last executing test programs: 3.968184002s ago: executing program 3 (id=805): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async) r2 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000000)='map_files\x00') fchdir(r4) syz_usb_disconnect(0xffffffffffffffff) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x32}, @in=@local, {}, {0x5, 0x0, 0x0, 0x1}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @etimer_thresh={0x8, 0xc, 0x7ff}]}, 0x140}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 3.283515617s ago: executing program 3 (id=809): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r4, &(0x7f0000000400)="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", 0x1f000) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x5) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa8ca3411d2c26009, 0x4000030, r2, 0x22e7c000) 3.168156926s ago: executing program 3 (id=811): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r3, 0x1, 0x2b, 0x0, &(0x7f0000000880)) socket$igmp6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs_stats\x00') setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000180), 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/128, 0x80, 0x1, 0x24}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 3.166985086s ago: executing program 3 (id=813): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$BLKGETNRZONES(r0, 0x80041285, &(0x7f0000000080)=0x1) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x8019, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000000)='./file0\x00') read$FUSE(r1, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x801, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 3.135118109s ago: executing program 3 (id=814): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) recvmsg(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/140, 0x8c}], 0x1}, 0x40010142) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000b4000040"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r3, 0xd6baf000) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r9) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000540)=ANY=[], 0x0) ioctl$EVIOCRMFF(r9, 0x40045506, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r10, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r10, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x40, 0x3, 0x2, "4be7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.956186913s ago: executing program 2 (id=816): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000600)='(\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)) read$eventfd(r1, &(0x7f0000000080), 0x8) 2.140099248s ago: executing program 0 (id=835): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) r1 = fcntl$dupfd(r0, 0x406, r0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904"], 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x20000ffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21, 0xf, 0x1, 0x8000, 0x0, r5, r6, 0x1000003, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, r6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffbc, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f0000000000)={0x1, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2.139182788s ago: executing program 1 (id=836): openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x281, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.105104362s ago: executing program 2 (id=837): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/rnullb0\x00'}]}, 0x19) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) fsetxattr$security_capability(r3, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000219a0c45d5b400a4cfed5010203010902120010000000000000a31c000804010105b50c9407a92594b36ab020271a0665846a77017e14c1a7b1c16f"], &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, 0x0, 0x20000014) sendto$inet_nvme_of_msg(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x4004014) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x480d5) r5 = dup(0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x80) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, 0x0, 0x20044810) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpeername(r2, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r6, 0x0, 0xd, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) symlink(&(0x7f00000024c0)='./file0/file0\x00', &(0x7f0000002500)='./file1\x00') mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8']) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) setsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f00000005c0)=0x3, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, 0x0, &(0x7f0000000c40)) 2.085202803s ago: executing program 1 (id=838): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x20, {0x2, 0x4e21, @empty}, 'veth1_to_batadv\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r1, @ANYBLOB="0600000021a500000c003a"], 0x2c}], 0x1}, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000680)=""/189, 0xbd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x4, 0x8000000000040}, @fd, @fda={0x66646185, 0x9, 0x1, 0x40000000002f}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05150040000102030109022400010100401b090400070103010210092103000f012281031802010b04"], &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5f, 0x9, 0x4, 0x8, 0x44}, 0x21, &(0x7f0000000080)=ANY=[@ANYBLOB="050f2100011c100abde400000000ff050030000000040000008fc00000007eff00"], 0x5, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="14032a449b28"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2801}}, {0xcb, &(0x7f00000001c0)=@string={0xcb, 0x3, "048a0877d16666023ac1e4e7e7c120c7e6a87048599c4fc15cb2a4fdb1b4b2d688890bd32c87d37fcb9ef794a12171281f2da9880a7eb07b84c3d9f94ceb66d3b0ad4f4fce0e9cf3dc5812410c3fd1bd0b3923e5aa0ed6f7cbcb7edb9ca804b402dd1bc2088255ae9553fdceca75eae0bfddb1750d18250caf4d2438db88c1b42dfe9676fc2c9b1b1de8e82b2093902c2c4d170feed69025090354c806c622e803fe5093557273abed5c915e972bc553137fd5ffb13397d0c12be74ddcc5228b12d760c75ee60b5c80"}}]}) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) mount$bind(0x0, 0x0, 0x0, 0x89101a, 0x0) (async) mount$bind(0x0, 0x0, 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x80700a, 0x0) (async) mount$bind(&(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x80700a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r6, &(0x7f00000000c0)="bba99475105094568ada45167329fd08a88d0d1c94a8d5b6c84db0a187738549e998e09c27e34a450ca7eb503cb9844ee14eb0b7fc2d21a50f4ec99adff0bd2b48cf6cd7d4dbeb4a35d81a91add5f351b63dc21a155f642a5534aff81a1433a6fc394f73bd6541ef031ea87c2fbc1d9c", 0x70) getsockopt$inet_int(r4, 0x0, 0x6, 0x0, &(0x7f0000000240)) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000180)={0x1d, r9}, 0x10) (async) connect$can_bcm(r7, &(0x7f0000000180)={0x1d, r9}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0xe5444000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0xe5444000) clock_gettime(0x4, &(0x7f00000004c0)) (async) clock_gettime(0x4, &(0x7f00000004c0)) 1.296019576s ago: executing program 2 (id=839): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_to_hsr\x00', 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b00010100000009040000120206000005240600000524"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x7, 0x1) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400ff070000000000000000340000000600000000000000"], 0x18, 0x7ffffff7}}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0x73, 0x53, ""/83}, &(0x7f00000000c0)=0x73, 0x1) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x88, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x4, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0x4, 0x0, 0x7, 0x4, 0x0, 0x1, 0x3, 0x0, 0x0, 0xa}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2, 0x4}, {0xeeee8000, 0x3000, 0x8, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff, 0x80}, {0x8080000, 0x5000, 0xa, 0x6, 0x5, 0x0, 0x68, 0x0, 0x1, 0xf9}, {0x0, 0xdddd0000, 0x0, 0x2, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x10}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x0, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x401]}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x1070c2) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001d002100000000000000000007"], 0x34}}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000040)) 1.262183329s ago: executing program 1 (id=840): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00), 0x400, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000002240)) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) ioctl$TIOCMSET(r2, 0x5418, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3a, &(0x7f0000000080)=0xffbfff9d, 0x4) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8) sendto$inet6(r7, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x2}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000240)={'ip6tnl0\x00', 0xc4}) getpeername$packet(r6, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x7, {0x7, 0x0, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0xb, 0x2) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 768.842039ms ago: executing program 2 (id=841): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x1}}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x12, r0, 0xe5444000) clock_gettime(0x4, &(0x7f00000004c0)) 724.504612ms ago: executing program 2 (id=842): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4b0f40, 0xa3) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x18b142, 0x1c1) sendfile(r5, r0, 0x0, 0x80000000) 718.946882ms ago: executing program 2 (id=843): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x44c823, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0xc, 0x6000, 0x4, r3}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_REGS(r5, 0x8090ae81, &(0x7f0000000200)) umount2(&(0x7f0000000140)='./file0\x00', 0x2) r6 = socket$inet(0x2, 0x800, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0xe, &(0x7f00000004c0)={@dev={0xac, 0x14, 0x14, 0x3d}, @local, @private=0xa010100}, 0xc) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000500)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r4, @ANYBLOB="8000000000000000303030303030303034303030302c757365725f69643d0000000d8b0000000000000000000000000000000031856a8eca54099bd5", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r8, r8, 0x0, 0x40000f63c) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) setsockopt$inet_opts(r10, 0x0, 0xd, &(0x7f0000000300)="f7bce75f82e703a60857160aceb574a96eb5e82b5d58a5621b2f5e4f0cbec78e213e23fbe5380a5cbe3dcd02c27b659a797a90c2441b8d538b09ca9de740b26081f5b5a99ebdc23564f2e8253c8b871fabefdf42c27e21be1bd2cad44c784d1ae756aabed1e88042890fab825e6db2b1e7c8c848d3531d521d0231aa9ebb85f63d0e217bdd3e482753124e1eda575b5b32f3df5df26c7dc17f5c4ed97275c3b20973787156f9df10c2c6d5bf03d09bc1e06d7a17b5feccebf6ef834e431e1970fc746a2d611a49123631b5631031e79c349ac851b5d02c7b1e0f651f3cd643edf266b1095cb60a9ee6aea7cf0e9c", 0xee) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x1, r3, 0x11}) close_range(r0, 0xffffffffffffffff, 0x0) 620.2172ms ago: executing program 0 (id=844): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4b0f40, 0xa3) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x18b142, 0x1c1) sendfile(r5, r0, 0x0, 0x80000000) (fail_nth: 2) 610.066101ms ago: executing program 0 (id=845): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f00000009c0)={0xa, 0x4e21, 0xffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000004740)=[{{&(0x7f0000000a00)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x200000c4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) pipe2(&(0x7f0000000140), 0x80800) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x320400, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB="9ac151a25167d657c326e0b8a0c3fe8ddc83b62a52bf5562179e4fa14bf5087fe4a2538a4c3f8c1c51610d016ec0a82c0c96fae19d16e32ee01192d58ebfbc06bdc220cb8253e1ca27020a9de06dd79485f84ad6f6491eb17149d638bcd6d1742ac28c64c91a11b7c0105e9bbd8b245f1f3affbdf714c38e8e61ae444b892704d6d19a0ca94053fe5019653547f80911"]) 513.356559ms ago: executing program 1 (id=846): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) utime(0x0, &(0x7f0000001840)={0x40, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x11) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'wg2\x00', 0xca58c30f81b6079f}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004000)=ANY=[@ANYBLOB="240000006c0001"], 0x24}}, 0x4008000) close_range(r1, 0xffffffffffffffff, 0x0) 276.188528ms ago: executing program 1 (id=847): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000380)={0xb6, 0x0, 0xa3d846ff51ab7fae}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000d80)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be004488fffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESHEX], 0xfdef) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f00000001c0)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000040)={0x8e}, 0x8) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x8, 0x0, 0xfffffffffffffc24) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f00000002c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000180)={0x8, 0x5}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syslog(0x2, 0x0, 0x0) syz_io_uring_setup(0x9, &(0x7f0000000080)={0x0, 0xc45e, 0x800, 0x0, 0x2a5, 0x0, r10}, &(0x7f0000000000), &(0x7f0000000100)) ioctl$KVM_CREATE_VCPU(r10, 0x81007702, 0x2) 274.854768ms ago: executing program 1 (id=848): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@qipcrtr, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)=""/12, 0xc}], 0x1, &(0x7f0000000240)=""/85, 0x55}, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) 203.114344ms ago: executing program 0 (id=849): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) close(r0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) close_range(r1, r1, 0x0) (async) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000040)) 190.465055ms ago: executing program 0 (id=850): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000000)=@md0, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7fff}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) truncate(&(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x5dd9591441b2f348}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd4, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x2a}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xac, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}}, {0x9c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x96, 0x1, "9d5e01b06e3d0c9027d9fa7c4c8cd04771a56b410014b21018d37878416bf36d19e4e964ebdbd31409f57f21186eaa9e80d2fb683e3be53648a11e12910debb190dd10b8c32268b3b3c0ac2a3c3a5ff5fa59a499230142b25fd03f8562b39dcaabb9765629991149727bf3e1a6955d56c5363cee0eada8d28c29b28dc0269f36d83015b385ba6827efcc1d280f75a729cdf7"}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)={'security\x00', 0x0, [0x4, 0x80000000, 0x8, 0x9, 0x101]}, &(0x7f0000000600)=0x54) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x200, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x194, r7, 0x10, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x6814}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf1fde7b4}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2c}}]}, 0x194}, 0x1, 0x0, 0x0, 0x80}, 