last executing test programs: 2m8.402848107s ago: executing program 0 (id=806): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064320200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r1}, 0x14) 2m8.373407178s ago: executing program 0 (id=807): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0xe, {0x2, 0x4e20, @rand_addr=0x64010102}}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 2m8.373246398s ago: executing program 0 (id=808): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 2m8.373064238s ago: executing program 0 (id=809): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x1a1081, 0x18) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x80002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103", @ANYBLOB="a9a62c6c8a5b6c7bb3a0db36b5543becd010c32873b462a0771a7707ca7beb1beb1e18c90b8b25185fd67e91e28831968995f434b4063dfa484a3ff06d92075a07252145bdf7f3c4cc2fcda3082998c8080942285de8ec57d8ef731e96ddf39fcafeb7201c048565d51f9c5eb72916325a1ee8e0821417510508612000e0a48712d9d241af75e5a165f74860e03dc274a4e2", @ANYRES32=r0], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x60, 0x20}, {0x6}]}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) keyctl$reject(0x13, 0x0, 0x9, 0x202, 0xfffffffffffffff9) r5 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGFLAG(r5, 0x8004480e, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x2000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 2m5.309856358s ago: executing program 0 (id=835): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0xa03c0000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 2m5.309451998s ago: executing program 0 (id=836): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000050300000009210500000122050009e8800320000000070905020310"], 0x0) open(&(0x7f0000000280)='./file1\x00', 0x0, 0x198) syz_usb_disconnect(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) r5 = socket(0x10, 0x2, 0x0) dup2(r5, r4) write$FUSE_DIRENTPLUS(r4, 0x0, 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '#-\xb1@\'['}}]}}) openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m50.262475503s ago: executing program 32 (id=836): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000050300000009210500000122050009e8800320000000070905020310"], 0x0) open(&(0x7f0000000280)='./file1\x00', 0x0, 0x198) syz_usb_disconnect(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) r5 = socket(0x10, 0x2, 0x0) dup2(r5, r4) write$FUSE_DIRENTPLUS(r4, 0x0, 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '#-\xb1@\'['}}]}}) openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8.533843143s ago: executing program 2 (id=2691): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="470f22c266baf80cb8d40d7c89ef66bafc0cb83b280000ef0f07440fc77ad6f20f38f0f40f01d4c4e2092f0a0fc76d06c4211dd26e000f017f00", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x8, 0x7, 0x4000000000000e51, 0x8000000000000000, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.505087333s ago: executing program 2 (id=2692): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x1a1502) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x88, 0x5e, 0x9e, 0x40, 0x1a8d, 0x100c, 0xa020, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x5, 0x0, 0x47, [{{0x9, 0x4, 0xb7, 0xc, 0x0, 0xff, 0x7e, 0x60, 0x5}}]}}]}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 7.11742558s ago: executing program 2 (id=2719): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000000, 0x20002, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000140)={0x1080, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.983686471s ago: executing program 2 (id=2753): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000440)="4ad91b84aa384ea4cd3ad0fed23122caf8ee2e84348764aeeea1b365db4e48005c158848863218a724984f281f2930d1af553706d4957eaaa5906fa3452b2c13d49c8c21ca55573b78228f1d3c23309b367cfe0efac04fa337524536267a64afb2a1fc20b8ef74a4276c621ac744402e4eeac114cd3799e7f73e924d8efaa12386", 0x81}], 0x1}, 0x4008800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x80000003f7, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x100000001015, 0x5, 0x3d4, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000616000/0x3000)=nil, &(0x7f00002c6000/0x1000)=nil, &(0x7f00005ae000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000042b000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000367000/0x4000)=nil, &(0x7f00004f6000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f00001ed000/0x1000)=nil, 0x0}, 0x68) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.929773743s ago: executing program 3 (id=2754): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e400)={0x2020, 0x0, 0x0, 0x0}, 0x204a) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0xffffffff925a8000, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006100)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0xa, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.128129428s ago: executing program 3 (id=2757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0xec, 0x9, 0x9, 0x0, 0x9c, 0x1, 0x24, 0x10, 0x2, 0x40, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfb, 0xf, 0x2, '\x00', 0x1, 0x7fffffffffffffff}) 3.110111588s ago: executing program 2 (id=2758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0xec, 0x9, 0x9, 0x0, 0x9c, 0x1, 0x24, 0x10, 0x2, 0x40, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfb, 0xf, 0x2, '\x00', 0x1, 0x7fffffffffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.03387036s ago: executing program 3 (id=2759): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) unshare(0x62040200) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 3.03373701s ago: executing program 3 (id=2760): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000001c0)={{0x3, 0x0, 0x80, {0xffffffffffffffff, 0x1}}, "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", "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"}) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010080020102081305052f"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 3.01944261s ago: executing program 2 (id=2761): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000000, 0x20002, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000140)={0x1080, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.793788424s ago: executing program 3 (id=2770): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x172f, 0x38, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x7, "aa"}]}}, 0x0}, 0x0) 546.022519ms ago: executing program 4 (id=2803): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7800, 0x80, 0x5, 0x9}}) 545.911109ms ago: executing program 4 (id=2804): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000c80), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000cc0)={0xe, {0x1, 0x7}}, 0xc) 497.86129ms ago: executing program 4 (id=2805): syz_usb_connect(0x2, 0x36, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x1}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) utime(0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) 275.842414ms ago: executing program 3 (id=2806): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x9, 0x10000000, 0x2012022, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) read$FUSE(r1, &(0x7f0000009080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r1, &(0x7f0000002380)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x4010006, {0x8, 0x7, 0x0, {0x0, 0x4000, 0x1, 0x40000000000, 0x6, 0x100000000004, 0x3ff, 0x8, 0x10000, 0x8000, 0xffffffff, r3, 0x0, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 106.932897ms ago: executing program 1 (id=2810): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) write$binfmt_aout(r0, 0x0, 0x28) 106.657267ms ago: executing program 1 (id=2811): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbbb, {{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@multicast2, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd2a, 0x70bd2a, 0x70bd2d, 0xe273465}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 74.687578ms ago: executing program 1 (id=2812): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0xfffffff5) 74.550278ms ago: executing program 1 (id=2813): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x23, [0x71a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) 74.226018ms ago: executing program 1 (id=2814): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) 25.769589ms ago: executing program 1 (id=2815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 25.621679ms ago: executing program 4 (id=2816): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000040)=@x86={0x81, 0x6, 0x63, 0x0, 0x7, 0x7, 0x0, 0x3, 0x7, 0x92, 0x3, 0x7, 0x0, 0x7f, 0x5ab, 0x9, 0xc9, 0xe, 0x1, '\x00', 0x8, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0xa6, 0x7, 0x0, 0x24, 0x6, 0x40, 0xf, 0x16, 0xd, 0x9, 0x13, 0x0, 0x2, 0xa8000000, 0xd, 0xa, 0x9, 0x8, '\x00', 0xfc, 0x7}) 13.856599ms ago: executing program 4 (id=2817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0xe, &(0x7f0000000080)=[@cstype3], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 0s ago: executing program 4 (id=2818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x140192}) timer_create(0x3, 0x0, &(0x7f0000000000)) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500207010208b8040202400001eb0201090204833c6c06102d0904000402000001"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) kernel console output (not intermixed with test programs): link: 96 bytes leftover after parsing attributes in process `syz.3.1497'. [ 124.190602][ T36] audit: type=1400 audit(1759135951.671:415): avc: denied { connect } for pid=4324 comm="syz.1.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.215139][ T36] audit: type=1400 audit(1759135951.671:416): avc: denied { getopt } for pid=4324 comm="syz.1.1499" laddr=fe80::11 lport=6 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.238269][ T36] audit: type=1400 audit(1759135951.701:417): avc: denied { read } for pid=4324 comm="syz.1.1499" path="socket:[24566]" dev="sockfs" ino=24566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.238291][ T336] Bluetooth: hci0: Frame reassembly failed (-84) [ 124.242817][ T4329] rust_binder: Error while translating object. [ 124.263882][ T4330] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1501'. [ 124.268022][ T4329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 124.283464][ T4329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:660 [ 124.299317][ T4332] fuse: Unknown parameter 'ÿÿÿÿ0x0000000000000007' [ 124.329011][ T4334] netlink: 'syz.1.1503': attribute type 27 has an invalid length. [ 124.369755][ T4334] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 124.388284][ T4345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1508'. [ 124.405193][ T4345] erspan0: default FDB implementation only supports local addresses [ 124.685843][ T4357] netlink: 564 bytes leftover after parsing attributes in process `syz.2.1512'. [ 124.702299][ T36] audit: type=1400 audit(1759135952.181:418): avc: denied { setopt } for pid=4358 comm="syz.2.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.704199][ T4359] binder: Unknown parameter 'contextÌðÔð[7’' [ 124.850696][ T4373] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1518'. [ 125.183863][ T411] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 125.242288][ T4383] netlink: 544 bytes leftover after parsing attributes in process `syz.3.1523'. [ 125.265507][ T4385] netlink: 'syz.3.1524': attribute type 4 has an invalid length. [ 125.323955][ T48] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 125.343862][ T411] usb 3-1: Using ep0 maxpacket: 32 [ 125.351024][ T411] usb 3-1: config index 0 descriptor too short (expected 155, got 27) [ 125.359605][ T411] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 125.368745][ T411] usb 3-1: config 0 has no interface number 0 [ 125.375514][ T411] usb 3-1: config 0 interface 196 altsetting 227 endpoint 0x82 has invalid maxpacket 1561, setting to 64 [ 125.387456][ T411] usb 3-1: config 0 interface 196 has no altsetting 0 [ 125.396082][ T411] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=d2.7f [ 125.405964][ T411] usb 3-1: New USB device strings: Mfr=185, Product=212, SerialNumber=3 [ 125.414533][ T411] usb 3-1: Product: syz [ 125.418846][ T411] usb 3-1: Manufacturer: syz [ 125.424459][ T411] usb 3-1: SerialNumber: syz [ 125.430005][ T411] usb 3-1: config 0 descriptor?? [ 125.474948][ T48] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.486200][ T48] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 125.497229][ T48] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 125.506381][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.514507][ T48] usb 2-1: SerialNumber: syz [ 125.522257][ T48] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 125.530746][ T48] usb-storage 2-1:1.0: USB Mass Storage device detected [ 125.538645][ T48] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 125.547835][ T48] scsi host1: usb-storage 2-1:1.0 [ 125.638367][ T411] ipheth 3-1:0.196: Unable to find alternate settings interface [ 125.647100][ T411] usb 3-1: USB disconnect, device number 38 [ 126.182629][ T4430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.189447][ T4430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49936 sclass=netlink_route_socket pid=4430 comm=syz.2.1542 [ 126.209201][ T4430] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 126.209226][ T4430] rust_binder: Error while translating object. [ 126.219808][ T4430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 126.226025][ T4430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:753 [ 126.283602][ T1161] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.563630][ T411] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 126.571737][ T411] usb 5-1: device reset changed ep0 maxpacket size! [ 126.578839][ T411] usb 5-1: USB disconnect, device number 7 [ 126.816515][ T9] usb 2-1: USB disconnect, device number 36 [ 126.885577][ T411] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 127.043423][ T411] usb 5-1: Using ep0 maxpacket: 8 [ 127.050593][ T411] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.066725][ T411] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 127.084903][ T411] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 127.097365][ T411] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.109827][ T411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.123640][ T411] usb 5-1: Product: ᯹疜戠塋ソ캯㱄ﬤळ尙牟弞岢蜰籗꒷ä²à°…骤೻噪禿놕䅨ꡖ⚹ｧᘂã°å©“礲ä›ç«ã•€â¤á—î觌ష멕气æ¼ãš‚첗諚嬖ꋶ⹂ê¢åµ¥ê°‹é”«ã´‚븸䜶켤盵ᒫ扫ഉ笤éªä§™åšë¯£â‹‡á’œà­®åŠ§ï˜ ï…™ã‡—ê’ç§¹ëŒ¥î–„ê• [ 127.150035][ T411] usb 5-1: Manufacturer: ã [ 127.154987][ T411] usb 5-1: SerialNumber: ê¨â›¬ïºµæ§•ìŠ°ë¯—鈾契渰슈㒑㦜è›ì°Š [ 127.320503][ T4459] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.325941][ T4459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59920 sclass=netlink_route_socket pid=4459 comm=syz.2.1554 [ 127.347949][ T4459] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 127.347977][ T4459] rust_binder: Error while translating object. [ 127.358224][ T4461] netlink: 'syz.1.1555': attribute type 27 has an invalid length. [ 127.358684][ T4459] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 127.376263][ T4459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:765 [ 127.379532][ T411] cdc_ncm 5-1:1.0: bind() failure [ 127.393563][ T4461] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 127.406832][ T411] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 127.421559][ T411] cdc_ncm 5-1:1.1: bind() failure [ 127.428091][ T411] usb 5-1: USB disconnect, device number 8 [ 127.535443][ T4473] netlink: 336 bytes leftover after parsing attributes in process `syz.1.1561'. [ 127.612065][ T36] audit: type=1400 audit(1759135955.092:419): avc: denied { audit_write } for pid=4466 comm="syz.2.1558" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 127.633932][ T36] audit: type=1107 audit(1759135955.092:420): pid=4466 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ˆ‚†ùÄq,«Ñí-Ûë<ºU[XšÓ\å°ê„ÃñJ±É _iýÊ>-jDçÓ}ŠÚ-Ü2jãô,Y1ŽNSi« åP>µ’ýŒæáµj!Kÿ‘Â7ºäòô¾ ü€­k¾ < zòÜJÈÜ\' [ 127.741366][ T36] audit: type=1400 audit(1759135955.222:421): avc: denied { map } for pid=4478 comm="syz.3.1563" path="socket:[26171]" dev="sockfs" ino=26171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 127.782580][ T4481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61200 sclass=netlink_route_socket pid=4481 comm=syz.3.1564 [ 127.904814][ T36] audit: type=1400 audit(1759135955.392:422): avc: denied { setopt } for pid=4485 comm="syz.4.