last executing test programs: 1m27.34987198s ago: executing program 1 (id=508): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x101000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r2, 0x147a5000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f0000000000)=@attr_pmu_init) 1m27.262577477s ago: executing program 1 (id=509): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0xdfc, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000380)="cebdd21fe03e57c125bd9c3965b579407c9962373117b122c45bf84c98a973ecb6b9ad663b6a07bdfb5c17a5a2cd48dc09da2f20c69872e6399874332704872ec2a432d22928522671038af0783ef06a2f8ef5bf4c1852cc25f1ab39b7c146d2cb25084504d5606202f98d0b03dc", 0x6e}, {0x0}, {&(0x7f0000000580)="43b6624bcf70a4c826371a24e33c4d2bae5d7babbfb1ba2c6ecf970f9def87320ccb4fbbb31e12d8fd21d656ef864f17c24210eac6248dd40efb9b0ac8da179915840a5c9d2f213d47a7367669a3870626413286b92bd7b51f2b4f99eec1b6ff81751fb805f86ea434a7531f3c9878bdc2cadebaba4621", 0x77}, {&(0x7f00000002c0)="518d090c62a0a9a11ff26593bd52165b011c0e9f6c2c05550d880894aea3fd3718de3675e1f30ffff0ff511d8b6a90c94d442c509c6a01f65cad16374ea2e62749579d", 0x43}, {&(0x7f00000001c0)="9f189b8d5e6ee068cce816de05698d4fe01cdb8e875eefe3db5e153722b1745423f726b35f80b980f8a7e6cab9983bc947924f6d30813d0899d80c2cb6a3cb80a16f14c194157b98c823780ea180f5f304f5694e0b90569c14c118c5896396f9c79d867b5026d66ae9eda462f1233702f941cf239ec1bfe8c9ca3c5faa4c0efa368def9717a2da7e0cde5146db635972858964020d656353a476e01071bc9367c8ab8ee6b5ff6cd25be88a2326b81df502c8b117250afb4a1b9f205eac48359e3c4323ff3e32f2be7c235dfb3613995f704263f6085512d9e267d49f43cb", 0xde}, {&(0x7f00000008c0)="aa27de4a8cfe6fc7fd36ac634de0b7dce04f6ce3e3d452f1c75502b2cbb29fa999d2a372e83819556e792a18e17c128a1ee3a593fbac892cbb42575f483fe523c9abe644830816977ccba1f493bdfa33d63b1dbfd5dde8b03dfa6162f0849ad9823f4e302f12d77cefff93dae1d25662ce8cfe9cdf57a066565ea4a78f8b0e0379110f8d424740bb27839ccc87e687adf0d23ac64ce9c971e0d3eec711e7d49d051cb97526f79fe31b00421399b4101c763b33224a71d2e0b64c02374fc4f0ebc5fdb156e3b8716cba396ad951a983a24404dddcc37b8b5d32e138185df4c6326f8e9c5e4e5c2088c513", 0xea}, {&(0x7f00000009c0)="d650774632b71a34a88292fcf26ad63f611e11baa9b64a99773dd6fbfe12178987d7b005129705e9d23da9376d714ea8cadc0d1b4f2d7fc2e73242b432015e5e298fd6e2161beacaa75ecb41f6aa8cca9a50239a518873cc1eef5ffcc67226fd", 0x60}], 0x7}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000f00)='2', 0x1}], 0x1}}], 0x2, 0x40) 1m27.201563372s ago: executing program 1 (id=511): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10b, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) syslog(0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)=[@enter_looper, @request_death], 0x50, 0x0, &(0x7f0000000580)="05de66730879c09a3dad5fda5a11568bd6fdffdb8a6c55bad3ce0e7d04883d574b211f9860bc1a93ac458aca9afb423d03bb15483d60c14ac6fee5f3fae5d384e42707be029a067801fd291926efc34a"}) accept$inet6(r2, 0x0, &(0x7f00000000c0)) 1m27.113347459s ago: executing program 1 (id=513): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) 1m27.026868876s ago: executing program 1 (id=514): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, 0x0, 0x804c090) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 1m26.934493674s ago: executing program 1 (id=516): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), 0x1) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000040)={0x48c11400, {{0xa, 0x4e22, 0x2, @empty, 0x6}}}, 0x88) close_range(r1, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0xe, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r3) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r5, 0x300, 0x893, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40020) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x7) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000600)=0x2, 0x4) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x2) r8 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x2000009, 0x89130, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000640)="a336a608a805a53bcd4201906dfdda074cd7f49e0e285fc4a2b0661ed3f55ae6bea55670d1da9a11575216cd9aa424ae0fbacfe27d3c6280e5ad8bde17c1ded3aa2785e7bd7baf30", 0x0, 0x48) fgetxattr(0xffffffffffffffff, &(0x7f00000006c0)=@random={'security.', '\'\x00'}, &(0x7f0000000700)=""/220, 0xdc) r9 = creat(&(0x7f0000000880)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f00000009c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, &(0x7f0000000a00)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@mmap}, {@version_L}, {@afid={'afid', 0x3d, 0x5}}, {@cachetag={'cachetag', 0x3d, ')^*'}}, {@dfltuid={'dfltuid', 0x3d, r10}}, {@cache_fscache}], [{@uid_lt={'uid<', r3}}, {@dont_measure}]}}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000b00)="44f3f64dbf66e457853013f52c0f3574be96c017fac572bc4427f2c3db3e1dfd0d68dc30527d4c9a7ce677ef1fed3d454b75279226fc978c34165ee0845fed815ce3c22943f7f820", 0x0, 0x48) mknodat$loop(r9, &(0x7f0000000b80)='./file1\x00', 0x800, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000bc0)="5da8ee6b55d6b0566e8bc92504183c475509bc4a4f3782b12169af6e50e0981dd33e3b4b197c6462249ea54a96065cd303fc9013e7bf913cd8c1bec68cbc16854e290bdee4914a36", 0x0, 0x48) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x8c, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x10}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x310}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x394}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5137}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}]]}, 0x8c}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x8, 0x20000000, 0x1, 0x5, 0x7, 0x5, 0x0, 0x0, 0x80, 0x100}}, 0x50) 1m11.33177517s ago: executing program 32 (id=516): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), 0x1) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000040)={0x48c11400, {{0xa, 0x4e22, 0x2, @empty, 0x6}}}, 0x88) close_range(r1, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0xe, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r3) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r5, 0x300, 0x893, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40020) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x7) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000600)=0x2, 0x4) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x2) r8 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x2000009, 0x89130, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000640)="a336a608a805a53bcd4201906dfdda074cd7f49e0e285fc4a2b0661ed3f55ae6bea55670d1da9a11575216cd9aa424ae0fbacfe27d3c6280e5ad8bde17c1ded3aa2785e7bd7baf30", 0x0, 0x48) fgetxattr(0xffffffffffffffff, &(0x7f00000006c0)=@random={'security.', '\'\x00'}, &(0x7f0000000700)=""/220, 0xdc) r9 = creat(&(0x7f0000000880)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f00000009c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, &(0x7f0000000a00)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@mmap}, {@version_L}, {@afid={'afid', 0x3d, 0x5}}, {@cachetag={'cachetag', 0x3d, ')^*'}}, {@dfltuid={'dfltuid', 0x3d, r10}}, {@cache_fscache}], [{@uid_lt={'uid<', r3}}, {@dont_measure}]}}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000b00)="44f3f64dbf66e457853013f52c0f3574be96c017fac572bc4427f2c3db3e1dfd0d68dc30527d4c9a7ce677ef1fed3d454b75279226fc978c34165ee0845fed815ce3c22943f7f820", 0x0, 0x48) mknodat$loop(r9, &(0x7f0000000b80)='./file1\x00', 0x800, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000bc0)="5da8ee6b55d6b0566e8bc92504183c475509bc4a4f3782b12169af6e50e0981dd33e3b4b197c6462249ea54a96065cd303fc9013e7bf913cd8c1bec68cbc16854e290bdee4914a36", 0x0, 0x48) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x8c, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x10}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x310}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x394}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5137}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}]]}, 0x8c}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x8, 0x20000000, 0x1, 0x5, 0x7, 0x5, 0x0, 0x0, 0x80, 0x100}}, 0x50) 2.349501789s ago: executing program 0 (id=1469): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}], [], 0x6b}}) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 2.246777087s ago: executing program 0 (id=1474): madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb) 2.142344826s ago: executing program 0 (id=1476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000001c0)="f22e268f426df30fc7f96626dcdf66baf80cb8f426338aef66bafc0c66ed0f79a9b6000000b9800000c00f3235002000000f300f206466bad104b0faee0f01c8b9a80800000f32", 0x47}], 0x1, 0x30, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.634986937s ago: executing program 3 (id=1481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0xa}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x122, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x110, 0x2, 0x1, 0x93, 0xa0, 0xb4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "c1"}, {0x5, 0x24, 0x0, 0x977}, {0xd, 0x24, 0xf, 0x1, 0x200, 0xf8, 0x6, 0x5}, {0x6, 0x24, 0x1a, 0x2, 0x655f34a780b2ca1f}, [@mdlm_detail={0xac, 0x24, 0x13, 0xcd, "d731d8fafaa3e4c468880ba10a86ff23f365e20dd20685dcb409bdb6ce74ecddfe59b598ff7f829d3c734a8d1f02643e85232af319d8ec9140a302dacac6596301875b2a373f6fafac9347abd4363653857737f736037604c7f7a8c843242478e4b011f7d4fc3faa389cbecbd4b432db6728157f65e182d7a9424240d9ddb73dcf389a63559f80bb375b125db751a7631f2ecd62e664d802bb40c668a191c00ea7683e3d0b4d6904"}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x5, 0x7, 0xd9}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x10, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3, 0xb8}}}}}}}]}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.007099888s ago: executing program 3 (id=1484): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) 966.427561ms ago: executing program 0 (id=1486): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) close(r0) 866.926039ms ago: executing program 0 (id=1488): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f00000003c0)={0x33, 0x1, 0x10004}) io_setup(0x1, &(0x7f00000001c0)=0x0) io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={[0xff9]}, 0x8}) 755.006408ms ago: executing program 0 (id=1491): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x1) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) open$dir(&(0x7f0000000100)='./file0\x00', 0x40000, 0x20) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r2}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) 644.525398ms ago: executing program 2 (id=1494): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x200c008, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x1, 0x48cd, 0xfffffffffffffffc, 0x800000df}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) fchown(r1, 0xee01, 0x0) 542.941806ms ago: executing program 2 (id=1495): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "c801beb100000047", "f8f26ae06508255f4c930e80aedcd08e", "6d81108a", "c440238952152069"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "9b00", "25110528444d684ad9c60100000000000100dd3600", "5cb6d254", "160000009a00"}, 0xba3f6f2771eade19) 542.745576ms ago: executing program 4 (id=1496): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 516.118128ms ago: executing program 4 (id=1497): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) 489.33633ms ago: executing program 2 (id=1498): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f0000001300)={'nr0\x00'}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000400000014000500fc0100000000000000000000ad0000010800020005000000140007"], 0x4c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) 423.050276ms ago: executing program 4 (id=1499): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 411.892017ms ago: executing program 4 (id=1500): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) 410.904436ms ago: executing program 2 (id=1501): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="340200001900010000000000ffdbdf25200100000000000000000000000000027f00000100000000000000000000000000000000000000000a0000a0"], 0x234}}, 0x0) 323.044704ms ago: executing program 3 (id=1502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r1, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 322.353024ms ago: executing program 2 (id=1510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x80000}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 287.157427ms ago: executing program 4 (id=1503): socket$inet6(0xa, 0x800000000000002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYBLOB="0a01"]) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f0000000580)='./file0/../file0/file0\x00', 0x0) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x2) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x400, 0x0) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x1, 0x1, 0xfffffdfffffffff1, 0x0, 0x9, 0xbd, {0x6, 0xfff, 0x3, 0x6, 0xe3, 0x100000000000008, 0x80000000, 0x4, 0x6, 0x1000, 0x7fffffff, r6, 0x0, 0x40, 0xcc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x80000000000000a, 0x2, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x10800, 0x0) 222.477002ms ago: executing program 2 (id=1504): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a010203010902"], 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 189.850384ms ago: executing program 3 (id=1505): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x3c, r0, 0x801, 0x8e, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x3c}}, 0x20000000) 62.885675ms ago: executing program 3 (id=1506): setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040), 0x0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x401870cb, &(0x7f0000000040)) 11.920089ms ago: executing program 4 (id=1507): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) getsockname(r1, 0x0, 0x0) 0s ago: executing program 3 (id=1508): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) kernel console output (not intermixed with test programs): ][ T1791] SELinux: failed to load policy [ 62.389971][ T1794] netlink: 168 bytes leftover after parsing attributes in process `syz.0.498'. [ 62.742273][ T781] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 62.750157][ T781] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input7 [ 62.751872][ T568] usb 4-1: USB disconnect, device number 5 [ 62.773530][ T781] usb 2-1: USB disconnect, device number 13 [ 63.274230][ T1816] netlink: 168 bytes leftover after parsing