0x8c1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x26c, r6, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8e026c5ba6b49f14"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9fae9942ce1bb18fd2362c77f332b9762160df1be9d8737aa367c204591b8e23"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0979165dad67161fdf123479d4d02611e8b64f5d52cf52f8833a377ccae934af"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "207686d2f8daa7e6"}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xca7}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d5e85ba6e0810f3720cca24fadb54657"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f7e9f9aa7d5f5c266a61e19708e48f6b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="be8a68f5422fcb990aba785c267d9cfe"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5c8033ebc7895ba4"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="70c34f897e894d69125f278bc6fe022c1f19a1fef841aa0d3432ca38a5ebd7f5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x15}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e1d94eb092363a8b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="39f98b71a2b2b0be42ddeeda9b4bc8982dadb98db9e1667b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4713891f65942c7cbc13d20c404dbf3e72a0124a6b6b7e16589e2a1d080c02e2"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f0fb2ee1f2e50e569b167149cfc5d58fd4718b88747dc1259ce09763a3d38393"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d5e2b28f6c6b2791"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffe}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="54b23be5e80638bdbed262054c94454c73ce20accf9fe7dab191c9b8a161eb85"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="48d3278c68040b59670521a2b752da3a207789aaa6a234cab2de67b803dfaa98"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="96f2a8754b418245abf2d56721d3f048"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e9558e5987dde94fa3b96c9ec9fe59c2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7f8c2440bc12dd08"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="fee1eebecf1ff56bea934504e18ddff6"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="71b0cc4a2851d9a2b4e1894411ef886cf9c3d95feea4e8c4"}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4000041}, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r8, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x67}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r10, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, 0x3fa, 0x100, 0x70bd26, 0x25dfdbff, {0x1, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001040), r2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x9c, r11, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000005) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r12, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x40, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r13 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_CAP_SPLIT_IRQCHIP(r14, 0x4068aea3, &(0x7f00000012c0)={0x79, 0x0, 0x700}) 116.120101ms ago: executing program 0 (id=851): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) fsetxattr$security_evm(r0, &(0x7f0000000200), &(0x7f0000000240)=ANY=[@ANYBLOB="020b321e76bde5ce03f0d1da599e855997bca2b9"], 0x14, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = userfaultfd(0x80001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f000042b000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x10001}}, 0x30) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x2, 0x26, 0xb, 0x5}, {0x185, 0x8, 0x2, 0x3ff}, {0x8, 0x3, 0x0, 0x1}]}) r5 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2e}, @flat=@binder={0x73622a85, 0xb, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=852): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4b0f40, 0xa3) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x18b142, 0x1c1) sendfile(r5, r0, 0x0, 0x80000000) kernel console output (not intermixed with test programs): his kernel. Remove the mand [ 26.622453][ T464] option from the mount to silence this warning. [ 26.622453][ T464] ======================================================= [ 26.660825][ T36] audit: type=1400 audit(1755651370.070:180): avc: denied { write } for pid=463 comm="syz.2.41" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.661623][ T464] rust_binder: Error while translating object. [ 26.681307][ T464] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.681894][ T36] audit: type=1400 audit(1755651370.070:181): avc: denied { open } for pid=463 comm="syz.2.41" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.687524][ T464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 26.725452][ T36] audit: type=1400 audit(1755651370.140:182): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.794860][ T36] audit: type=1400 audit(1755651370.210:183): avc: denied { read } for pid=467 comm="syz.2.43" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.817953][ T36] audit: type=1400 audit(1755651370.210:184): avc: denied { open } for pid=467 comm="syz.2.43" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.019177][ T468] mmap: syz.2.43 (468) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.202202][ T36] audit: type=1400 audit(1755651370.610:185): avc: denied { write } for pid=474 comm="syz.0.46" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 27.202674][ T475] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 27.224765][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 27.224966][ T426] Bluetooth: hci0: command 0x1003 tx timeout [ 27.233187][ T475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.283488][ T36] audit: type=1400 audit(1755651370.700:186): avc: denied { nlmsg_write } for pid=481 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 27.309109][ T482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=482 comm=syz.3.48 [ 27.311333][ T36] audit: type=1400 audit(1755651370.700:187): avc: denied { audit_write } for pid=481 comm="syz.3.48" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 27.344538][ T36] audit: type=1400 audit(1755651370.710:188): avc: denied { accept } for pid=481 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 27.711527][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 27.719939][ T502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 27.721640][ T501] Invalid logical block size (4) [ 27.952991][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.104059][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.132991][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.154091][ T9] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 28.163241][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.171287][ T9] usb 1-1: Product: syz [ 28.175958][ T9] usb 1-1: Manufacturer: syz [ 28.180593][ T9] usb 1-1: SerialNumber: syz [ 28.186564][ T9] usb 1-1: config 0 descriptor?? [ 28.194187][ T9] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 28.200589][ T9] usb 1-1: No valid video chain found. [ 28.405296][ T502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=502 comm=syz.0.53 [ 28.425301][ T63] usb 1-1: USB disconnect, device number 2 [ 28.492742][ T535] netlink: 'syz.3.64': attribute type 13 has an invalid length. [ 28.522521][ T537] 9pnet_fd: Insufficient options for proto=fd [ 28.574998][ T543] binder: Bad value for 'defcontext' [ 28.940033][ T572] 9pnet_fd: Insufficient options for proto=fd [ 29.178004][ T580] af_packet: tpacket_rcv: packet too big, clamped from 65532 to 3944. macoff=96 [ 29.295565][ T585] Zero length message leads to an empty skb [ 29.358746][ T583] 9pnet_fd: Insufficient options for proto=fd [ 29.521452][ T598] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 29.763090][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.777132][ T426] Bluetooth: hci0: command 0x1003 tx timeout [ 29.811985][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.923684][ T603] syzkaller0: entered promiscuous mode [ 29.929187][ T603] syzkaller0: entered allmulticast mode [ 30.028092][ T612] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 30.028166][ T612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 30.317490][ T620] rust_binder: Write failure EFAULT in pid:64 [ 30.453164][ T63] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.593009][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.612983][ T63] usb 4-1: Using ep0 maxpacket: 16 [ 30.620113][ T63] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 30.630053][ T63] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 30.641695][ T63] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.650860][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.659081][ T63] usb 4-1: Product: с [ 30.663233][ T63] usb 4-1: Manufacturer: 〉 [ 30.667922][ T63] usb 4-1: SerialNumber: syz [ 30.752988][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 30.759367][ T31] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 30.767503][ T31] usb 2-1: config 0 has no interface number 0 [ 30.773626][ T31] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 30.783503][ T31] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 30.793447][ T31] usb 2-1: config 0 interface 41 has no altsetting 0 [ 30.801622][ T31] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 30.810931][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.818970][ T31] usb 2-1: Product: syz [ 30.823224][ T31] usb 2-1: Manufacturer: syz [ 30.827835][ T31] usb 2-1: SerialNumber: syz [ 30.833411][ T31] usb 2-1: config 0 descriptor?? [ 30.838717][ T626] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 30.846035][ T626] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 30.875821][ T63] cdc_ncm 4-1:1.0: bind() failure [ 30.881971][ T63] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 30.889001][ T63] cdc_ncm 4-1:1.1: bind() failure [ 30.895928][ T63] usb 4-1: USB disconnect, device number 2 [ 31.047370][ T634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 31.047405][ T634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:93 [ 31.057512][ T625] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 31.083042][ T638] syz.0.102 uses obsolete (PF_INET,SOCK_PACKET) [ 31.087074][ T31] dm9601 2-1:0.41: probe with driver dm9601 failed with error -71 [ 31.102053][ T31] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 31.114371][ T31] usb 2-1: USB disconnect, device number 2 [ 31.143824][ T644] FAT-fs (rnullb0): bogus number of reserved sectors [ 31.150547][ T644] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 31.177104][ T652] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 31.188896][ T652] __vm_enough_memory: pid: 652, comm: syz.1.106, bytes: 18014402804453376 not enough memory for the allocation [ 31.258444][ T656] rust_binder: Write failure EINVAL in pid:101 [ 31.317618][ T664] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 31.426445][ T673] rust_binder: pid 673 performed invalid decrement on ref [ 31.434642][ T673] rust_binder: Write failure EINVAL in pid:103 [ 31.434865][ T675] rust_binder: pid 675 performed invalid decrement on ref [ 31.466791][ T677] tipc: Started in network mode [ 31.472002][ T677] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 31.480442][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 31.480463][ T36] audit: type=1400 audit(1755651374.890:237): avc: denied { create } for pid=678 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 31.481513][ T677] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 31.514350][ T677] tipc: Enabled bearer , priority 10 [ 31.538775][ T36] audit: type=1400 audit(1755651374.950:238): avc: denied { mount } for pid=682 comm="syz.0.117" name="/" dev="ramfs" ino=6692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 31.561088][ T36] audit: type=1400 audit(1755651374.950:239): avc: denied { unmount } for pid=682 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 31.580933][ T36] audit: type=1400 audit(1755651374.950:240): avc: denied { ioctl } for pid=682 comm="syz.0.117" path="socket:[6693]" dev="sockfs" ino=6693 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.611819][ T687] capability: warning: `syz.0.119' uses 32-bit capabilities (legacy support in use) [ 31.843024][ T426] Bluetooth: hci0: command 0x1003 tx timeout [ 31.843041][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 31.873071][ T63] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.023002][ T63] usb 1-1: Using ep0 maxpacket: 32 [ 32.029587][ T63] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 32.048276][ T63] usb 1-1: config 0 has no interface number 0 [ 32.063000][ T63] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 32.074851][ T63] usb 1-1: config 0 interface 196 has no altsetting 0 [ 32.083400][ T63] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 32.092774][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.101112][ T63] usb 1-1: Product: syz [ 32.107356][ T63] usb 1-1: Manufacturer: syz [ 32.112210][ T63] usb 1-1: SerialNumber: syz [ 32.117784][ T63] usb 1-1: config 0 descriptor?? [ 32.129187][ T36] audit: type=1400 audit(1755651375.530:241): avc: denied { map } for pid=705 comm="syz.3.126" path="socket:[6735]" dev="sockfs" ino=6735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.159422][ T36] audit: type=1400 audit(1755651375.530:242): avc: denied { read } for pid=705 comm="syz.3.126" path="socket:[6735]" dev="sockfs" ino=6735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.183082][ T690] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 32.185592][ T36] audit: type=1400 audit(1755651375.530:243): avc: denied { ioctl } for pid=705 comm="syz.3.126" path="socket:[6735]" dev="sockfs" ino=6735 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.215442][ T36] audit: type=1326 audit(1755651375.540:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=705 comm="syz.3.126" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a1758ebe9 code=0x0 [ 32.245141][ T36] audit: type=1400 audit(1755651375.560:245): avc: denied { unlink } for pid=291 comm="syz-executor" name="file2" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.279560][ T36] audit: type=1400 audit(1755651375.570:246): avc: denied { setattr } for pid=705 comm="syz.3.126" name="XDP" dev="sockfs" ino=6735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.424254][ T63] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 32.431802][ T63] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 32.463442][ T63] usb 1-1: USB disconnect, device number 3 [ 32.533045][ T31] tipc: Node number set to 1 [ 32.578402][ T724] /dev/rnullb0: Can't open blockdev [ 32.777517][ T63] rust_binder: 730: removing orphan mapping 0:24 [ 33.190516][ T759] binder: Binderfs stats mode cannot be changed during a remount [ 33.228309][ T762] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 33.228336][ T762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 33.242698][ T762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:116 [ 33.264644][ T773] netlink: 104 bytes leftover after parsing attributes in process `syz.2.141'. [ 33.502997][ T90] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 33.526638][ T785] 9pnet_fd: Insufficient options for proto=fd [ 33.674122][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 33.686439][ T90] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.699638][ T90] usb 1-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 33.709832][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.720954][ T90] usb 1-1: config 0 descriptor?? [ 33.729752][ T772] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 34.057753][ T800] rust_binder: 799 RLIMIT_NICE not set [ 34.111635][ T90] usbhid 1-1:0.0: can't add hid device: -71 [ 34.123940][ T90] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 34.134752][ T90] usb 1-1: USB disconnect, device number 4 [ 34.138755][ T63] rust_binder: 798: removing orphan mapping 0:4248 [ 34.229559][ T810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103 [ 34.265439][ T815] binder: Unknown parameter 'seclAbel' [ 34.452998][ T63] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.602999][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 34.609337][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.620442][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.630611][ T63] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 34.643835][ T63] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 34.652915][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.667076][ T63] usb 3-1: config 0 descriptor?? [ 34.673713][ T63] usbhid 3-1:0.0: can't add hid device: -22 [ 34.679693][ T63] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 34.984883][ T331] usb 3-1: USB disconnect, device number 3 [ 35.178011][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.229769][ T837] 9pnet_fd: Insufficient options for proto=fd [ 35.255817][ T840] __vm_enough_memory: pid: 840, comm: syz.1.165, bytes: 18014402804453376 not enough memory for the allocation [ 35.281568][ T845] incfs: Options parsing error. -22 [ 35.286839][ T845] incfs: mount failed -22 [ 35.292891][ T845] netlink: 'syz.1.166': attribute type 9 has an invalid length. [ 35.333001][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 35.340402][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 35.349536][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.357633][ T9] usb 4-1: Product: syz [ 35.361934][ T9] usb 