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.263135][ T411] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 128.423946][ T411] usb 5-1: Using ep0 maxpacket: 8 [ 128.463117][ T411] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 128.488847][ T411] usb 5-1: config 0 has no interface number 0 [ 128.506830][ T411] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 128.523038][ T411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.541376][ T411] usb 5-1: Product: syz [ 128.561694][ T411] usb 5-1: Manufacturer: syz [ 128.571788][ T411] usb 5-1: SerialNumber: syz [ 128.584641][ T411] usb 5-1: config 0 descriptor?? [ 128.593355][ T4502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=4502 comm=syz.3.1573 [ 128.691306][ T36] audit: type=1400 audit(1759135956.172:423): avc: denied { lock } for pid=4505 comm="syz.3.1575" path="socket:[26244]" dev="sockfs" ino=26244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 128.724830][ T36] audit: type=1400 audit(1759135956.202:424): avc: denied { create } for pid=4503 comm="syz.2.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 128.795212][ T4492] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 128.803470][ T4492] rust_binder: 262: no such ref 2 [ 128.811269][ T4509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:780 [ 128.866438][ T4517] overlayfs: conflicting lowerdir path [ 128.903039][ T4523] rust_binder: Write failure EFAULT in pid:782 [ 128.960103][ T36] audit: type=1400 audit(1759135956.442:425): avc: denied { create } for pid=4534 comm="syz.2.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.961703][ T4535] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5402 sclass=netlink_xfrm_socket pid=4535 comm=syz.2.1584 [ 128.966469][ T36] audit: type=1400 audit(1759135956.442:426): avc: denied { write } for pid=4534 comm="syz.2.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.019618][ T36] audit: type=1400 audit(1759135956.442:427): avc: denied { nlmsg_write } for pid=4534 comm="syz.2.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.043410][ T411] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 129.049809][ T411] usb 5-1: No streaming interface found for terminal 6. [ 129.056837][ T411] usb 5-1: Failed to create links for entity 5 [ 129.064180][ T411] usb 5-1: Failed to register entities (-22). [ 129.074149][ T411] usb 5-1: USB disconnect, device number 9 [ 129.121728][ T36] audit: type=1400 audit(1759135956.602:428): avc: denied { create } for pid=4547 comm="syz.2.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 129.206396][ T4555] rust_binder: Write failure EFAULT in pid:805 [ 129.273452][ T4559] tipc: Bearer : already 2 bearers with priority 10 [ 129.287149][ T4559] tipc: Bearer : trying with adjusted priority [ 129.294653][ T4559] tipc: Enabled bearer , priority 9 [ 129.552417][ T4572] fuse: Unknown parameter '`›S)^|ºð'¤ÐmeHõ±ý0x0000000000000004' [ 129.568590][ T4572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:266 [ 129.568980][ T4572] rust_binder: Error while translating object. [ 129.585294][ T4572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 129.591517][ T4572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:266 [ 129.675313][ T4580] netlink: 'syz.3.1599': attribute type 27 has an invalid length. [ 129.758219][ T4587] netlink: 'syz.3.1602': attribute type 27 has an invalid length. [ 129.905999][ T4596] tipc: Started in network mode [ 129.910998][ T4596] tipc: Node identity 22629a92dc66, cluster identity 4711 [ 129.918498][ T4596] tipc: Enabled bearer , priority 0 [ 129.928513][ T4596] tipc: Disabling bearer [ 130.013293][ T4604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.013964][ T4604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.029637][ T4604] rust_binder: validate_parent_fixup: new_min_offset=60, sg_entry.length=0 [ 130.038598][ T4604] rust_binder: Error while translating object. [ 130.047655][ T4604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 130.054007][ T4604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:718 [ 130.362612][ T376] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 130.562605][ T376] usb 3-1: config 1 interface 0 altsetting 245 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.582018][ T376] usb 3-1: config 1 interface 0 has no altsetting 0 [ 130.590477][ T376] usb 3-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.40 [ 130.599948][ T376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.610954][ T4616] netlink: 564 bytes leftover after parsing attributes in process `syz.4.1614'. [ 130.622578][ T376] usb 3-1: Product: ꢼ궳唾苮ïžïŒ€î¾Ží’¤â–쫧硶鎜ꚿ䨭뿳윫ä‡ìŠ§å¸ î¯•é¥ï¼‚⇓崩䪼뚹뙤鿎젥୎ç½êŸ°ê³Œà°·îº³æ´¥áššç¦«Ý•éç´ç´™é¸„ਞã¦î¿î¦Žâ‘å»ê¤·ì­¤î»¤é¿—茩스ﲗ幑ଗ異畲ê™ç¯¨ì µë­“ì¤ì—”虻쪮ᔷ೗驨頢ê‡çºŽå¿¤á¨˜àº¨Ô¹ç»šî›¤äŸŠï¼°æ§§å„²ç£”孌掠⠄ [ 130.669039][ T376] usb 3-1: Manufacturer: á°Š [ 130.673972][ T376] usb 3-1: SerialNumber: 䨻æ•ï’¸ã™î™šà²è€µå¬‰ [ 130.682968][ T4620] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19482 sclass=netlink_xfrm_socket pid=4620 comm=syz.4.1616 [ 130.738022][ T4630] /dev/rnullb0: Can't open blockdev [ 130.784197][ T4634] rust_binder: 285: no such ref 4294967294 [ 130.790096][ T4634] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 130.790124][ T4634] rust_binder: Read failure Err(EFAULT) in pid:285 [ 130.833479][ T4638] netlink: 564 bytes leftover after parsing attributes in process `syz.4.1623'. [ 130.886277][ T4645] rust_binder: Error in use_page_slow: ESRCH [ 130.886304][ T4645] rust_binder: use_range failure ESRCH [ 130.892381][ T4645] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 130.898006][ T4645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 130.906587][ T4645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:296 [ 130.924366][ T376] usbhid 3-1:1.0: can't add hid device: -71 [ 130.939490][ T376] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 130.954902][ T376] usb 3-1: USB disconnect, device number 39 [ 130.971288][ T4649] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26650 sclass=netlink_xfrm_socket pid=4649 comm=syz.4.1627 [ 131.100220][ T4666] netlink: 564 bytes leftover after parsing attributes in process `syz.1.1632'. [ 131.262443][ T597] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.412342][ T597] usb 5-1: Using ep0 maxpacket: 16 [ 131.418498][ T597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.429503][ T597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.439392][ T597] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 131.448587][ T597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.457544][ T597] usb 5-1: config 0 descriptor?? [ 131.466160][ T4675] netlink: 'syz.3.1636': attribute type 27 has an invalid length. [ 131.501291][ T4679] 9pnet_fd: Insufficient options for proto=fd [ 131.508185][ T4679] SELinux: policydb magic number 0xa does not match expected magic number 0xf97cff8c [ 131.519915][ T4684] netlink: 'syz.3.1640': attribute type 58 has an invalid length. [ 131.520818][ T4679] SELinux: failed to load policy [ 131.535859][ T4679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.536728][ T4679] rust_binder: Error in use_page_slow: ESRCH [ 131.538936][ T4684] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 131.543361][ T4679] rust_binder: use_range failure ESRCH [ 131.565464][ T4679] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 131.570962][ T4679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 131.579302][ T4679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:825 [ 131.608875][ T4690] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.876747][ T597] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0010/input/input14 [ 131.896326][ T597] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0010/input/input15 [ 131.914882][ T597] kye 0003:0458:5012.0010: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0 [ 132.030382][ T4703] netlink: 'syz.1.1646': attribute type 4 has an invalid length. [ 132.078229][ T4654] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1629'. [ 132.089795][ T9] usb 5-1: USB disconnect, device number 10 [ 132.113720][ T4706] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=31258 sclass=netlink_xfrm_socket pid=4706 comm=syz.1.1647 [ 132.145841][ T4710] /dev/rnullb0: Can't open blockdev [ 132.374347][ T4724] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.607848][ T4727] binder: Bad value for 'stats' [ 132.650323][ T4736] netlink: 'syz.4.1658': attribute type 27 has an invalid length. [ 132.665638][ T4736] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 133.068198][ T4756] netlink: 'syz.3.1664': attribute type 29 has an invalid length. [ 133.277718][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 133.277736][ T36] audit: type=1400 audit(1759135960.763:438): avc: denied { execute_no_trans } for pid=4760 comm="syz.4.1666" path="/file0" dev="ramfs" ino=27842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 133.720918][ T36] audit: type=1400 audit(1759135961.203:439): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 133.731820][ T48] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 133.812618][ T4797] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.822759][ T4797] rust_binder: Error in use_page_slow: ESRCH [ 133.839441][ T4797] rust_binder: use_range failure ESRCH [ 133.851776][ T4797] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 133.857533][ T4797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 133.872231][ T4797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:764 [ 133.913079][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.942192][ T48] usb 5-1: not running at top speed; connect to a high speed hub [ 133.952192][ T48] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 133.969957][ T48] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 133.973371][ T4805] overlayfs: failed to clone upperpath [ 133.986679][ T48] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.998354][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.011278][ T323] Bluetooth: hci0: Frame reassembly failed (-84) [ 134.013439][ T4805] overlayfs: failed to clone lowerpath [ 134.022411][ T48] usb 5-1: Product: syz [ 134.027487][ T48] usb 5-1: Manufacturer: syz [ 134.032112][ T48] usb 5-1: SerialNumber: syz [ 134.205537][ T4820] kvm: pic: level sensitive irq not supported [ 134.239334][ T48] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 134.252347][ T48] cdc_ncm 5-1:1.0: bind() failure [ 134.258973][ T48] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 134.265806][ T48] cdc_ncm 5-1:1.1: bind() failure [ 134.272504][ T48] usb 5-1: USB disconnect, device number 11 [ 134.293473][ T36] audit: type=1400 audit(1759135961.783:440): avc: denied { mounton } for pid=4822 comm="syz.1.1686" path="/file0/file0" dev="ramfs" ino=28025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 134.571599][ T597] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 134.721577][ T597] usb 2-1: Using ep0 maxpacket: 16 [ 134.727692][ T597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.738632][ T597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.754306][ T597] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.772351][ T597] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 134.781902][ T597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.790937][ T597] usb 2-1: config 0 descriptor?? [ 134.794926][ T323] Bluetooth: hci1: Frame reassembly failed (-84) [ 134.890850][ T4844] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4844 comm=syz.3.1694 [ 135.199072][ T597] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 135.206408][ T597] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 135.213642][ T597] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 135.220952][ T597] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 135.228167][ T597] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 135.235391][ T597] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 135.242603][ T597] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 135.249804][ T597] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 135.257039][ T597] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 135.264294][ T597] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 135.271535][ T597] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 135.278729][ T597] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 135.286029][ T597] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 135.293248][ T597] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 135.300450][ T597] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 135.310863][ T597] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0011/input/input16 [ 135.326881][ T597] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 135.404317][ T597] usb 2-1: USB disconnect, device number 37 [ 135.500084][ T4857] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1699'. [ 135.608277][ T4871] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4871 comm=syz.3.1703 [ 135.941359][ T4883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.945468][ T4883] netlink: 'syz.1.1708': attribute type 27 has an invalid length. [ 135.966086][ T4883] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 135.966103][ T4883] rust_binder: Error while translating object. [ 135.976988][ T4883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 135.983250][ T4883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:792 [ 136.041276][ T621] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.041388][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 136.610695][ T36] audit: type=1400 audit(1759135964.094:441): avc: denied { link } for pid=4896 comm="syz.2.1714" name="#17" dev="tmpfs" ino=1774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 136.611200][ T4897] /dev/nbd2: Can't lookup blockdev [ 136.646601][ T36] audit: type=1400 audit(1759135964.094:442): avc: denied { rename } for pid=4896 comm="syz.2.1714" name="#18" dev="tmpfs" ino=1774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 136.718024][ T4908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.719096][ T4908] rust_binder: Error in use_page_slow: ESRCH [ 136.726075][ T4908] rust_binder: use_range failure ESRCH [ 136.732515][ T4908] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 136.738136][ T4908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 136.746409][ T4908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:873 [ 136.851060][ T621] Bluetooth: hci1: command 0x1003 tx timeout [ 136.851102][ T1161] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 136.943610][ T4922] rust_binder: 349: no such ref 0 [ 136.956668][ T36] audit: type=1326 audit(1759135964.444:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x50000 [ 136.982868][ T36] audit: type=1326 audit(1759135964.444:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x50000 [ 136.991041][ T4927] can0: slcan on ttyS3. [ 137.008827][ T36] audit: type=1326 audit(1759135964.444:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x50000 [ 137.043078][ T4931] netlink: 'syz.3.1727': attribute type 27 has an invalid length. [ 137.063555][ T36] audit: type=1326 audit(1759135964.444:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x50000 [ 137.130788][ T36] audit: type=1326 audit(1759135964.444:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x50000 [ 137.196668][ T4948] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1729'. [ 137.299846][ T4958] netlink: 'syz.3.1733': attribute type 27 has an invalid length. [ 137.705055][ T4963] sit0: entered promiscuous mode [ 137.725109][ T4963] netlink: 'syz.2.1735': attribute type 1 has an invalid length. [ 137.744303][ T4963] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1735'. [ 137.892239][ T4925] can0 (unregistered): slcan off ttyS3. [ 137.946734][ T4979] netlink: 564 bytes leftover after parsing attributes in process `syz.4.1739'. [ 138.040757][ T48] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 138.069655][ T4994] bpf: Bad value for 'gid' [ 138.190717][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 138.199707][ T48] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.221117][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.235048][ T48] usb 3-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 138.250697][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.279125][ T48] usb 3-1: config 0 descriptor?? [ 138.290845][ T36] kauditd_printk_skb: 5782 callbacks suppressed [ 138.290863][ T36] audit: type=1326 audit(1759135965.784:6230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x50000 [ 138.320726][ T36] audit: type=1326 audit(1759135965.784:6231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x50000 [ 138.345161][ T36] audit: type=1326 audit(1759135965.784:6232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x50000 [ 138.368632][ T36] audit: type=1326 audit(1759135965.784:6233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x50000 [ 138.392163][ T36] audit: type=1326 audit(1759135965.784:6234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x50000 [ 138.415571][ T36] audit: type=1326 audit(1759135965.784:6235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x50000 [ 138.439220][ T36] audit: type=1326 audit(1759135965.784:6236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x50000 [ 138.468742][ T5013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 138.468773][ T5013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:362 [ 138.481204][ T36] audit: type=1326 audit(1759135965.784:6237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x50000 [ 138.519506][ T36] audit: type=1326 audit(1759135965.784:6238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x50000 [ 138.543238][ T36] audit: type=1326 audit(1759135965.784:6239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x50000 [ 138.660896][ T5022] netlink: 564 bytes leftover after parsing attributes in process `syz.4.1750'. [ 138.715281][ T48] saitek 0003:0738:1705.0012: item fetching failed at offset 2/3 [ 138.724139][ T48] saitek 0003:0738:1705.0012: parse failed [ 138.730016][ T48] saitek 0003:0738:1705.0012: probe with driver saitek failed with error -22 [ 138.836176][ T5040] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1757'. [ 138.927739][ T48] usb 3-1: USB disconnect, device number 40 [ 139.486438][ T5062] netlink: 'syz.3.1766': attribute type 58 has an invalid length. [ 139.523318][ T5065] overlayfs: failed to clone upperpath [ 139.524148][ T5066] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1767'. [ 139.984515][ T5099] incfs: Can't find or create .index dir in ./bus [ 139.991151][ T5099] incfs: mount failed -1 [ 139.999458][ T5099] incfs: Can't find or create .index dir in ./bus [ 140.006327][ T5099] incfs: mount failed -1 [ 140.063106][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 140.111374][ T5125] netlink: 564 bytes leftover after parsing attributes in process `syz.4.1788'. [ 140.310448][ T5152] rust_binder: 5153 RLIMIT_NICE not set [ 140.399958][ T5167] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1804'. [ 140.568986][ T5185] rust_binder: Failed to allocate buffer. len:64, is_oneway:true [ 140.601695][ T5191] fuse: Bad value for 'group_id' [ 140.614499][ T5191] fuse: Bad value for 'group_id' [ 140.641928][ T5195] loop7: detected capacity change from 0 to 16384 [ 141.210038][ T597] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 141.364554][ T597] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.386232][ T597] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.401773][ T597] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.416602][ T597] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.431759][ T597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.446341][ T597] usb 3-1: config 0 descriptor?? [ 141.480250][ T5219] tipc: Bearer : already 2 bearers with priority 10 [ 141.487928][ T5219] tipc: Bearer : trying with adjusted priority [ 141.494946][ T5219] tipc: Enabling of bearer rejected, failed to enable media [ 141.704729][ T5228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:438 [ 141.704859][ T5228] rust_binder: 438: no such ref 0 [ 141.729488][ T5228] rust_binder: 438: no such ref 2 [ 141.870205][ T597] usbhid 3-1:0.0: can't add hid device: -71 [ 141.885019][ T5242] overlayfs: failed to resolve './file0': -2 [ 141.888506][ T597] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 141.910353][ T597] usb 3-1: USB disconnect, device number 41 [ 141.917529][ T5244] netlink: 'syz.1.1833': attribute type 1 has an invalid length. [ 142.095009][ T5267] netlink: 'syz.3.1845': attribute type 27 has an invalid length. [ 142.329791][ T597] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 142.490940][ T597] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 159, changing to 11 [ 142.502136][ T597] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.515064][ T597] usb 2-1: config 1 interface 0 has no altsetting 0 [ 142.525691][ T597] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40 [ 142.534920][ T597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.543005][ T597] usb 2-1: Product: syz [ 142.547241][ T597] usb 2-1: SerialNumber: syz [ 142.608839][ T5284] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 142.619725][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 142.640543][ T5287] netlink: 'syz.4.1854': attribute type 27 has an invalid length. [ 142.662912][ T5287] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 142.780796][ T9] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 142.801443][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.812171][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 142.829798][ T597] usbhid 2-1:1.0: can't add hid device: -71 [ 142.831123][ T9] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 142.843749][ T597] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 142.848366][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.854081][ T597] usb 2-1: USB disconnect, device number 38 [ 142.863068][ T9] usb 3-1: Product: syz [ 142.877003][ T9] usb 3-1: Manufacturer: syz [ 142.881902][ T9] usb 3-1: SerialNumber: syz [ 142.889859][ T9] usb 3-1: config 0 descriptor?? [ 142.897849][ T9] usb-storage 3-1:0.0: USB Mass Storage device detected [ 142.912465][ T9] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 142.929036][ T5301] netlink: 564 bytes leftover after parsing attributes in process `syz.4.1858'. [ 143.097932][ T9] usb 3-1: USB disconnect, device number 42 [ 143.179564][ T31] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 143.192908][ T5309] netlink: 564 bytes leftover after parsing attributes in process `syz.3.1861'. [ 143.270602][ T5316] netlink: 'syz.3.1864': attribute type 27 has an invalid length. [ 143.330536][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.342238][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 143.355024][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.367082][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.375338][ T31] usb 5-1: Product: syz [ 143.379559][ T31] usb 5-1: Manufacturer: syz [ 143.384162][ T31] usb 5-1: SerialNumber: syz [ 143.394017][ T5304] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 143.467846][ T5328] netlink: 'syz.3.1869': attribute type 27 has an invalid length. [ 143.469277][ T5330] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.480033][ T5330] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 143.488174][ T5332] netlink: 564 bytes leftover after parsing attributes in process `syz.3.1871'. [ 143.493984][ T5330] rust_binder: Write failure EINVAL in pid:836 [ 143.526855][ T5336] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1873'. [ 143.614409][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1875'. [ 143.789485][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 143.919405][ T9] usb 2-1: device descriptor read/64, error -71 [ 144.159328][ T9] usb 2-1: device descriptor read/64, error -71 [ 144.283031][ T5361] netlink: 564 bytes leftover after parsing attributes in process `syz.3.1881'. [ 144.301270][ T5363] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1882'. [ 144.399283][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 144.407020][ T31] cdc_ncm 5-1:1.0: failed to get mac address [ 144.413338][ T31] cdc_ncm 5-1:1.0: bind() failure [ 144.419930][ T31] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 144.428113][ T31] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 144.437146][ T31] usb 5-1: USB disconnect, device number 12 [ 144.529210][ T9] usb 2-1: device descriptor read/64, error -71 [ 144.769145][ T9] usb 2-1: device descriptor read/64, error -71 [ 144.879262][ T9] usb usb2-port1: attempt power cycle [ 144.935286][ T5381] rust_binder: Write failure EFAULT in pid:474 [ 144.945449][ T36] kauditd_printk_skb: 12261 callbacks suppressed [ 144.945471][ T36] audit: type=1400 audit(1759135972.436:18501): avc: denied { append } for pid=5382 comm="syz.4.1890" name="pfkey" dev="proc" ino=4026532895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 144.954043][ T5383] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1890'. [ 144.990898][ T5383] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1890'. [ 145.060700][ T5385] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.121324][ T5387] netlink: 564 bytes leftover after parsing attributes in process `syz.4.1892'. [ 145.158151][ T5391] sock: sock_set_timeout: `syz.4.1894' (pid 5391) tries to set negative timeout [ 145.229109][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 145.260069][ T9] usb 2-1: device descriptor read/8, error -71 [ 145.390038][ T9] usb 2-1: device descriptor read/8, error -71 [ 145.409263][ T36] audit: type=1400 audit(1759135972.901:18502): avc: denied { map } for pid=5408 comm="syz.4.1901" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.629053][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 145.649980][ T9] usb 2-1: device descriptor read/8, error -71 [ 145.659093][ T48] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 145.780001][ T9] usb 2-1: device descriptor read/8, error -71 [ 145.789053][ T48] usb 5-1: device descriptor read/64, error -71 [ 145.889142][ T9] usb usb2-port1: unable to enumerate USB device [ 146.039116][ T48] usb 5-1: device descriptor read/64, error -71 [ 146.279059][ T48] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 146.409057][ T48] usb 5-1: device descriptor read/64, error -71 [ 146.565366][ T36] audit: type=1400 audit(1759135974.051:18503): avc: denied { getopt } for pid=5420 comm="syz.1.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.649051][ T48] usb 5-1: device descriptor read/64, error -71 [ 146.759152][ T48] usb usb5-port1: attempt power cycle [ 146.881958][ T36] audit: type=1400 audit(1759135974.371:18504): avc: denied { setattr } for pid=5441 comm="syz.1.1916" name="RAWv6" dev="sockfs" ino=30784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.099053][ T48] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 147.120175][ T48] usb 5-1: device descriptor read/8, error -71 [ 147.131152][ T411] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 147.272180][ T48] usb 5-1: device descriptor read/8, error -71 [ 147.329076][ T411] usb 3-1: Using ep0 maxpacket: 32 [ 147.335367][ T411] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 147.343670][ T411] usb 3-1: config 0 has no interface number 0 [ 147.349821][ T411] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 147.359909][ T411] usb 3-1: config 0 interface 196 has no altsetting 0 [ 147.368066][ T411] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 147.377190][ T411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.385226][ T411] usb 3-1: Product: syz [ 147.389434][ T411] usb 3-1: Manufacturer: syz [ 147.394074][ T411] usb 3-1: SerialNumber: syz [ 147.399537][ T411] usb 3-1: config 0 descriptor?? [ 147.404812][ T5436] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 147.509063][ T48] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 147.530076][ T48] usb 5-1: device descriptor read/8, error -71 [ 147.660328][ T48] usb 5-1: device descriptor read/8, error -71 [ 147.714900][ T36] audit: type=1326 audit(1759135975.201:18505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.1.