0x10/0x10 [ 140.266717][ T480] ? _raw_spin_lock+0x8c/0x120 [ 140.266743][ T480] ? __cfi__raw_spin_lock+0x10/0x10 [ 140.266770][ T480] ? mutex_unlock+0x8b/0x240 [ 140.266789][ T480] ? __cfi_mutex_unlock+0x10/0x10 [ 140.266809][ T480] rust_binderfs_remove_file+0x6c/0x110 [ 140.266831][ T480] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 140.266866][ T480] ? update_curr_dl_se+0x10c/0xb20 [ 140.266894][ T480] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 140.266916][ T480] ? update_curr+0x60d/0xc60 [ 140.266950][ T480] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 140.266985][ T480] ? update_load_avg+0x506/0x19a0 [ 140.267006][ T480] ? detach_entity_load_avg+0x7b0/0x7b0 [ 140.267063][ T480] ? dequeue_entity+0xa9c/0x1750 [ 140.267087][ T480] ? tg_unthrottle_up+0x980/0x980 [ 140.267106][ T480] ? kfree+0x156/0x400 [ 140.267128][ T480] ? vfree+0x431/0x580 [ 140.267146][ T480] ? delayed_vfree_work+0x59/0x80 [ 140.267168][ T480] ? process_scheduled_works+0x7d2/0x1020 [ 140.267195][ T480] ? worker_thread+0xc58/0x1250 [ 140.267222][ T480] ? ret_from_fork+0x64/0xa0 [ 140.267247][ T480] ? calibrate_delay_converge+0x2e0/0x2e0 [ 140.267277][ T480] ? kvm_sched_clock_read+0x15/0x30 [ 140.267298][ T480] ? sched_clock_noinstr+0xd/0x30 [ 140.267317][ T480] ? sched_clock+0x44/0x60 [ 140.267337][ T480] ? sched_clock_cpu+0x75/0x400 [ 140.267360][ T480] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 140.267383][ T480] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 140.267410][ T480] ? __cfi_sched_clock_cpu+0x10/0x10 [ 140.267434][ T480] ? __kasan_check_write+0x18/0x20 [ 140.267457][ T480] ? __switch_to+0xc7b/0x1310 [ 140.267480][ T480] ? psi_group_change+0xb44/0x1130 [ 140.267503][ T480] ? __cfi___switch_to+0x10/0x10 [ 140.267529][ T480] ? _raw_spin_unlock+0x45/0x60 [ 140.267555][ T480] ? __switch_to_asm+0x3d/0x70 [ 140.267583][ T480] ? __schedule+0x1463/0x1f10 [ 140.267612][ T480] ? kick_pool+0xb9/0x550 [ 140.267641][ T480] process_scheduled_works+0x7d2/0x1020 [ 140.267668][ T480] worker_thread+0xc58/0x1250 [ 140.267692][ T480] ? try_to_wake_up+0xdd2/0x1aa0 [ 140.267722][ T480] kthread+0x2c7/0x370 [ 140.267747][ T480] ? __cfi_worker_thread+0x10/0x10 [ 140.267772][ T480] ? __cfi_kthread+0x10/0x10 [ 140.267800][ T480] ret_from_fork+0x64/0xa0 [ 140.267822][ T480] ? __cfi_kthread+0x10/0x10 [ 140.267849][ T480] ret_from_fork_asm+0x1a/0x30 [ 140.267878][ T480] [ 140.267887][ T480] ================================================================== [ 140.625203][ T480] Disabling lock debugging due to kernel taint [ 140.631825][ T480] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 140.632161][ T36] audit: type=1400 audit(1750597337.032:725): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2394]" dev="pipefs" ino=2394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 140.639648][ T480] #PF: supervisor write access in kernel mode [ 140.639661][ T480] #PF: error_code(0x0002) - not-present page [ 140.639683][ T480] PGD 800000011b100067 P4D 800000011b100067 PUD 0 [ 140.681174][ T480] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 140.687271][ T480] CPU: 1 UID: 0 PID: 480 Comm: kworker/1:5 Tainted: G B 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 140.702240][ T480] Tainted: [B]=BAD_PAGE [ 140.706409][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.716489][ T480] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 140.733319][ T480] RIP: 0010:down_write+0x9a/0x2a0 [ 140.738383][ T480] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 2d 34 55 fc 4c 89 f7 be 08 00 00 00 e8 20 34 55 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 140.749359][ T36] audit: type=1400 audit(1750597337.142:726): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 140.758019][ T480] RSP: 0018:ffffc9000d4e7500 EFLAGS: 00010256 [ 140.758043][ T480] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 140.758058][ T480] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000d4e7520 [ 140.801824][ T480] RBP: ffffc9000d4e7598 R08: ffffc9000d4e7527 R09: 1ffff92001a9cea4 [ 140.809832][ T480] R10: dffffc0000000000 R11: fffff52001a9cea5 R12: dffffc0000000000 [ 140.815184][ T36] audit: type=1400 audit(1750597337.142:727): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.817914][ T480] R13: 