4-1: Manufacturer: syz [ 35.366792][ T9] usb 4-1: SerialNumber: syz [ 35.372113][ T9] usb 4-1: config 0 descriptor?? [ 35.379543][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 35.388025][ T9] usb 4-1: Detected FT232H [ 35.397020][ T849] netlink: 'syz.1.168': attribute type 1 has an invalid length. [ 35.587909][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 35.997725][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 36.205408][ T525] usb 4-1: USB disconnect, device number 3 [ 36.212866][ T525] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 36.223050][ T525] ftdi_sio 4-1:0.0: device disconnected [ 36.654200][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 36.654221][ T36] audit: type=1400 audit(1755651380.070:315): avc: denied { append } for pid=893 comm="syz.1.182" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.693063][ T894] rust_binder: Write failure EFAULT in pid:155 [ 36.797417][ T36] audit: type=1400 audit(1755651380.210:316): avc: denied { getopt } for pid=898 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.882306][ T36] audit: type=1400 audit(1755651380.290:317): avc: denied { execute } for pid=901 comm="syz.2.185" path="/27/file0" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.904933][ T36] audit: type=1400 audit(1755651380.290:318): avc: denied { create } for pid=901 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 36.951299][ T36] audit: type=1400 audit(1755651380.360:319): avc: denied { setopt } for pid=908 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.963830][ T911] 9pnet_fd: Insufficient options for proto=fd [ 36.980316][ T36] audit: type=1400 audit(1755651380.360:320): avc: denied { append } for pid=910 comm="syz.2.189" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.008899][ T36] audit: type=1400 audit(1755651380.360:321): avc: denied { read } for pid=910 comm="syz.2.189" dev="sockfs" ino=7771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.015357][ T331] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 37.194005][ T331] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 37.204869][ T331] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.215865][ T331] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 37.226853][ T331] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 37.240804][ T331] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.249896][ T330] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.257398][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.265458][ T331] usb 4-1: SerialNumber: syz [ 37.272505][ T897] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 37.292988][ T90] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 37.424067][ T330] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 37.431398][ T330] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 37.440531][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.448653][ T90] usb 2-1: Using ep0 maxpacket: 32 [ 37.454721][ T330] usb 3-1: config 0 descriptor?? [ 37.460487][ T90] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.471691][ T330] rndis_host 3-1:0.0: skipping garbage [ 37.477244][ T90] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.487074][ T330] usb 3-1: bad CDC descriptors [ 37.492666][ T90] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 37.502392][ T331] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 37.508514][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.518091][ T331] usb 4-1: USB disconnect, device number 4 [ 37.525839][ T90] usb 2-1: config 0 descriptor?? [ 37.662197][ T330] usb 3-1: USB disconnect, device number 4 [ 37.935437][ T90] savu 0003:1E7D:2D5A.0002: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 38.216864][ T36] audit: type=1400 audit(1755651381.630:322): avc: denied { bind } for pid=916 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.233479][ T330] usb 2-1: USB disconnect, device number 3 [ 38.308211][ T933] __vm_enough_memory: pid: 933, comm: syz.2.196, bytes: 18014402804453376 not enough memory for the allocation [ 38.332782][ T36] audit: type=1400 audit(1755651381.740:323): avc: denied { mount } for pid=934 comm="syz.2.197" name="/" dev="configfs" ino=2540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 38.355423][ T36] audit: type=1400 audit(1755651381.740:324): avc: denied { search } for pid=934 comm="syz.2.197" name="/" dev="configfs" ino=2540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 38.355846][ T525] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 38.386289][ T90] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 38.391551][ T525] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 38.562487][ T943] binder: Unknown parameter 'smackfshat' [ 38.569916][ T90] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 38.579148][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.590464][ T945] random: crng reseeded on system resumption [ 38.606637][ T90] usb 4-1: config 0 descriptor?? [ 38.626185][ T947] binder: Unknown parameter 'd;p|' [ 38.632300][ T946] rtc_cmos 00:00: Alarms can be up to one day in the future [ 38.703773][ T954] binder: Unknown parameter 's2.]~EIjrI*<+!;|' [ 38.828851][ T90] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 38.861103][ T525] rtc_cmos 00:00: Alarms can be up to one day in the future [ 38.878182][ T525] rtc_cmos 00:00: Alarms can be up to one day in the future [ 38.889541][ T525] rtc_cmos 00:00: Alarms can be up to one day in the future [ 38.898295][ T525] rtc_cmos 00:00: Alarms can be up to one day in the future [ 38.906069][ T525] rtc rtc0: __rtc_set_alarm: err=-22 [ 39.103000][ T330] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 39.112898][ T994] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.134868][ T997] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 39.143358][ T998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 39.148507][ T997] overlayfs: failed to set xattr on upper [ 39.149273][ T987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 39.157716][ T997] overlayfs: ...falling back to redirect_dir=nofollow. [ 39.179599][ T997] overlayfs: ...falling back to uuid=null. [ 39.253718][ T330] usb 2-1: not running at top speed; connect to a high speed hub [ 39.262500][ T330] usb 2-1: config 6 has an invalid interface number: 174 but max is 3 [ 39.270737][ T330] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 39.280914][ T330] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 39.290039][ T330] usb 2-1: config 6 has no interface number 0 [ 39.296199][ T330] usb 2-1: config 6 interface 174 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 39.309284][ T330] usb 2-1: config 6 interface 174 has no altsetting 0 [ 39.317567][ T330] usb 2-1: New USB device found, idVendor=0cf3, idProduct=311e, bcdDevice=a0.88 [ 39.326664][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.334704][ T330] usb 2-1: Product: 㪡썅鋄槾ᆴ늭댳芆腚⦶셲즬钔涽呷䒾⹁ć⧭鍍卒፭숧즬泶⡿氤㶲 [ 39.347778][ T330] usb 2-1: Manufacturer: ࠇ [ 39.352403][ T330] usb 2-1: SerialNumber: syz [ 39.560140][ T973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.568751][ T973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.582252][ T330] usb 2-1: USB disconnect, device number 4 [ 40.390627][ T330] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 40.422605][ T918] rust_binder: 1023: removing orphan mapping 0:24 [ 40.438857][ T1027] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.454507][ T1029] netlink: 72 bytes leftover after parsing attributes in process `syz.0.227'. [ 40.528979][ T1032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 40.544023][ T330] usb 2-1: config 1 has an invalid interface number: 149 but max is 0 [ 40.552375][ T330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.562682][ T330] usb 2-1: config 1 has no interface number 0 [ 40.568840][ T330] usb 2-1: config 1 interface 149 has no altsetting 0 [ 40.577207][ T330] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 40.586951][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.595019][ T330] usb 2-1: Product: syz [ 40.599278][ T330] usb 2-1: Manufacturer: syz [ 40.603925][ T330] usb 2-1: SerialNumber: syz [ 40.612705][ T330] usbserial_generic 2-1:1.149: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 40.624216][ T330] usbserial_generic 2-1:1.149: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 40.635207][ T330] usbserial_generic 2-1:1.149: device has no bulk endpoints [ 40.830577][ T1044] rust_binder: Error in use_page_slow: ESRCH [ 40.830604][ T1044] rust_binder: use_range failure ESRCH [ 40.836691][ T1044] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 40.842179][ T1044] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 40.850117][ T1044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:263 [ 40.860203][ T1045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.956621][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.100173][ T90] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 41.111764][ T90] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 41.122329][ T90] asix 4-1:0.0: probe with driver asix failed with error -71 [ 41.136322][ T90] usb 4-1: USB disconnect, device number 5 [ 41.233134][ T1058] rust_binder: Error while translating object. [ 41.233186][ T1058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.239518][ T1058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 41.254554][ T525] rust_binder: 0: removing orphan mapping 0:24 [ 42.223945][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 42.223963][ T36] audit: type=1400 audit(1755651385.640:348): avc: denied { relabelfrom } for pid=1074 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 42.250452][ T36] audit: type=1400 audit(1755651385.660:349): avc: denied { relabelto } for pid=1074 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 42.337859][ T1084] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 42.347315][ T1084] overlayfs: failed to get uuid (43/file1, err=-13); falling back to uuid=null. [ 42.452914][ T1090] overlayfs: failed to resolve './file1': -2 [ 42.459645][ T36] audit: type=1400 audit(1755651385.870:350): avc: denied { setattr } for pid=1088 comm="syz.3.245" name="file0" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.603003][ T525] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 42.754029][ T525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.763893][ T525] usb 3-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 42.772973][ T525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.781564][ T525] usb 3-1: config 0 descriptor?? [ 42.963030][ T426] Bluetooth: hci0: command 0x1003 tx timeout [ 42.963045][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.107776][ T90] usb 2-1: USB disconnect, device number 5 [ 43.128585][ T1098] input: syz1 as /devices/virtual/input/input6 [ 43.138809][ T36] audit: type=1400 audit(1755651386.550:351): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=487 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.166821][ T36] audit: type=1400 audit(1755651386.550:352): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=487 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.200004][ T525] wacom 0003:056A:032B.0004: hidraw0: USB HID v0.04 Device [HID 056a:032b] on usb-dummy_hcd.2-1/input0 [ 43.222312][ T36] audit: type=1400 audit(1755651386.550:353): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=487 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.389587][ T1120] rust_binder: Error in use_page_slow: ESRCH [ 43.389607][ T1120] rust_binder: use_range failure ESRCH [ 43.407495][ T36] audit: type=1400 audit(1755651386.820:354): avc: denied { ioctl } for pid=1085 comm="syz.2.244" path="socket:[9767]" dev="sockfs" ino=9767 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.433405][ T1120] rust_binder: Failed to allocate buffer. len:216, is_oneway:false [ 43.433430][ T1120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 43.453019][ T1120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:179 [ 43.499035][ T1125] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.499935][ T1124] rust_binder: 183: no such ref 0 [ 43.523959][ T1124] rust_binder: 183: no such ref 0 [ 43.533335][ T1124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 43.533407][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.542636][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.549123][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.555523][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.561738][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.568549][ T1126] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 43.574839][ T1126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:183 [ 43.583015][ T331] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 43.584624][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.601156][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.607667][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.614096][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.620342][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.626811][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.633194][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.639462][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.645878][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.652323][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.658824][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.665342][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.671662][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.678151][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.684594][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.690909][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.697479][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.703931][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.710187][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.716692][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.723021][ T331] usb 1-1: device descriptor read/64, error -71 [ 43.723258][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.735612][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.741859][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.748474][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.754873][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.762161][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.769478][ T1124] rust_binder: Write failure EINVAL in pid:183 [ 43.963074][ T331] usb 1-1: device descriptor read/64, error -71 [ 43.979525][ T1133] rust_binder: Write failure EFAULT in pid:123 [ 44.004720][ T1135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.020460][ T1135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.215387][ T331] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 44.334077][ T36] audit: type=1400 audit(1755651387.750:355): avc: denied { search } for pid=1140 comm="syz.1.259" name="/" dev="configfs" ino=2540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.356243][ T36] audit: type=1400 audit(1755651387.750:356): avc: denied { read } for pid=1140 comm="syz.1.259" name="/" dev="configfs" ino=2540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.378227][ T331] usb 1-1: device descriptor read/64, error -71 [ 44.384626][ T36] audit: type=1400 audit(1755651387.750:357): avc: denied { open } for pid=1140 comm="syz.1.259" path="/" dev="configfs" ino=2540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.491322][ T1146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 44.502994][ T1146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 44.623034][ T331] usb 1-1: device descriptor read/64, error -71 [ 44.683328][ T1149] netlink: 5308 bytes leftover after parsing attributes in process `syz.1.262'. [ 44.693700][ T1149] binder: Unknown parameter 'context' [ 44.733136][ T331] usb usb1-port1: attempt power cycle [ 44.758840][ T1157] netlink: 'syz.1.266': attribute type 4 has an invalid length. [ 44.773384][ T1157] netlink: 'syz.1.266': attribute type 21 has an invalid length. [ 44.781694][ T1157] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.266'. [ 44.793650][ T1157] rust_binder: Error while translating object. [ 44.793692][ T1157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.800056][ T1157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:202 [ 44.899272][ T1175] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 45.073024][ T331] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 45.088909][ T1181] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (640 ns). Using initial count to start timer. [ 45.105776][ T331] usb 1-1: device descriptor read/8, error -71 [ 45.143018][ T918] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 45.234037][ T331] usb 1-1: device descriptor read/8, error -71 [ 45.293002][ T918] usb 2-1: Using ep0 maxpacket: 16 [ 45.299338][ T918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 45.306047][ T918] usb 2-1: New USB device found, idVendor=05ac, idProduct=0250, bcdDevice= 0.00 [ 45.315132][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.324059][ T918] usb 2-1: config 0 descriptor?? [ 45.473002][ T331] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 45.493959][ T331] usb 1-1: device descriptor read/8, error -71 [ 45.530210][ T1175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.544477][ T1175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.634226][ T331] usb 1-1: device descriptor read/8, error -71 [ 45.743168][ T331] usb usb1-port1: unable to enumerate USB device [ 45.761379][ T918] apple 0003:05AC:0250.0005: unknown main item tag 0x0 [ 45.768944][ T918] apple 0003:05AC:0250.0005: unknown main item tag 0x2 [ 45.775931][ T918] apple 0003:05AC:0250.0005: unknown main item tag 0x0 [ 45.782816][ T918] apple 0003:05AC:0250.0005: unknown main item tag 0x0 [ 45.789792][ T918] apple 0003:05AC:0250.0005: unknown main item tag 0x0 [ 45.796702][ T918] apple 0003:05AC:0250.0005: unknown main item tag 0x0 [ 45.803687][ T918] apple 0003:05AC:0250.0005: unknown main item tag 0x0 [ 45.810566][ T918] apple 0003:05AC:0250.0005: unknown main item tag 0x0 [ 45.817475][ T918] apple 0003:05AC:0250.0005: unknown main item tag 0x0 [ 45.824380][ T918] apple 0003:05AC:0250.0005: unknown main item tag 0x0 [ 45.831256][ T918] apple 0003:05AC:0250.0005: unknown main item tag 0x0 [ 45.838160][ T918] apple 0003:05AC:0250.0005: unknown main item tag 0x0 [ 45.845063][ T918] apple 0003:05AC:0250.0005: unknown main item tag 0x0 [ 45.851934][ T918] apple 0003:05AC:0250.0005: report_id 570490880 is invalid [ 45.859251][ T918] apple 0003:05AC:0250.0005: item 0 4 1 8 parsing failed [ 45.866736][ T918] apple 0003:05AC:0250.0005: parse failed [ 45.872603][ T918] apple 0003:05AC:0250.0005: probe with driver apple failed with error -22 [ 45.962505][ T1175] rust_binder: Error while translating object. [ 45.962534][ T1175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.968942][ T1175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:209 [ 45.983852][ T918] usb 2-1: USB disconnect, device number 6 [ 46.089274][ T1192] overlayfs: failed to resolve './file0': -2 [ 46.236599][ T1196] syzkaller0: entered promiscuous mode [ 46.242150][ T1196] syzkaller0: entered allmulticast mode [ 46.437563][ T1200] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.437766][ T1200] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 46.683014][ T525] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 46.704600][ T1202] rust_binder: 211: no such ref 2 [ 46.842970][ T525] usb 1-1: Using ep0 maxpacket: 32 [ 46.852745][ T525] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.865562][ T525] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.879228][ T525] usb 1-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec [ 46.888865][ T525] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.899947][ T525] usb 1-1: Product: syz [ 46.904557][ T525] usb 1-1: Manufacturer: syz [ 46.909510][ T525] usb 1-1: SerialNumber: syz [ 46.915098][ T525] usb 1-1: config 0 descriptor?? [ 47.125169][ T1200] netlink: 'syz.0.283': attribute type 4 has an invalid length. [ 47.132866][ T1200] netlink: 'syz.0.283': attribute type 6 has an invalid length. [ 47.140652][ T1200] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.283'. [ 47.150891][ T918] usb 1-1: USB disconnect, device number 10 [ 47.252005][ T1236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:187 [ 47.417922][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 47.417941][ T36] audit: type=1400 audit(1755651390.830:368): avc: denied { mounton } for pid=1245 comm="syz.2.298" path="/proc/179/task" dev="proc" ino=11547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 47.457745][ T36] audit: type=1400 audit(1755651390.870:369): avc: denied { associate } for pid=1245 comm="syz.2.298" name="memory.events" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 47.612982][ T525] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 47.752600][ T1254] rust_binder: 1253 RLIMIT_NICE not set [ 47.757770][ T918] rust_binder: 1252: removing orphan mapping 0:24 [ 47.775955][ T525] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 47.786802][ T525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.798243][ T525] usb 4-1: config 0 descriptor?? [ 47.803261][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 47.954029][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.965039][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.974847][ T10] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 47.983959][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.992538][ T10] usb 2-1: config 0 descriptor?? [ 48.183073][ T918] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 48.206023][ T1260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.214579][ T1260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.291252][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 48.307960][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 48.323992][ T10] usb 2-1: USB disconnect, device number 7 [ 48.344189][ T918] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.355784][ T918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.366921][ T918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 48.378655][ T1269] rust_binder: 1263 RLIMIT_NICE not set [ 48.378892][ T918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.378947][ T1263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 48.384518][ T918] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.384545][ T918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.440312][ T918] usb 1-1: config 0 descriptor?? [ 48.447369][ T36] audit: type=1400 audit(1755651391.860:370): avc: denied { read } for pid=1270 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.489308][ T36] audit: type=1400 audit(1755651391.900:371): avc: denied { execute } for pid=1274 comm="syz.1.307" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.779012][ T36] audit: type=1400 audit(1755651392.190:372): avc: denied { mount } for pid=1289 comm="syz.2.313" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 48.843207][ T1285] 9pnet_fd: Insufficient options for proto=fd [ 48.850661][ T918] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 48.861600][ T918] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 48.873780][ T918] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 48.910635][ T36] audit: type=1400 audit(1755651392.320:373): avc: denied { watch } for pid=1289 comm="syz.2.313" path="/70/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.011950][ T36] audit: type=1400 audit(1755651392.420:374): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 49.047834][ T36] audit: type=1400 audit(1755651392.460:375): avc: denied { append } for pid=1298 comm="syz.2.315" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.101951][ T1300] netlink: 104 bytes leftover after parsing attributes in process `syz.2.315'. [ 49.113977][ T36] audit: type=1400 audit(1755651392.530:376): avc: denied { getopt } for pid=1298 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.195186][ T1301] syzkaller0: entered promiscuous mode [ 49.200702][ T1301] syzkaller0: entered allmulticast mode [ 49.543717][ T1304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.553787][ T1304] rust_binder: Error in use_page_slow: ESRCH [ 49.553810][ T1304] rust_binder: use_range failure ESRCH [ 49.559860][ T1304] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 49.565450][ T1304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 49.573401][ T1304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:258 [ 49.598635][ T36] audit: type=1400 audit(1755651393.010:377): avc: denied { connect } for pid=1305 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.603066][ T13] tipc: Subscription rejected, illegal request [ 50.328657][ T525] usb 4-1: Cannot read MAC address [ 50.334470][ T525] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 50.347516][ T525] usb 4-1: USB disconnect, device number 6 [ 50.683005][ T525] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 50.763040][ T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 50.832992][ T525] usb 4-1: device descriptor read/64, error -71 [ 50.843301][ T1349] SELinux: security_context_str_to_sid () failed with errno=-22 [ 50.924065][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.935678][ T63] usb 1-1: USB disconnect, device number 11 [ 50.942170][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.953956][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 50.964124][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.973537][ T9] usb 2-1: config 0 descriptor?? [ 51.009345][ T1359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.018137][ T1359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.093016][ T525] usb 4-1: device descriptor read/64, error -71 [ 51.332997][ T525] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 51.383246][ T9] savu 0003:1E7D:2D5A.0007: hiddev96,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 51.463006][ T525] usb 4-1: device descriptor read/64, error -71 [ 51.691458][ T1366] syz.0.339 (1366): attempted to duplicate a private mapping with mremap. This is not supported. [ 51.702983][ T525] usb 4-1: device descriptor read/64, error -71 [ 51.729905][ T1364] fuse: Unknown parameter 'zd' [ 51.746464][ T1333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.763433][ T1333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.826190][ T90] usb 2-1: USB disconnect, device number 8 [ 51.833393][ T525] usb usb4-port1: attempt power cycle [ 51.942842][ T1374] binder: Unknown parameter '0000000000000000000000400000000000000000000004' [ 51.943010][ T918] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 52.102996][ T918] usb 1-1: Using ep0 maxpacket: 16 [ 52.109212][ T918] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 52.117542][ T918] usb 1-1: config 1 has no interface number 0 [ 52.123680][ T918] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 52.133699][ T918] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 52.143704][ T918] usb 1-1: config 1 interface 105 has no altsetting 0 [ 52.151897][ T918] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 52.160971][ T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.168989][ T918] usb 1-1: Product: syz [ 52.173161][ T918] usb 1-1: Manufacturer: syz [ 52.177755][ T918] usb 1-1: SerialNumber: syz [ 52.183362][ T1366] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 52.184504][ T525] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 52.190585][ T1366] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 52.214040][ T525] usb 4-1: device descriptor read/8, error -71 [ 52.344056][ T525] usb 4-1: device descriptor read/8, error -71 [ 52.368395][ T1376] /dev/nullb0: Can't lookup blockdev [ 52.507606][ T1381] 9pnet_fd: Insufficient options for proto=fd [ 52.534428][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 52.534446][ T36] audit: type=1400 audit(1755651395.950:381): avc: denied { getopt } for pid=1382 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.578205][ T36] audit: type=1400 audit(1755651395.990:382): avc: denied { getopt } for pid=1384 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.583016][ T525] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 52.607533][ T36] audit: type=1400 audit(1755651396.020:383): avc: denied { create } for pid=1365 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 52.614283][ T1366] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 52.634666][ T1366] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 52.635466][ T1385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1385 comm=syz.1.345 [ 52.656032][ T525] usb 4-1: device descriptor read/8, error -71 [ 52.784440][ T525] usb 4-1: device descriptor read/8, error -71 [ 52.820612][ T1392] netlink: 'syz.1.347': attribute type 27 has an invalid length. [ 52.893127][ T525] usb usb4-port1: unable to enumerate USB device [ 53.006650][ T918] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 53.017886][ T918] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 53.027074][ T918] usb 1-1: USB disconnect, device number 12 [ 53.556837][ T1412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 53.565672][ T1412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 53.580663][ T1413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 53.585908][ T918] rust_binder: 1408: removing orphan mapping 0:24 [ 53.641969][ T36] audit: type=1400 audit(1755651397.050:384): avc: denied { getopt } for pid=1417 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.693209][ T1422] rust_binder: Write failure EFAULT in pid:307 [ 53.751448][ T1428] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1428 comm=syz.2.362 [ 53.770310][ T1428] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=1428 comm=syz.2.362 [ 53.931822][ T1445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:328 [ 53.950472][ T1447] rust_binder: Write failure EFAULT in pid:330 [ 54.013010][ T36] audit: type=1400 audit(1755651397.310:385): avc: denied { map } for pid=1437 comm="syz.3.364" path="socket:[13137]" dev="sockfs" ino=13137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.131687][ T36] audit: type=1400 audit(1755651397.540:386): avc: denied { getopt } for pid=1457 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.152412][ T36] audit: type=1400 audit(1755651397.540:387): avc: denied { remount } for pid=1457 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.187458][ T36] audit: type=1400 audit(1755651397.600:388): avc: denied { setopt } for pid=1459 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.204024][ T1460] rust_binder: pid 1460 performed invalid decrement on ref [ 54.207019][ T36] audit: type=1400 audit(1755651397.610:389): avc: denied { bind } for pid=1459 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.233216][ T525] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 54.241545][ T36] audit: type=1400 audit(1755651397.620:390): avc: denied { name_bind } for pid=1459 comm="syz.3.372" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 54.245488][ T1462] rust_binder: Got transaction with invalid offset. [ 54.262451][ T1462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.269169][ T1462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213 [ 54.365015][ T1470] rust_binder: Read failure Err(EFAULT) in pid:215 [ 54.378926][ T1473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.394639][ T1473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.405098][ T1473] rust_binder: Error while translating object. [ 54.405133][ T1473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 54.411309][ T1473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:258 [ 54.423499][ T525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.443834][ T525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.453778][ T525] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 54.462856][ T525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.471491][ T525] usb 1-1: config 0 descriptor?? [ 54.792986][ T63] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 54.922995][ T63] usb 2-1: device descriptor read/64, error -71 [ 55.028706][ T751] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 55.037135][ T751] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 55.122516][ T1495] tipc: Started in network mode [ 55.127717][ T1495] tipc: Node identity 4, cluster identity 4711 [ 55.134396][ T1495] tipc: Node number set to 4 [ 55.139086][ T525] usbhid 1-1:0.0: can't add hid device: -71 [ 55.140788][ T1495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.385'. [ 