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x7fc00000 [ 147.755973][ T36] audit: type=1400 audit(1759135975.241:18506): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 147.776196][ T48] usb usb5-port1: unable to enumerate USB device [ 147.791044][ T5459] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.813060][ T411] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 147.828625][ T411] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 147.843155][ T5459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:865 [ 147.880461][ T5463] incfs: Can't find or create .index dir in ./bus [ 147.897256][ T5463] incfs: mount failed -1 [ 147.902566][ T5463] incfs: Can't find or create .index dir in ./bus [ 147.909325][ T5463] incfs: mount failed -1 [ 147.914492][ T36] audit: type=1400 audit(1759135975.401:18507): avc: denied { watch watch_reads } for pid=5462 comm="syz.3.1922" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 148.179539][ T5500] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.180057][ T5500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:877 [ 148.278285][ T5511] __nla_validate_parse: 1 callbacks suppressed [ 148.278310][ T5511] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1943'. [ 148.444450][ T5536] netlink: 'syz.4.1952': attribute type 4 has an invalid length. [ 148.452354][ T5536] netlink: 3581 bytes leftover after parsing attributes in process `syz.4.1952'. [ 148.712463][ T5539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5539 comm=syz.1.1953 [ 148.879381][ T5551] random: crng reseeded on system resumption [ 149.359228][ T5562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1962'. [ 149.371159][ T5561] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 149.379906][ T36] audit: type=1400 audit(1759135976.871:18508): avc: denied { read } for pid=5560 comm="syz.4.1962" path="socket:[30976]" dev="sockfs" ino=30976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 149.793239][ T5575] netlink: 564 bytes leftover after parsing attributes in process `syz.1.1967'. [ 149.858831][ T376] usb 3-1: USB disconnect, device number 43 [ 149.867143][ T5579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=5579 comm=syz.1.1968 [ 149.924541][ T5588] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.930802][ T5588] netlink: 'syz.2.1974': attribute type 27 has an invalid length. [ 149.947199][ T5588] sit0: left promiscuous mode [ 149.980644][ T5588] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 149.980676][ T5588] rust_binder: Error while translating object. [ 149.994230][ T5588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 150.001970][ T5588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:941 [ 150.049460][ T5604] netlink: 'syz.1.1978': attribute type 27 has an invalid length. [ 150.072727][ T5604] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 150.232572][ T5614] rust_binder: 5614 RLIMIT_NICE not set [ 150.240291][ T5615] can0: slcan on ptm0. [ 150.261248][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.268844][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.276672][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.285523][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.302057][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.312118][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.319832][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.334357][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.347307][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.354134][ T5632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=5632 comm=syz.3.1984 [ 150.354820][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 150.376252][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.385968][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.393684][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.402570][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.410538][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.413207][ T5635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1985'. [ 150.424714][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.429303][ T5635] futex_wake_op: syz.3.1985 tries to shift op by 144; fix this program [ 150.444004][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.460022][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x4 [ 150.467515][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.474950][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.482510][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x2 [ 150.490896][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.498346][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.505865][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.513427][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.521094][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.528485][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.536955][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.544454][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.552191][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.559721][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.567093][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.574570][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.582540][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.590158][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.590800][ T5639] af_packet: tpacket_rcv: packet too big, clamped from 59510 to 4294967272. macoff=96 [ 150.597642][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.614848][ T9] usb 3-1: config 1 has an invalid interface number: 64 but max is 0 [ 150.622970][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.633158][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.640823][ T9] usb 3-1: config 1 has no interface number 0 [ 150.647331][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.655139][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.662674][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.670430][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.672385][ T5646] netlink: 544 bytes leftover after parsing attributes in process `syz.3.1989'. [ 150.677884][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.695050][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.701820][ T5648] netlink: 'syz.3.1990': attribute type 27 has an invalid length. [ 150.702562][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 150.719989][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.728157][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.735668][ T9] usb 3-1: Product: syz [ 150.740167][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.747868][ T9] usb 3-1: Manufacturer: syz [ 150.752727][ T9] usb 3-1: SerialNumber: syz [ 150.757557][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.765807][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.774737][ T9] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 150.781518][ T9] usb 3-1: No valid video chain found. [ 150.787078][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.796293][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.803810][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.811384][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.818903][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.826611][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.834050][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.841674][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.849112][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.856823][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.864258][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.871660][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.879046][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.886419][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.893869][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.901283][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.908687][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.916080][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.923691][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.931121][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.938498][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.945982][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.953398][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.960784][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.968161][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.975673][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.983131][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 150.990596][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x2 [ 150.998011][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 151.005854][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 151.013297][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 151.020831][ T644] hid-generic 0003:0003:000F.0013: unknown main item tag 0x0 [ 151.028752][ T644] hid-generic 0003:0003:000F.0013: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 151.047865][ T5659] fido_id[5659]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 151.111745][ T644] rust_binder: 5607: removing orphan mapping 0:1048 [ 151.146833][ T5668] fuse: Unknown parameter '' [ 151.152488][ T5668] fuse: Bad value for 'fd' [ 151.619530][ T5617] can0 (unregistered): slcan off ptm0. [ 151.725277][ T5688] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2000'. [ 151.809908][ T36] audit: type=1400 audit(1759135979.281:18509): avc: denied { listen } for pid=5692 comm="syz.3.2001" path=2F3736372FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 151.875387][ T36] audit: type=1400 audit(1759135979.281:18510): avc: denied { shutdown } for pid=5692 comm="syz.3.2001" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.930689][ T5703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2004'. [ 152.136336][ T5720] FAULT_INJECTION: forcing a failure. [ 152.136336][ T5720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.194932][ T5720] CPU: 1 UID: 0 PID: 5720 Comm: syz.1.2006 Not tainted syzkaller #0 ebd888673537e6d433689cc680383d43a5383a5c [ 152.194970][ T5720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.194983][ T5720] Call Trace: [ 152.194990][ T5720] [ 152.194998][ T5720] __dump_stack+0x21/0x30 [ 152.195031][ T5720] dump_stack_lvl+0x10c/0x190 [ 152.195058][ T5720] ? __cfi_dump_stack_lvl+0x10/0x10 [ 152.195086][ T5720] ? kstrtoull+0x13b/0x1e0 [ 152.195116][ T5720] dump_stack+0x19/0x20 [ 152.195141][ T5720] should_fail_ex+0x3d9/0x530 [ 152.195163][ T5720] should_fail+0xf/0x20 [ 152.195182][ T5720] should_fail_usercopy+0x1e/0x30 [ 152.195205][ T5720] _copy_from_user+0x22/0xb0 [ 152.195229][ T5720] ___sys_sendmsg+0x159/0x2a0 [ 152.195259][ T5720] ? __sys_sendmsg+0x280/0x280 [ 152.195286][ T5720] ? proc_fail_nth_write+0x17e/0x210 [ 152.195313][ T5720] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 152.195346][ T5720] __x64_sys_sendmsg+0x1eb/0x2c0 [ 152.195373][ T5720] ? fput+0x1a5/0x240 [ 152.195398][ T5720] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 152.195425][ T5720] ? ksys_write+0x1ef/0x250 [ 152.195445][ T5720] ? __kasan_check_read+0x15/0x20 [ 152.195476][ T5720] x64_sys_call+0x2a4c/0x2ee0 [ 152.195505][ T5720] do_syscall_64+0x58/0xf0 [ 152.195529][ T5720] ? clear_bhb_loop+0x50/0xa0 [ 152.195549][ T5720] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 152.195579][ T5720] RIP: 0033:0x7f169498eec9 [ 152.195596][ T5720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.195615][ T5720] RSP: 002b:00007f1695856038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.195637][ T5720] RAX: ffffffffffffffda RBX: 00007f1694be5fa0 RCX: 00007f169498eec9 [ 152.195651][ T5720] RDX: 0000000000044800 RSI: 0000200000000180 RDI: 0000000000000003 [ 152.195663][ T5720] RBP: 00007f1695856090 R08: 0000000000000000 R09: 0000000000000000 [ 152.195674][ T5720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.195688][ T5720] R13: 00007f1694be6038 R14: 00007f1694be5fa0 R15: 00007ffda2b843d8 [ 152.195707][ T5720] [ 152.480273][ T5734] SELinux: failed to load policy [ 152.482705][ T36] audit: type=1400 audit(1759135979.971:18511): avc: denied { accept } for pid=5735 comm="syz.4.2012" laddr=fe80::12 lport=37748 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 152.509355][ T36] audit: type=1400 audit(1759135980.001:18512): avc: denied { write } for pid=5735 comm="syz.4.2012" path="socket:[31375]" dev="sockfs" ino=31375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 152.552114][ T5734] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 152.552141][ T5734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 152.560235][ T5734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:935 [ 153.151142][ T644] usb 3-1: USB disconnect, device number 44 [ 153.386158][ T5758] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2020'. [ 153.779496][ T5778] __vm_enough_memory: pid: 5778, comm: syz.2.2025, bytes: 18014402804453376 not enough memory for the allocation [ 153.815634][ T5782] netlink: 544 bytes leftover after parsing attributes in process `syz.3.2029'. [ 153.967791][ T5787] 9pnet_virtio: no channels available for device ./file0 [ 153.974984][ T36] audit: type=1400 audit(1759135981.451:18513): avc: denied { mounton } for pid=5786 comm="syz.1.2032" path="/361/file0" dev="tmpfs" ino=1943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 154.230706][ T5791] fuse: Bad value for 'group_id' [ 154.241395][ T5791] fuse: Bad value for 'group_id' [ 154.255393][ T5791] rust_binder: Write failure EFAULT in pid:542 [ 154.347860][ T5796] netlink: 'syz.4.2034': attribute type 13 has an invalid length. [ 154.633802][ T5810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.652601][ T5810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:974 [ 154.695385][ T36] audit: type=1326 audit(1759135982.181:18514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5811 comm="syz.4.2039" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b58eec9 code=0x0 [ 154.810981][ T1402] Bluetooth: hci0: Frame reassembly failed (-84) [ 154.817809][ T5818] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2041'. [ 154.841113][ T5820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=5820 comm=syz.3.2043 [ 154.907221][ T5831] netlink: 'syz.1.2042': attribute type 27 has an invalid length. [ 154.921661][ T5831] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 155.155861][ T5844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61468 sclass=netlink_route_socket pid=5844 comm=syz.1.2052 [ 155.186693][ T5846] netlink: 'syz.1.2053': attribute type 16 has an invalid length. [ 155.194672][ T5846] netlink: 64130 bytes leftover after parsing attributes in process `syz.1.2053'. [ 155.282106][ T5851] netlink: 'syz.1.2055': attribute type 27 has an invalid length. [ 155.295759][ T5851] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 155.663631][ T36] audit: type=1326 audit(1759135983.151:18515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.4.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b58eec9 code=0x50000 [ 155.695108][ T36] audit: type=1326 audit(1759135983.151:18516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.4.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b58eec9 code=0x50000 [ 155.718500][ T36] audit: type=1326 audit(1759135983.151:18517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.4.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b58eec9 code=0x50000 [ 155.741994][ T36] audit: type=1326 audit(1759135983.151:18518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.4.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b58eec9 code=0x50000 [ 156.166069][ T5869] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2062'. [ 156.819036][ T36] kauditd_printk_skb: 17905 callbacks suppressed [ 156.819055][ T36] audit: type=1326 audit(1759135984.301:36424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.4.