1ffff92001a9cea0 R14: ffffc9000d4e7520 R15: 0000000000000000 [ 140.817933][ T480] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 140.817950][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.817965][ T480] CR2: 0000000000000098 CR3: 000000010b77a000 CR4: 00000000003526b0 [ 140.870680][ T480] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.878658][ T480] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.886636][ T480] Call Trace: [ 140.889919][ T480] [ 140.892877][ T480] ? __cfi_down_write+0x10/0x10 [ 140.897746][ T480] ? _raw_spin_lock+0x8c/0x120 [ 140.902524][ T480] ? __cfi__raw_spin_lock+0x10/0x10 [ 140.907783][ T480] ? mutex_unlock+0x8b/0x240 [ 140.912376][ T480] ? __cfi_mutex_unlock+0x10/0x10 [ 140.917405][ T480] rust_binderfs_remove_file+0x6c/0x110 [ 140.922954][ T480] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 140.935724][ T480] ? update_curr_dl_se+0x10c/0xb20 [ 140.940849][ T480] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 140.946918][ T480] ? update_curr+0x60d/0xc60 [ 140.951519][ T480] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 140.964722][ T480] ? update_load_avg+0x506/0x19a0 [ 140.969758][ T480] ? detach_entity_load_avg+0x7b0/0x7b0 [ 140.975339][ T480] ? dequeue_entity+0xa9c/0x1750 [ 140.980307][ T480] ? tg_unthrottle_up+0x980/0x980 [ 140.985351][ T480] ? kfree+0x156/0x400 [ 140.989438][ T480] ? vfree+0x431/0x580 [ 140.993544][ T480] ? delayed_vfree_work+0x59/0x80 [ 140.998587][ T480] ? process_scheduled_works+0x7d2/0x1020 [ 141.004325][ T480] ? worker_thread+0xc58/0x1250 [ 141.009192][ T480] ? ret_from_fork+0x64/0xa0 [ 141.013806][ T480] ? calibrate_delay_converge+0x2e0/0x2e0 [ 141.019552][ T480] ? kvm_sched_clock_read+0x15/0x30 [ 141.024785][ T480] ? sched_clock_noinstr+0xd/0x30 [ 141.029830][ T480] ? sched_clock+0x44/0x60 [ 141.034250][ T480] ? sched_clock_cpu+0x75/0x400 [ 141.039206][ T480] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 141.045309][ T480] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 141.051226][ T480] ? __cfi_sched_clock_cpu+0x10/0x10 [ 141.056532][ T480] ? __kasan_check_write+0x18/0x20 [ 141.061755][ T480] ? __switch_to+0xc7b/0x1310 [ 141.066442][ T480] ? psi_group_change+0xb44/0x1130 [ 141.071557][ T480] ? __cfi___switch_to+0x10/0x10 [ 141.076501][ T480] ? _raw_spin_unlock+0x45/0x60 [ 141.081367][ T480] ? __switch_to_asm+0x3d/0x70 [ 141.086137][ T480] ? __schedule+0x1463/0x1f10 [ 141.090820][ T480] ? kick_pool+0xb9/0x550 [ 141.095163][ T480] process_scheduled_works+0x7d2/0x1020 [ 141.100743][ T480] worker_thread+0xc58/0x1250 [ 141.105522][ T480] ? try_to_wake_up+0xdd2/0x1aa0 [ 141.110492][ T480] kthread+0x2c7/0x370 [ 141.114578][ T480] ? __cfi_worker_thread+0x10/0x10 [ 141.119713][ T480] ? __cfi_kthread+0x10/0x10 [ 141.124315][ T480] ret_from_fork+0x64/0xa0 [ 141.128745][ T480] ? __cfi_kthread+0x10/0x10 [ 141.133360][ T480] ret_from_fork_asm+0x1a/0x30 [ 141.138135][ T480] [ 141.141154][ T480] Modules linked in: [ 141.145062][ T480] CR2: 0000000000000098 [ 141.149220][ T480] ---[ end trace 0000000000000000 ]--- [ 141.154672][ T480] RIP: 0010:down_write+0x9a/0x2a0 [ 141.159710][ T480] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 2d 34 55 fc 4c 89 f7 be 08 00 00 00 e8 20 34 55 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 141.179323][ T480] RSP: 0018:ffffc9000d4e7500 EFLAGS: 00010256 [ 141.185434][ T480] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 141.193427][ T480] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000d4e7520 [ 141.201431][ T480] RBP: ffffc9000d4e7598 R08: ffffc9000d4e7527 R09: 1ffff92001a9cea4 [ 141.209406][ T480] R10: dffffc0000000000 R11: fffff52001a9cea5 R12: dffffc0000000000 [ 141.217389][ T480] R13: 1ffff92001a9cea0 R14: ffffc9000d4e7520 R15: 0000000000000000 [ 141.225365][ T480] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 141.234301][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.240891][ T480] CR2: 0000000000000098 CR3: 000000010b77a000 CR4: 00000000003526b0 [ 141.248870][ T480] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.256842][ T480] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 141.264822][ T480] Kernel panic - not syncing: Fatal exception [ 141.271124][ T480] Kernel Offset: disabled [ 141.275446][ T480] Rebooting in 86400 seconds..