55.145354][ T525] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 55.162987][ T1495] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.163778][ T525] usb 1-1: USB disconnect, device number 13 [ 55.176155][ T63] usb 2-1: device descriptor read/64, error -71 [ 55.188558][ T1495] bridge_slave_1 (unregistering): left allmulticast mode [ 55.196235][ T1495] bridge_slave_1 (unregistering): left promiscuous mode [ 55.197194][ T1484] 9pnet_fd: Insufficient options for proto=fd [ 55.204215][ T1495] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.256149][ T1500] rust_binder: 227: no such ref 2 [ 55.389613][ T1509] rust_binder: 232: no such ref 1 [ 55.413019][ T63] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 55.506245][ T1518] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 55.514932][ T1518] rust_binder: Write failure EINVAL in pid:236 [ 55.558095][ T63] usb 2-1: device descriptor read/64, error -71 [ 55.723779][ T1528] rust_binder: 1527 RLIMIT_NICE not set [ 55.812985][ T63] usb 2-1: device descriptor read/64, error -71 [ 55.878224][ T1546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.887829][ T1546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.897837][ T1546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.907112][ T1546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.933064][ T63] usb usb2-port1: attempt power cycle [ 55.973009][ T918] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 56.125393][ T918] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 56.134555][ T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.142550][ T918] usb 1-1: Product: syz [ 56.146900][ T918] usb 1-1: Manufacturer: syz [ 56.151533][ T918] usb 1-1: SerialNumber: syz [ 56.283019][ T63] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 56.304124][ T63] usb 2-1: device descriptor read/8, error -71 [ 56.432197][ T1548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.440890][ T1548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.450704][ T63] usb 2-1: device descriptor read/8, error -71 [ 56.694707][ T63] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 56.708059][ T1559] binder: Bad value for 'stats' [ 56.725326][ T63] usb 2-1: device descriptor read/8, error -71 [ 56.789204][ T1567] futex_wake_op: syz.3.410 tries to shift op by -1; fix this program [ 56.854379][ T63] usb 2-1: device descriptor read/8, error -71 [ 56.894772][ T90] rust_binder: 1572: removing orphan mapping 0:24 [ 56.909980][ T1576] binder: Bad value for 'max' [ 56.947553][ T1580] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 56.959793][ T1580] rust_binder: 279: no such ref 2 [ 56.965670][ T63] usb usb2-port1: unable to enumerate USB device [ 57.003730][ T1585] binder: Unknown parameter 'defcontext01777777777777777777777' [ 57.075806][ T1595] fuse: Unknown parameter 'user_dC/uid' [ 57.152392][ T1607] can0: slcan on ttyS3. [ 57.171915][ T1607] /dev/rnullb0: Can't open blockdev [ 57.235571][ T1615] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 57.410802][ T1637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.427507][ T1637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.436546][ T1637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.447099][ T1637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.447941][ T1638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.463476][ T1638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.710443][ T1651] rust_binder: Error while translating object. [ 57.710488][ T1651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.716759][ T1651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:319 [ 57.728466][ T1652] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.733038][ T63] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 57.809698][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 57.809719][ T36] audit: type=1400 audit(1755651401.211:423): avc: denied { setattr } for pid=1663 comm="syz.2.437" name="HCI" dev="sockfs" ino=14125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.850408][ T1670] incfs_lookup_dentry err:-13 [ 57.858869][ T1670] incfs: Can't find or create .index dir in ./bus [ 57.866455][ T1670] incfs: mount failed -13 [ 57.885682][ T1677] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 200, size: 230) [ 57.885701][ T1677] rust_binder: Error while translating object. [ 57.896506][ T1677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.902761][ T1677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:339 [ 57.913762][ T63] usb 4-1: not running at top speed; connect to a high speed hub [ 57.947753][ T63] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 57.958711][ T63] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 57.971090][ T63] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.980244][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.988282][ T63] usb 4-1: Product: ч [ 57.992907][ T63] usb 4-1: Manufacturer: Л [ 57.997734][ T63] usb 4-1: SerialNumber:  [ 58.003595][ T1641] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 58.174409][ T1691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.184062][ T1691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.197677][ T918] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 58.211358][ T1641] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 58.242107][ T36] audit: type=1400 audit(1755651401.641:424): avc: denied { shutdown } for pid=1699 comm="syz.2.450" lport=46742 faddr=172.20.20.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.354029][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.365530][ T918] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 58.374920][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.386766][ T918] usb 2-1: config 0 descriptor?? [ 58.419177][ T1641] rust_binder: Error while translating object. [ 58.419238][ T1641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.425490][ T1641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 58.436507][ T63] cdc_ncm 4-1:1.0: bind() failure [ 58.451769][ T63] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 58.460416][ T63] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 58.470420][ T63] usb 4-1: USB disconnect, device number 11 [ 58.601240][ T1719] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 58.611408][ T36] audit: type=1400 audit(1755651402.021:425): avc: denied { relabelto } for pid=1718 comm="syz.2.456" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 58.638883][ T36] audit: type=1400 audit(1755651402.021:426): avc: denied { associate } for pid=1718 comm="syz.2.456" name="ptp0" dev="devtmpfs" ino=196 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 58.666921][ T36] audit: type=1400 audit(1755651402.041:427): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.701404][ T90] usb 1-1: USB disconnect, device number 14 [ 58.717215][ T36] audit: type=1400 audit(1755651402.121:428): avc: denied { shutdown } for pid=1725 comm="syz.0.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.717881][ T31] rust_binder: 0: removing orphan mapping 0:24 [ 58.794534][ T1683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.806666][ T1683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.816679][ T1738] rust_binder: Fixups oob 156 120 160 164 [ 58.816703][ T1738] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 58.822467][ T1738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.831497][ T918] holtek 0003:1241:5015.0009: unknown main item tag 0x3 [ 58.850495][ T1738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:390 [ 58.851805][ T918] holtek 0003:1241:5015.0009: item fetching failed at offset 4/5 [ 58.869320][ T918] holtek 0003:1241:5015.0009: parse failed [ 58.875413][ T918] holtek 0003:1241:5015.0009: probe with driver holtek failed with error -22 [ 58.880493][ T1742] can1: slcan on ptm0. [ 58.888197][ T1744] rust_binder: Error while translating object. [ 58.888354][ T1744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 58.903283][ T1744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:392 [ 59.011465][ T1742] can1 (unregistered): slcan off ptm0. [ 59.031425][ T90] usb 2-1: USB disconnect, device number 13 [ 59.038456][ T36] audit: type=1400 audit(1755651402.451:429): avc: denied { lock } for pid=1758 comm="syz.3.468" path="socket:[15473]" dev="sockfs" ino=15473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 59.170994][ T1774] 9pnet_fd: Insufficient options for proto=fd [ 59.399734][ T1812] binder: Bad value for 'max' [ 59.440484][ T36] audit: type=1400 audit(1755651402.841:430): avc: denied { read } for pid=1820 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.473650][ T1826] /dev/rnullb0: Can't open blockdev [ 59.513643][ T1828] syzkaller0: entered promiscuous mode [ 59.519202][ T1828] syzkaller0: entered allmulticast mode [ 59.556435][ T36] audit: type=1400 audit(1755651402.961:431): avc: denied { lock } for pid=1835 comm="syz.3.489" path="/dev/binderfs/binder1" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.557500][ T1836] rust_binder: Read failure Err(EFAULT) in pid:310 [ 59.658343][ T414] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.681980][ T1851] incfs: mount failed -22 [ 59.732992][ T525] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 59.894182][ T525] usb 1-1: config 6 has an invalid interface number: 117 but max is 0 [ 59.902387][ T525] usb 1-1: config 6 has no interface number 0 [ 59.908601][ T525] usb 1-1: config 6 interface 117 has no altsetting 0 [ 59.916710][ T525] usb 1-1: Dual-Role OTG device on HNP port [ 59.922784][ T525] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01ca, bcdDevice=99.b6 [ 59.931981][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 59.939698][ T525] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.947764][ T525] usb 1-1: Product: syz [ 59.951982][ T525] usb 1-1: Manufacturer: syz [ 59.956742][ T525] usb 1-1: SerialNumber: syz [ 59.992980][ T63] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 60.102974][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 60.109495][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 60.117156][ T9] usb 4-1: can't read configurations, error -61 [ 60.144110][ T63] usb 2-1: config 127 has an invalid interface number: 32 but max is 0 [ 60.152395][ T63] usb 2-1: config 127 has no interface number 0 [ 60.158701][ T63] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 60.167779][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.177681][ T63] ums-freecom 2-1:127.32: USB Mass Storage device detected [ 60.204502][ T525] ftdi_sio 1-1:6.117: FTDI USB Serial Device converter detected [ 60.212468][ T525] ftdi_sio ttyUSB0: unknown device type: 0x99b6 [ 60.220070][ T525] usb 1-1: USB disconnect, device number 15 [ 60.228292][ T525] ftdi_sio 1-1:6.117: device disconnected [ 60.253009][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 60.403428][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 60.410093][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 60.418017][ T9] usb 4-1: can't read configurations, error -61 [ 60.424488][ T9] usb usb4-port1: attempt power cycle [ 60.554488][ T1853] /dev/rnullb0: Can't open blockdev [ 60.623511][ T918] usb 2-1: USB disconnect, device number 14 [ 60.762998][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 60.783357][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 60.791901][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 60.799987][ T9] usb 4-1: can't read configurations, error -61 [ 60.933030][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 60.953329][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 60.959863][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 60.967836][ T9] usb 4-1: can't read configurations, error -61 [ 60.974336][ T9] usb usb4-port1: unable to enumerate USB device [ 61.621637][ T1873] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.622698][ T1873] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 61.629209][ T1873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 61.637303][ T1873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:379 [ 61.661929][ T36] audit: type=1326 audit(1755651405.061:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1874 comm="syz.0.503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe21958ebe9 code=0x0 [ 61.693847][ T426] Bluetooth: hci0: command 0x1003 tx timeout [ 61.700607][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.732314][ T1884] netlink: 44 bytes leftover after parsing attributes in process `syz.2.506'. [ 61.741877][ T1884] overlayfs: missing 'lowerdir' [ 61.764729][ T1885] __vm_enough_memory: pid: 1885, comm: syz.0.503, bytes: 18014402804453376 not enough memory for the allocation [ 62.531264][ T1891] SELinux: Context system_u:object_r:dpkg_var_lib_t:s0 is not valid (left unmapped). [ 62.578531][ T1897] netlink: 'syz.1.509': attribute type 15 has an invalid length. [ 62.586382][ T1897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'. [ 62.595431][ T1898] netlink: 'syz.1.509': attribute type 15 has an invalid length. [ 62.603982][ T1898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'. [ 62.650467][ T1905] overlay: ./file0 is not a directory [ 63.723003][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 63.892986][ T525] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 63.900717][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 63.907223][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.922823][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.932600][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 63.941705][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.952964][ T9] usb 1-1: config 0 descriptor?? [ 63.979368][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 63.979385][ T36] audit: type=1400 audit(1755651407.381:439): avc: denied { setattr } for pid=1929 comm="syz.1.521" name="/" dev="configfs" ino=2540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.993285][ T1930] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 64.014800][ T1930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:389 [ 64.054062][ T525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 64.074438][ T525] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 64.084104][ T525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.093361][ T525] usb 4-1: config 0 descriptor?? [ 64.099128][ T1911] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 64.110071][ T1934] netlink: 'syz.1.523': attribute type 2 has an invalid length. [ 64.206681][ T1938] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 64.216194][ T36] audit: type=1400 audit(1755651407.621:440): avc: denied { append } for pid=1937 comm="syz.1.524" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 64.223605][ T1938] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 64.243399][ T36] audit: type=1400 audit(1755651407.621:441): avc: denied { open } for pid=1937 comm="syz.1.524" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 64.362465][ T9] hid (null): unknown global tag 0xd [ 64.372744][ T9] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.000A/input/input15 [ 64.388510][ T9] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.000A/input/input16 [ 64.423753][ T9] kye 0003:0458:5012.000A: input,hiddev96,hidraw1: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0 [ 64.510158][ T525] hid-generic 0003:04F3:0755.000B: hidraw2: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 64.582853][ T1955] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=94 sclass=netlink_xfrm_socket pid=1955 comm=syz.1.528 [ 64.604736][ T31] usb 1-1: USB disconnect, device number 16 [ 64.859260][ T1965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.867866][ T1965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.875919][ T1961] 9pnet_fd: Insufficient options for proto=fd [ 64.876481][ T1965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.890485][ T1965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.898523][ T1965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.907011][ T1965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.915442][ T1965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.923959][ T1965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.931965][ T1965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.940530][ T1965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.948534][ T1965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.957060][ T1965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.168340][ T36] audit: type=1400 audit(1755651408.571:442): avc: denied { write } for pid=1971 comm="syz.0.533" path="socket:[16732]" dev="sockfs" ino=16732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.199776][ T525] usb 4-1: USB disconnect, device number 16 [ 65.208380][ T1972] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.208409][ T1972] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.287272][ T1978] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 65.542988][ T751] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 65.641498][ T36] audit: type=1400 audit(1755651409.041:443): avc: denied { read write } for pid=1989 comm="syz.1.538" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.666304][ T36] audit: type=1400 audit(1755651409.041:444): avc: denied { open } for pid=1989 comm="syz.1.538" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.702992][ T751] usb 1-1: Using ep0 maxpacket: 32 [ 65.709274][ T751] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.724541][ T751] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.735595][ T751] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 65.752493][ T751] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.761824][ T751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.770016][ T751] usb 1-1: Product: syz [ 65.774457][ T751] usb 1-1: Manufacturer: syz [ 65.779113][ T751] usb 1-1: SerialNumber: syz [ 65.794085][ T36] audit: type=1400 audit(1755651409.201:445): avc: denied { execute } for pid=1995 comm="syz.3.541" path="/dev/binderfs/binder1" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.845737][ T1999] 9pnet_fd: Insufficient options for proto=fd [ 65.902995][ T918] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 65.914822][ T12] syzkaller0: tun_net_xmit 76 [ 65.919637][ T12] syzkaller0: tun_net_xmit 48 [ 65.925161][ T2003] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 65.931083][ T2003] syzkaller0: Linktype set failed because interface is up [ 66.054051][ T918] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.064311][ T918] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.073883][ T918] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 66.082990][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 66.091361][ T918] usb 2-1: SerialNumber: syz [ 66.096045][ T90] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 66.252985][ T90] usb 4-1: Using ep0 maxpacket: 8 [ 66.259110][ T90] usb 4-1: config 1 has an invalid interface number: 22 but max is 2 [ 66.267235][ T90] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.277361][ T90] usb 4-1: config 1 has no interface number 1 [ 66.283488][ T90] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 66.296281][ T90] usb 4-1: config 1 interface 2 altsetting 40 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.309276][ T90] usb 4-1: config 1 interface 2 has no altsetting 0 [ 66.310581][ T36] audit: type=1400 audit(1755651409.711:446): avc: denied { ioctl } for pid=1989 comm="syz.1.538" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.343125][ T90] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.352362][ T90] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.360579][ T90] usb 4-1: Product: syz [ 66.364930][ T90] usb 4-1: Manufacturer: syz [ 66.369643][ T90] usb 4-1: SerialNumber: syz [ 66.521416][ T2007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 66.530334][ T2007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 66.586258][ T90] usb 4-1: cannot find UAC_HEADER [ 66.592415][ T90] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 66.603133][ T90] usb 4-1: USB disconnect, device number 17 [ 66.613981][ T2008] udevd[2008]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.730901][ T2013] syzkaller0: entered promiscuous mode [ 66.736536][ T2013] syzkaller0: entered allmulticast mode [ 66.746202][ T2013] tmpfs: Unknown parameter 'usrquota0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.746202][ T2013] 0 [ 66.787692][ T751] cdc_ncm 1-1:1.0: bind() failure [ 66.936465][ T751] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 66.943306][ T751] cdc_ncm 1-1:1.1: bind() failure [ 66.995230][ T1978] netlink: 'syz.0.534': attribute type 15 has an invalid length. [ 67.039856][ T918] usb 2-1: 0:2 : does not exist [ 67.047431][ T918] usb 2-1: USB disconnect, device number 15 [ 67.066611][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.104372][ T36] audit: type=1400 audit(1755651410.511:447): avc: denied { write } for pid=2017 comm="syz.2.549" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.161171][ T2026] rust_binder: Failed copying remainder into alloc: EFAULT [ 67.161211][ T2026] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 67.168831][ T2026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 67.182989][ T2026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:450 [ 67.194838][ T2026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.218945][ T2030] tipc: Started in network mode [ 67.224031][ T2030] tipc: Node identity 4, cluster identity 4711 [ 67.230273][ T2030] tipc: Node number set to 4 [ 67.507428][ T2045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.540115][ T2045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.562253][ T2045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.584086][ T2045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.093785][ T2049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 68.103299][ T2049] rust_binder: 437: no such ref 1 [ 68.108448][ T2049] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 4096) [ 68.108466][ T2049] rust_binder: Error while translating object. [ 68.119114][ T2049] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.125438][ T2049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:437 [ 68.241869][ T525] usb 1-1: USB disconnect, device number 17 [ 68.298715][ T2061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:447 [ 68.319448][ T2063] syzkaller0: entered promiscuous mode [ 68.341545][ T2063] syzkaller0: entered allmulticast mode [ 68.393908][ T36] audit: type=1400 audit(1755651411.801:448): avc: denied { read } for pid=2074 comm="syz.0.566" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 68.440908][ T2083] rust_binder: Error in use_page_slow: ESRCH [ 68.440929][ T2083] rust_binder: use_range failure ESRCH [ 68.447162][ T2083] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 68.452637][ T2083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 68.460581][ T2083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:341 [ 68.573317][ T2094] netlink: 'syz.0.570': attribute type 4 has an invalid length. [ 68.591928][ T2094] netlink: 'syz.0.570': attribute type 4 has an invalid length. [ 68.601304][ T2094] 9pnet_fd: Insufficient options for proto=fd [ 68.830880][ T2106] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3213269175 (102824613600 ns) > initial count (93960712448 ns). Using initial count to start timer. [ 69.107730][ T2121] netlink: 132 bytes leftover after parsing attributes in process `syz.0.578'. [ 69.123849][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 69.123866][ T36] audit: type=1400 audit(1755651412.531:451): avc: denied { load_policy } for pid=2120 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 69.123882][ T2121] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 69.160179][ T2121] SELinux: failed to load policy [ 69.261324][ T2132] rust_binder: Error while translating object. [ 69.261357][ T2132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.272843][ T2132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:346 [ 69.301198][ T36] audit: type=1400 audit(1755651412.701:452): avc: denied { ioctl } for pid=2135 comm="syz.3.584" path="/119/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.492985][ T918] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 69.522972][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 69.633032][ T90] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 69.644032][ T918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.655523][ T918] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 69.664646][ T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.672649][ T918] usb 1-1: Product: syz [ 69.677015][ T918] usb 1-1: Manufacturer: syz [ 69.681660][ T918] usb 1-1: SerialNumber: syz [ 69.687110][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 69.698118][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.709275][ T918] usb 1-1: config 0 descriptor?? [ 69.714534][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.725502][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 69.739555][ T918] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 69.748968][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 69.758041][ T31] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 69.766551][ T31] usb 2-1: Manufacturer: syz [ 69.773181][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.789908][ T31] usb 2-1: config 0 descriptor?? [ 69.794973][ T90] usb 4-1: Using ep0 maxpacket: 16 [ 69.802627][ T90] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 69.810935][ T90] usb 4-1: config 0 has an invalid descriptor of length 90, skipping remainder of the config [ 69.821302][ T90] usb 4-1: config 0 has no interface number 0 [ 69.827602][ T90] usb 4-1: too many endpoints for config 0 interface 56 altsetting 206: 44, using maximum allowed: 30 [ 69.838862][ T90] usb 4-1: config 0 interface 56 altsetting 206 has 0 endpoint descriptors, different from the interface descriptor's value: 44 [ 69.852400][ T90] usb 4-1: config 0 interface 56 has no altsetting 0 [ 69.859195][ T90] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 69.868415][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.877256][ T90] usb 4-1: config 0 descriptor?? [ 69.926798][ T45] usb 1-1: USB disconnect, device number 18 [ 70.135253][ T90] usb 4-1: string descriptor 0 read error: -71 [ 70.143232][ T90] usb 4-1: USB disconnect, device number 18 [ 70.203498][ T31] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 70.210805][ T31] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 70.219523][ T31] appleir 0003:05AC:8243.000C: hiddev96,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 70.365191][ T2163] rust_binder: Error while translating object. [ 70.365238][ T2163] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.371520][ T2163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:467 [ 70.396709][ T2165] tipc: Can't bind to reserved service type 0 [ 70.459437][ T2173] raw_sendmsg: syz.2.592 forgot to set AF_INET. Fix it! [ 70.546586][ T36] audit: type=1400 audit(1755651413.951:453): avc: denied { map } for pid=2176 comm="syz.0.594" path="socket:[18076]" dev="sockfs" ino=18076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.668757][ T2198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.602'. [ 70.683445][ T2197] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 70.710860][ T36] audit: type=1400 audit(1755651414.111:454): avc: denied { listen } for pid=2201 comm="syz.0.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.857886][ T63] usb 2-1: USB disconnect, device number 16 [ 70.892563][ T2219] kernel profiling enabled (shift: 7) [ 70.892654][ T2220] /dev/rnullb0: Can't open blockdev [ 70.973383][ T2224] 9pnet_fd: Insufficient options for proto=fd [ 71.012782][ T2228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.021345][ T2228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.029644][ T2227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.038189][ T2227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.046493][ T2229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.055057][ T2229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.063106][ T525] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 71.065217][ T2227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.079290][ T2227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.214175][ T525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 71.225264][ T525] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.238257][ T525] usb 4-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 71.247340][ T525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.255924][ T525] usb 4-1: config 0 descriptor?? [ 71.261267][ T2215] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 71.420940][ T2235] __vm_enough_memory: pid: 2235, comm: syz.1.613, bytes: 18014402804453376 not enough memory for the allocation [ 71.475452][ T525] wacom 0003:056A:0020.000D: Unknown device_type for 'HID 056a:0020'. Assuming pen. [ 71.535646][ T525] wacom 0003:056A:0020.000D: hidraw1: USB HID v1.01 Device [HID 056a:0020] on usb-dummy_hcd.3-1/input0 [ 71.563687][ T525] input: Wacom Intuos 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0020.000D/input/input19 [ 71.755504][ T525] usb 4-1: USB disconnect, device number 19 [ 71.775742][ T2257] rust_binder: Write failure EFAULT in pid:520 [ 71.896787][ T918] kernel write not supported for file 375/net/vlan/vlan1 (pid: 918 comm: kworker/1:5) [ 71.913349][ T2272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 71.922143][ T2272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 72.009184][ T2278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.019208][ T2278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.020828][ T36] audit: type=1400 audit(7022606681.909:455): avc: denied { write } for pid=2280 comm="syz.3.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.072990][ T31] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 72.234100][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 72.245086][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.257965][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 72.267150][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.275859][ T31] usb 1-1: config 0 descriptor?? [ 72.283042][ T2269] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 72.323010][ T63] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 72.472979][ T63] usb 4-1: Using ep0 maxpacket: 8 [ 72.480460][ T63] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.491511][ T63] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.501378][ T63] usb 4-1: config 0 interface 0 has no altsetting 0 [ 72.508557][ T63] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 72.517820][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.526800][ T63] usb 4-1: config 0 descriptor?? [ 72.528601][ T36] audit: type=1400 audit(7022606682.419:456): avc: denied { mount } for pid=2301 comm="syz.1.634" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 72.609981][ T36] audit: type=1400 audit(7022606682.489:457): avc: denied { create } for pid=2310 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.900631][ T2318] 9pnet_fd: Insufficient options for proto=fd [ 72.982239][ T31] wacom 0003:056A:0020.000E: Unknown device_type for 'HID 056a:0020'. Assuming pen. [ 72.992539][ T31] wacom 0003:056A:0020.000E: hidraw1: USB HID v1.01 Device [HID 056a:0020] on usb-dummy_hcd.0-1/input0 [ 73.004517][ T31] input: Wacom Intuos 4x5 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0020.000E/input/input22 [ 73.138436][ T63] usbhid 4-1:0.0: can't add hid device: -71 [ 73.144532][ T63] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 73.153877][ T63] usb 4-1: USB disconnect, device number 20 [ 73.542300][ T2324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'. [ 73.551191][ T2324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'. [ 73.627483][ T36] audit: type=1400 audit(7022606683.509:458): avc: denied { mounton } for pid=2336 comm="syz.1.647" path="/175/file1" dev="tmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.627515][ T2338] 9pnet_fd: p9_fd_create_unix (2338): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 73.782603][ T36] audit: type=1400 audit(7022606683.659:459): avc: denied { create } for pid=2353 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.895185][ T2365] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 74.004807][ T2370] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 74.004829][ T2370] rust_binder: Read failure Err(EFAULT) in pid:402 [ 74.113822][ T2381] 9pnet_fd: Insufficient options for proto=fd [ 74.158465][ T2383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 74.420648][ T36] audit: type=1400 audit(7022606684.299:460): avc: denied { bind } for pid=2391 comm="syz.3.