attributes in process `syz.1.507'. [ 63.321392][ T781] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 63.481386][ T781] usb 4-1: Using ep0 maxpacket: 8 [ 63.495560][ T781] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 63.506055][ T781] usb 4-1: config 179 has no interface number 0 [ 63.517859][ T781] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 63.541373][ T781] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 63.562487][ T781] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 63.581405][ T781] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 63.601439][ T781] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 63.629272][ T781] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 63.651263][ T781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.664201][ T1813] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 63.882248][ T1813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.908665][ T1842] netlink: 168 bytes leftover after parsing attributes in process `syz.0.517'. [ 63.918681][ T1813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.352527][ T1856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.359776][ T1856] IPv6: NLM_F_CREATE should be set when creating new route [ 64.367025][ T1856] IPv6: NLM_F_CREATE should be set when creating new route [ 64.683452][ T1864] rust_binder: Error while translating object. [ 64.683501][ T1864] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.689703][ T1864] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:392 [ 64.742621][ T1866] netlink: 1632 bytes leftover after parsing attributes in process `syz.0.527'. [ 64.852407][ T1869] netlink: 168 bytes leftover after parsing attributes in process `syz.0.528'. [ 65.233375][ T1886] rust_binder: pid 1886 performed invalid decrement on ref [ 66.138370][ T9] usb 4-1: USB disconnect, device number 6 [ 66.138415][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 66.152939][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 66.277883][ T1897] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 66.291633][ T1899] netlink: 168 bytes leftover after parsing attributes in process `syz.2.540'. [ 66.294351][ T1897] SELinux: failed to load policy [ 66.511672][ T1909] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.536147][ T36] kauditd_printk_skb: 455 callbacks suppressed [ 66.536165][ T36] audit: type=1400 audit(1755836412.009:3001): avc: denied { read } for pid=1912 comm="syz.2.547" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.571411][ T36] audit: type=1400 audit(1755836412.009:3002): avc: denied { read open } for pid=1912 comm="syz.2.547" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.596663][ T36] audit: type=1400 audit(1755836412.009:3003): avc: denied { ioctl } for pid=1912 comm="syz.2.547" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.625868][ T36] audit: type=1400 audit(1755836412.009:3004): avc: denied { set_context_mgr } for pid=1912 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 66.645680][ T36] audit: type=1400 audit(1755836412.019:3005): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.669704][ T36] audit: type=1400 audit(1755836412.019:3006): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.694599][ T36] audit: type=1400 audit(1755836412.019:3007): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.720170][ T36] audit: type=1400 audit(1755836412.019:3008): avc: denied { map } for pid=1908 comm="syz.3.545" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.743835][ T36] audit: type=1400 audit(1755836412.019:3009): avc: denied { read } for pid=1908 comm="syz.3.545" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.767923][ T36] audit: type=1400 audit(1755836412.019:3010): avc: denied { create } for pid=1908 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.961677][ T1929] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 66.970052][ T1929] SELinux: failed to load policy [ 67.097074][ T1937] netlink: 168 bytes leftover after parsing attributes in process `syz.2.555'. [ 67.169726][ T1942] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 67.177706][ T1942] netlink: 156 bytes leftover after parsing attributes in process `syz.2.558'. [ 67.187785][ T1942] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 67.202136][ T1942] syz.2.558 uses obsolete (PF_INET,SOCK_PACKET) [ 67.245321][ T1945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 67.597157][ T1966] rust_binder: Error while translating object. [ 67.597192][ T1966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.603444][ T1966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:394 [ 67.719582][ T1978] rust_binder: Write failure EFAULT in pid:406 [ 69.851509][ T2073] rust_binder: 2070 RLIMIT_NICE not set [ 69.900021][ T2079] @: renamed from vlan0 (while UP) [ 69.938659][ T2078] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.939758][ T2078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:470 [ 70.064907][ T2084] FAULT_INJECTION: forcing a failure. [ 70.064907][ T2084] name failslab, interval 1, probability 0, space 0, times 1 [ 70.110077][ T2084] CPU: 0 UID: 0 PID: 2084 Comm: syz.0.609 Not tainted syzkaller #0 00ad55236d4531c7fb9f608a968d4071287717d4 [ 70.110112][ T2084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.110128][ T2084] Call Trace: [ 70.110134][ T2084] [ 70.110142][ T2084] __dump_stack+0x21/0x30 [ 70.110171][ T2084] dump_stack_lvl+0x10c/0x190 [ 70.110194][ T2084] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.110219][ T2084] ? kstrtouint_from_user+0xfb/0x150 [ 70.110246][ T2084] ? x64_sys_call+0xe69/0x2ee0 [ 70.110278][ T2084] dump_stack+0x19/0x20 [ 70.110300][ T2084] should_fail_ex+0x3d9/0x530 [ 70.110327][ T2084] should_failslab+0xac/0x100 [ 70.110347][ T2084] __kmalloc_noprof+0x69/0x450 [ 70.110373][ T2084] ? __kasan_check_write+0x18/0x20 [ 70.110398][ T2084] ? kernfs_fop_write_iter+0x16f/0x4d0 [ 70.110421][ T2084] ? proc_fail_nth_write+0x17e/0x210 [ 70.110445][ T2084] kernfs_fop_write_iter+0x16f/0x4d0 [ 70.110467][ T2084] vfs_write+0x697/0xe80 [ 70.110484][ T2084] ? __cfi_kernfs_fop_write_iter+0x10/0x10 [ 70.110505][ T2084] ? __cfi_vfs_write+0x10/0x10 [ 70.110522][ T2084] ? __cfi_mutex_lock+0x10/0x10 [ 70.110550][ T2084] ksys_write+0x141/0x250 [ 70.110567][ T2084] ? __cfi_ksys_write+0x10/0x10 [ 70.110585][ T2084] ? __kasan_check_read+0x15/0x20 [ 70.110610][ T2084] __x64_sys_write+0x7f/0x90 [ 70.110627][ T2084] x64_sys_call+0x271c/0x2ee0 [ 70.110653][ T2084] do_syscall_64+0x58/0xf0 [ 70.110675][ T2084] ? clear_bhb_loop+0x50/0xa0 [ 70.110693][ T2084] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.110720][ T2084] RIP: 0033:0x7f57bb38ebe9 [ 70.110741][ T2084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.110757][ T2084] RSP: 002b:00007f57bc198038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.110780][ T2084] RAX: ffffffffffffffda RBX: 00007f57bb5b5fa0 RCX: 00007f57bb38ebe9 [ 70.110795][ T2084] RDX: 0000000000000007 RSI: 0000200000000080 RDI: 0000000000000004 [ 70.110808][ T2084] RBP: 00007f57bc198090 R08: 0000000000000000 R09: 0000000000000000 [ 70.110821][ T2084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.110833][ T2084] R13: 00007f57bb5b6038 R14: 00007f57bb5b5fa0 R15: 00007fffa7f25ec8 [ 70.110850][ T2084] [ 70.494840][ T2101] netlink: 168 bytes leftover after parsing attributes in process `syz.0.615'. [ 71.108438][ T2120] fuse: Bad value for 'fd' [ 71.141406][ T781] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 71.291453][ T781] usb 1-1: Using ep0 maxpacket: 32 [ 71.298425][ T781] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.308554][ T781] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.319547][ T781] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 71.335291][ T781] usb 1-1: config 0 interface 0 has no altsetting 0 [ 71.341902][ T781] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 71.350925][ T781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.360376][ T781] usb 1-1: config 0 descriptor?? [ 71.364640][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 71.521450][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 71.528738][ T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 71.537870][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.547258][ T9] usb 4-1: config 0 descriptor?? [ 71.553981][ T36] kauditd_printk_skb: 722 callbacks suppressed [ 71.553996][ T36] audit: type=1400 audit(1755836417.029:3733): avc: denied { ioctl } for pid=2119 comm="syz.3.624" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.585176][ T36] audit: type=1400 audit(1755836417.029:3734): avc: denied { ioctl } for pid=2119 comm="syz.3.624" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.610003][ T36] audit: type=1400 audit(1755836417.029:3735): avc: denied { ioctl } for pid=2119 comm="syz.3.624" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.634802][ T36] audit: type=1400 audit(1755836417.049:3736): avc: denied { ioctl } for pid=2117 comm="syz.0.623" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.660900][ T36] audit: type=1400 audit(1755836417.049:3737): avc: denied { ioctl } for pid=2117 comm="syz.0.623" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.689407][ T36] audit: type=1400 audit(1755836417.139:3738): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.722388][ T36] audit: type=1400 audit(1755836417.139:3739): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.748057][ T36] audit: type=1400 audit(1755836417.139:3740): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.768496][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 71.775337][ T36] audit: type=1400 audit(1755836417.189:3741): avc: denied { read } for pid=2121 comm="syz.2.625" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.806372][ T781] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 71.806552][ T9] asix 4-1:0.0: probe with driver asix failed with error -32 [ 71.815086][ T781] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 71.830877][ T781] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 71.849530][ T36] audit: type=1400 audit(1755836417.189:3742): avc: denied { read open } for pid=2121 comm="syz.2.625" path="net:[4026532548]" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.869423][ T781] hid-thrustmaster 0003:044F:B65D.0008: item fetching failed at offset 4/5 [ 71.885635][ T781] hid-thrustmaster 0003:044F:B65D.0008: parse failed with error -22 [ 71.894721][ T781] hid-thrustmaster 0003:044F:B65D.0008: probe with driver hid-thrustmaster failed with error -22 [ 72.013995][ T2118] cgroup: Invalid name [ 72.058471][ T9] usb 1-1: USB disconnect, device number 9 [ 73.782664][ T2158] rust_binder: Write failure EFAULT in pid:547 [ 73.862224][ T2162] netlink: 'syz.0.641': attribute type 40 has an invalid length. [ 74.284144][ T9] usb 4-1: USB disconnect, device number 7 [ 74.402469][ T2168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 74.697991][ T2181] netlink: 68 bytes leftover after parsing attributes in process `syz.3.649'. [ 74.707248][ T2181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.649'. [ 74.981402][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 75.137169][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.152359][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.168228][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.177519][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.186630][ T9] usb 4-1: Product: syz [ 75.190964][ T9] usb 4-1: Manufacturer: syz [ 75.195630][ T9] usb 4-1: SerialNumber: syz [ 75.219073][ T9] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 75.233343][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 75.245628][ T9] cdc_ncm 4-1:1.1: bind() failure [ 75.362127][ T2199] af_packet: tpacket_rcv: packet too big, clamped from 59510 to 4294967272. macoff=96 [ 75.426880][ T331] usb 4-1: USB disconnect, device number 8 [ 75.545317][ T2203] overlayfs: failed to resolve './file1': -2 [ 76.054795][ T2216] netlink: 'syz.3.664': attribute type 4 has an invalid length. [ 76.065308][ T2216] netlink: 'syz.3.664': attribute type 4 has an invalid length. [ 76.566905][ T36] kauditd_printk_skb: 465 callbacks suppressed [ 76.566922][ T36] audit: type=1400 audit(1755836422.039:4202): avc: denied { create } for pid=2223 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.595835][ T36] audit: type=1400 audit(1755836422.069:4203): avc: denied { create } for pid=2223 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.618374][ T36] audit: type=1400 audit(1755836422.069:4204): avc: denied { write } for pid=2223 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.639314][ T36] audit: type=1400 audit(1755836422.069:4205): avc: denied { read } for pid=2223 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.659723][ T36] audit: type=1400 audit(1755836422.069:4206): avc: denied { read } for pid=2223 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.680172][ T36] audit: type=1400 audit(1755836422.069:4207): avc: denied { write } for pid=2223 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.700749][ T36] audit: type=1400 audit(1755836422.069:4208): avc: denied { read } for pid=2223 comm="syz.2.668" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.722529][ T36] audit: type=1400 audit(1755836422.069:4209): avc: denied { read open } for pid=2223 comm="syz.2.668" path="net:[4026532548]" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.751741][ T36] audit: type=1400 audit(1755836422.069:4210): avc: denied { create } for pid=2223 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.776864][ T36] audit: type=1400 audit(1755836422.079:4211): avc: denied { create } for pid=2223 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.024770][ T2237] netlink: 168 bytes leftover after parsing attributes in process `syz.3.673'. [ 77.112152][ T2241] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaaa [ 77.699389][ T2255] tipc: Started in network mode [ 77.704415][ T2255] tipc: Node identity , cluster identity 4711 [ 77.710619][ T2255] tipc: Failed to obtain node identity [ 77.723525][ T2255] tipc: Enabling of bearer rejected, failed to enable media [ 78.072578][ T2260] 8021q: VLANs not supported on ip_vti0 [ 79.500503][ T2292] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.507595][ T2292] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.514752][ T2292] bridge_slave_0: entered allmulticast mode [ 79.521149][ T2292] bridge_slave_0: entered promiscuous