last executing test programs: 4.428338111s ago: executing program 2 (id=493): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe8000000000000000000000000000bbff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000200000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1a0}}, 0x0) 4.428085411s ago: executing program 2 (id=494): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x42) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r0, 0x293f000) 4.427635361s ago: executing program 2 (id=495): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000002c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000b4b000/0x3000)=nil, 0x400000, 0x2, 0x2}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, &(0x7f00000000c0), 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) 4.389927492s ago: executing program 2 (id=497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="796100000000000500007e"], 0x84}}, 0x0) 4.335180853s ago: executing program 2 (id=500): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000280)={0x7, 0x10, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x1f, 0xc1da, 0x804a080, 0x0, 0x3, 0x1, 0xfffffffc, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) mprotect(&(0x7f00003e4000/0x2000)=nil, 0x2000, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x335d03, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, 0x0, 0x0, 0x3000}]) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000045c0)='/proc/self/attr/exec\x00', 0x2, 0x0) write(r6, &(0x7f0000000380)="c0b26f04fd", 0x5) creat(&(0x7f0000000000)='./file0/file0\x00', 0x1c4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r7 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x87, 0x1038, 0x12b6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xc0, 0xff, [{{0x9, 0x4, 0x0, 0xc1, 0x1, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0xba1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x8, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x1, 0xc, 0xc0}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x0, 0x8, 0x6, 0xff, 0x16}, 0x38, &(0x7f00000003c0)={0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xa, 0x1, 0x18}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5f, 0xb, 0x40}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x1, 0x2, 0xeb, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "06e7e97ff0e4f329df394ad7dc82b70c"}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x409}}]}) syz_usb_control_io$hid(r7, &(0x7f00000006c0)={0x24, &(0x7f0000000580)={0x20, 0x23, 0x7d, {0x7d, 0x21, "2fb3d801c5e86cc35fc21145f0be27cbf6065ab6e184308c91b7f6e963f2844a86729d93bac4131c5732f669e44e56dd82353414087a07b8dde4c0d1ce0d300d25fcbdf3b1f9e134d50fa7e1de02e3ecb8da3efa98e818dfc11da228f75fcd02eb024328806fa735f578d7d51b17311d80a2536be3280d05eef27d"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f0000000640)={0x0, 0x22, 0xd, {[@local=@item_012={0x0, 0x2, 0xa}, @global=@item_012={0x1, 0x1, 0x2, "92"}, @main=@item_4={0x3, 0x0, 0xa, "443b98b6"}, @global=@item_4={0x3, 0x1, 0x8, "b48bea88"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0xf08}}}}, &(0x7f0000000940)={0x2c, &(0x7f0000000700)={0x40, 0x31, 0x10, "1ca7725a23839d25fd493fd39c5f33fc"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000800)={0x20, 0x1, 0xbf, "895007963d9e2f91fa80fc44b9b3ddb3fa1614888c2bb20a01c0858c64e148a663b4750946849d91c1f71a741a5b2217298371ce629cbb442162de9ca758f1b6670986485677568f23c22e9b1ce5d9e8e2519f999c467ff31118a10a27e56a32c86a3d99eb78fdfc08570caae48f09d3ff6e36f96819045caa20aeee9aee0d1c8d1b992e42b9c543a0ebff03a1e1e52aa9978d795ef4b6234893ba063bae0459aa304487023ccdb9c213ff3ae9cbccc58869029a85f3bb0ccc392f51072981"}, &(0x7f0000000900)={0x20, 0x3, 0x1}}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r9, 0x0, 0x16, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 3.068005182s ago: executing program 3 (id=528): madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/162) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xce) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) 3.065107352s ago: executing program 3 (id=530): r0 = socket$vsock_stream(0x28, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000030000000000ac1e000100000000000000000000000000000200000000000a00406f429fa7af6bbcbbaeaa0696bec0"], 0xb8}}, 0x0) 3.046245393s ago: executing program 3 (id=532): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x212080, 0x0) statx(0xffffffffffffffff, 0x0, 0x4000, 0x40, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2.971126364s ago: executing program 3 (id=533): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xe5, 0x12) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) quotactl$Q_SETQUOTA(0xffffffff80000803, 0x0, 0x0, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) ftruncate(r1, 0x3) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x103041, 0x80) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') write(0xffffffffffffffff, &(0x7f00000005c0)="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", 0x230) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000020000000000000000000114000400fc00000000000000000000000000000108000740000000012c00068014000500fe"], 