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.484019][ T36] audit: type=1400 audit(7022606684.369:461): avc: denied { create } for pid=2391 comm="syz.3.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.484352][ T2394] netlink: 64 bytes leftover after parsing attributes in process `syz.3.665'. [ 74.589661][ T2396] overlayfs: failed to clone upperpath [ 74.596396][ T2396] fuse: Unknown parameter 'kd-' [ 74.601891][ T36] audit: type=1400 audit(7022606684.479:462): avc: denied { execute } for pid=2395 comm="syz.1.666" name="file0" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.836738][ T525] usb 1-1: USB disconnect, device number 19 [ 74.938764][ T2421] tmpfs: Unknown parameter 'nr_knodes?E' [ 75.013381][ T2426] can1: slcan on ptm0. [ 75.135095][ T2426] can1 (unregistered): slcan off ptm0. [ 75.214470][ T525] rust_binder: 2391: removing orphan mapping 0:24 [ 75.250869][ T2450] __vm_enough_memory: pid: 2450, comm: syz.3.679, bytes: 18014402804453376 not enough memory for the allocation [ 75.358677][ T36] audit: type=1326 audit(7022606685.239:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.681" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a1758ebe9 code=0x0 [ 75.405256][ T36] audit: type=1326 audit(7022606685.289:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a1758ebe9 code=0x0 [ 75.492992][ T63] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 75.662987][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 75.669314][ T63] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.679146][ T63] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 198, changing to 11 [ 75.702958][ T63] usb 1-1: config 1 interface 0 has no altsetting 0 [ 75.711155][ T63] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.40 [ 75.720297][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.732958][ T63] usb 1-1: Product: 䱺맦爑ꠉ븐跭즽ꨔᓥ덵廏 ะ㇭ᦢ娫諫郊딕䂕‘番梯ๆ㸲㶫뼀뢹㘀쇔䗶깮︢ՠ蝽儴달溜趞㜲罼氻૞缁⬀盏 [ 75.763726][ T63] usb 1-1: Manufacturer: 錷歨윲蔶뉞 [ 75.769434][ T63] usb 1-1: SerialNumber: 몾戕뼈㬛䣮揯꥗ⴾ뗻灖눣䅒컥⎼㹚㖼㕙곊蟴ʨ暿㞑ꬾ⾏ࡹ迾ﾱꉽ쟎ื㲆襂≘襽喦ꛧ葨蹚텢詻⑗퉉챯䳟ा蠝䙡诌睧ꈤꝼ鮷중ꋰ [ 75.862963][ T525] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 75.955799][ T2486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.965810][ T2486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.016591][ T2447] overlayfs: missing 'lowerdir' [ 76.028712][ T63] usbhid 1-1:1.0: can't add hid device: -71 [ 76.034698][ T525] usb 4-1: Using ep0 maxpacket: 32 [ 76.043031][ T63] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 76.056756][ T525] usb 4-1: config 134 has an invalid interface number: 144 but max is 2 [ 76.075413][ T63] usb 1-1: USB disconnect, device number 20 [ 76.081370][ T525] usb 4-1: config 134 contains an unexpected descriptor of type 0x2, skipping [ 76.100542][ T525] usb 4-1: config 134 has an invalid descriptor of length 1, skipping remainder of the config [ 76.114766][ T525] usb 4-1: config 134 has 1 interface, different from the descriptor's value: 3 [ 76.124259][ T525] usb 4-1: config 134 has no interface number 0 [ 76.132180][ T525] usb 4-1: config 134 interface 144 altsetting 64 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 76.143763][ T525] usb 4-1: config 134 interface 144 altsetting 64 endpoint 0x4 has invalid maxpacket 1120, setting to 64 [ 76.155182][ T525] usb 4-1: config 134 interface 144 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 76.166498][ T525] usb 4-1: config 134 interface 144 altsetting 64 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 76.181824][ T525] usb 4-1: config 134 interface 144 has no altsetting 0 [ 76.190422][ T525] usb 4-1: New USB device found, idVendor=0b05, idProduct=171f, bcdDevice=a0.b4 [ 76.200416][ T525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.208620][ T525] usb 4-1: Product: syz [ 76.213290][ T525] usb 4-1: Manufacturer: syz [ 76.218292][ T525] usb 4-1: SerialNumber: syz [ 76.608202][ T2498] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.613254][ T2498] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 76.621649][ T2498] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 76.629988][ T2498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:496 [ 76.717330][ T2502] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.356766][ T36] audit: type=1400 audit(7022606687.239:465): avc: denied { block_suspend } for pid=2514 comm="syz.1.695" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.835745][ T2521] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 77.843121][ T2521] rust_binder: 2520 RLIMIT_NICE not set [ 77.886199][ T2521] rust_binder: 2521 RLIMIT_NICE not set [ 77.900786][ T45] rust_binder: 2519: removing orphan mapping 0:112 [ 77.926691][ T45] rust_binder: 0: removing orphan mapping 112:1048 [ 78.069772][ T36] audit: type=1400 audit(7022606687.949:466): avc: denied { setopt } for pid=2529 comm="syz.0.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.302970][ T45] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 78.357436][ T525] usb 4-1: USB disconnect, device number 21 [ 78.479880][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 78.494305][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.502737][ T45] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 78.522149][ T45] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 78.542959][ T45] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 78.552029][ T45] usb 1-1: config 128 has no interface number 0 [ 78.558600][ T45] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 78.570023][ T45] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.580289][ T45] usb 1-1: config 128 interface 127 has no altsetting 0 [ 78.588879][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 78.598157][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.606337][ T45] usb 1-1: Product: syz [ 78.610565][ T45] usb 1-1: Manufacturer: syz [ 78.615515][ T45] usb 1-1: SerialNumber: syz [ 78.832980][ T45] usb 1-1: USB disconnect, device number 21 [ 78.857751][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.999571][ T2546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.008238][ T2546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.018186][ T2546] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.018339][ T2546] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 79.024923][ T2546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 79.033053][ T2546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:548 [ 79.502413][ T36] audit: type=1400 audit(7022606689.379:467): avc: denied { map } for pid=2555 comm="syz.1.710" path="socket:[20196]" dev="sockfs" ino=20196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 79.624381][ T36] audit: type=1400 audit(7022606689.499:468): avc: denied { setopt } for pid=2569 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.642155][ T2573] xt_NFQUEUE: number of total queues is 0 [ 79.827722][ T2581] 9pnet_fd: Insufficient options for proto=fd [ 79.898788][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.008057][ T2627] 9pnet_fd: Insufficient options for proto=fd [ 80.590818][ T36] audit: type=1400 audit(7022606690.459:469): avc: denied { accept } for pid=2640 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 81.502977][ T45] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 81.596828][ T2657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 81.605933][ T2657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.742'. [ 81.632960][ T45] usb 1-1: device descriptor read/64, error -71 [ 81.640245][ T2662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 81.649164][ T2662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 81.679058][ T2665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=2665 comm=syz.1.744 [ 81.882982][ T45] usb 1-1: device descriptor read/64, error -71 [ 81.922990][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.929126][ T426] Bluetooth: hci0: command 0x1003 tx timeout [ 82.106944][ T2679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2679 comm=syz.3.751 [ 82.120362][ T2679] rust_binder: Error while translating object. [ 82.120392][ T2679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.126623][ T2679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:461 [ 82.132988][ T45] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 82.136536][ T2679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 82.153250][ T2677] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 82.282977][ T45] usb 1-1: device descriptor read/64, error -71 [ 82.407684][ T2692] netlink: 'syz.2.756': attribute type 10 has an invalid length. [ 82.435841][ T36] audit: type=1400 audit(7022606692.319:470): avc: denied { mount } for pid=2693 comm="syz.2.757" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.533024][ T45] usb 1-1: device descriptor read/64, error -71 [ 82.643094][ T45] usb usb1-port1: attempt power cycle [ 82.710804][ T2696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.720606][ T2696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.789780][ T2701] rust_binder: Error while translating object. [ 82.789815][ T2701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.796047][ T2701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:467 [ 82.865331][ T2711] bpf: Bad value for 'gid' [ 82.982986][ T45] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 83.004215][ T45] usb 1-1: device descriptor read/8, error -71 [ 83.134104][ T45] usb 1-1: device descriptor read/8, error -71 [ 83.347132][ T36] audit: type=1400 audit(7022606693.229:471): avc: denied { lock } for pid=2728 comm="syz.2.769" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.356023][ T2729] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 83.371853][ T2729] rust_binder: Write failure EFAULT in pid:593 [ 83.380231][ T2729] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 83.386812][ T45] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 83.417051][ T2731] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 83.424970][ T2731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:595 [ 83.426811][ T45] usb 1-1: device descriptor read/8, error -71 [ 83.484241][ T36] audit: type=1400 audit(7022606693.369:472): avc: denied { mounton } for pid=2740 comm="syz.2.774" path="/208/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 83.568298][ T45] usb 1-1: device descriptor read/8, error -71 [ 83.668988][ T2754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.677868][ T2754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.686140][ T45] usb usb1-port1: unable to enumerate USB device [ 83.812999][ T63] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 83.832966][ T45] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 83.963011][ T45] usb 1-1: device descriptor read/64, error -71 [ 83.964181][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 83.980344][ T63] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.993213][ T63] usb 4-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 84.002275][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.011510][ T63] usb 4-1: config 0 descriptor?? [ 84.016943][ T2746] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 84.202972][ T45] usb 1-1: device descriptor read/64, error -71 [ 84.227495][ T63] wacom 0003:056A:0020.000F: Unknown device_type for 'HID 056a:0020'. Assuming pen. [ 84.243415][ T63] wacom 0003:056A:0020.000F: hidraw1: USB HID v1.01 Device [HID 056a:0020] on usb-dummy_hcd.3-1/input0 [ 84.252749][ T2777] fuse: Unknown parameter '00000000000000000000003000000000000000000000030000000000000000000018446744073709551615' [ 84.256874][ T63] input: Wacom Intuos 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0020.000F/input/input28 [ 84.434408][ T36] audit: type=1400 audit(7022606694.319:473): avc: denied { module_load } for pid=2788 comm="syz.0.791" path="/172/bus" dev="tmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 84.434511][ T2790] Invalid ELF header magic: != ELF [ 84.485092][ T63] usb 4-1: USB disconnect, device number 22 [ 84.657008][ T36] audit: type=1400 audit(7022606694.539:474): avc: denied { map } for pid=2810 comm="syz.3.796" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.706642][ T2813] 9p filesystem being mounted at /167/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 84.973449][ T45] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 85.093049][ T2823] rust_binder: Write failure EINVAL in pid:496 [ 85.093336][ T2823] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 85.108556][ T2823] rust_binder: Read failure Err(EAGAIN) in pid:496 [ 85.146366][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 85.168534][ T45] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.182120][ T2830] usb usb6: usbfs: process 2830 (syz.3.804) did not claim interface 0 before use [ 85.191320][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 85.199683][ T45] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 85.209176][ T2831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:503 [ 85.209437][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.227067][ T45] usb 1-1: Product: syz [ 85.231272][ T45] usb 1-1: Manufacturer: syz [ 85.236082][ T45] usb 1-1: SerialNumber: syz [ 85.450676][ T2797] netlink: 'syz.0.793': attribute type 29 has an invalid length. [ 85.460159][ T2797] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 85.480112][ T45] usbhid 1-1:1.0: can't add hid device: -71 [ 85.488286][ T45] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 85.513807][ T45] usb 1-1: USB disconnect, device number 27 [ 85.675454][ T2847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.685047][ T2847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.101124][ T2859] rust_binder: Error while translating object. [ 86.101176][ T2859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 86.107724][ T2859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:519 [ 86.153606][ T36] audit: type=1326 audit(7022606696.039:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.0.812" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe21958ebe9 code=0x0 [ 86.502961][ T45] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 86.526803][ T2881] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 86.534592][ T2881] netlink: 416 bytes leftover after parsing attributes in process `syz.1.820'. [ 86.652974][ T45] usb 4-1: device descriptor read/64, error -71 [ 86.892978][ T45] usb 4-1: device descriptor read/64, error -71 [ 86.908347][ T2902] overlayfs: failed to clone upperpath [ 86.914960][ T36] audit: type=1400 audit(7022606696.809:476): avc: denied { getopt } for pid=2901 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.990398][ T2907] fuse: Bad value for 'fd' [ 87.028631][ T2912] 9p filesystem being mounted at /254/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 87.064085][ T2916] 9p filesystem being mounted at /177/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 87.089070][ T2916] FAULT_INJECTION: forcing a failure. [ 87.089070][ T2916] name failslab, interval 1, probability 0, space 0, times 1 [ 87.103057][ T2916] CPU: 0 UID: 0 PID: 2916 Comm: syz.0.833 Not tainted syzkaller #0 9c3949e8c50b042e925ab8ad62694a1daa4311a1 [ 87.103091][ T2916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.103127][ T2916] Call Trace: [ 87.103133][ T2916] [ 87.103142][ T2916] __dump_stack+0x21/0x30 [ 87.103195][ T2916] dump_stack_lvl+0x10c/0x190 [ 87.103238][ T2916] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.103286][ T2916] dump_stack+0x19/0x20 [ 87.103313][ T2916] should_fail_ex+0x3d9/0x530 [ 87.103347][ T2916] should_failslab+0xac/0x100 [ 87.103370][ T2916] __kmalloc_cache_noprof+0x41/0x3c0 [ 87.103405][ T2916] ? alloc_pipe_info+0xfb/0x600 [ 87.103438][ T2916] alloc_pipe_info+0xfb/0x600 [ 87.103478][ T2916] splice_direct_to_actor+0x96d/0xbc0 [ 87.103506][ T2916] ? kstrtouint+0x78/0xf0 [ 87.103537][ T2916] ? kstrtouint_from_user+0xfb/0x150 [ 87.103568][ T2916] ? __x64_sys_openat+0x13a/0x170 [ 87.103597][ T2916] ? x64_sys_call+0xe69/0x2ee0 [ 87.103629][ T2916] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 87.103663][ T2916] ? selinux_file_permission+0x309/0xb30 [ 87.103690][ T2916] ? avc_policy_seqno+0xd/0x30 [ 87.103720][ T2916] ? __cfi_direct_splice_actor+0x10/0x10 [ 87.103746][ T2916] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 87.103775][ T2916] do_splice_direct+0x182/0x270 [ 87.103801][ T2916] ? __cfi_do_splice_direct+0x10/0x10 [ 87.103827][ T2916] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 87.103857][ T2916] ? security_file_permission+0x2e/0xc0 [ 87.103883][ T2916] ? rw_verify_area+0xac/0x230 [ 87.103918][ T2916] do_sendfile+0x5c8/0xfb0 [ 87.103946][ T2916] ? vfs_writev+0xcf0/0xcf0 [ 87.103972][ T2916] ? __kasan_check_write+0x18/0x20 [ 87.104007][ T2916] ? ksys_write+0x1ef/0x250 [ 87.104028][ T2916] __x64_sys_sendfile64+0x193/0x1f0 [ 87.104055][ T2916] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 87.104081][ T2916] ? __kasan_check_read+0x15/0x20 [ 87.104114][ T2916] x64_sys_call+0xa26/0x2ee0 [ 87.104147][ T2916] do_syscall_64+0x58/0xf0 [ 87.104175][ T2916] ? clear_bhb_loop+0x50/0xa0 [ 87.104198][ T2916] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.104233][ T2916] RIP: 0033:0x7fe21958ebe9 [ 87.104252][ T2916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.104273][ T2916] RSP: 002b:00007fe21a3dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 87.104310][ T2916] RAX: ffffffffffffffda RBX: 00007fe2197b5fa0 RCX: 00007fe21958ebe9 [ 87.104328][ T2916] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000009 [ 87.104342][ T2916] RBP: 00007fe21a3dc090 R08: 0000000000000000 R09: 0000000000000000 [ 87.104358][ T2916] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.104373][ T2916] R13: 00007fe2197b6038 R14: 00007fe2197b5fa0 R15: 00007ffd8706c8e8 [ 87.104393][ T2916] [ 87.133022][ T45] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 87.175195][ T2922] 9pnet_fd: Insufficient options for proto=fd [ 87.201759][ T2924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.220691][ T2926] netlink: 'syz.1.838': attribute type 58 has an invalid length. [ 87.226689][ T2924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.436991][ T2924] process 'syz.2.837' launched './file1' with NULL argv: empty string added [ 87.446294][ T36] audit: type=1400 audit(7022606697.329:477): avc: denied { execute_no_trans } for pid=2923 comm="syz.2.837" path="/220/file1" dev="tmpfs" ino=1217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.453291][ T2929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.493000][ T45] usb 4-1: device descriptor read/64, error -71 [ 87.703025][ T63] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 87.743031][ T45] usb 4-1: device descriptor read/64, error -71 [ 87.853109][ T45] usb usb4-port1: attempt power cycle [ 87.854223][ T63] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.870056][ T63] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 87.879157][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.887219][ T63] usb 1-1: Product: syz [ 87.891442][ T63] usb 1-1: Manufacturer: syz [ 87.896071][ T63] usb 1-1: SerialNumber: syz [ 87.901208][ T63] usb 1-1: config 0 descriptor?? [ 87.906972][ T63] hub 1-1:0.0: bad descriptor, ignoring hub [ 87.913028][ T63] hub 1-1:0.0: probe with driver hub failed with error -5 [ 87.921951][ T63] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 87.938061][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.967649][ T2931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.976213][ T2931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.109162][ T2929] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 88.109187][ T2929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 88.117380][ T2929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:554 [ 88.203063][ T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 88.233105][ T31] usb 1-1: USB disconnect, device number 28 [ 88.240121][ T45] usb 4-1: device descriptor read/8, error -71 [ 88.374105][ T45] usb 4-1: device descriptor read/8, error -71 [ 88.549916][ T2937] 9p filesystem being mounted at /223/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 88.605606][ T2939] fuse: Unknown parameter '000000000000000000000x0000000000000005' [ 88.623037][ T45] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 88.644738][ T2941] 9p filesystem being mounted at /179/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 88.662485][ T2941] FAULT_INJECTION: forcing a failure. [ 88.662485][ T2941] name failslab, interval 1, probability 0, space 0, times 0 [ 88.675176][ T2941] CPU: 0 UID: 0 PID: 2941 Comm: syz.0.844 Not tainted syzkaller #0 9c3949e8c50b042e925ab8ad62694a1daa4311a1 [ 88.675210][ T2941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.675225][ T2941] Call Trace: [ 88.675232][ T2941] [ 88.675241][ T2941] __dump_stack+0x21/0x30 [ 88.675275][ T2941] dump_stack_lvl+0x10c/0x190 [ 88.675306][ T2941] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.675338][ T2941] dump_stack+0x19/0x20 [ 88.675367][ T2941] should_fail_ex+0x3d9/0x530 [ 88.675402][ T2941] should_failslab+0xac/0x100 [ 88.675426][ T2941] __kmalloc_noprof+0x69/0x450 [ 88.675458][ T2941] ? alloc_pipe_info+0x218/0x600 [ 88.675491][ T2941] alloc_pipe_info+0x218/0x600 [ 88.675524][ T2941] splice_direct_to_actor+0x96d/0xbc0 [ 88.675551][ T2941] ? kstrtouint+0x78/0xf0 [ 88.675582][ T2941] ? kstrtouint_from_user+0xfb/0x150 [ 88.675613][ T2941] ? __x64_sys_openat+0x13a/0x170 [ 88.675642][ T2941] ? x64_sys_call+0xe69/0x2ee0 [ 88.675675][ T2941] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 88.675709][ T2941] ? selinux_file_permission+0x309/0xb30 [ 88.675735][ T2941] ? avc_policy_seqno+0xd/0x30 [ 88.675763][ T2941] ? __cfi_direct_splice_actor+0x10/0x10 [ 88.675790][ T2941] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 88.675819][ T2941] do_splice_direct+0x182/0x270 [ 88.675847][ T2941] ? __cfi_do_splice_direct+0x10/0x10 [ 88.675874][ T2941] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 88.675903][ T2941] ? security_file_permission+0x2e/0xc0 [ 88.675929][ T2941] ? rw_verify_area+0xac/0x230 [ 88.675964][ T2941] do_sendfile+0x5c8/0xfb0 [ 88.675992][ T2941] ? vfs_writev+0xcf0/0xcf0 [ 88.676019][ T2941] ? __kasan_check_write+0x18/0x20 [ 88.676074][ T2941] ? ksys_write+0x1ef/0x250 [ 88.676094][ T2941] __x64_sys_sendfile64+0x193/0x1f0 [ 88.676126][ T2941] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 88.676155][ T2941] ? __kasan_check_read+0x15/0x20 [ 88.676194][ T2941] x64_sys_call+0xa26/0x2ee0 [ 88.676235][ T2941] do_syscall_64+0x58/0xf0 [ 88.676265][ T2941] ? clear_bhb_loop+0x50/0xa0 [ 88.676291][ T2941] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.676324][ T2941] RIP: 0033:0x7fe21958ebe9 [ 88.676343][ T2941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.676364][ T2941] RSP: 002b:00007fe21a3dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 88.676388][ T2941] RAX: ffffffffffffffda RBX: 00007fe2197b5fa0 RCX: 00007fe21958ebe9 [ 88.676406][ T2941] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000009 [ 88.676419][ T2941] RBP: 00007fe21a3dc090 R08: 0000000000000000 R09: 0000000000000000 [ 88.676434][ T2941] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.676449][ T2941] R13: 00007fe2197b6038 R14: 00007fe2197b5fa0 R15: 00007ffd8706c8e8 [ 88.676469][ T2941] [ 88.676530][ T45] usb 4-1: device descriptor read/8, error -71 [ 89.084043][ T45] usb 4-1: device descriptor read/8, error -71 [ 89.147184][ T2961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.205211][ T45] usb usb4-port1: unable to enumerate USB device [ 89.209663][ T2961] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 89.218548][ T2961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 89.226743][ T2961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:566 [ 89.308606][ T2964] 9p filesystem being mounted at /180/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 89.334834][ T2964] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 89.347505][ T2964] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 89.355949][ T2964] CPU: 0 UID: 0 PID: 2964 Comm: syz.3.852 Not tainted syzkaller #0 9c3949e8c50b042e925ab8ad62694a1daa4311a1 [ 89.367466][ T2964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.377578][ T2964] RIP: 0010:iter_file_splice_write+0xa44/0x1100 [ 89.382421][ T2966] 9p filesystem being mounted at /184/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 89.383890][ T2964] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 61 cc e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 3d cc e6 ff 4c 8b 1b 48 8b 3c 24 [ 89.383940][ T2964] RSP: 0018:ffffc9000babf820 EFLAGS: 00010202 [ 89.383964][ T2964] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 000000000007b680 [ 89.396757][ T2966] FAULT_INJECTION: forcing a failure. [ 89.396757][ T2966] name failslab, interval 1, probability 0, space 0, times 0 [ 89.413814][ T2964] RDX: ffffc90001eb3000 RSI: 0000000000000000 RDI: 7ffffffffffff94d [ 89.413841][ T2964] RBP: ffffc9000babfa40 R08: 0000000000003db5 R09: 0000000000400000 [ 89.413860][ T2964] R10: 000000000007b6a8 R11: 0000000000000fd8 R12: dffffc0000000000 [ 89.413878][ T2964] R13: 7ffffffffffff94d R14: ffff8881182ee838 R15: ffff8881182ee828 [ 89.420027][ T2966] CPU: 1 UID: 0 PID: 2966 Comm: syz.0.853 Not tainted syzkaller #0 9c3949e8c50b042e925ab8ad62694a1daa4311a1 [ 89.420066][ T2966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.420084][ T2966] Call Trace: [ 89.420093][ T2966] [ 89.420104][ T2966] __dump_stack+0x21/0x30 [ 89.420145][ T2966] dump_stack_lvl+0x10c/0x190 [ 89.420178][ T2966] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.420213][ T2966] ? splice_direct_to_actor+0x96d/0xbc0 [ 89.420243][ T2966] ? do_sendfile+0x5c8/0xfb0 [ 89.420272][ T2966] ? __x64_sys_sendfile64+0x193/0x1f0 [ 89.420300][ T2966] ? x64_sys_call+0xa26/0x2ee0 [ 89.420336][ T2966] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.420376][ T2966] dump_stack+0x19/0x20 [ 89.420409][ T2966] should_fail_ex+0x3d9/0x530 [ 89.420446][ T2966] should_failslab+0xac/0x100 [ 89.420474][ T2966] __kmalloc_noprof+0x69/0x450 [ 89.420510][ T2966] ? copy_splice_read+0x171/0xaf0 [ 89.420540][ T2966] copy_splice_read+0x171/0xaf0 [ 89.420571][ T2966] ? __cfi_copy_splice_read+0x10/0x10 [ 89.420602][ T2966] ? __mutex_init+0xa6/0x1a0 [ 89.420632][ T2966] ? alloc_pipe_info+0x362/0x600 [ 89.420668][ T2966] ? __cfi_copy_splice_read+0x10/0x10 [ 89.420698][ T2966] splice_direct_to_actor+0x404/0xbc0 [ 89.420731][ T2966] ? __cfi_direct_splice_actor+0x10/0x10 [ 89.420773][ T2966] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 89.420816][ T2966] do_splice_direct+0x182/0x270 [ 89.420844][ T2966] ? __cfi_do_splice_direct+0x10/0x10 [ 89.420870][ T2966] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 89.420898][ T2966] ? security_file_permission+0x2e/0xc0 [ 89.420923][ T2966] ? rw_verify_area+0xac/0x230 [ 89.420959][ T2966] do_sendfile+0x5c8/0xfb0 [ 89.420994][ T2966] ? vfs_writev+0xcf0/0xcf0 [ 89.421019][ T2966] ? __kasan_check_write+0x18/0x20 [ 89.421052][ T2966] ? ksys_write+0x1ef/0x250 [ 89.421072][ T2966] __x64_sys_sendfile64+0x193/0x1f0 [ 89.421097][ T2966] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 89.421124][ T2966] ? __kasan_check_read+0x15/0x20 [ 89.421166][ T2966] x64_sys_call+0xa26/0x2ee0 [ 89.421199][ T2966] do_syscall_64+0x58/0xf0 [ 89.421225][ T2966] ? clear_bhb_loop+0x50/0xa0 [ 89.421246][ T2966] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.421279][ T2966] RIP: 0033:0x7fe21958ebe9 [ 89.421298][ T2966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.421317][ T2966] RSP: 002b:00007fe21a3dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 89.421342][ T2966] RAX: ffffffffffffffda RBX: 00007fe2197b5fa0 RCX: 00007fe21958ebe9 [ 89.421360][ T2966] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000009 [ 89.421375][ T2966] RBP: 00007fe21a3dc090 R08: 0000000000000000 R09: 0000000000000000 [ 89.421390][ T2966] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.421405][ T2966] R13: 00007fe2197b6038 R14: 00007fe2197b5fa0 R15: 00007ffd8706c8e8 [ 89.421427][ T2966] [ 89.726190][ T36] audit: type=1400 audit(7022606699.609:478): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 89.726511][ T2964] FS: 00007f8a184c46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 89.738779][ T36] audit: type=1400 audit(7022606699.609:479): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.742472][ T2964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.750705][ T36] audit: type=1400 audit(7022606699.609:480): avc: denied { write search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.758590][ T2964] CR2: 0000001b2f9ee000 CR3: 0000000116b3e000 CR4: 00000000003526b0 [ 89.758617][ T2964] Call Trace: [ 89.758626][ T2964] [ 89.761782][ T36] audit: type=1400 audit(7022606699.609:481): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.783420][ T2964] ? __cfi_iter_file_splice_write+0x10/0x10 [ 89.783463][ T2964] ? __cfi_iter_file_splice_write+0x10/0x10 [ 89.783492][ T2964] direct_splice_actor+0x276/0x4b0 [ 89.783522][ T2964] splice_direct_to_actor+0x4fe/0xbc0 [ 89.783553][ T2964] ? __cfi_direct_splice_actor+0x10/0x10 [ 89.783582][ T2964] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 89.783614][ T2964] do_splice_direct+0x182/0x270 [ 89.783643][ T2964] ? __cfi_do_splice_direct+0x10/0x10 [ 89.783673][ T2964] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 89.783705][ T2964] ? security_file_permission+0x2e/0xc0 [ 89.783732][ T2964] ? rw_verify_area+0xac/0x230 [ 89.783768][ T2964] do_sendfile+0x5c8/0xfb0 [ 89.793834][ T36] audit: type=1400 audit(7022606699.609:482): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.813993][ T2964] ? vfs_writev+0xcf0/0xcf0 [ 89.814030][ T2964] ? __se_sys_futex+0x28f/0x300 [ 89.820891][ T36] audit: type=1400 audit(7022606699.609:483): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.842440][ T2964] __x64_sys_sendfile64+0x193/0x1f0 [ 89.842479][ T2964] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 89.850885][ T36] audit: type=1400 audit(7022606699.609:484): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.853756][ T2964] ? switch_fpu_return+0x12/0x20 [ 90.032949][ T2964] x64_sys_call+0xa26/0x2ee0 [ 90.037551][ T2964] do_syscall_64+0x58/0xf0 [ 90.041964][ T2964] ? clear_bhb_loop+0x50/0xa0 [ 90.046638][ T2964] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.052570][ T2964] RIP: 0033:0x7f8a1758ebe9 [ 90.056986][ T2964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.076586][ T2964] RSP: 002b:00007f8a184c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 90.084990][ T2964] RAX: ffffffffffffffda RBX: 00007f8a177b5fa0 RCX: 00007f8a1758ebe9 [ 90.092970][ T2964] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000009 [ 90.100949][ T2964] RBP: 00007f8a17611e19 R08: 0000000000000000 R09: 0000000000000000 [ 90.108920][ T2964] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.116904][ T2964] R13: 00007f8a177b6038 R14: 00007f8a177b5fa0 R15: 00007ffc932cdaf8 [ 90.124901][ T2964] [ 90.127913][ T2964] Modules linked in: [ 90.132534][ T2964] ---[ end trace 0000000000000000 ]--- [ 90.138850][ T2964] RIP: 0010:iter_file_splice_write+0xa44/0x1100 [ 90.145202][ T2964] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 61 cc e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 3d cc e6 ff 4c 8b 1b 48 8b 3c 24 [ 90.164951][ T2964] RSP: 0018:ffffc9000babf820 EFLAGS: 00010202 [ 90.171065][ T2964] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 000000000007b680 [ 90.179108][ T2964] RDX: ffffc90001eb3000 RSI: 0000000000000000 RDI: 7ffffffffffff94d [ 90.187208][ T2964] RBP: ffffc9000babfa40 R08: 0000000000003db5 R09: 0000000000400000 [ 90.195434][ T2964] R10: 000000000007b6a8 R11: 0000000000000fd8 R12: dffffc0000000000 [ 90.203593][ T2964] R13: 7ffffffffffff94d R14: ffff8881182ee838 R15: ffff8881182ee828 [ 90.214261][ T2964] FS: 00007f8a184c46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 90.223396][ T2964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.230076][ T2964] CR2: 00007fe21a3dbf98 CR3: 0000000116b3e000 CR4: 00000000003526b0 [ 90.242284][ T2964] DR0: 0000000001400000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.250371][ T2964] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 90.258457][ T2964] Kernel panic - not syncing: Fatal exception [ 90.264870][ T2964] Kernel Offset: disabled [ 90.269200][ T2964] Rebooting in 86400 seconds..