mode [ 79.528474][ T2292] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.535528][ T2292] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.542654][ T2292] bridge_slave_1: entered allmulticast mode [ 79.549010][ T2292] bridge_slave_1: entered promiscuous mode [ 79.729902][ T2292] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.737007][ T2292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.744323][ T2292] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.751383][ T2292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.791187][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.798882][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.811147][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.818228][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.828937][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.835999][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.894479][ T2292] veth0_vlan: entered promiscuous mode [ 79.921572][ T2292] veth1_macvtap: entered promiscuous mode [ 79.941393][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 80.132482][ T2307] netlink: 'syz.0.698': attribute type 1 has an invalid length. [ 80.224031][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 80.235786][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 80.243539][ T10] usb 1-1: can't read configurations, error -71 [ 80.775658][ T2323] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true [ 80.848440][ T2328] netlink: 168 bytes leftover after parsing attributes in process `syz.2.702'. [ 81.281389][ T2350] cgroup: noprefix used incorrectly [ 81.401443][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.561448][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 81.569376][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 81.576934][ T36] kauditd_printk_skb: 572 callbacks suppressed [ 81.576951][ T36] audit: type=1400 audit(1755836427.049:4784): avc: denied { ioctl } for pid=2344 comm="syz.4.710" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.579997][ T9] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 81.583787][ T36] audit: type=1400 audit(1755836427.049:4785): avc: denied { ioctl } for pid=2344 comm="syz.4.710" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.608613][ T9] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 81.617317][ T36] audit: type=1400 audit(1755836427.049:4786): avc: denied { ioctl } for pid=2344 comm="syz.4.710" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.641640][ T9] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 81.654819][ T36] audit: type=1400 audit(1755836427.049:4787): avc: denied { ioctl } for pid=2344 comm="syz.4.710" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.677856][ T9] usb 5-1: config 128 has no interface number 0 [ 81.686517][ T36] audit: type=1400 audit(1755836427.089:4788): avc: denied { ioctl } for pid=2344 comm="syz.4.710" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.712251][ T9] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 81.753337][ T36] audit: type=1400 audit(1755836427.189:4789): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.768552][ T2359] rust_binder: Error while translating object. [ 81.777504][ T2359] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 81.784393][ T9] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.805652][ T2359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:479 [ 81.820086][ T36] audit: type=1400 audit(1755836427.189:4790): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.837381][ T9] usb 5-1: config 128 interface 127 has no altsetting 0 [ 81.887128][ T36] audit: type=1400 audit(1755836427.189:4791): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.925261][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 81.940138][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.946705][ T36] audit: type=1400 audit(1755836427.229:4792): avc: denied { read } for pid=2358 comm="syz.2.714" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.963734][ T9] usb 5-1: Product: syz [ 81.973940][ T36] audit: type=1400 audit(1755836427.229:4793): avc: denied { read open } for pid=2358 comm="syz.2.714" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.000919][ T9] usb 5-1: Manufacturer: syz [ 82.009978][ T2367] FAULT_INJECTION: forcing a failure. [ 82.009978][ T2367] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.011658][ T9] usb 5-1: SerialNumber: syz [ 82.024304][ T2367] CPU: 1 UID: 0 PID: 2367 Comm: syz.3.718 Not tainted syzkaller #0 00ad55236d4531c7fb9f608a968d4071287717d4 [ 82.024331][ T2367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.024343][ T2367] Call Trace: [ 82.024348][ T2367] [ 82.024355][ T2367] __dump_stack+0x21/0x30 [ 82.024382][ T2367] dump_stack_lvl+0x10c/0x190 [ 82.024404][ T2367] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.024431][ T2367] ? kstrtoull+0x13b/0x1e0 [ 82.024454][ T2367] dump_stack+0x19/0x20 [ 82.024474][ T2367] should_fail_ex+0x3d9/0x530 [ 82.024499][ T2367] should_fail+0xf/0x20 [ 82.024528][ T2367] should_fail_usercopy+0x1e/0x30 [ 82.024545][ T2367] _copy_from_user+0x22/0xb0 [ 82.024564][ T2367] ___sys_sendmsg+0x159/0x2a0 [ 82.024589][ T2367] ? __sys_sendmsg+0x280/0x280 [ 82.024613][ T2367] ? proc_fail_nth_write+0x17e/0x210 [ 82.024634][ T2367] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 82.024661][ T2367] __x64_sys_sendmsg+0x1eb/0x2c0 [ 82.024684][ T2367] ? fput+0x1a5/0x240 [ 82.024704][ T2367] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 82.024728][ T2367] ? ksys_write+0x1ef/0x250 [ 82.024744][ T2367] ? __kasan_check_read+0x15/0x20 [ 82.024769][ T2367] x64_sys_call+0x2a4c/0x2ee0 [ 82.024792][ T2367] do_syscall_64+0x58/0xf0 [ 82.024813][ T2367] ? clear_bhb_loop+0x50/0xa0 [ 82.024829][ T2367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.024854][ T2367] RIP: 0033:0x7fb98118ebe9 [ 82.024869][ T2367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.024883][ T2367] RSP: 002b:00007fb981f19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.024903][ T2367] RAX: ffffffffffffffda RBX: 00007fb9813b5fa0 RCX: 00007fb98118ebe9 [ 82.024916][ T2367] RDX: 0000000020004010 RSI: 0000200000000280 RDI: 0000000000000003 [ 82.024928][ T2367] RBP: 00007fb981f19090 R08: 0000000000000000 R09: 0000000000000000 [ 82.024940][ T2367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.024951][ T2367] R13: 00007fb9813b6038 R14: 00007fb9813b5fa0 R15: 00007fff55a24688 [ 82.024966][ T2367] [ 82.085991][ T2370] input: syz1 as /devices/virtual/input/input9 [ 82.151891][ T2373] netlink: 168 bytes leftover after parsing attributes in process `syz.0.721'. [ 82.483941][ T2345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.501598][ T2345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.607914][ T9] usb 5-1: USB disconnect, device number 2 [ 82.662260][ T1691] udevd[1691]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.782885][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 82.941393][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 82.949320][ T10] usb 1-1: config index 0 descriptor too short (expected 4388, got 36) [ 82.959124][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.970106][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 199, using maximum allowed: 30 [ 82.981230][ T10] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 199 [ 82.994481][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.001116][ T10] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 83.010266][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.020913][ T10] usb 1-1: config 0 descriptor?? [ 83.096086][ T2399] netlink: 168 bytes leftover after parsing attributes in process `syz.2.730'. [ 83.248445][ T2406] netlink: 'syz.4.733': attribute type 4 has an invalid length. [ 83.263928][ T2406] netlink: 'syz.4.733': attribute type 4 has an invalid length. [ 83.465363][ T10] usb 1-1: string descriptor 0 read error: -71 [ 83.474836][ T10] usb 1-1: USB disconnect, device number 12 [ 83.741391][ T568] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.891415][ T568] usb 5-1: Using ep0 maxpacket: 32 [ 83.898618][ T568] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.909556][ T568] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.921280][ T568] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 83.930415][ T568] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 83.938773][ T568] usb 5-1: Product: syz [ 83.943024][ T568] usb 5-1: Manufacturer: syz [ 83.952947][ T568] hub 5-1:4.0: USB hub found [ 83.996556][ T2427] netlink: 168 bytes leftover after parsing attributes in process `syz.0.741'. [ 84.159581][ T568] hub 5-1:4.0: 2 ports detected [ 85.152245][ T2436] binder: Bad value for 'defcontext' [ 85.160549][ T2436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:641 [ 85.232401][ T568] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 85.247967][ T568] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 86.071438][ T568] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 86.223578][ T568] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.233808][ T568] usb 1-1: config 1 interface 0 has no altsetting 0 [ 86.241086][ T568] usb 1-1: language id specifier not provided by device, defaulting to English [ 86.252251][ T568] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 86.261392][ T568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.269380][ T568] usb 1-1: Product: syz [ 86.273558][ T568] usb 1-1: Manufacturer: ޿ṕ즒꡴婵皰磈ã ç¼¥é‰“堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻â•ãˆºïµå‚µéš¥êµ„糶䵎孜 [ 86.287050][ T568] usb 1-1: SerialNumber: syz [ 86.505418][ T568] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 86.515085][ T568] usb 1-1: USB disconnect, device number 13 [ 86.598524][ T2454] netlink: 'syz.4.750': attribute type 4 has an invalid length. [ 86.606391][ T330] usb 5-1: USB disconnect, device number 3 [ 86.635257][ T36] kauditd_printk_skb: 667 callbacks suppressed [ 86.635275][ T36] audit: type=1400 audit(1755836432.099:5461): avc: denied { read write } for pid=2292 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.683821][ T36] audit: type=1400 audit(1755836432.099:5462): avc: denied { read write open } for pid=2292 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.714742][ T36] audit: type=1400 audit(1755836432.099:5463): avc: denied { ioctl } for pid=2292 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.740592][ T36] audit: type=1400 audit(1755836432.119:5464): avc: denied { read write } for pid=2292 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.764769][ T36] audit: type=1400 audit(1755836432.119:5465): avc: denied { read write open } for pid=2292 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.818230][ T36] audit: type=1400 audit(1755836432.119:5466): avc: denied { ioctl } for pid=2292 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.844421][ T36] audit: type=1400 audit(1755836432.159:5467): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.869614][ T36] audit: type=1400 audit(1755836432.159:5468): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.894580][ T36] audit: type=1400 audit(1755836432.159:5469): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.922299][ T36] audit: type=1400 audit(1755836432.189:5470): avc: denied { create } for pid=2457 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.311427][ T330] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 87.451418][ T330] usb 1-1: device descriptor read/64, error -71 [ 87.562097][ T2472] netlink: 168 bytes leftover after parsing attributes in process `syz.4.756'. [ 87.701404][ T330] usb 1-1: device descriptor read/64, error -71 [ 87.772287][ T2479] netlink: 'syz.4.759': attribute type 4 has an invalid length. [ 87.791370][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.872086][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.941420][ T330] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 88.013783][ T2492] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 88.013800][ T2492] rust_binder: Error while translating object. [ 88.022923][ T2492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.029106][ T2492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 88.081381][ T330] usb 1-1: device descriptor read/64, error -71 [ 88.331420][ T330] usb 1-1: device descriptor read/64, error -71 [ 88.441713][ T330] usb usb1-port1: attempt power cycle [ 88.781407][ T330] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 88.803267][ T330] usb 1-1: device descriptor read/8, error -71 [ 88.938277][ T330] usb 1-1: device descriptor read/8, error -71 [ 88.963717][ T2499] netlink: 168 bytes leftover after parsing attributes in process `syz.4.766'. [ 89.040041][ T2504] netlink: 'syz.4.768': attribute type 4 has an invalid length. [ 89.191401][ T330] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 89.226328][ T330] usb 1-1: device descriptor read/8, error -71 [ 89.365847][ T330] usb 1-1: device descriptor read/8, error -71 [ 89.482932][ T330] usb usb1-port1: unable to enumerate USB device [ 89.951370][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.951387][ T2450] Bluetooth: hci0: command 0x1003 tx timeout [ 89.985447][ T2527] netlink: 'syz.2.777': attribute type 4 has an invalid length. [ 90.171997][ T2535] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.488607][ T2548] tipc: Enabling of bearer rejected, failed to enable media [ 90.505605][ T2555] netlink: 'syz.3.787': attribute type 4 has an invalid length. [ 90.551522][ T2548] binder: Bad value for 'defcontext' [ 90.814202][ T2574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.863924][ T2574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.910923][ T2583] netlink: 'syz.4.799': attribute type 4 has an invalid length. [ 91.045278][ T2588] netlink: 168 bytes leftover after parsing attributes in process `syz.0.800'. [ 91.056579][ T330] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 91.187900][ T2593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:672 [ 91.241515][ T330] usb 4-1: device descriptor read/64, error -71 [ 91.326454][ T2597] rust_binder: Error while translating object. [ 91.326503][ T2597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.353187][ T2597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 91.364203][ T2600] can0: slcan on ptm0. [ 91.465117][ T2604] rust_binder: 2600 RLIMIT_NICE not set [ 91.489089][ T2608] tipc: Enabling of bearer rejected, media not registered [ 91.541443][ T330] usb 4-1: device descriptor read/64, error -71 [ 91.642207][ T36] kauditd_printk_skb: 1097 callbacks suppressed [ 91.642225][ T36] audit: type=1400 audit(1755836437.109:6568): avc: denied { search } for pid=2617 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.657001][ T2616] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 91.724370][ T36] audit: type=1400 audit(1755836437.109:6569): avc: denied { search } for pid=2617 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.732361][ T2616] audit: out of memory in audit_log_start [ 91.748774][ T36] audit: type=1400 audit(1755836437.169:6570): avc: denied { ioctl } for pid=2567 comm="syz.3.794" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.783066][ T36] audit: type=1400 audit(1755836437.169:6571): avc: denied { ioctl } for pid=2567 comm="syz.3.794" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.808193][ T36] audit: type=1400 audit(1755836437.189:6572): avc: denied { search } for pid=2618 comm="sed" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.830415][ T36] audit: type=1400 audit(1755836437.189:6573): avc: denied { read } for pid=2618 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.852344][ T330] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 91.858521][ T36] audit: type=1400 audit(1755836437.199:6574): avc: denied { read open } for pid=2618 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.891218][ T36] audit: type=1400 audit(1755836437.199:6575): avc: denied { getattr } for pid=2618 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.991374][ T330] usb 4-1: device descriptor read/64, error -71 [ 92.241387][ T330] usb 4-1: device descriptor read/64, error -71 [ 92.311534][ T2652] rust_binder: 99: no such ref 2 [ 92.329725][ T2652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:99 [ 92.334480][ T2652] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 92.352424][ T330] usb usb4-port1: attempt power cycle [ 92.391089][ T2652] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 92.521534][ T2666] netlink: 'syz.4.827': attribute type 12 has an invalid length. [ 92.565222][ T2666] binder: Bad value for 'max' [ 92.731376][ T330] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 92.763484][ T330] usb 4-1: device descriptor read/8, error -71 [ 92.921236][ T330] usb 4-1: device descriptor read/8, error -71 [ 92.941372][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 93.013933][ T2698] netlink: 'syz.4.841': attribute type 4 has an invalid length. [ 93.103355][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.114454][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.124783][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.138099][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.147610][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.161603][ T10] usb 1-1: config 0 descriptor?? [ 93.161991][ T330] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 93.214290][ T330] usb 4-1: device descriptor read/8, error -71 [ 93.354287][ T330] usb 4-1: device descriptor read/8, error -71 [ 93.461790][ T330] usb usb4-port1: unable to enumerate USB device [ 93.587296][ T2710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.595871][ T2710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.605205][ T2710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.613736][ T2710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.623226][ T2710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.632413][ T2710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.641658][ T2710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.650194][ T2710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.659723][ T2710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.668376][ T2710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.748461][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 93.763573][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 93.785763][ T10] usb 1-1: USB disconnect, device number 18 [ 93.881583][ T2718] tap0: tun_chr_ioctl cmd 1074025677 [ 93.886949][ T2718] tap0: linktype set to 802 [ 93.900576][ T2718] binder: Bad value for 'max' [ 94.074231][ T2724] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 94.083060][ T2724] SELinux: failed to load policy [ 94.262789][ T2722] rust_binder: Write failure EFAULT in pid:719 [ 94.601396][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.741409][ T10] usb 5-1: device descriptor read/64, error -71 [ 94.981480][ T10] usb 5-1: device descriptor read/64, error -71 [ 95.131417][ T330] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 95.173619][ T2745] netlink: 'syz.3.858': attribute type 4 has an invalid length. [ 95.221394][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.223956][ T2747] random: crng reseeded on system resumption [ 95.292054][ T330] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.322500][ T330] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.347175][ T330] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.360043][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.371765][ T2752] netlink: 'syz.3.869': attribute type 4 has an invalid length. [ 95.376008][ T10] usb 5-1: device descriptor read/64, error -71 [ 95.380035][ T330] usb 1-1: Product: syz [ 95.397413][ T330] usb 1-1: Manufacturer: syz [ 95.408396][ T330] usb 1-1: SerialNumber: syz [ 95.425267][ T330] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 95.439160][ T330] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 95.447791][ T330] cdc_ncm 1-1:1.1: bind() failure [ 95.637399][ T64] usb 1-1: USB disconnect, device number 19 [ 95.649081][ T10] usb 5-1: device descriptor read/64, error -71 [ 95.761522][ T10] usb usb5-port1: attempt power cycle [ 96.101449][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 96.123262][ T10] usb 5-1: device descriptor read/8, error -71 [ 96.264445][ T10] usb 5-1: device descriptor read/8, error -71 [ 96.293006][ T2759] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 96.311691][ T2759] SELinux: failed to load policy [ 96.521381][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.547623][ T10] usb 5-1: device descriptor read/8, error -71 [ 96.656742][ T36] kauditd_printk_skb: 830 callbacks suppressed [ 96.656759][ T36] audit: type=1400 audit(1755836442.129:7402): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.703514][ T36] audit: type=1400 audit(1755836442.169:7403): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.744805][ T36] audit: type=1400 audit(1755836442.169:7404): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.771569][ T10] usb 5-1: device descriptor read/8, error -71 [ 96.780264][ T36] audit: type=1400 audit(1755836442.169:7405): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.811956][ T36] audit: type=1400 audit(1755836442.169:7406): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.838236][ T36] audit: type=1400 audit(1755836442.169:7407): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.865384][ T36] audit: type=1400 audit(1755836442.219:7408): avc: denied { ioctl } for pid=2735 comm="syz.4.854" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.894976][ T10] usb usb5-port1: unable to enumerate USB device [ 96.901984][ T36] audit: type=1400 audit(1755836442.219:7409): avc: denied { ioctl } for pid=2735 comm="syz.4.854" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.927638][ T36] audit: type=1400 audit(1755836442.219:7410): avc: denied { ioctl } for pid=2735 comm="syz.4.854" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.958503][ T36] audit: type=1400 audit(1755836442.219:7411): avc: denied { ioctl } for pid=2735 comm="syz.4.854" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.382227][ T2801] cgroup2: Unknown parameter 'rdma' [ 97.706532][ T2820] netlink: 'syz.0.890': attribute type 4 has an invalid length. [ 97.789275][ T2823] netlink: 'syz.0.891': attribute type 4 has an invalid length. [ 97.972532][ T2830] cgroup: No subsys list or none specified [ 98.174871][ T2836] netlink: 'syz.2.896': attribute type 4 has an invalid length. [ 98.313125][ T2842] netlink: 'syz.0.899': attribute type 4 has an invalid length. [ 98.372758][ T2844] netlink: 'syz.2.900': attribute type 4 has an invalid length. [ 98.693855][ T2855] FAULT_INJECTION: forcing a failure. [ 98.693855][ T2855] name failslab, interval 1, probability 0, space 0, times 0 [ 98.719013][ T2855] CPU: 1 UID: 0 PID: 2855 Comm: syz.4.906 Not tainted syzkaller #0 00ad55236d4531c7fb9f608a968d4071287717d4 [ 98.719044][ T2855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.719056][ T2855] Call Trace: [ 98.719063][ T2855] [ 98.719070][ T2855] __dump_stack+0x21/0x30 [ 98.719100][ T2855] dump_stack_lvl+0x10c/0x190 [ 98.719123][ T2855] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.719148][ T2855] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 98.719173][ T2855] dump_stack+0x19/0x20 [ 98.719195][ T2855] should_fail_ex+0x3d9/0x530 [ 98.719221][ T2855] should_failslab+0xac/0x100 [ 98.719242][ T2855] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 98.719300][ T2855] ? __alloc_skb+0x10c/0x370 [ 98.719321][ T2855] __alloc_skb+0x10c/0x370 [ 98.719342][ T2855] tcp_stream_alloc_skb+0x43/0x370 [ 98.719366][ T2855] tcp_sendmsg_locked+0xd12/0x4ee0 [ 98.719396][ T2855] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 98.719422][ T2855] ? __cfi_tcp_sendmsg+0x10/0x10 [ 98.719445][ T2855] tcp_sendmsg+0x3e/0xe0 [ 98.719466][ T2855] ? __cfi_tcp_sendmsg+0x10/0x10 [ 98.719488][ T2855] inet_sendmsg+0xb7/0x120 [ 98.719514][ T2855] ____sys_sendmsg+0x82a/0xa70 [ 98.719540][ T2855] ? __sys_sendmsg_sock+0x50/0x50 [ 98.719567][ T2855] ? import_iovec+0x81/0xb0 [ 98.719589][ T2855] ___sys_sendmsg+0x220/0x2a0 [ 98.719613][ T2855] ? __sys_sendmsg+0x280/0x280 [ 98.719640][ T2855] ? kstrtouint+0x78/0xf0 [ 98.719667][ T2855] __sys_sendmmsg+0x271/0x470 [ 98.719694][ T2855] ? __cfi___sys_sendmmsg+0x10/0x10 [ 98.719723][ T2855] ? __cfi_ksys_write+0x10/0x10 [ 98.719742][ T2855] __x64_sys_sendmmsg+0xa4/0xc0 [ 98.719768][ T2855] x64_sys_call+0xfec/0x2ee0 [ 98.719793][ T2855] do_syscall_64+0x58/0xf0 [ 98.719816][ T2855] ? clear_bhb_loop+0x50/0xa0 [ 98.719834][ T2855] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.719861][ T2855] RIP: 0033:0x7f745658ebe9 [ 98.719877][ T2855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.719894][ T2855] RSP: 002b:00007f745743d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 98.719914][ T2855] RAX: ffffffffffffffda RBX: 00007f74567b5fa0 RCX: 00007f745658ebe9 [ 98.719928][ T2855] RDX: 0000000000000002 RSI: 0000200000000f40 RDI: 0000000000000003 [ 98.719941][ T2855] RBP: 00007f745743d090 R08: 0000000000000000 R09: 0000000000000000 [ 98.719953][ T2855] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 98.719964][ T2855] R13: 00007f74567b6038 R14: 00007f74567b5fa0 R15: 00007fffdee24cc8 [ 98.719979][ T2855] [ 98.882022][ T2863] netlink: 'syz.3.910': attribute type 4 has an invalid length. [ 98.951363][ T330] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 98.976199][ T2866] netlink: 'syz.4.911': attribute type 4 has an invalid length. [ 99.099289][ T2873] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 99.141357][ T330] usb 1-1: Using ep0 maxpacket: 8 [ 99.150259][ T330] usb 1-1: unable to get BOS descriptor or descriptor too short [ 99.150346][ T2869] rust_binder: 164: no such ref 2 [ 99.161254][ T330] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 99.171818][ T330] usb 1-1: config 0 has no interface number 0 [ 99.177950][ T330] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 99.190124][ T330] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 99.192150][ T568] rust_binder: 2868: removing orphan mapping 0:112 [ 99.200885][ T330] usb 1-1: config 0 interface 88 has no altsetting 0 [ 99.226254][ T568] rust_binder: 0: removing orphan mapping 112:8 [ 99.238341][ T330] usb 1-1: string descriptor 0 read error: -22 [ 99.261386][ T330] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 99.281678][ T330] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 99.301849][ T330] usb 1-1: config 0 descriptor?? [ 99.314367][ T330] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input11 [ 99.536070][ T1691] udevd[1691]: Unable to EVIOCGABS device "/dev/input/event3" [ 99.558215][ T1691] udevd[1691]: Unable to EVIOCGABS device "/dev/input/event3" [ 99.824804][ T2889] netlink: 'syz.2.920': attribute type 4 has an invalid length. [ 99.882125][ T2891] netlink: 'syz.2.921': attribute type 4 has an invalid length. [ 99.943714][ T568] usb 1-1: USB disconnect, device number 20 [ 100.142890][ T2900] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 100.193896][ T2895] rust_binder: 606: no such ref 2 [ 100.230517][ T331] rust_binder: 2894: removing orphan mapping 0:112 [ 100.241406][ T331] rust_binder: 0: removing orphan mapping 112:8 [ 100.294039][ T2902] fuse: Bad value for 'fd' [ 100.324075][ T2907] netlink: 'syz.0.929': attribute type 4 has an invalid length. [ 100.439866][ T2910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.447121][ T2910] IPv6: NLM_F_CREATE should be set when creating new route [ 100.454344][ T2910] IPv6: NLM_F_CREATE should be set when creating new route [ 100.751695][ T2925] rust_binder: Read failure Err(EFAULT) in pid:615 [ 100.950248][ T2932] binder: Unknown parameter 'ÿÿ' [ 101.370575][ T2943] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.372369][ T2943] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 101.378964][ T2943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 101.388095][ T2943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:626 [ 101.536024][ T2952] rust_binder: Error while translating object. [ 101.564790][ T2952] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 101.579012][ T2955] 9pnet_fd: Insufficient options for proto=fd [ 101.595194][ T2952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:631 [ 101.683780][ T36] kauditd_printk_skb: 580 callbacks suppressed [ 101.683799][ T36] audit: type=1400 audit(1755836447.159:7992): avc: denied { read write } for pid=2292 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.736528][ T36] audit: type=1400 audit(1755836447.199:7993): avc: denied { read write open } for pid=2292 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.763515][ T36] audit: type=1400 audit(1755836447.199:7994): avc: denied { ioctl } for pid=2292 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.789948][ T2961] fuse: Bad