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000200)=""/227, 0xe3}], 0x1, 0xfff, 0xfffffffe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0xfe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, {0x5002, 0x10000, 0x10, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x4000, 0x0, 0xb, 0x0, 0x0, 0x4}, {0x11000, 0xd000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0x80a0000, 0x80a0000, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x0, 0x0, 0x0, 0x82, 0x0, 0x40, 0x0, 0x0, 0x1}, {0x6000}, {0x1, 0xfffe}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x0, 0x3]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 2.535213731s ago: executing program 1 (id=545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) (async, rerun: 32) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async, rerun: 32) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) r2 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES8=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000bd9c515ca0bf85edaca8300000000"], 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io(r2, 0x0, 0x0) (async) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r3, &(0x7f0000000480), 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000000)=0x3) (async) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x16, 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x20, 0x1}, 0x4) (async) socket$packet(0x11, 0x3, 0x300) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100001c80000000060100605eb5246b4000c1ea00000000"]) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x100010000, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x6}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0x1, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x9, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x33}, {0x3, 0x3, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe2, '\x00', 0x6}, {0xf9, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) 2.480247531s ago: executing program 1 (id=546): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="0000000000000000000000000000000000000600", 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.451958292s ago: executing program 1 (id=547): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x11ff, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x6, 0x5, 0x0, 0xf439}) 2.436253342s ago: executing program 1 (id=548): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f0000000300)=[@increfs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@fd, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fd}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/163, 0xa3, 0x2, 0x3a}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x400}], 0x4, 0x0, 0x0}) fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) (async) r0 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) (async) fchdir(r1) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close(r2) (async) close(r2) open(&(0x7f0000000000)='./file0\x00', 0x400400, 0x198) 2.324243264s ago: executing program 1 (id=549): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x3, 0x4e1d, 0x0, 0xa, 0x0, 0x80, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x1}}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x80000000}, {{@in=@local, 0x0, 0x2b}, 0xa, @in6=@mcast2, 0x0, 0x1, 0x3}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.323612074s ago: executing program 1 (id=550): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0xfaff}}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) 935.036376ms ago: executing program 2 (id=570): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x120, 0x67, 0x0, 0xee01}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x640, 0x0, 0x800000000000}, 0xc6, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d2, 0x2b}, 0xa, @in6=@mcast2, 0x0, 0x2, 0x3}}, 0xe8) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0213716c02"], 0x10}}, 0x4004800) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000140)=0xfffffdfb) r6 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201949f85c600082505a8a440000102030109022400010109c0070904004a010701030109050102080001730909058202ff030103d0"], &(0x7f0000000600)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0xff, 0xdb, 0x3, 0x8, 0x5}, 0xd5, &(0x7f00000002c0)=ANY=[@ANYBLOB="050fd50001d0100beda2424e710173cac050070476c98cf93e3d913b376a63c9be69a97b532a3dc35023db33df8f680b21c9eaea020d563c016c496e77ee2f6bcf401e9592a1d69cc6b564e7c9a1b72d0396554ba2b9806f8727a76d5498729382163eef5d922fe1f9c9d3251769ca2e70db07f68ee9bcde61feea1c4615fae9934566b556b78ab86b64f8d593a372f25cf4d3d048edb06a74872a8e249edf120947d1f2942b68f0495efe2a0b898f73dd8dbfc2842bf0eee5981dcd14bd4018c200f9392929fe60dd5d067275eb967cffddbdecf4"], 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x419}}, {0x48, &(0x7f0000000440)=@string={0x48, 0x3, "db3a31eb8bc98461048242bd0ac6cde36908d2dc7646a40b326ce00ba6e23b7250f878d2882300ac47795beb65f410f7424938358b3a7997563c9eec6b061ee5439392c2adf1"}}, {0xe9, &(0x7f00000004c0)=@string={0xe9, 