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b58eec9 code=0x50000 [ 156.839023][ T621] Bluetooth: hci0: command 0x1003 tx timeout [ 156.853487][ T1161] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 156.865016][ T5884] netlink: 'syz.3.2069': attribute type 27 has an invalid length. [ 156.893480][ T36] audit: type=1326 audit(1759135984.331:36425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.4.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b58eec9 code=0x50000 [ 156.940303][ T36] audit: type=1326 audit(1759135984.331:36426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.4.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b58eec9 code=0x50000 [ 156.976130][ T36] audit: type=1326 audit(1759135984.331:36427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.4.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b58eec9 code=0x50000 [ 157.007156][ T36] audit: type=1326 audit(1759135984.331:36428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.4.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b58eec9 code=0x50000 [ 157.031452][ T36] audit: type=1326 audit(1759135984.331:36429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.4.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b58eec9 code=0x50000 [ 157.057155][ T5896] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2072'. [ 157.066244][ T36] audit: type=1326 audit(1759135984.331:36430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.4.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b58eec9 code=0x50000 [ 157.066277][ T36] audit: type=1326 audit(1759135984.331:36431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.4.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b58eec9 code=0x50000 [ 157.066303][ T36] audit: type=1326 audit(1759135984.331:36432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.4.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b58eec9 code=0x50000 [ 157.138483][ T5887] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 157.139969][ T36] audit: type=1326 audit(1759135984.331:36433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.4.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b58eec9 code=0x50000 [ 157.267416][ T5905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:982 [ 157.267632][ T5905] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 157.472390][ T5912] netlink: 'syz.3.2079': attribute type 27 has an invalid length. [ 157.590076][ T5917] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64540 sclass=netlink_xfrm_socket pid=5917 comm=syz.3.2081 [ 157.759490][ T5929] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2087'. [ 157.817883][ T5933] netlink: 'syz.3.2089': attribute type 27 has an invalid length. [ 157.859117][ T5935] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.899994][ T5935] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 157.910124][ T5935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:983 [ 158.184908][ T5959] /dev/rnullb0: Can't open blockdev [ 158.489916][ T5968] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 158.489942][ T5968] rust_binder: Error while translating object. [ 158.500172][ T5968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.506378][ T5968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:991 [ 158.621191][ T5973] netlink: 'syz.4.2104': attribute type 11 has an invalid length. [ 158.665167][ T5980] rust_binder: Error while translating object. [ 158.665195][ T5980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.671515][ T5980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:573 [ 158.801434][ T5995] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967293 [ 158.816649][ T5998] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.819809][ T5998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1001 [ 159.109959][ T6012] netlink: 564 bytes leftover after parsing attributes in process `syz.1.2118'. [ 159.157651][ T6016] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2120'. [ 159.389066][ T31] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 159.529051][ T31] usb 2-1: device descriptor read/64, error -71 [ 159.553651][ T6038] netlink: 'syz.3.2130': attribute type 27 has an invalid length. [ 159.590502][ T6040] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2131'. [ 159.644502][ T6046] netlink: 564 bytes leftover after parsing attributes in process `syz.3.2134'. [ 159.671331][ T6053] netlink: 'syz.3.2136': attribute type 27 has an invalid length. [ 159.766507][ T6069] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2142'. [ 159.775675][ T31] usb 2-1: device descriptor read/64, error -71 [ 159.884530][ T6078] 9pnet_fd: Insufficient options for proto=fd [ 160.029314][ T31] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 160.145375][ T6099] netlink: 'syz.4.2152': attribute type 1 has an invalid length. [ 160.159073][ T31] usb 2-1: device descriptor read/64, error -71 [ 160.178017][ T6101] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2153'. [ 160.197596][ T6103] rust_binder: Error while translating object. [ 160.197650][ T6103] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 160.203944][ T6103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:612 [ 160.373480][ T6117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2160'. [ 160.399251][ T31] usb 2-1: device descriptor read/64, error -71 [ 160.469801][ T6121] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2162'. [ 160.503106][ T6127] binder: Bad value for 'stats' [ 160.509083][ T31] usb usb2-port1: attempt power cycle [ 160.666749][ T6129] rust_binder: 1025: no such ref 0 [ 160.739062][ T597] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 160.849071][ T31] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 160.880051][ T31] usb 2-1: device descriptor read/8, error -71 [ 160.900257][ T597] usb 5-1: not running at top speed; connect to a high speed hub [ 160.918905][ T597] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 160.930836][ T597] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 160.943209][ T597] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.952362][ T597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.969028][ T597] usb 5-1: Product: syz [ 160.973280][ T597] usb 5-1: Manufacturer: á [ 160.977896][ T597] usb 5-1: SerialNumber: syz [ 160.999429][ T6127] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 161.008055][ T597] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 161.015433][ T597] cdc_ncm 5-1:1.0: bind() failure [ 161.021276][ T31] usb 2-1: device descriptor read/8, error -71 [ 161.028728][ T597] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 161.035735][ T597] cdc_ncm 5-1:1.1: bind() failure [ 161.109035][ T6147] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2171'. [ 161.259055][ T31] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 161.280068][ T31] usb 2-1: device descriptor read/8, error -71 [ 161.420105][ T31] usb 2-1: device descriptor read/8, error -71 [ 161.529155][ T31] usb usb2-port1: unable to enumerate USB device [ 161.561693][ T6157] netlink: 'syz.3.2175': attribute type 27 has an invalid length. [ 161.703219][ T6164] netlink: 564 bytes leftover after parsing attributes in process `syz.3.2178'. [ 161.756306][ T6172] netlink: 'syz.3.2182': attribute type 4 has an invalid length. [ 162.150725][ T6194] /dev/rnullb0: Can't open blockdev [ 163.082599][ T36] kauditd_printk_skb: 12252 callbacks suppressed [ 163.082622][ T36] audit: type=1400 audit(1759135990.571:48686): avc: denied { lock } for pid=6210 comm="syz.1.2198" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.349039][ T31] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 163.479046][ T31] usb 2-1: device descriptor read/64, error -71 [ 163.514692][ T65] usb 5-1: USB disconnect, device number 17 [ 163.673653][ T6235] batadv_slave_1: entered allmulticast mode [ 163.729036][ T31] usb 2-1: device descriptor read/64, error -71 [ 163.792685][ T6237] __vm_enough_memory: pid: 6237, comm: syz.2.2208, bytes: 18014402804453376 not enough memory for the allocation [ 163.805324][ T6237] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6237 comm=syz.2.2208 [ 163.953146][ T36] audit: type=1400 audit(1759135991.441:48687): avc: denied { audit_control } for pid=6241 comm="syz.2.2209" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 163.979046][ T31] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 164.030653][ T6244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.030692][ T6244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1059 [ 164.093873][ T597] rust_binder: 6241: removing orphan mapping 0:8 [ 164.109563][ T31] usb 2-1: device descriptor read/64, error -71 [ 164.268591][ T6257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.277416][ T6257] netlink: 'syz.2.2210': attribute type 27 has an invalid length. [ 164.303761][ T323] ip6_tunnel:  xmit: Local address not yet configured! [ 164.315940][ T323] ip6_tunnel:  xmit: Local address not yet configured! [ 164.325973][ T6257] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 164.326002][ T6257] rust_binder: Error while translating object. [ 164.336840][ T411] ip6_tunnel:  xmit: Local address not yet configured! [ 164.349037][ T31] usb 2-1: device descriptor read/64, error -71 [ 164.350396][ T6257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.356328][ T6257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1064 [ 164.400118][ T6259] __nla_validate_parse: 6 callbacks suppressed [ 164.400142][ T6259] netlink: 564 bytes leftover after parsing attributes in process `syz.3.2214'. [ 164.459166][ T31] usb usb2-port1: attempt power cycle [ 164.490532][ T6272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.490616][ T6273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.522684][ T6278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.532381][ T6278] rust_binder: Error in use_page_slow: ESRCH [ 164.539446][ T6278] rust_binder: use_range failure ESRCH [ 164.545476][ T6278] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 164.559984][ T6278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 164.579055][ T6278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1073 [ 164.809098][ T31] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 164.840003][ T31] usb 2-1: device descriptor read/8, error -71 [ 164.849098][ T597] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 164.859175][ T65] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 164.970003][ T31] usb 2-1: device descriptor read/8, error -71 [ 164.989032][ T65] usb 5-1: device descriptor read/64, error -71 [ 164.999025][ T597] usb 3-1: Invalid ep0 maxpacket: 64 [ 164.999374][ T411] ip6_tunnel:  xmit: Local address not yet configured! [ 165.129044][ T597] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 165.159829][ T644] ip6_tunnel:  xmit: Local address not yet configured! [ 165.209045][ T31] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 165.227210][ T36] audit: type=1400 audit(1759135992.711:48688): avc: denied { create } for pid=6297 comm="syz.3.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 165.249027][ T36] audit: type=1400 audit(1759135992.711:48689): avc: denied { write } for pid=6297 comm="syz.3.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 165.252148][ T65] usb 5-1: device descriptor read/64, error -71 [ 165.271398][ T31] usb 2-1: device descriptor read/8, error -71 [ 165.289048][ T597] usb 3-1: Invalid ep0 maxpacket: 64 [ 165.294579][ T597] usb usb3-port1: attempt power cycle [ 165.410292][ T31] usb 2-1: device descriptor read/8, error -71 [ 165.416130][ T6308] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2235'. [ 165.519035][ T65] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 165.519123][ T31] usb usb2-port1: unable to enumerate USB device [ 165.649038][ T597] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 165.649045][ T65] usb 5-1: device descriptor read/64, error -71 [ 165.669419][ T597] usb 3-1: Invalid ep0 maxpacket: 64 [ 165.799096][ T597] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 165.819387][ T597] usb 3-1: Invalid ep0 maxpacket: 64 [ 165.824813][ T597] usb usb3-port1: unable to enumerate USB device [ 165.899043][ T65] usb 5-1: device descriptor read/64, error -71 [ 166.009104][ T65] usb usb5-port1: attempt power cycle [ 166.179727][ T6320] FAULT_INJECTION: forcing a failure. [ 166.179727][ T6320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.192858][ T6320] CPU: 0 UID: 0 PID: 6320 Comm: syz.1.2240 Not tainted syzkaller #0 ebd888673537e6d433689cc680383d43a5383a5c [ 166.192888][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.192907][ T6320] Call Trace: [ 166.192913][ T6320] [ 166.192920][ T6320] __dump_stack+0x21/0x30 [ 166.192949][ T6320] dump_stack_lvl+0x10c/0x190 [ 166.192973][ T6320] ? __cfi_dump_stack_lvl+0x10/0x10 [ 166.192997][ T6320] ? kstrtoull+0x13b/0x1e0 [ 166.193025][ T6320] dump_stack+0x19/0x20 [ 166.193048][ T6320] should_fail_ex+0x3d9/0x530 [ 166.193068][ T6320] should_fail+0xf/0x20 [ 166.193085][ T6320] should_fail_usercopy+0x1e/0x30 [ 166.193103][ T6320] _copy_from_user+0x22/0xb0 [ 166.193125][ T6320] ___sys_sendmsg+0x159/0x2a0 [ 166.193151][ T6320] ? __sys_sendmsg+0x280/0x280 [ 166.193175][ T6320] ? proc_fail_nth_write+0x17e/0x210 [ 166.193198][ T6320] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 166.193227][ T6320] __x64_sys_sendmsg+0x1eb/0x2c0 [ 166.193251][ T6320] ? fput+0x1a5/0x240 [ 166.193272][ T6320] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 166.193296][ T6320] ? ksys_write+0x1ef/0x250 [ 166.193314][ T6320] ? __kasan_check_read+0x15/0x20 [ 166.193342][ T6320] x64_sys_call+0x2a4c/0x2ee0 [ 166.193367][ T6320] do_syscall_64+0x58/0xf0 [ 166.193388][ T6320] ? clear_bhb_loop+0x50/0xa0 [ 166.193406][ T6320] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 166.193434][ T6320] RIP: 0033:0x7f169498eec9 [ 166.193450][ T6320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.193466][ T6320] RSP: 002b:00007f1695856038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.193488][ T6320] RAX: ffffffffffffffda RBX: 00007f1694be5fa0 RCX: 00007f169498eec9 [ 166.193502][ T6320] RDX: 0000000000040804 RSI: 0000200000000140 RDI: 0000000000000003 [ 166.193516][ T6320] RBP: 00007f1695856090 R08: 0000000000000000 R09: 0000000000000000 [ 166.193529][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.193541][ T6320] R13: 00007f1694be6038 R14: 00007f1694be5fa0 R15: 00007ffda2b843d8 [ 166.193557][ T6320] [ 166.203508][ T6322] rust_binder: Got transaction with invalid offset. [ 166.359039][ T65] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 166.366263][ T6322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.400360][ T65] usb 5-1: device descriptor read/8, error -71 [ 166.405102][ T6322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1012 [ 166.530079][ T65] usb 5-1: device descriptor read/8, error -71 [ 166.572733][ T6329] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2244'. [ 166.622526][ T6333] netlink: 'syz.3.2246': attribute type 27 has an invalid length. [ 166.789103][ T65] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 166.820441][ T65] usb 5-1: device descriptor read/8, error -71 [ 166.890119][ T6353] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2254'. [ 