value for 'fd' [ 101.790679][ T36] audit: type=1400 audit(1755836447.239:7995): avc: denied { read write } for pid=2962 comm="syz.4.950" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.818730][ T36] audit: type=1400 audit(1755836447.239:7996): avc: denied { read open } for pid=2962 comm="syz.4.950" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.842985][ T36] audit: type=1400 audit(1755836447.269:7997): avc: denied { mounton } for pid=2957 comm="syz.0.948" path="/288/file0" dev="tmpfs" ino=1542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.867325][ T36] audit: type=1400 audit(1755836447.269:7998): avc: denied { map } for pid=2962 comm="syz.4.950" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.890914][ T36] audit: type=1400 audit(1755836447.269:7999): avc: denied { read execute } for pid=2962 comm="syz.4.950" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.924601][ T36] audit: type=1400 audit(1755836447.319:8000): avc: denied { read write } for pid=2292 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.983331][ T36] audit: type=1400 audit(1755836447.319:8001): avc: denied { read write open } for pid=2292 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.133010][ T2969] rust_binder: Read failure Err(EFAULT) in pid:190 [ 102.397945][ T2982] 9pnet_fd: Insufficient options for proto=fd [ 102.702475][ T2993] FAULT_INJECTION: forcing a failure. [ 102.702475][ T2993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.729738][ T2993] CPU: 0 UID: 0 PID: 2993 Comm: syz.4.962 Not tainted syzkaller #0 00ad55236d4531c7fb9f608a968d4071287717d4 [ 102.729769][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.729782][ T2993] Call Trace: [ 102.729787][ T2993] [ 102.729796][ T2993] __dump_stack+0x21/0x30 [ 102.729825][ T2993] dump_stack_lvl+0x10c/0x190 [ 102.729845][ T2993] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.729867][ T2993] dump_stack+0x19/0x20 [ 102.729889][ T2993] should_fail_ex+0x3d9/0x530 [ 102.729913][ T2993] should_fail+0xf/0x20 [ 102.729936][ T2993] should_fail_usercopy+0x1e/0x30 [ 102.729952][ T2993] _copy_from_user+0x22/0xb0 [ 102.729971][ T2993] proc_disconnectsignal_compat+0x8a/0x170 [ 102.730010][ T2993] ? proc_bulk_compat+0x140/0x140 [ 102.730036][ T2993] ? __cfi_vfs_write+0x10/0x10 [ 102.730054][ T2993] usbdev_ioctl+0x1634/0x20a0 [ 102.730079][ T2993] ? __cfi_usbdev_ioctl+0x10/0x10 [ 102.730103][ T2993] ? __fget_files+0x2c5/0x340 [ 102.730124][ T2993] ? bpf_lsm_file_ioctl+0xd/0x20 [ 102.730148][ T2993] ? security_file_ioctl+0x34/0xd0 [ 102.730169][ T2993] ? __cfi_usbdev_ioctl+0x10/0x10 [ 102.730193][ T2993] __se_sys_ioctl+0x135/0x1b0 [ 102.730213][ T2993] __x64_sys_ioctl+0x7f/0xa0 [ 102.730232][ T2993] x64_sys_call+0x1878/0x2ee0 [ 102.730257][ T2993] do_syscall_64+0x58/0xf0 [ 102.730278][ T2993] ? clear_bhb_loop+0x50/0xa0 [ 102.730296][ T2993] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.730324][ T2993] RIP: 0033:0x7f745658ebe9 [ 102.730340][ T2993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.730356][ T2993] RSP: 002b:00007f745743d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.730377][ T2993] RAX: ffffffffffffffda RBX: 00007f74567b5fa0 RCX: 00007f745658ebe9 [ 102.730392][ T2993] RDX: 0000200000000180 RSI: 000000008008550e RDI: 0000000000000004 [ 102.730405][ T2993] RBP: 00007f745743d090 R08: 0000000000000000 R09: 0000000000000000 [ 102.730419][ T2993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.730431][ T2993] R13: 00007f74567b6038 R14: 00007f74567b5fa0 R15: 00007fffdee24cc8 [ 102.730448][ T2993] [ 103.021369][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 103.143110][ T3008] validate_nla: 5 callbacks suppressed [ 103.143131][ T3008] netlink: 'syz.3.964': attribute type 4 has an invalid length. [ 103.198855][ T31] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.213368][ T31] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.235426][ T31] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.253591][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 103.288023][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.303217][ T3012] netlink: 228 bytes leftover after parsing attributes in process `syz.3.965'. [ 103.313351][ T2994] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 104.482065][ T3025] netlink: 'syz.3.970': attribute type 4 has an invalid length. [ 104.762932][ T31] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 104.770709][ T31] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input12 [ 104.791536][ T31] usb 1-1: USB disconnect, device number 21 [ 104.924183][ T3038] netlink: 80 bytes leftover after parsing attributes in process `syz.3.974'. [ 104.971968][ T3046] netlink: 'syz.4.977': attribute type 4 has an invalid length. [ 104.983001][ T3046] netlink: 'syz.4.977': attribute type 4 has an invalid length. [ 105.326723][ T3051] netlink: 'syz.0.979': attribute type 4 has an invalid length. [ 105.631384][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 105.744697][ T3066] netlink: 'syz.3.986': attribute type 4 has an invalid length. [ 105.763336][ T3066] netlink: 'syz.3.986': attribute type 4 has an invalid length. [ 105.794492][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.814917][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 105.833649][ T31] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.865309][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.882570][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.890582][ T31] usb 1-1: Product: syz [ 105.901347][ T31] usb 1-1: Manufacturer: syz [ 105.907971][ T31] usb 1-1: SerialNumber: syz [ 105.920856][ T3070] netlink: 'syz.4.988': attribute type 4 has an invalid length. [ 106.101412][ T10] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 106.201381][ T331] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.253737][ T10] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.264775][ T10] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.274864][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 106.281543][ T10] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 106.290589][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.300310][ T10] usb 4-1: config 0 descriptor?? [ 106.354256][ T331] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.365922][ T331] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 106.376941][ T331] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 106.388192][ T331] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 106.397255][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.408275][ T3072] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 106.510623][ T10] uclogic 0003:5543:0042.0009: unknown main item tag 0x0 [ 106.523313][ T10] uclogic 0003:5543:0042.0009: unknown main item tag 0x0 [ 106.536960][ T10] uclogic 0003:5543:0042.0009: unknown main item tag 0x0 [ 106.544990][ T10] uclogic 0003:5543:0042.0009: No inputs registered, leaving [ 106.555253][ T10] uclogic 0003:5543:0042.0009: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.3-1/input0 [ 106.577748][ T330] usb 4-1: USB disconnect, device number 13 [ 106.616060][ T3076] fido_id[3076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 106.702468][ T36] kauditd_printk_skb: 721 callbacks suppressed [ 106.702485][ T36] audit: type=1400 audit(1755836452.179:8660): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.733485][ T36] audit: type=1400 audit(1755836452.199:8661): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.770183][ T36] audit: type=1400 audit(1755836452.199:8662): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.796288][ T36] audit: type=1400 audit(1755836452.199:8663): avc: denied { ioctl } for pid=3052 comm="syz.0.980" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.827494][ T36] audit: type=1400 audit(1755836452.199:8664): avc: denied { ioctl } for pid=3052 comm="syz.0.980" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.860484][ T36] audit: type=1400 audit(1755836452.199:8665): avc: denied { ioctl } for pid=3052 comm="syz.0.980" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.886364][ T36] audit: type=1400 audit(1755836452.239:8666): avc: denied { name_bind } for pid=3080 comm="syz.3.991" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 106.909350][ T36] audit: type=1400 audit(1755836452.239:8667): avc: denied { node_bind } for pid=3080 comm="syz.3.991" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 106.931306][ T31] cdc_ncm 1-1:1.0: bind() failure [ 106.938012][ T36] audit: type=1400 audit(1755836452.239:8668): avc: denied { create } for pid=3080 comm="syz.3.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.942853][ T31] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 106.959693][ T36] audit: type=1400 audit(1755836452.239:8669): avc: denied { create } for pid=3080 comm="syz.3.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.980784][ T31] cdc_ncm 1-1:1.1: bind() failure [ 107.143753][ T9] usb 1-1: USB disconnect, device number 22 [ 107.231431][ T10] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 107.383412][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.393552][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 15 [ 107.402541][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 107.412383][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 107.422049][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 107.438671][ T10] usb 4-1: string descriptor 0 read error: -22 [ 107.444925][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.454000][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.468384][ T10] usb 4-1: 0:2 : does not exist [ 107.682927][ T10] usb 4-1: USB disconnect, device number 14 [ 107.717179][ T3087] netlink: 'syz.0.994': attribute type 4 has an invalid length. [ 107.760257][ T3089] netlink: 'syz.0.995': attribute type 4 has an invalid length. [ 107.857338][ T331] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 107.865208][ T331] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input13 [ 107.891379][ T331] usb 5-1: USB disconnect, device number 8 [ 108.251794][ T3094] validate_nla: 1 callbacks suppressed [ 108.251813][ T3094] netlink: 'syz.3.997': attribute type 4 has an invalid length. [ 108.324037][ T3096] FAULT_INJECTION: forcing a failure. [ 108.324037][ T3096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.338002][ T3096] CPU: 0 UID: 0 PID: 3096 Comm: syz.3.998 Not tainted syzkaller #0 00ad55236d4531c7fb9f608a968d4071287717d4 [ 108.338036][ T3096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.338049][ T3096] Call Trace: [ 108.338055][ T3096] [ 108.338062][ T3096] __dump_stack+0x21/0x30 [ 108.338091][ T3096] dump_stack_lvl+0x10c/0x190 [ 108.338115][ T3096] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.338141][ T3096] dump_stack+0x19/0x20 [ 108.338163][ T3096] should_fail_ex+0x3d9/0x530 [ 108.338190][ T3096] should_fail+0xf/0x20 [ 108.338215][ T3096] should_fail_usercopy+0x1e/0x30 [ 108.338232][ T3096] _copy_to_user+0x24/0xa0 [ 108.338253][ T3096] simple_read_from_buffer+0xed/0x160 [ 108.338277][ T3096] proc_fail_nth_read+0x19e/0x210 [ 108.338301][ T3096] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 108.338325][ T3096] ? bpf_lsm_file_permission+0xd/0x20 [ 108.338350][ T3096] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 108.338373][ T3096] vfs_read+0x278/0xb60 [ 108.338400][ T3096] ? __cfi_current_time+0x10/0x10 [ 108.338423][ T3096] ? __cfi_vfs_read+0x10/0x10 [ 108.338447][ T3096] ? __kasan_check_write+0x18/0x20 [ 108.338472][ T3096] ? mutex_lock+0x92/0x1c0 [ 108.338498][ T3096] ? __cfi_mutex_lock+0x10/0x10 [ 108.338524][ T3096] ? __fget_files+0x2c5/0x340 [ 108.338545][ T3096] ksys_read+0x141/0x250 [ 108.338562][ T3096] ? __cfi_ksys_read+0x10/0x10 [ 108.338579][ T3096] ? __kasan_check_read+0x15/0x20 [ 108.338604][ T3096] __x64_sys_read+0x7f/0x90 [ 108.338627][ T3096] x64_sys_call+0x2638/0x2ee0 [ 108.338653][ T3096] do_syscall_64+0x58/0xf0 [ 108.338675][ T3096] ? clear_bhb_loop+0x50/0xa0 [ 108.338697][ T3096] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.338725][ T3096] RIP: 0033:0x7fb98118d5fc [ 108.338741][ T3096] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 108.338756][ T3096] RSP: 002b:00007fb981f19030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.338777][ T3096] RAX: ffffffffffffffda RBX: 00007fb9813b5fa0 RCX: 00007fb98118d5fc [ 108.338792][ T3096] RDX: 000000000000000f RSI: 00007fb981f190a0 RDI: 0000000000000005 [ 108.338805][ T3096] RBP: 00007fb981f19090 R08: 0000000000000000 R09: 0000000000000000 [ 108.338817][ T3096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.338829][ T3096] R13: 00007fb9813b6038 R14: 00007fb9813b5fa0 R15: 00007fff55a24688 [ 108.338846][ T3096] [ 108.744286][ T3102] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1002'. [ 108.826866][ T3107] rust_binder: Error while translating object. [ 108.826908][ T3107] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 108.852231][ T3108] netlink: 'syz.2.1004': attribute type 4 has an invalid length. [ 108.868808][ T3107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:221 [ 108.898837][ T3108] netlink: 'syz.2.1004': attribute type 4 has an invalid length. [ 108.917825][ T3110] netlink: 'syz.3.1005': attribute type 4 has an invalid length. [ 108.934029][ T3112] netlink: 'syz.0.1006': attribute type 4 has an invalid length. [ 109.121415][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 109.276117][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.296383][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 109.307440][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.324132][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.339099][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.356858][ T9] usb 5-1: Product: syz [ 109.365404][ T9] usb 5-1: Manufacturer: syz [ 109.370013][ T9] usb 5-1: SerialNumber: syz [ 109.383226][ T3136] netlink: 'syz.0.1015': attribute type 4 has an invalid length. [ 109.435241][ T3138] netlink: 'syz.0.1016': attribute type 4 has an invalid length. [ 109.500210][ T3140] netlink: 'syz.0.1017': attribute type 4 has an invalid length. [ 109.522181][ T3140] netlink: 'syz.0.1017': attribute type 4 has an invalid length. [ 109.762620][ T3144] devpts: called with bogus options [ 109.909904][ T3150] netlink: 'syz.3.1022': attribute type 40 has an invalid length. [ 110.438830][ T3168] FAULT_INJECTION: forcing a failure. [ 110.438830][ T3168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.452042][ T3168] CPU: 1 UID: 0 PID: 3168 Comm: syz.3.1028 Not tainted syzkaller #0 00ad55236d4531c7fb9f608a968d4071287717d4 [ 110.452070][ T3168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.452082][ T3168] Call Trace: [ 110.452088][ T3168] [ 110.452096][ T3168] __dump_stack+0x21/0x30 [ 110.452125][ T3168] dump_stack_lvl+0x10c/0x190 [ 110.452145][ T3168] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.452168][ T3168] ? raw_irqentry_exit_cond_resched+0x33/0x40 [ 110.452191][ T3168] dump_stack+0x19/0x20 [ 110.452210][ T3168] should_fail_ex+0x3d9/0x530 [ 110.452232][ T3168] should_fail+0xf/0x20 [ 110.452253][ T3168] should_fail_usercopy+0x1e/0x30 [ 110.452268][ T3168] _copy_from_user+0x22/0xb0 [ 110.452287][ T3168] __copy_msghdr+0x3ec/0x5d0 [ 110.452311][ T3168] ___sys_sendmsg+0x1a6/0x2a0 [ 110.452336][ T3168] ? __sys_sendmsg+0x280/0x280 [ 110.452360][ T3168] ? proc_fail_nth_write+0x17e/0x210 [ 110.452383][ T3168] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 110.452405][ T3168] __x64_sys_sendmsg+0x1eb/0x2c0 [ 110.452429][ T3168] ? fput+0x1a5/0x240 [ 110.452449][ T3168] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 110.452473][ T3168] ? ksys_write+0x1ef/0x250 [ 110.452489][ T3168] ? __kasan_check_read+0x15/0x20 [ 110.452513][ T3168] x64_sys_call+0x2a4c/0x2ee0 [ 110.452538][ T3168] do_syscall_64+0x58/0xf0 [ 110.452559][ T3168] ? clear_bhb_loop+0x50/0xa0 [ 110.452574][ T3168] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.452600][ T3168] RIP: 0033:0x7fb98118ebe9 [ 110.452614][ T3168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.452630][ T3168] RSP: 002b:00007fb97fbd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.452650][ T3168] RAX: ffffffffffffffda RBX: 00007fb9813b6180 RCX: 00007fb98118ebe9 [ 110.452664][ T3168] RDX: 0000000004000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 110.452676][ T3168] RBP: 00007fb97fbd6090 R08: 0000000000000000 R09: 0000000000000000 [ 110.452689][ T3168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.452700][ T3168] R13: 00007fb9813b6218 R14: 00007fb9813b6180 R15: 00007fff55a24688 [ 110.452716][ T3168] [ 110.453858][ T9] cdc_ncm 5-1:1.0: bind() failure [ 110.674188][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 110.680971][ T9] cdc_ncm 5-1:1.1: bind() failure [ 110.691485][ T9] usb 5-1: USB disconnect, device number 9 [ 111.763526][ T36] kauditd_printk_skb: 420 callbacks suppressed [ 111.763543][ T36] audit: type=1400 audit(1755836457.239:9090): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.814129][ T36] audit: type=1400 audit(1755836457.239:9091): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.840517][ T36] audit: type=1400 audit(1755836457.239:9092): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.897607][ T36] audit: type=1400 audit(1755836457.289:9093): avc: denied { create } for pid=3190 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.935141][ T36] audit: type=1400 audit(1755836457.289:9094): avc: denied { setopt } for pid=3190 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.977322][ T36] audit: type=1400 audit(1755836457.319:9095): avc: denied { setopt } for pid=3190 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.998248][ T36] audit: type=1400 audit(1755836457.349:9096): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.022895][ T36] audit: type=1400 audit(1755836457.349:9097): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.053062][ T36] audit: type=1400 audit(1755836457.349:9098): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.079244][ T36] audit: type=1400 audit(1755836457.399:9099): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.201495][ T31] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 112.353835][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.364412][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.375039][ T31] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.384738][ T3210] rust_binder: Read failure Err(EFAULT) in pid:658 [ 112.392666][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.432096][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.463402][ T31] usb 1-1: Product: syz [ 112.473483][ T31] usb 1-1: Manufacturer: syz [ 112.478098][ T31] usb 1-1: SerialNumber: syz [ 112.851402][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 113.005846][ T9] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.033542][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.056770][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.072987][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 113.083048][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.104494][ T3222] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 113.312279][ T3231] validate_nla: 10 callbacks suppressed [ 113.312299][ T3231] netlink: 'syz.4.1053': attribute type 4 has an invalid length. [ 113.328991][ T3231] netlink: 'syz.4.1053': attribute type 4 has an invalid length. [ 113.447991][ T3234] rust_binder: Read failure Err(EFAULT) in pid:238 [ 113.528442][ T31] cdc_ncm 1-1:1.0: bind() failure [ 113.545718][ T31] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 113.558533][ T31] cdc_ncm 1-1:1.1: bind() failure [ 113.586271][ T3243] netlink: 'syz.2.1058': attribute type 4 has an invalid length. [ 113.707232][ T3247] netlink: 'syz.2.1060': attribute type 4 has an invalid length. [ 113.747448][ T3251] netlink: 'syz.2.1062': attribute type 4 has an invalid length. [ 113.756005][ T568] usb 1-1: USB disconnect, device number 23 [ 113.774742][ T3251] netlink: 'syz.2.1062': attribute type 4 has an invalid length. [ 113.908030][ T3255] rust_binder: Read failure Err(EFAULT) in pid:676 [ 114.039659][ T3266] netlink: 'syz.2.1068': attribute type 4 has an invalid length. [ 114.129420][ T3271] netlink: 'syz.4.1070': attribute type 4 has an invalid length. [ 114.522451][ T3291] netlink: 'syz.4.1079': attribute type 4 has an invalid length. [ 114.552113][ T9] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 114.561624][ T9] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input14 [ 114.603454][ T9] usb 4-1: USB disconnect, device number 15 [ 114.661473][ T3299] incfs: Error accessing: ./file0. [ 114.666714][ T3299] incfs: mount failed -20 [ 114.872843][ T3307] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 115.248692][ T3318] netlink: 'syz.2.1090': attribute type 4 has an invalid length. [ 115.381129][ T3326] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.395838][ T3326] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 115.409981][ T3326] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 115.656530][ T31] rust_binder: 3305: removing orphan mapping 0:112 [ 115.674373][ T3347] veth1_vlan: mtu greater than device maximum [ 115.765316][ T3354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'. [ 115.881659][ T3361] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 115.881686][ T3361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 115.906093][ T3361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:278 [ 116.380686][ T3379] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 116.498397][ T3383] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.502438][ T3383] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 116.508893][ T3383] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 116.516922][ T3383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:762 [ 116.771975][ T36] kauditd_printk_skb: 664 callbacks suppressed [ 116.771992][ T36] audit: type=1400 audit(1755836462.249:9762): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.818730][ T36] audit: type=1400 audit(1755836462.249:9763): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.843852][ T36] audit: type=1400 audit(1755836462.249:9764): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.869356][ T36] audit: type=1400 audit(1755836462.279:9765): avc: denied { create } for pid=3392 comm="syz.0.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.889813][ T36] audit: type=1400 audit(1755836462.279:9766): avc: denied { read write } for pid=3392 comm="syz.0.1120" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 116.921366][ T36] audit: type=1400 audit(1755836462.279:9767): avc: denied { read write open } for pid=3392 comm="syz.0.1120" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 116.991382][ T36] audit: type=1400 audit(1755836462.279:9768): avc: denied { mounton } for pid=3392 comm="syz.0.1120" path="/328/file0" dev="tmpfs" ino=1747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.051351][ T36] audit: type=1400 audit(1755836462.279:9769): avc: denied { mount } for pid=3392 comm="syz.0.1120" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 117.073434][ T36] audit: type=1400 audit(1755836462.369:9770): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.121955][ T36] audit: type=1400 audit(1755836462.369:9771): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.163483][ T568] rust_binder: 3377: removing orphan mapping 0:112 [ 117.496683][ T3433] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.541386][ T332] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 117.703486][ T332] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 117.711584][ T332] usb 5-1: config 0 has no interface number 0 [ 117.717772][ T332] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 117.728486][ T332] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 117.739528][ T332] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 117.750301][ T332] usb 5-1: config 0 interface 2 has no altsetting 0 [ 117.759407][ T332] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 117.768558][ T332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.776578][ T332] usb 5-1: Product: syz [ 117.780815][ T332] usb 5-1: Manufacturer: syz [ 117.785450][ T332] usb 5-1: SerialNumber: syz [ 117.791284][ T332] usb 5-1: config 0 descriptor?? [ 117.798177][ T3423] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 117.806627][ T3423] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 118.423181][ T3447] validate_nla: 6 callbacks suppressed [ 118.423198][ T3447] netlink: 'syz.2.1139': attribute type 4 has an invalid length. [ 118.437424][ T3447] netlink: 'syz.2.1139': attribute type 4 has an invalid length. [ 118.511930][ T3449] netlink: 'syz.3.1140': attribute type 4 has an invalid length. [ 120.393120][ T331] usb 5-1: USB disconnect, device number 10 [ 120.513807][ T3473] netlink: 'syz.4.1149': attribute type 4 has an invalid length. [ 120.522426][ T3473] netlink: 'syz.4.1149': attribute type 4 has an invalid length. [ 120.566419][ T3475] netlink: 'syz.4.1150': attribute type 4 has an invalid length. [ 120.694011][ T331] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 120.712906][ T331] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.281794][ T3497] netlink: 'syz.0.1158': attribute type 4 has an invalid length. [ 121.295353][ T3497] netlink: 'syz.0.1158': attribute type 4 has an invalid length. [ 121.334395][ T3499] netlink: 'syz.0.1159': attribute type 4 has an invalid length. [ 121.681745][ T331] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 121.831888][ T36] kauditd_printk_skb: 334 callbacks suppressed [ 121.831905][ T36] audit: type=1400 audit(1755836467.309:10104): avc: denied { ioctl } for pid=3504 comm="syz.0.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.863328][ T36] audit: type=1400 audit(1755836467.309:10105): avc: denied { ioctl } for pid=3504 comm="syz.0.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.888809][ T36] audit: type=1400 audit(1755836467.359:10106): avc: denied { ioctl } for pid=3504 comm="syz.0.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.889746][ T331] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.914533][ T36] audit: type=1400 audit(1755836467.359:10107): avc: denied { ioctl } for pid=3504 comm="syz.0.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.945817][ T331] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.965757][ T36] audit: type=1400 audit(1755836467.359:10108): avc: denied { ioctl } for pid=3504 comm="syz.0.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.971386][ T331] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.991766][ T36] audit: type=1400 audit(1755836467.409:10109): avc: denied { ioctl } for pid=3504 comm="syz.0.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.030366][ T331] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.034490][ T36] audit: type=1400 audit(1755836467.419:10110): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.040228][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.065253][ T36] audit: type=1400 audit(1755836467.419:10111): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.080668][ T331] usb 1-1: Product: syz [ 122.097685][ T36] audit: type=1400 audit(1755836467.419:10112): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.101091][ T331] usb 1-1: Manufacturer: syz [ 122.127294][ T36] audit: type=1400 audit(1755836467.499:10113): avc: denied { ioctl } for pid=3504 comm="syz.0.