0x3, "e8168959a9951ab098f3a52f9e230d35413d1926f79522313442a39c561cdc64176ceaff3cdab37fb752eb086e1e2ae73ae376988291dc8e8d61b1c52c562502c3b04fb48bca4d60adf1e999cf3f5c3c7c10bb3302382b6bc535684468b1b82cd3aecfefba8c8a85848c92c84e88336367d30df9d4ce3df250f786eaffdef00280e921ac7f91dba6b3657b032d5e4b334a10abbe977a9fec7d70d81b4a9464b139bd013b5e286e46c0419dcb1b52629cd705482c3f05de212ed173c1e0a23d631c4698b23af7557232eeed9053ff3f0c7627758abedb8ef24dad574740f1922734e6978b916bdf"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io(r6, &(0x7f0000000900)={0x2c, &(0x7f0000000f00)=ANY=[@ANYBLOB="0006a5000000a50753acade6fd6d000000004dbcbe98192ccdc7f785f39636946c5d3f7ff42b0c46acf51e0583acc4baf9a5d8f1b8c474f6ef6ef1b2520bcd298854780c4c512d9691d77a5225956293ffe7b9185489b709284513d6938f7f17b0ef4a9b0e5af456af38769aa5b224764126be1e265ccba41a1e339eea4ee9c84f9dafb101d1d4479b99406b6f6518a9ed3eba1e1214f2e5a3c20e320e571406fac9fb6639116f065191a09414434b76ac6ba3dd6fdbacbffffc2f54b0132c"], &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)=ANY=[@ANYBLOB="000f0c0000000000084a0000000000000000"], &(0x7f0000000880)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0x1, 0x7, "09ca9160", "d2a5131e"}}, &(0x7f00000008c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0x5, 0x5, 0xe, 0xacec, 0x8001}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000940)={0x0, 0x16, 0xfd, "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"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000b40)={0x20, 0x0, 0x8, {0x1e0, 0x10, [0xf0]}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "3512"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000c80)={0x40, 0x13, 0x6}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "9d64"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x28}, &(0x7f0000000d80)={0x40, 0x1c, 0x1}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x5}}) ioctl$TUNGETSNDBUF(r4, 0x400454dc, &(0x7f0000001700)) close_range(r0, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x8) ioctl$PPPIOCSDEBUG(r7, 0x40047440, 0x0) close(r9) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0), 0x2, 0x0) 727.099728ms ago: executing program 3 (id=574): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a0080ff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff00000000000000000000000044010500"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 711.605449ms ago: executing program 3 (id=575): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)="00000000000110000000", 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 158.770627ms ago: executing program 0 (id=581): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc020003000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff00000000000000000000000044010500e0000002000000000000000000000000000004d632"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 158.576978ms ago: executing program 0 (id=582): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="f80000002100010000000000fefffffffc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a0001a884000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b66b6e000000000050001100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aaff0000000200000002000a00240009000d00000000000000040000000000000008000000000000000500000000000000200017000100000027bd70002dbd70002dbd700028bd700003000000ff0100000c001c"], 0xf8}}, 0x0) 143.393958ms ago: executing program 0 (id=583): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="6fb794593ccb97a081b4910f4b8b3c1055d018a4515ee8e2bd398c602434cc9e5c5cc08c283173126f63297443da489b58008ecc3c20d569c959178c1f393748a5fc89cf47537b30aee2d4de78caa39f9adc186a9a141d162c3e9117c0b33b9ea4fa12aaa6409921b9b8e7fb9b1d137437ba9132c4", 0x75}, {&(0x7f0000000280)="e6664a18239f2dd7171a04301503c8c97086ba14a7113ce72c23bc2419cb6b48002fcd61d4ec87319f6de9827a684095fde78869ae974b4ef9503349460fdee16337856d180186e93193423bc3a670abb8808d96db2cae18014cd433fba80ae488b70561830d56f942480b9414f26d295b594e567b9a9360c33a92fe7517fc86fce4eea3920ea59874fe4e3442f619c036fc", 0x92}, {&(0x7f0000000340)="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", 0x461}], 0x3, &(0x7f0000001340)=ANY=[], 0x110}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="b03e2cf377b008743dd4cda76e2f4de152d072826aa31a7f811789e11974c19bdca095e1d2565d04d39bebc397c429eb6622f1ac3b9e8de17870e59048e09549bf243c2619", 0x45}], 0x1}}], 0x3, 0x931766f6319eed40) ioctl$BLKRRPART(r0, 0x125f, 0x0) 79.226629ms ago: executing program 0 (id=584): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x3, 0x4e1d, 0x0, 0xa, 0x0, 0x80, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x1}}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x80000000}, {{@in=@local, 0x0, 0x2b}, 0xa, @in6=@mcast2, 0x0, 0x1, 0x3}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x700}, 0x0) 222.35µs ago: executing program 0 (id=585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="7961fe000000000000007e"], 0x84}}, 0x0) 0s ago: executing program 0 (id=586): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x3ff, @any, 0x7, 0x1}, 0xe) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 24.169061][ T36] audit: type=1400 audit(1750462912.340:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.170607][ T282] cgroup: Unknown subsys name 'net' [ 24.191783][ T36] audit: type=1400 