166.907171][ T6355] netlink: 'syz.3.2255': attribute type 27 has an invalid length. [ 166.941796][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 166.950951][ T65] usb 5-1: device descriptor read/8, error -71 [ 166.981751][ T6366] overlayfs: failed to clone upperpath [ 167.069162][ T65] usb usb5-port1: unable to enumerate USB device [ 167.105416][ T6372] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2263'. [ 167.209052][ T31] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 167.359129][ T31] usb 2-1: Invalid ep0 maxpacket: 32 [ 167.466088][ T6400] netlink: 564 bytes leftover after parsing attributes in process `syz.3.2273'. [ 167.499097][ T31] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 167.522362][ T6404] netlink: 'syz.3.2275': attribute type 27 has an invalid length. [ 167.659079][ T31] usb 2-1: Invalid ep0 maxpacket: 32 [ 167.669814][ T31] usb usb2-port1: attempt power cycle [ 167.801528][ T6426] netlink: 564 bytes leftover after parsing attributes in process `syz.3.2284'. [ 167.885729][ T6434] rust_binder: Write failure EINVAL in pid:1080 [ 167.959325][ T6437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.986133][ T6440] rust_binder: Got transaction with invalid offset. [ 167.986228][ T6440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 167.993303][ T6440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:660 [ 168.019036][ T31] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 168.020100][ T6447] rust_binder: Write failure EFAULT in pid:662 [ 168.059364][ T31] usb 2-1: Invalid ep0 maxpacket: 32 [ 168.199079][ T31] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 168.199117][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 168.219390][ T31] usb 2-1: Invalid ep0 maxpacket: 32 [ 168.224939][ T31] usb usb2-port1: unable to enumerate USB device [ 168.251778][ T6460] netlink: 'syz.2.2298': attribute type 4 has an invalid length. [ 168.265688][ T6460] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 168.289536][ T375] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 168.300845][ T6463] vcan0: entered allmulticast mode [ 168.349358][ T6467] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 168.365977][ T6471] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.368073][ T6467] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 168.388388][ T6467] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 168.449037][ T375] usb 5-1: Using ep0 maxpacket: 32 [ 168.455381][ T375] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.475785][ T375] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 168.484893][ T375] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 168.499075][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.509395][ T375] usb 5-1: config 0 descriptor?? [ 168.549239][ T6483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.569749][ T6489] sit0: entered promiscuous mode [ 168.584530][ T6489] netlink: 'syz.2.2309': attribute type 1 has an invalid length. [ 168.592395][ T6489] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2309'. [ 168.815178][ T6453] kvm: user requested TSC rate below hardware speed [ 168.822940][ T6453] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 168.849041][ T375] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 168.901704][ T65] usb 5-1: USB disconnect, device number 22 [ 168.992017][ T6523] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2315'. [ 169.009278][ T375] usb 3-1: Using ep0 maxpacket: 32 [ 169.015657][ T375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.026895][ T375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.038361][ T375] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 169.043198][ T6534] netlink: 'syz.3.2319': attribute type 15 has an invalid length. [ 169.047632][ T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.064254][ T375] usb 3-1: config 0 descriptor?? [ 169.072420][ T375] hub 3-1:0.0: USB hub found [ 169.084875][ T6539] netlink: 'syz.3.2321': attribute type 27 has an invalid length. [ 169.270704][ T375] hub 3-1:0.0: 1 port detected [ 169.430132][ T6573] __nla_validate_parse: 2 callbacks suppressed [ 169.430155][ T6573] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2334'. [ 169.473119][ T1402] Bluetooth: hci0: Frame reassembly failed (-84) [ 169.479990][ T375] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 169.487087][ T375] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 169.495532][ T375] usbhid 3-1:0.0: can't add hid device: -71 [ 169.501515][ T375] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 169.529622][ T375] usb 3-1: USB disconnect, device number 49 [ 169.982855][ T36] audit: type=1326 audit(1759135997.471:48690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.1.2338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x0 [ 170.050077][ T6584] binder: Unknown parameter 'defcontext01777777777777777777777' [ 170.197847][ T6592] kvm: kvm [6591]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 170.206659][ T6592] kvm: kvm [6591]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 170.227147][ T6592] netlink: 'syz.2.2342': attribute type 19 has an invalid length. [ 170.234998][ T6592] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2342'. [ 170.271489][ T6595] netlink: 'syz.3.2343': attribute type 27 has an invalid length. [ 170.376729][ T6602] overlayfs: failed to clone upperpath [ 170.479044][ T65] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 170.630111][ T65] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 170.642440][ T65] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.652602][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 170.666866][ T65] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 170.675980][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.684059][ T65] usb 3-1: Product: syz [ 170.688210][ T65] usb 3-1: Manufacturer: syz [ 170.692817][ T65] usb 3-1: SerialNumber: syz [ 170.697865][ T65] usb 3-1: config 0 descriptor?? [ 170.703538][ T65] usb-storage 3-1:0.0: USB Mass Storage device detected [ 170.711156][ T65] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 170.904511][ T6592] binder: Unknown parameter 'bû¤Ðl4×'uid<18446744073709551615' [ 170.912550][ T375] usb 3-1: USB disconnect, device number 50 [ 171.479023][ T621] Bluetooth: hci0: command 0x1003 tx timeout [ 171.479023][ T1161] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 171.564081][ T6617] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2352'. [ 171.582208][ T6619] netlink: 'syz.3.2353': attribute type 27 has an invalid length. [ 171.608058][ T6621] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2354'. [ 171.671103][ T6627] cgroup: none used incorrectly [ 171.709067][ T375] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 171.727477][ T6628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1035 [ 171.860161][ T375] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 171.878474][ T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.887061][ T375] usb 3-1: config 0 descriptor?? [ 172.092908][ T6615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.124113][ T6615] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 172.130680][ T6615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1140 [ 172.217459][ T6638] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2361'. [ 172.271428][ T6642] netlink: 'syz.4.2363': attribute type 27 has an invalid length. [ 172.282162][ T375] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 172.287437][ T6642] batadv_slave_1: left allmulticast mode [ 172.298343][ T375] asix 3-1:0.0: probe with driver asix failed with error -71 [ 172.306500][ T6642] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 172.311308][ T375] usb 3-1: USB disconnect, device number 51 [ 172.378268][ T6647] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2365'. [ 172.477601][ T6644] 9pnet_fd: Insufficient options for proto=fd [ 172.687259][ T6656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.717849][ T6656] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 172.724328][ T6656] rust_binder: Error while translating object. [ 172.736609][ T6656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 172.743017][ T6656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1143 [ 172.763380][ T36] audit: type=1400 audit(1759136000.251:48691): avc: denied { execute } for pid=6660 comm="syz.2.2369" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.764566][ T6661] fuse: Bad value for 'fd' [ 172.809668][ T6663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.809737][ T6663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1150 [ 173.049036][ T65] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 173.116508][ T6670] netlink: 'syz.3.2373': attribute type 27 has an invalid length. [ 173.140948][ T6672] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2374'. [ 173.209167][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 173.220436][ T65] usb 3-1: config 4 has an invalid interface number: 91 but max is 2 [ 173.236002][ T65] usb 3-1: config 4 has an invalid interface number: 4 but max is 2 [ 173.246918][ T6690] fuse: Bad value for 'fd' [ 173.254428][ T65] usb 3-1: config 4 has an invalid interface number: 47 but max is 2 [ 173.271158][ T65] usb 3-1: config 4 has no interface number 0 [ 173.284767][ T65] usb 3-1: config 4 has no interface number 1 [ 173.289324][ T6695] netlink: 'syz.4.2384': attribute type 27 has an invalid length. [ 173.291583][ T65] usb 3-1: config 4 has no interface number 2 [ 173.318673][ T65] usb 3-1: config 4 interface 91 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 173.324235][ T6698] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2385'. [ 173.345487][ T65] usb 3-1: config 4 interface 91 altsetting 0 endpoint 0x8A has an invalid bInterval 174, changing to 7 [ 173.369411][ T65] usb 3-1: config 4 interface 91 altsetting 0 endpoint 0x8A has invalid maxpacket 42130, setting to 1024 [ 173.372792][ T6700] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2386'. [ 173.383563][ T65] usb 3-1: config 4 interface 91 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 173.401538][ T65] usb 3-1: config 4 interface 91 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 173.434630][ T65] usb 3-1: config 4 interface 91 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 173.446087][ T65] usb 3-1: config 4 interface 91 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 173.446904][ T6704] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 173.457067][ T65] usb 3-1: config 4 interface 91 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.486739][ T6706] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 173.486767][ T6706] rust_binder: Error while translating object. [ 173.491842][ T36] audit: type=1400 audit(1759136000.971:48692): avc: denied { relabelto } for pid=6703 comm="syz.4.2388" name="file0" dev="tmpfs" ino=1387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0" [ 173.495917][ T65] usb 3-1: config 4 interface 91 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 173.507387][ T6704] overlay: ./file0 is not a directory [ 173.533100][ T6706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 173.541650][ T36] audit: type=1400 audit(1759136000.971:48693): avc: denied { associate } for pid=6703 comm="syz.4.2388" name="file0" dev="tmpfs" ino=1387 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pinentry_exec_t:s0" [ 173.547065][ T6706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1050 [ 173.585063][ T65] usb 3-1: config 4 interface 47 altsetting 14 bulk endpoint 0x1 has invalid maxpacket 1023 [ 173.606628][ T65] usb 3-1: config 4 interface 47 altsetting 14 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 173.621953][ T65] usb 3-1: config 4 interface 47 altsetting 14 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 173.634166][ T6715] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 173.634190][ T6715] rust_binder: Error while translating object. [ 173.639052][ T65] usb 3-1: config 4 interface 47 altsetting 14 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 173.648791][ T6719] netlink: 'syz.4.2391': attribute type 27 has an invalid length. [ 173.652479][ T65] usb 3-1: config 4 interface 4 has no altsetting 0 [ 173.666237][ T6715] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 173.678138][ T65] usb 3-1: config 4 interface 47 has no altsetting 0 [ 173.689149][ T6715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1053 [ 173.698881][ T65] usb 3-1: New USB device found, idVendor=19d2, idProduct=1060, bcdDevice=41.d8 [ 173.717910][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.726094][ T65] usb 3-1: Product: syz [ 173.731350][ T65] usb 3-1: Manufacturer: syz [ 173.738756][ T6728] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2395'. [ 173.742757][ T6730] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.747892][ T65] usb 3-1: SerialNumber: syz [ 173.750984][ T6731] rust_binder: Failed copying remainder into alloc: EFAULT [ 173.756166][ T6730] rust_binder: Failed copying remainder into alloc: EFAULT [ 173.767491][ T6731] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 173.772930][ T6730] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 173.781021][ T6731] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 173.787992][ T6730] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 173.792511][ T6731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1057 [ 173.801293][ T6730] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1057 [ 173.982556][ T65] usbhid 3-1:4.47: couldn't find an input interrupt endpoint [ 174.002398][ T65] usb 3-1: USB disconnect, device number 52 [ 174.062118][ T6756] netlink: 'syz.1.2403': attribute type 27 has an invalid length. [ 174.090408][ T6756] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 174.205751][ T6757] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.221301][ T6757] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.228944][ T6757] bridge_slave_0: entered allmulticast mode [ 174.235443][ T6757] bridge_slave_0: entered promiscuous mode [ 174.243072][ T6757] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.250347][ T6757] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.257431][ T6757] bridge_slave_1: entered allmulticast mode [ 174.264116][ T6757] bridge_slave_1: entered promiscuous mode [ 174.299995][ T6773] netlink: 'syz.4.2409': attribute type 27 has an invalid length. [ 174.341012][ T6757] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.348089][ T6757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.355395][ T6757] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.362429][ T6757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.381355][ T6744] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.388709][ T6744] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.398257][ T2053] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.405364][ T2053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.414673][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.421761][ T6744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.441424][ T6757] veth0_vlan: entered promiscuous mode [ 174.451434][ T6757] veth1_macvtap: entered promiscuous mode [ 174.469046][ T65] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 174.492494][ T6786] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.496788][ T6786] netlink: 'syz.2.2411': attribute type 27 has an invalid length. [ 174.512759][ T6786] sit0: left promiscuous mode [ 174.546848][ T6786] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 174.546888][ T6786] rust_binder: Error while translating object. [ 174.558166][ T6786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.564431][ T6786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1153 [ 174.569242][ T9] ip6_tunnel:  xmit: Local address not yet configured! [ 174.609165][ T65] usb 2-1: device descriptor read/64, error -71 [ 174.849042][ T65] usb 2-1: device descriptor read/64, error -71 [ 175.089084][ T65] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 175.219192][ T65] usb 2-1: device descriptor read/64, error -71 [ 175.459093][ T65] usb 2-1: device descriptor read/64, error -71 [ 175.479325][ T411] ip6_tunnel:  xmit: Local address not yet configured! [ 175.569125][ T65] usb usb2-port1: attempt power cycle [ 175.909105][ T65] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 175.930073][ T65] usb 2-1: device descriptor read/8, error -71 [ 176.049127][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 176.070084][ T65] usb 2-1: device descriptor read/8, error -71 [ 176.281796][ T6744] bridge_slave_1: left allmulticast mode [ 176.287465][ T6744] bridge_slave_1: left promiscuous mode [ 176.293115][ T6744] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.300647][ T6744] bridge_slave_0: left allmulticast mode [ 176.306291][ T6744] bridge_slave_0: left promiscuous mode [ 176.311862][ T65] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 176.311936][ T6744] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.340141][ T65] usb 2-1: device descriptor read/8, error -71 [ 176.430892][ T6744] tipc: Disabling bearer [ 176.436145][ T6744] tipc: Disabling bearer [ 176.441658][ T6744] tipc: Left network mode [ 176.446710][ T6744] veth1_macvtap: left promiscuous mode [ 176.452323][ T6744] veth0_vlan: left promiscuous mode [ 176.470111][ T65] usb 2-1: device descriptor read/8, error -71 [ 176.579289][ T65] usb usb2-port1: unable to enumerate USB device [ 183.664214][ T36] audit: type=1400 audit(1759136011.151:48694): avc: denied { map } for pid=6795 comm="syz.1.2416" path="socket:[37076]" dev="sockfs" ino=37076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.667929][ T6813] netlink: 'syz.3.2421': attribute type 27 has an invalid length. [ 183.719282][ T6814] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 184.153844][ T6825] netlink: 'syz.3.2424': attribute type 27 has an invalid length. [ 184.181925][ T6825] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 184.275712][ T6830] binder: Bad value for 'max' [ 184.602382][ T6852] __nla_validate_parse: 1 callbacks suppressed [ 184.602406][ T6852] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2436'. [ 184.735885][ T36] audit: type=1400 audit(1759136012.221:48695): avc: denied { setattr } for pid=6865 comm="syz.3.2442" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 184.777599][ T6874] rust_binder: 1178: no such ref 4294967295 [ 184.784044][ T6874] rust_binder: 1178: no such ref 0 [ 184.790811][ T6874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1178 [ 184.824332][ T6878] rust_binder: Write failure EINVAL in pid:1180 [ 184.867218][ T6886] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.911608][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2452'. [ 184.938126][ T6891] input: syz0 as /devices/virtual/input/input17 [ 184.945496][ T6891] /dev/rnullb0: Can't open blockdev [ 184.980796][ T6895] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 184.982549][ T6896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6896 comm=syz.1.2452 [ 185.076674][ T6886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1182 [ 185.076832][ T6886] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 185.086894][ T6886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 185.095165][ T6886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1182 [ 185.157662][ T6902] kvm: emulating exchange as write [ 185.291188][ T6910] vcan0: entered allmulticast mode [ 185.478315][ T6925] tipc: Trying to set illegal importance in message [ 185.551713][ T6930] tipc: Failed to remove unknown binding: 66,1,1/0:32086628/32086630 [ 185.561455][ T6930] tipc: Failed to remove unknown binding: 66,1,1/0:32086628/32086630 [ 185.569614][ T6930] tipc: Failed to remove unknown binding: 66,1,1/0:32086628/32086630 [ 185.590070][ T6930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:60 [ 185.613991][ T6932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.859032][ T644] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 186.020056][ T644] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.030352][ T644] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.039418][ T411] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 186.048001][ T644] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 186.050868][ T6955] netlink: 'syz.1.2479': attribute type 27 has an invalid length. [ 186.057995][ T644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.073521][ T644] usb 3-1: SerialNumber: syz [ 186.078087][ T6955] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 186.159345][ T36] audit: type=1326 audit(1759136013.651:48696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.2482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f169498eec9 code=0x0 [ 186.190585][ T411] usb 4-1: device descriptor read/64, error -71 [ 186.281018][ T6932] rust_binder: Write failure EFAULT in pid:1185 [ 186.285424][ T644] usb 3-1: skipping empty audio interface (v1) [ 186.301377][ T644] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 186.316387][ T644] usb 3-1: USB disconnect, device number 53 [ 186.331742][ T6810] udevd[6810]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 186.352232][ T6971] netlink: 'syz.4.2486': attribute type 27 has an invalid length. [ 186.439036][ T411] usb 4-1: device descriptor read/64, error -71 [ 186.679044][ T411] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.809081][ T411] usb 4-1: device descriptor read/64, error -71 [ 186.857337][ T6982] rust_binder: Write failure EFAULT in pid:1189 [ 186.958162][ T6991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2495'. [ 186.973536][ T6991] tipc: Enabling of bearer rejected, already enabled [ 187.008863][ T6995] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 187.030682][ T6999] kernel profiling enabled (shift: 2) [ 187.036198][ T36] audit: type=1107 audit(1759136014.521:48697): pid=6997 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='óÚŽyxQ½—IøÄâÔ¶›³z@:2|ßÍêí,=€ù·âG"[ÿ; ¸ÿþõL‡÷¢ñ¬{;Zžõ©Ë˜d¾ƒ`µ?8ç¨Nê©ÇWŽÃG' [ 187.069823][ T411] usb 4-1: device descriptor read/64, error -71 [ 187.079791][ T36] audit: type=1326 audit(1759136014.521:48698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.2.2498" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4223d8eec9 code=0x0 [ 187.167501][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2499'. [ 187.177698][ T7006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7006 comm=syz.4.2499 [ 187.199509][ T411] usb usb4-port1: attempt power cycle [ 187.287206][ T7019] 9pnet_virtio: no channels available for device syz [ 187.320331][ T7004] rust_binder: Write failure EFAULT in pid:1204 [ 187.329078][ T644] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 187.394813][ T7043] overlayfs: failed to clone upperpath [ 187.489045][ T644] usb 2-1: Using ep0 maxpacket: 8 [ 187.495399][ T644] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 187.504154][ T644] usb 2-1: config 0 has no interface number 0 [ 187.510531][ T644] usb 2-1: config 0 interface 96 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.523746][ T644] usb 2-1: config 0 interface 96 has no altsetting 0 [ 187.532176][ T644] usb 2-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 187.541552][ T411] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 187.549285][ T644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.557518][ T644] usb 2-1: Product: syz [ 187.562993][ T644] usb 2-1: Manufacturer: syz [ 187.567787][ T644] usb 2-1: SerialNumber: syz [ 187.577888][ T644] usb 2-1: config 0 descriptor?? [ 187.588047][ T644] usbhid 2-1:0.96: couldn't find an input interrupt endpoint [ 187.595885][ T411] usb 4-1: device descriptor read/8, error -71 [ 187.730008][ T411] usb 4-1: device descriptor read/8, error -71 [ 187.790371][ T644] usb 2-1: USB disconnect, device number 59 [ 187.969085][ T411] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 187.990037][ T411] usb 4-1: device descriptor read/8, error -71 [ 188.120049][ T411] usb 4-1: device descriptor read/8, error -71 [ 188.214439][ T7070] 9pnet_virtio: no channels available for device syz [ 188.229184][ T411] usb usb4-port1: unable to enumerate USB device [ 188.236418][ T7072] overlayfs: failed to clone upperpath [ 188.337453][ T7098] random: crng reseeded on system resumption [ 188.520569][ T36] audit: type=1400 audit(1759136016.011:48699): avc: denied { create } for pid=7121 comm="syz.1.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 188.541052][ T36] audit: type=1400 audit(1759136016.011:48700): avc: denied { bind } for pid=7121 comm="syz.1.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.689023][ T376] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 188.810711][ T597] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 188.839374][ T376] usb 3-1: Using ep0 maxpacket: 32 [ 188.852845][ T376] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 188.863478][ T376] usb 3-1: config 0 has no interface number 0 [ 188.869894][ T376] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 188.882756][ T376] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 188.893313][ T376] usb 3-1: config 0 interface 126 has no altsetting 0 [ 188.901816][ T376] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 188.911141][ T376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.919346][ T376] usb 3-1: Product: syz [ 188.923628][ T376] usb 3-1: Manufacturer: syz [ 188.928245][ T376] usb 3-1: SerialNumber: syz [ 188.936891][ T376] usb 3-1: config 0 descriptor?? [ 188.942260][ T7120] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.951736][ T7120] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.970111][ T597] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.985801][ T597] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 188.995540][ T597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.005317][ T7133] overlayfs: failed to clone upperpath [ 189.011972][ T597] usb 2-1: config 0 descriptor?? [ 189.199065][ T411] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 189.224134][ T36] audit: type=1400 audit(1759136016.711:48701): avc: denied { sys_module } for pid=7139 comm="syz.4.2563" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 189.361940][ T411] usb 4-1: unable to get BOS descriptor or descriptor too short [ 189.370291][ T411] usb 4-1: not running at top speed; connect to a high speed hub [ 189.378897][ T411] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.389469][ T411] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.400672][ T411] usb 4-1: string descriptor 0 read error: -22 [ 189.407072][ T411] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.416579][ T411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.430520][ T411] usb 4-1: 0:2 : does not exist [ 189.563072][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.573502][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.759080][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 191.038879][ T411] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 191.049754][ T411] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 191.060583][ T411] usb 4-1: USB disconnect, device number 12 [ 191.466733][ T411] usb 3-1: USB disconnect, device number 54 [ 191.565106][ T7191] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1113132006 (1113132006 ns) > initial count (497682314 ns). Using initial count to start timer. [ 191.598109][ T376] usb 2-1: USB disconnect, device number 60 [ 191.869051][ T597] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 191.999057][ T411] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 192.019037][ T597] usb 4-1: Using ep0 maxpacket: 16 [ 192.025310][ T597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.036354][ T597] usb 4-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 192.045428][ T597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.053934][ T597] usb 4-1: config 0 descriptor?? [ 192.149031][ T411] usb 3-1: Using ep0 maxpacket: 8 [ 192.156703][ T411] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 192.165995][ T411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.174045][ T411] usb 3-1: Product: syz [ 192.178232][ T411] usb 3-1: Manufacturer: syz [ 192.182853][ T411] usb 3-1: SerialNumber: syz [ 192.188025][ T411] usb 3-1: config 0 descriptor?? [ 192.463600][ T597] logitech-djreceiver 0003:046D:C51B.0014: hidraw0: USB HID v0.09 Device [HID 046d:c51b] on usb-dummy_hcd.3-1/input0 [ 192.862835][ T644] usb 4-1: USB disconnect, device number 13 [ 193.769058][ T376] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 193.920266][ T376] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.932074][ T376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 34517, setting to 1024 [ 193.943692][ T376] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.956959][ T376] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.966226][ T376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.978953][ T376] usb 4-1: config 0 descriptor?? [ 193.984283][ T7238] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 194.062785][ T7249] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2606'. [ 194.395354][ T376] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 194.404074][ T376] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 194.411734][ T376] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 194.420674][ T376] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 194.659424][ T411] usb 4-1: USB disconnect, device number 14 [ 194.813595][ T376] usb 3-1: USB disconnect, device number 55 [ 194.847648][ T7263] kvm: pic: non byte write [ 194.979468][ T7268] usb usb8: usbfs: process 7268 (syz.1.2614) did not claim interface 0 before use [ 195.249030][ T376] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 195.289709][ T7282] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.399049][ T376] usb 2-1: Using ep0 maxpacket: 16 [ 195.405187][ T376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.416099][ T376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.425841][ T376] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.438643][ T376] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.447700][ T376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.456274][ T376] usb 2-1: config 0 descriptor?? [ 195.867318][ T376] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 195.874640][ T376] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 195.882078][ T376] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 195.889356][ T376] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 195.896579][ T376] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 195.904349][ T376] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 195.911802][ T376] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 195.919268][ T376] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 195.926515][ T376] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 195.933798][ T376] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 195.941367][ T376] HID 045e:07da: Invalid code 65791 type 1 [ 195.951888][ T376] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0016/input/input19 [ 195.969211][ T376] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 196.084020][ T644] usb 2-1: USB disconnect, device number 61 [ 196.259019][ T376] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 196.409009][ T376] usb 3-1: Using ep0 maxpacket: 32 [ 196.415086][ T376] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 196.423304][ T376] usb 3-1: config 0 has no interface number 0 [ 196.430903][ T376] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 196.439980][ T376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.447941][ T376] usb 3-1: Product: syz [ 196.452130][ T376] usb 3-1: Manufacturer: syz [ 196.456728][ T376] usb 3-1: SerialNumber: syz [ 196.461345][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 196.469587][ T376] usb 3-1: config 0 descriptor?? [ 196.475262][ T376] smsc95xx v2.0.0 [ 196.619020][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 196.626594][ T31] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 196.635741][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.643760][ T31] usb 4-1: Product: syz [ 196.647929][ T31] usb 4-1: Manufacturer: syz [ 196.652538][ T31] usb 4-1: SerialNumber: syz [ 196.657639][ T31] usb 4-1: config 0 descriptor?? [ 196.663473][ T31] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 196.849036][ T411] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 196.864783][ T31] usb 4-1: USB disconnect, device number 15 [ 196.875920][ T376] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 196.886790][ T376] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 196.999052][ T411] usb 2-1: Using ep0 maxpacket: 32 [ 197.005260][ T411] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.017185][ T411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 197.028380][ T411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 197.039558][ T411] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 197.048614][ T411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.057434][ T411] usb 2-1: config 0 descriptor?? [ 197.062875][ T7321] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 197.070832][ T411] hub 2-1:0.0: USB hub found [ 197.272425][ T411] hub 2-1:0.0: 2 ports detected [ 197.541480][ T7355] overlayfs: failed to clone upperpath [ 198.080339][ T7364] tipc: Enabling of bearer rejected, failed to enable media [ 198.690336][ T597] usb 2-1: USB disconnect, device number 62 [ 198.702937][ T376] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 198.713936][ T376] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 198.723067][ T376] usb 3-1: USB disconnect, device number 56 [ 199.593839][ T7435] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3622609721 (231847022144 ns) > initial count (79210366720 ns). Using initial count to start timer. [ 199.739033][ T644] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 199.889234][ T644] usb 2-1: Using ep0 maxpacket: 16 [ 199.895440][ T644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.906445][ T644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.916203][ T644] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.929085][ T644] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 199.938115][ T644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.946848][ T644] usb 2-1: config 0 descriptor?? [ 200.348877][ T36] audit: type=1400 audit(1759136027.831:48702): avc: denied { append } for pid=7460 comm="syz.2.2692" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 200.390571][ T644] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x0 [ 200.398183][ T644] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x0 [ 200.405366][ T644] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x0 [ 200.415605][ T644] kovaplus 0003:1E7D:2D50.0017: hidraw0: USB HID v0.04 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 200.474562][ T36] audit: type=1400 audit(1759136027.961:48703): avc: denied { read } for pid=7471 comm="syz.4.2697" name="file0" dev="tmpfs" ino=2205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 200.579552][ T376] usb 2-1: USB disconnect, device number 63 [ 200.809057][ T411] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 200.960055][ T411] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 200.968230][ T411] usb 3-1: config 0 has no interface number 0 [ 200.974395][ T411] usb 3-1: config 0 interface 183 has no altsetting 0 [ 200.984663][ T411] usb 3-1: New USB device found, idVendor=1a8d, idProduct=100c, bcdDevice=a0.20 [ 200.993820][ T411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.001903][ T411] usb 3-1: Product: syz [ 201.006048][ T411] usb 3-1: Manufacturer: syz [ 201.010669][ T411] usb 3-1: SerialNumber: syz [ 201.015752][ T411] usb 3-1: config 0 descriptor?? [ 201.225337][ T411] usb 3-1: USB disconnect, device number 57 [ 202.289016][ T411] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 202.440643][ T411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.450519][ T411] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 202.459735][ T411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.468326][ T411] usb 2-1: config 0 descriptor?? [ 202.876096][ T411] kye 0003:0458:0153.0018: unknown main item tag 0x0 [ 202.882909][ T411] kye 0003:0458:0153.0018: unknown main item tag 0x0 [ 202.889662][ T411] kye 0003:0458:0153.0018: unknown main item tag 0x0 [ 202.896343][ T411] kye 0003:0458:0153.0018: unknown main item tag 0x0 [ 202.903032][ T411] kye 0003:0458:0153.0018: unknown main item tag 0x0 [ 202.909740][ T411] kye 0003:0458:0153.0018: unknown main item tag 0x0 [ 202.916408][ T411] kye 0003:0458:0153.0018: unknown main item tag 0x0 [ 202.923810][ T411] kye 0003:0458:0153.0018: hidraw0: USB HID v10.00 Device [HID 0458:0153] on usb-dummy_hcd.1-1/input0 [ 203.087991][ T411] usb 2-1: USB disconnect, device number 64 [ 203.628012][ T7565] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.647758][ T7567] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3622609721 (231847022144 ns) > initial count (79210366720 ns). Using initial count to start timer. [ 203.688052][ T36] audit: type=1400 audit(1759136031.171:48704): avc: denied { write } for pid=7570 comm="syz.1.2737" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 203.757487][ T36] audit: type=1400 audit(1759136031.241:48705): avc: denied { module_load } for pid=7574 comm="syz.3.2739" path="/sys/power/wakeup_count" dev="sysfs" ino=1463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 204.697565][ T7590] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 204.907933][ T7609] kvm: pic: non byte write [ 205.019036][ T644] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 205.169377][ T644] usb 2-1: no configurations [ 205.174003][ T644] usb 2-1: can't read configurations, error -22 [ 205.309049][ T644] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 205.459434][ T644] usb 2-1: no configurations [ 205.464070][ T644] usb 2-1: can't read configurations, error -22 [ 205.470577][ T644] usb usb2-port1: attempt power cycle [ 205.748644][ T7622] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.819028][ T644] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 205.840774][ T644] usb 2-1: no configurations [ 205.845440][ T644] usb 2-1: can't read configurations, error -22 [ 205.979080][ T644] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 205.999696][ T644] usb 2-1: no configurations [ 206.004314][ T644] usb 2-1: can't read configurations, error -22 [ 206.010665][ T644] usb usb2-port1: unable to enumerate USB device [ 206.039052][ T411] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 206.189021][ T411] usb 4-1: Using ep0 maxpacket: 32 [ 206.195512][ T411] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.203881][ T411] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 206.212262][ T411] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 206.222531][ T411] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 206.231590][ T411] usb 4-1: config 128 has no interface number 0 [ 206.237838][ T411] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 73, changing to 10 [ 206.249244][ T411] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 59148, setting to 1024 [ 206.260726][ T411] usb 4-1: config 128 interface 127 has no altsetting 0 [ 206.269045][ T411] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 206.278092][ T411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.286091][ T411] usb 4-1: Product: syz [ 206.290296][ T411] usb 4-1: Manufacturer: syz [ 206.294906][ T411] usb 4-1: SerialNumber: syz [ 206.300363][ T7627] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 206.514977][ T411] usb 4-1: USB disconnect, device number 16 [ 206.523083][ T6810] udevd[6810]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 207.259024][ T411] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 207.409011][ T411] usb 4-1: Using ep0 maxpacket: 32 [ 207.415162][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.426097][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.435866][ T411] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 207.444924][ T411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.453346][ T411] usb 4-1: config 0 descriptor?? [ 207.862584][ T411] waltop 0003:172F:0038.0019: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.3-1/input0 [ 208.066420][ T411] usb 4-1: USB disconnect, device number 17 [ 208.760383][ T7737] input: syz0 as /devices/virtual/input/input20 [ 208.942759][ T7722] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI [ 208.955396][ T7722] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 208.963831][ T7722] CPU: 0 UID: 0 PID: 7722 Comm: syz.3.2806 Not tainted syzkaller #0 ebd888673537e6d433689cc680383d43a5383a5c [ 208.975399][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 208.985563][ T7722] RIP: 0010:fuse_file_release+0x29e/0x400 [ 208.991318][ T7722] Code: 00 74 12 48 89 df e8 c1 e5 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 74 e4 a0 ff 48 ba 00 00 00 00 00 fc [ 209.010946][ T7722] RSP: 0018:ffffc9000f137d00 EFLAGS: 00010202 [ 209.017043][ T7722] RAX: 0000000000000019 RBX: 0000000000000000 RCX: 0000000000080000 [ 209.025021][ T7722] RDX: dffffc0000000000 RSI: 00000000000002e2 RDI: 00000000000002e3 [ 209.032993][ T7722] RBP: ffffc9000f137d48 R08: 0000000000000003 R09: 0000000000000004 [ 209.040967][ T7722] R10: dffffc0000000000 R11: fffff52001e26f70 R12: 0000000000109001 [ 209.048939][ T7722] R13: ffff888110dec000 R14: ffff888118857b00 R15: 00000000000000c8 [ 209.056918][ T7722] FS: 00007f1ee222c6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 209.066110][ T7722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.072699][ T7722] CR2: 0000000000000000 CR3: 0000000157dd6000 CR4: 00000000003526b0 [ 209.080762][ T7722] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144 [ 209.088739][ T7722] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 209.096730][ T7722] Call Trace: [ 209.100010][ T7722] [ 209.102943][ T7722] fuse_release+0x13e/0x1b0 [ 209.107452][ T7722] ? __cfi_fuse_release+0x10/0x10 [ 209.112473][ T7722] __fput+0x1fe/0xa00 [ 209.116466][ T7722] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 209.122014][ T7722] ____fput+0x20/0x30 [ 209.125998][ T7722] task_work_run+0x1e0/0x250 [ 209.130596][ T7722] ? __cfi_task_work_run+0x10/0x10 [ 209.135712][ T7722] ? __kasan_check_write+0x18/0x20 [ 209.140829][ T7722] resume_user_mode_work+0x36/0x50 [ 209.145947][ T7722] syscall_exit_to_user_mode+0x64/0xb0 [ 209.151406][ T7722] do_syscall_64+0x64/0xf0 [ 209.155824][ T7722] ? clear_bhb_loop+0x50/0xa0 [ 209.160498][ T7722] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 209.166400][ T7722] RIP: 0033:0x7f1ee138eec9 [ 209.170813][ T7722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.190421][ T7722] RSP: 002b:00007f1ee222c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 209.198924][ T7722] RAX: ffffffffffffff95 RBX: 00007f1ee15e5fa0 RCX: 00007f1ee138eec9 [ 209.206900][ T7722] RDX: 0000000000000000 RSI: 0000000000109281 RDI: 00002000000000c0 [ 209.214957][ T7722] RBP: 00007f1ee1411f91 R08: 0000000000000000 R09: 0000000000000000 [ 209.222937][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.231029][ T7722] R13: 00007f1ee15e6038 R14: 00007f1ee15e5fa0 R15: 00007fff453abda8 [ 209.239009][ T7722] [ 209.242034][ T7722] Modules linked in: [ 209.246371][ T7722] ---[ end trace 0000000000000000 ]--- [ 209.252469][ T36] audit: type=1400 audit(1759136036.741:48706): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 209.274753][ T36] audit: type=1400 audit(1759136036.741:48707): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.299636][ T7722] RIP: 0010:fuse_file_release+0x29e/0x400 [ 209.318095][ T7722] Code: 00 74 12 48 89 df e8 c1 e5 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 74 e4 a0 ff 48 ba 00 00 00 00 00 fc [ 209.337890][ T36] audit: type=1400 audit(1759136036.741:48708): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.359691][ T36] audit: type=1400 audit(1759136036.741:48709): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.380418][ T7722] RSP: 0018:ffffc9000f137d00 EFLAGS: 00010202 [ 209.386522][ T7722] RAX: 0000000000000019 RBX: 0000000000000000 RCX: 0000000000080000 [ 209.394565][ T7722] RDX: dffffc0000000000 RSI: 00000000000002e2 RDI: 00000000000002e3 [ 209.405395][ T7722] RBP: ffffc9000f137d48 R08: 0000000000000003 R09: 0000000000000004 [ 209.413469][ T36] audit: type=1400 audit(1759136036.741:48710): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.434245][ T7722] R10: dffffc0000000000 R11: fffff52001e26f70 R12: 0000000000109001 [ 209.442420][ T36] audit: type=1400 audit(1759136036.741:48711): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.465564][ T7722] R13: ffff888110dec000 R14: ffff888118857b00 R15: 00000000000000c8 [ 209.473664][ T7722] FS: 00007f1ee222c6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 209.482733][ T36] audit: type=1400 audit(1759136036.741:48712): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.505595][ T7722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.512330][ T7722] CR2: 000000110c27fff5 CR3: 0000000157dd6000 CR4: 00000000003526b0 [ 209.520474][ T7722] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144 [ 209.528471][ T7722] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 209.536664][ T7722] Kernel panic - not syncing: Fatal exception [ 209.542992][ T7722] Kernel Offset: disabled [ 209.547343][ T7722] Rebooting in 86400 seconds..