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.131120][ T331] usb 1-1: SerialNumber: syz [ 122.249911][ T3519] netlink: 'syz.2.1167': attribute type 4 has an invalid length. [ 122.479643][ T3528] SELinux: failed to load policy [ 122.486511][ T3528] rust_binder: 769: no such ref 1 [ 122.537443][ T3529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:769 [ 123.195679][ T331] cdc_ncm 1-1:1.0: bind() failure [ 123.212002][ T331] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 123.221042][ T331] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 123.231696][ T331] usb 1-1: USB disconnect, device number 24 [ 123.463051][ T3539] validate_nla: 2 callbacks suppressed [ 123.463076][ T3539] netlink: 'syz.4.1176': attribute type 4 has an invalid length. [ 123.494908][ T3539] netlink: 'syz.4.1176': attribute type 4 has an invalid length. [ 123.535502][ T3542] netlink: 'syz.4.1177': attribute type 4 has an invalid length. [ 124.028245][ T3560] netlink: 'syz.4.1185': attribute type 4 has an invalid length. [ 124.045450][ T3560] netlink: 'syz.4.1185': attribute type 4 has an invalid length. [ 124.110246][ T3563] netlink: 'syz.4.1186': attribute type 4 has an invalid length. [ 124.345873][ T3572] rust_binder: Error while translating object. [ 124.345922][ T3572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 124.355738][ T3572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:345 [ 124.510273][ T3580] netlink: 'syz.3.1194': attribute type 4 has an invalid length. [ 124.528377][ T3580] netlink: 'syz.3.1194': attribute type 4 has an invalid length. [ 124.568756][ T3582] netlink: 'syz.3.1195': attribute type 4 has an invalid length. [ 124.621354][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 124.783518][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.793684][ T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.804322][ T31] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.821268][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.831370][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.839369][ T31] usb 5-1: Product: syz [ 124.844524][ T31] usb 5-1: Manufacturer: syz [ 124.849121][ T31] usb 5-1: SerialNumber: syz [ 125.030023][ T3589] ip6gretap0: mtu less than device minimum [ 125.255668][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 125.478159][ T3595] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 125.767104][ T3605] netlink: 'syz.3.1203': attribute type 4 has an invalid length. [ 125.874595][ T31] cdc_ncm 5-1:1.0: bind() failure [ 125.880915][ T31] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 125.906303][ T31] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 125.927210][ T31] usb 5-1: USB disconnect, device number 11 [ 125.938638][ T1691] udevd[1691]: setting owner of /dev/bus/usb/005/011 to uid=0, gid=0 failed: No such file or directory [ 126.712602][ T3642] rust_binder: Error while translating object. [ 126.712641][ T3642] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 126.718916][ T3642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:789 [ 126.851736][ T36] kauditd_printk_skb: 403 callbacks suppressed [ 126.851754][ T36] audit: type=1400 audit(1755836472.329:10517): avc: denied { ioctl } for pid=3638 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.911529][ T330] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 126.919655][ T36] audit: type=1400 audit(1755836472.389:10518): avc: denied { ioctl } for pid=3638 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.944680][ T36] audit: type=1400 audit(1755836472.389:10519): avc: denied { ioctl } for pid=3638 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.969716][ T36] audit: type=1400 audit(1755836472.389:10520): avc: denied { ioctl } for pid=3638 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.995361][ T36] audit: type=1400 audit(1755836472.479:10521): avc: denied { ioctl } for pid=3638 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.071440][ T330] usb 5-1: Using ep0 maxpacket: 8 [ 127.077064][ T36] audit: type=1400 audit(1755836472.549:10522): avc: denied { ioctl } for pid=3638 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.102296][ T36] audit: type=1400 audit(1755836472.549:10523): avc: denied { ioctl } for pid=3638 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.127654][ T36] audit: type=1400 audit(1755836472.599:10524): avc: denied { ioctl } for pid=3638 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.152783][ T36] audit: type=1400 audit(1755836472.599:10525): avc: denied { ioctl } for pid=3638 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.178049][ T330] usb 5-1: config 1 interface 0 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 32 [ 127.178413][ T36] audit: type=1400 audit(1755836472.629:10526): avc: denied { ioctl } for pid=3638 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.187979][ T330] usb 5-1: config 1 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.225880][ T330] usb 5-1: config 1 interface 0 has no altsetting 0 [ 127.235066][ T330] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 127.244170][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.252199][ T330] usb 5-1: Product: á Œ [ 127.256355][ T330] usb 5-1: Manufacturer: 丙輛만냢襳澋 [ 127.262259][ T330] usb 5-1: SerialNumber: syz [ 127.269299][ T3640] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.678220][ T3673] validate_nla: 7 callbacks suppressed [ 128.678239][ T3673] netlink: 'syz.3.1231': attribute type 4 has an invalid length. [ 128.762501][ T3677] netlink: 'syz.3.1233': attribute type 4 has an invalid length. [ 128.772305][ T3677] netlink: 'syz.3.1233': attribute type 4 has an invalid length. [ 128.870611][ T3681] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1235'. [ 129.070353][ T3686] FAULT_INJECTION: forcing a failure. [ 129.070353][ T3686] name failslab, interval 1, probability 0, space 0, times 0 [ 129.083283][ T3686] CPU: 0 UID: 0 PID: 3686 Comm: syz.3.1237 Not tainted syzkaller #0 00ad55236d4531c7fb9f608a968d4071287717d4 [ 129.083320][ T3686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.083332][ T3686] Call Trace: [ 129.083339][ T3686] [ 129.083346][ T3686] __dump_stack+0x21/0x30 [ 129.083374][ T3686] dump_stack_lvl+0x10c/0x190 [ 129.083396][ T3686] ? __cfi_dump_stack_lvl+0x10/0x10 [ 129.083415][ T3686] ? release_sock+0x171/0x1f0 [ 129.083434][ T3686] dump_stack+0x19/0x20 [ 129.083453][ T3686] should_fail_ex+0x3d9/0x530 [ 129.083476][ T3686] should_failslab+0xac/0x100 [ 129.083493][ T3686] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 129.083517][ T3686] ? __alloc_skb+0x10c/0x370 [ 129.083538][ T3686] __alloc_skb+0x10c/0x370 [ 129.083558][ T3686] netlink_alloc_large_skb+0xf7/0x1b0 [ 129.083588][ T3686] netlink_sendmsg+0x586/0xaf0 [ 129.083614][ T3686] ? __cfi_netlink_sendmsg+0x10/0x10 [ 129.083639][ T3686] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 129.083660][ T3686] ? security_socket_sendmsg+0x33/0xd0 [ 129.083688][ T3686] sock_write_iter+0x49c/0x4f0 [ 129.083706][ T3686] ? __cfi_sock_write_iter+0x10/0x10 [ 129.083725][ T3686] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 129.083746][ T3686] vfs_write+0x697/0xe80 [ 129.083763][ T3686] ? __cfi_sock_write_iter+0x10/0x10 [ 129.083781][ T3686] ? __cfi_vfs_write+0x10/0x10 [ 129.083800][ T3686] ksys_write+0x141/0x250 [ 129.083817][ T3686] ? __cfi_ksys_write+0x10/0x10 [ 129.083835][ T3686] ? __kasan_check_read+0x15/0x20 [ 129.083861][ T3686] __x64_sys_write+0x7f/0x90 [ 129.083877][ T3686] x64_sys_call+0x271c/0x2ee0 [ 129.083903][ T3686] do_syscall_64+0x58/0xf0 [ 129.083924][ T3686] ? clear_bhb_loop+0x50/0xa0 [ 129.083942][ T3686] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 129.083967][ T3686] RIP: 0033:0x7fb98118ebe9 [ 129.083982][ T3686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.083998][ T3686] RSP: 002b:00007fb981f19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.084018][ T3686] RAX: ffffffffffffffda RBX: 00007fb9813b5fa0 RCX: 00007fb98118ebe9 [ 129.084032][ T3686] RDX: 00000000000000fc RSI: 00002000000002c0 RDI: 0000000000000003 [ 129.084044][ T3686] RBP: 00007fb981f19090 R08: 0000000000000000 R09: 0000000000000000 [ 129.084055][ T3686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.084067][ T3686] R13: 00007fb9813b6038 R14: 00007fb9813b5fa0 R15: 00007fff55a24688 [ 129.084080][ T3686] [ 129.389251][ T3693] netlink: 'syz.3.1240': attribute type 4 has an invalid length. [ 129.479907][ T3697] netlink: 'syz.0.1242': attribute type 4 has an invalid length. [ 129.491202][ T332] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 129.504655][ T3697] netlink: 'syz.0.1242': attribute type 4 has an invalid length. [ 129.519281][ T332] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.596217][ T3701] Invalid logical block size (1748) [ 129.624128][ T3701] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1243'. [ 129.685630][ T330] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 128 proto 1 vid 0x04B8 pid 0x0202 [ 129.722585][ T330] usb 5-1: USB disconnect, device number 12 [ 129.754661][ T330] usblp0: removed [ 130.032529][ T3716] netlink: 'syz.4.1249': attribute type 4 has an invalid length. [ 130.178165][ T3720] netlink: 'syz.4.1251': attribute type 4 has an invalid length. [ 130.214252][ T3720] netlink: 'syz.4.1251': attribute type 4 has an invalid length. [ 130.393357][ T3725] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3356708090 (26853664720 ns) > initial count (9735166528 ns). Using initial count to start timer. [ 130.408672][ T3727] rust_binder: Error while translating object. [ 130.410866][ T3727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 130.427838][ T3727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:801 [ 130.431655][ T3725] kvm: Disabled LAPIC found during irq injection [ 130.625262][ T3737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:370 [ 130.671430][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 130.795937][ T3741] netlink: 'syz.0.1259': attribute type 4 has an invalid length. [ 130.841345][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 130.851506][ T31] usb 4-1: config 1 interface 0 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 32 [ 130.861469][ T31] usb 4-1: config 1 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.875121][ T568] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 130.875126][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 130.897433][ T31] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 130.911014][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.920251][ T31] usb 4-1: Product: á Œ [ 130.925567][ T31] usb 4-1: Manufacturer: 丙輛만냢襳澋 [ 130.931563][ T31] usb 4-1: SerialNumber: syz [ 130.940446][ T3729] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.024943][ T568] usb 5-1: unable to get BOS descriptor or descriptor too short [ 131.034079][ T568] usb 5-1: not running at top speed; connect to a high speed hub [ 131.044271][ T568] usb 5-1: config 137 has an invalid interface number: 245 but max is 0 [ 131.054359][ T568] usb 5-1: config 137 has no interface number 0 [ 131.071358][ T568] usb 5-1: config 137 interface 245 has no altsetting 0 [ 131.081072][ T568] usb 5-1: language id specifier not provided by device, defaulting to English [ 131.102659][ T568] usb 5-1: New USB device found, idVendor=1b3d, idProduct=015a, bcdDevice=6a.bc [ 131.111799][ T568] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.119785][ T568] usb 5-1: Product: syz [ 131.124011][ T568] usb 5-1: Manufacturer: syz [ 131.128602][ T568] usb 5-1: SerialNumber: syz [ 131.134288][ T330] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 131.155670][ T330] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.359024][ T568] hub 5-1:137.245: bad descriptor, ignoring hub [ 131.368908][ T568] hub 5-1:137.245: probe with driver hub failed with error -5 [ 131.377128][ T568] ftdi_sio 5-1:137.245: FTDI USB Serial Device converter detected [ 131.385745][ T568] ftdi_sio ttyUSB0: unknown device type: 0x6abc [ 131.411805][ T568] usb 5-1: USB disconnect, device number 13 [ 131.418202][ T568] ftdi_sio 5-1:137.245: device disconnected [ 131.863620][ T36] kauditd_printk_skb: 657 callbacks suppressed [ 131.863637][ T36] audit: type=1400 audit(1755836477.339:11184): avc: denied { read } for pid=3728 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 131.865374][ T330] rust_binder: 3732: removing orphan mapping 0:24 [ 131.873502][ T36] audit: type=1400 audit(1755836477.339:11185): avc: denied { read } for pid=3728 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 131.915269][ T36] audit: type=1400 audit(1755836477.369:11186): avc: denied { read write } for pid=2292 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.941518][ T36] audit: type=1400 audit(1755836477.369:11187): avc: denied { read write open } for pid=2292 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.004707][ T36] audit: type=1400 audit(1755836477.369:11188): avc: denied { ioctl } for pid=2292 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.032590][ T36] audit: type=1400 audit(1755836477.389:11189): avc: denied { read } for pid=3728 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.035666][ T3760] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1266'. [ 132.096680][ T36] audit: type=1400 audit(1755836477.389:11190): avc: denied { read } for pid=3728 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.171399][ T36] audit: type=1400 audit(1755836477.389:11191): avc: denied { read } for pid=3728 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.230470][ T36] audit: type=1400 audit(1755836477.389:11192): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.282543][ T36] audit: type=1400 audit(1755836477.389:11193): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.450626][ T568] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 132.461280][ T568] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.491170][ T31] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 128 proto 1 vid 0x04B8 pid 0x0202 [ 133.522393][ T31] usb 4-1: USB disconnect, device number 16 [ 133.541513][ T31] usblp0: removed [ 133.630143][ T64] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 133.646805][ T64] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.923911][ T3813] validate_nla: 4 callbacks suppressed [ 133.923930][ T3813] netlink: 'syz.2.1287': attribute type 4 has an invalid length. [ 133.939518][ T3813] netlink: 'syz.2.1287': attribute type 4 has an invalid length. [ 134.444383][ T3826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1293'. [ 134.583064][ T3834] netlink: 'syz.4.1296': attribute type 4 has an invalid length. [ 134.617191][ T3834] netlink: 'syz.4.1296': attribute type 4 has an invalid length. [ 134.728903][ T3843] cgroup: Need name or subsystem set [ 134.825156][ T3849] netlink: 'syz.3.1304': attribute type 4 has an invalid length. [ 135.012536][ T3861] netlink: 'syz.4.1309': attribute type 4 has an invalid length. [ 135.024510][ T3861] netlink: 'syz.4.1309': attribute type 4 has an invalid length. [ 135.244492][ T3866] netlink: 'syz.4.1311': attribute type 4 has an invalid length. [ 136.151371][ T64] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 136.304115][ T64] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 136.318812][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.338736][ T64] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 136.351375][ T64] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 136.365015][ T64] usb 1-1: Manufacturer: syz [ 136.371195][ T64] usb 1-1: config 0 descriptor?? [ 136.583509][ T10] usb 1-1: USB disconnect, device number 25 [ 136.898473][ T36] kauditd_printk_skb: 662 callbacks suppressed [ 136.898490][ T36] audit: type=1400 audit(1755836482.369:11841): avc: denied { create } for pid=3921 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.952547][ T36] audit: type=1400 audit(1755836482.399:11842): avc: denied { create } for pid=3921 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.991350][ T36] audit: type=1400 audit(1755836482.399:11843): avc: denied { write } for pid=3921 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.024540][ T36] audit: type=1400 audit(1755836482.409:11844): avc: denied { read } for pid=3921 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.045087][ T36] audit: type=1400 audit(1755836482.409:11845): avc: denied { read } for pid=3921 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.089577][ T36] audit: type=1400 audit(1755836482.409:11846): avc: denied { sys_module } for pid=3921 comm="syz.3.1337" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 137.164880][ T36] audit: type=1400 audit(1755836482.409:11847): avc: denied { write } for pid=3921 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.216010][ T36] audit: type=1400 audit(1755836482.429:11848): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.293516][ T36] audit: type=1400 audit(1755836482.429:11849): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.365410][ T36] audit: type=1400 audit(1755836482.429:11850): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.951344][ T64] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 138.104021][ T64] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.121336][ T64] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 138.151339][ T64] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 138.160471][ T64] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 138.181339][ T64] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 138.203813][ T64] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.221336][ T64] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.229407][ T64] usb 4-1: Product: syz [ 138.239443][ T64] usb 4-1: Manufacturer: syz [ 138.252956][ T64] cdc_wdm 4-1:1.0: skipping garbage [ 138.258195][ T64] cdc_wdm 4-1:1.0: skipping garbage [ 138.272687][ T64] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 138.279422][ T64] cdc_wdm 4-1:1.0: Unknown control protocol [ 138.383430][ T3957] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 138.456510][ T31] usb 4-1: USB disconnect, device number 17 [ 138.703198][ T3960] rust_binder: Write failure EFAULT in pid:830 [ 138.885993][ T3972] 9pnet_virtio: no channels available for device syz [ 140.067147][ T4022] syzkaller0: entered promiscuous mode [ 140.072731][ T4022] syzkaller0: entered allmulticast mode [ 140.330249][ T4030] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 140.532444][ T4032] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 141.169504][ T4067] syzkaller0: entered promiscuous mode [ 141.175514][ T4067] syzkaller0: entered allmulticast mode [ 141.182549][ T295] syzkaller0: tun_net_xmit 48 [ 141.197984][ T4067] syzkaller0: create flow: hash 1353638183 index 1 [ 141.218719][ T4066] syzkaller0: delete flow: hash 1353638183 index 1 [ 142.701344][ T36] kauditd_printk_skb: 1821 callbacks suppressed [ 142.701360][ T36] audit: type=1400 audit(1755836488.169:13672): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.786350][ T36] audit: type=1400 audit(1755836488.169:13673): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.820804][ T36] audit: type=1400 audit(1755836488.169:13674): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.884995][ T36] audit: type=1400 audit(1755836488.199:13675): avc: denied { name_bind } for pid=4088 comm="syz.2.1408" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 142.942718][ T4099] syzkaller0: left promiscuous mode [ 142.956304][ T36] audit: type=1400 audit(1755836488.199:13676): avc: denied { node_bind } for pid=4088 comm="syz.2.1408" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 142.958200][ T4099] syzkaller0: left allmulticast mode [ 143.021343][ T36] audit: type=1400 audit(1755836488.219:13677): avc: denied { read write } for pid=4086 comm="syz.0.1416" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 143.030048][ T4102] tipc: Started in network mode [ 143.053689][ T4102] tipc: Node identity 22fbd4ecaf68, cluster identity 4711 [ 143.059054][ T36] audit: type=1400 audit(1755836488.219:13678): avc: denied { read write open } for pid=4086 comm="syz.0.1416" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 143.061438][ T4102] tipc: Enabled bearer , priority 0 [ 143.104615][ T36] audit: type=1400 audit(1755836488.229:13679): avc: denied { mounton } for pid=4086 comm="syz.0.1416" path="/406/file0" dev="tmpfs" ino=2161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 143.157432][ T4106] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 143.171344][ T36] audit: type=1400 audit(1755836488.229:13680): avc: denied { mount } for pid=4086 comm="syz.0.1416" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 143.196491][ T4106] overlayfs: failed to set xattr on upper [ 143.203530][ T4106] overlayfs: ...falling back to redirect_dir=nofollow. [ 143.214998][ T36] audit: type=1400 audit(1755836488.229:13681): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.243397][ T4106] overlayfs: ...falling back to uuid=null. [ 143.521406][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 143.671356][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 143.678319][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 143.686689][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 143.695477][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 143.704459][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.714112][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.723754][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.736830][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 143.745862][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.754974][ T10] usb 1-1: config 0 descriptor?? [ 143.898239][ T4135] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 143.911738][ T4135] overlayfs: failed to set xattr on upper [ 143.921331][ T4135] overlayfs: ...falling back to redirect_dir=nofollow. [ 143.934009][ T4135] overlayfs: ...falling back to uuid=null. [ 143.980597][ T4111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.991455][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 144.012744][ T4111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.056261][ T10] usb 1-1: USB disconnect, device number 26 [ 144.071514][ T10] usblp0: removed [ 144.181352][ T332] tipc: Node number set to 2375275756 [ 144.229493][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.271384][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 146.271382][ T2450] Bluetooth: hci0: command 0x1003 tx timeout [ 146.881900][ T4193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 147.081352][ T332] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 147.090554][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 147.113029][ T4205] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 147.123117][ T4205] overlayfs: failed to set xattr on upper [ 147.131355][ T4205] overlayfs: ...falling back to redirect_dir=nofollow. [ 147.139721][ T4205] overlayfs: ...falling back to uuid=null. [ 147.241342][ T332] usb 4-1: Using ep0 maxpacket: 32 [ 147.248663][ T332] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 147.257674][ T332] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 147.266295][ T332] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 147.275272][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.284965][ T332] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 147.294649][ T332] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 147.307652][ T332] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 147.316723][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.326866][ T332] usb 4-1: config 0 descriptor?? [ 147.556154][ T332] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 147.557055][ T4191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.581264][ T4191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.670286][ C1] usblp0: nonzero read bulk status received: -71 [ 147.670447][ T568] usb 4-1: USB disconnect, device number 18 [ 147.676763][ T4191] usblp0: error -71 reading from printer [ 147.690076][ T568] usblp0: removed [ 147.921410][ T36] kauditd_printk_skb: 393 callbacks suppressed [ 147.921445][ T36] audit: type=1400 audit(1755836493.389:14075): avc: denied { unmount } for pid=2292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 147.951798][ T36] audit: type=1400 audit(1755836493.399:14076): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.975945][ T36] audit: type=1400 audit(1755836493.399:14077): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.032483][ T36] audit: type=1400 audit(1755836493.399:14078): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.088399][ T36] audit: type=1400 audit(1755836493.429:14079): avc: denied { read write } for pid=2292 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.114507][ T36] audit: type=1400 audit(1755836493.429:14080): avc: denied { read write open } for pid=2292 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.161432][ T36] audit: type=1400 audit(1755836493.429:14081): avc: denied { ioctl } for pid=2292 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.194250][ T36] audit: type=1400 audit(1755836493.489:14082): avc: denied { read } for pid=4215 comm="syz.4.1464" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.219446][ T36] audit: type=1400 audit(1755836493.489:14083): avc: denied { read open } for pid=4215 comm="syz.4.1464" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.244308][ T36] audit: type=1400 audit(1755836493.489:14084): avc: denied { ioctl } for pid=4215 comm="syz.4.1464" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.611098][ T4241] tipc: Started in network mode [ 148.621358][ T4241] tipc: Node identity 4, cluster identity 4711 [ 148.627550][ T4241] tipc: Node number set to 4 [ 149.151393][ T2450] Bluetooth: hci0: command 0x1003 tx timeout [ 149.151415][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 149.710208][ T4266] 9pnet_virtio: no channels available for device syz [ 150.018582][ T4283] tmpfs: Unknown parameter 'usrquota' [ 150.253713][ T4296] netlink: 380 bytes leftover after parsing attributes in process `syz.2.1501'. [ 150.287991][ T4298] 9pnet_virtio: no channels available for device syz [ 150.478893][ T4306] can1: slcan on ptm1. [ 150.528137][ T4304] fuse: root generation should be zero [ 150.713439][ T4277] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI [ 150.726062][ T4277] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 150.734478][ T4277] CPU: 0 UID: 0 PID: 4277 Comm: syz.0.1491 Not tainted syzkaller #0 00ad55236d4531c7fb9f608a968d4071287717d4 [ 150.746025][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.756093][ T4277] RIP: 0010:fuse_file_release+0x29e/0x400 [ 150.761834][ T4277] Code: 00 74 12 48 89 df e8 81 f3 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 34 f2 a0 ff 48 ba 00 00 00 00 00 fc [ 150.781449][ T4277] RSP: 0018:ffffc9000df87cf0 EFLAGS: 00010202 [ 150.787527][ T4277] RAX: 0000000000000019 RBX: 0000000000000001 RCX: ffff88810ee78000 [ 150.795511][ T4277] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff88811cc37b78 [ 150.803492][ T4277] RBP: ffffc9000df87d38 R08: 0000000000000003 R09: 0000000000000004 [ 150.811480][ T4277] R10: dffffc0000000000 R11: fffff52001bf0f70 R12: 0000000000048000 [ 150.819466][ T4277] R13: ffff88812f5fb600 R14: ffff88811cc37b00 R15: 00000000000000c8 [ 150.827459][ T4277] FS: 000055558f352500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 150.836396][ T4277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.843164][ T4277] CR2: 00007fb981f18f98 CR3: 0000000120c7a000 CR4: 00000000003526b0 [ 150.851151][ T4277] Call Trace: [ 150.854432][ T4277] [ 150.857365][ T4277] fuse_release_common+0x80/0xb0 [ 150.862321][ T4277] ? __cfi_fuse_dir_release+0x10/0x10 [ 150.867706][ T4277] fuse_dir_release+0x1e/0x30 [ 150.872398][ T4277] __fput+0x1fb/0xa00 [ 150.876403][ T4277] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 150.881963][ T4277] ____fput+0x20/0x30 [ 150.885954][ T4277] task_work_run+0x1e3/0x250 [ 150.890551][ T4277] ? __cfi_task_work_run+0x10/0x10 [ 150.895669][ T4277] ? __kasan_check_write+0x18/0x20 [ 150.900798][ T4277] resume_user_mode_work+0x36/0x50 [ 150.905932][ T4277] syscall_exit_to_user_mode+0x64/0xb0 [ 150.911399][ T4277] do_syscall_64+0x64/0xf0 [ 150.915921][ T4277] ? clear_bhb_loop+0x50/0xa0 [ 150.920611][ T4277] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 150.926520][ T4277] RIP: 0033:0x7f57bb38ebe9 [ 150.930943][ T4277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.950589][ T4277] RSP: 002b:00007fffa7f26028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 150.959047][ T4277] RAX: 0000000000000000 RBX: 00007f57bb5b7da0 RCX: 00007f57bb38ebe9 [ 150.967119][ T4277] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 150.975117][ T4277] RBP: 00007f57bb5b7da0 R08: 00000000000000d0 R09: 0000000ba7f2631f [ 150.983102][ T4277] R10: 00007f57bb5b7cb0 R11: 0000000000000246 R12: 0000000000024cac [ 150.991088][ T4277] R13: 00007fffa7f26120 R14: ffffffffffffffff R15: 00007fffa7f26140 [ 150.999080][ T4277] [ 151.002111][ T4277] Modules linked in: [ 151.006105][ T4277] ---[ end trace 0000000000000000 ]--- [ 151.024488][ T4277] RIP: 0010:fuse_file_release+0x29e/0x400 [ 151.038614][ T4277] Code: 00 74 12 48 89 df e8 81 f3 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 34 f2 a0 ff 48 ba 00 00 00 00 00 fc [ 151.089297][ T4277] RSP: 0018:ffffc9000df87cf0 EFLAGS: 00010202 [ 151.111719][ T4277] RAX: 0000000000000019 RBX: 0000000000000001 RCX: ffff88810ee78000 [ 151.140272][ T4277] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff88811cc37b78 [ 151.163101][ T4277] RBP: ffffc9000df87d38 R08: 0000000000000003 R09: 0000000000000004 [ 151.185216][ T4277] R10: dffffc0000000000 R11: fffff52001bf0f70 R12: 0000000000048000 [ 151.194420][ T4277] R13: ffff88812f5fb600 R14: ffff88811cc37b00 R15: 00000000000000c8 [ 151.203814][ T4277] FS: 000055558f352500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 151.213611][ T4277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.220310][ T4277] CR2: 00007f745743cf98 CR3: 0000000120c7a000 CR4: 00000000003526b0 [ 151.229128][ T4277] Kernel panic - not syncing: Fatal exception [ 151.235442][ T4277] Kernel Offset: disabled [ 151.239756][ T4277] Rebooting in 86400 seconds..