audit(1750462912.340:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.219138][ T36] audit: type=1400 audit(1750462912.380:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.219321][ T282] cgroup: Unknown subsys name 'devices' [ 24.402594][ T282] cgroup: Unknown subsys name 'hugetlb' [ 24.408225][ T282] cgroup: Unknown subsys name 'rlimit' [ 24.565392][ T36] audit: type=1400 audit(1750462912.740:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.588627][ T36] audit: type=1400 audit(1750462912.740:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.604320][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.613607][ T36] audit: type=1400 audit(1750462912.740:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.645087][ T36] audit: type=1400 audit(1750462912.810:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.670553][ T36] audit: type=1400 audit(1750462912.810:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.686242][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.696140][ T36] audit: type=1400 audit(1750462912.870:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.730391][ T36] audit: type=1400 audit(1750462912.870:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.081305][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.088470][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.095606][ T290] bridge_slave_0: entered allmulticast mode [ 26.102337][ T290] bridge_slave_0: entered promiscuous mode [ 26.109924][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.116978][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.124110][ T290] bridge_slave_1: entered allmulticast mode [ 26.130549][ T290] bridge_slave_1: entered promiscuous mode [ 26.153721][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.160924][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.167996][ T289] bridge_slave_0: entered allmulticast mode [ 26.174353][ T289] bridge_slave_0: entered promiscuous mode [ 26.180921][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.187966][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.195074][ T289] bridge_slave_1: entered allmulticast mode [ 26.201400][ T289] bridge_slave_1: entered promiscuous mode [ 26.231567][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.238717][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.245839][ T291] bridge_slave_0: entered allmulticast mode [ 26.252227][ T291] bridge_slave_0: entered promiscuous mode [ 26.266651][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.273734][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.280956][ T291] bridge_slave_1: entered allmulticast mode [ 26.287228][ T291] bridge_slave_1: entered promiscuous mode [ 26.317807][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.324975][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.332105][ T292] bridge_slave_0: entered allmulticast mode [ 26.338368][ T292] bridge_slave_0: entered promiscuous mode [ 26.348440][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.355535][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.362635][ T292] bridge_slave_1: entered allmulticast mode [ 26.368872][ T292] bridge_slave_1: entered promiscuous mode [ 26.491961][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.499033][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.506398][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.513461][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.529037][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.536234][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.543582][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.550648][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.597476][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.604566][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.611878][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.618918][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.634750][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.642173][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.649458][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.656809][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.664860][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.672724][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.684519][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.691594][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.704303][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.711394][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.735122][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.742271][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.750193][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.757231][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.789996][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.797077][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.810666][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.817736][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.857069][ T290] veth0_vlan: entered promiscuous mode [ 26.869311][ T289] veth0_vlan: entered promiscuous mode [ 26.881773][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.888827][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.899202][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.906467][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.918075][ T290] veth1_macvtap: entered promiscuous mode [ 26.927872][ T289] veth1_macvtap: entered promiscuous mode [ 26.963628][ T292] veth0_vlan: entered promiscuous mode [ 26.986419][ T291] veth0_vlan: entered promiscuous mode [ 27.003381][ T292] veth1_macvtap: entered promiscuous mode [ 27.016751][ T291] veth1_macvtap: entered promiscuous mode [ 27.025251][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.064050][ T307] rust_binder: Write failure EFAULT in pid:2 [ 27.116030][ T313] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3'. [ 27.171048][ T324] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7'. [ 27.176832][ T320] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 27.187298][ T320] rust_binder: Error while translating object. [ 27.214218][ T320] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.218243][ T328] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.224219][ T320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 27.266628][ T332] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11'. [ 27.286605][ T334] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 27.286629][ T334] rust_binder: Error while translating object. [ 27.296721][ T334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.303220][ T334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 27.442624][ T343] ======================================================= [ 27.442624][ T343] WARNING: The mand mount option has been deprecated and [ 27.442624][ T343] and is ignored by this kernel. Remove the mand [ 27.442624][ T343] option from the mount to silence this warning. [ 27.442624][ T343] ======================================================= [ 27.529356][ T352] rust_binder: Write failure EFAULT in pid:12 [ 27.536794][ T354] netlink: 88 bytes leftover after parsing attributes in process `syz.1.16'. [ 27.572148][ T356] SELinux: security_context_str_to_sid () failed with errno=-22 [ 27.679689][ T363] overlayfs: conflicting lowerdir path [ 27.703127][ T365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 27.776186][ T381] netlink: 'syz.2.27': attribute type 64 has an invalid length. [ 28.017611][ T384] rust_binder: Write failure EFAULT in pid:21 [ 28.019379][ T387] netlink: 88 bytes leftover after parsing attributes in process `syz.3.28'. [ 28.045487][ T389] netlink: 'syz.1.30': attribute type 4 has an invalid length. [ 28.074696][ T397] netlink: 112 bytes leftover after parsing attributes in process `syz.1.32'. [ 28.152595][ T404] netlink: 'syz.1.35': attribute type 4 has an invalid length. [ 28.330176][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.419929][ T31] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 28.483563][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.493908][ T45] usb 4-1: config 0 has no interfaces? [ 28.499414][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 28.508627][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.517866][ T45] usb 4-1: config 0 descriptor?? [ 28.581268][ T31] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 28.590482][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.599358][ T31] usb 2-1: config 0 descriptor?? [ 28.864456][ T410] netlink: 88 bytes leftover after parsing attributes in process `syz.2.38'. [ 28.873630][ T410] FAULT_INJECTION: forcing a failure. [ 28.873630][ T410] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 28.887130][ T410] CPU: 0 UID: 0 PID: 410 Comm: syz.2.38 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 28.887164][ T410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 28.887180][ T410] Call Trace: [ 28.887185][ T410] [ 28.887192][ T410] __dump_stack+0x21/0x30 [ 28.887220][ T410] dump_stack_lvl+0x10c/0x190 [ 28.887245][ T410] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.887272][ T410] dump_stack+0x19/0x20 [ 28.887294][ T410] should_fail_ex+0x3d9/0x530 [ 28.887318][ T410] should_fail+0xf/0x20 [ 28.887333][ T410] should_fail_usercopy+0x1e/0x30 [ 28.887350][ T410] _copy_to_user+0x24/0xa0 [ 28.887370][ T410] simple_read_from_buffer+0xed/0x160 [ 28.887404][ T410] proc_fail_nth_read+0x19e/0x210 [ 28.887424][ T410] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 28.887443][ T410] ? bpf_lsm_file_permission+0xd/0x20 [ 28.887466][ T410] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 28.887480][ T410] vfs_read+0x278/0xb60 [ 28.887498][ T410] ? __cfi_vfs_read+0x10/0x10 [ 28.887514][ T410] ? __kasan_check_write+0x18/0x20 [ 28.887535][ T410] ? mutex_lock+0x92/0x1c0 [ 28.887555][ T410] ? __cfi_mutex_lock+0x10/0x10 [ 28.887573][ T410] ? __fget_files+0x2c5/0x340 [ 28.887601][ T410] ksys_read+0x141/0x250 [ 28.887623][ T410] ? __cfi_ksys_read+0x10/0x10 [ 28.887640][ T410] ? __kasan_check_write+0x18/0x20 [ 28.887656][ T410] ? fpregs_restore_userregs+0x11d/0x260 [ 28.887686][ T410] __x64_sys_read+0x7f/0x90 [ 28.887709][ T410] x64_sys_call+0x2638/0x2ee0 [ 28.887736][ T410] do_syscall_64+0x58/0xf0 [ 28.887762][ T410] ? clear_bhb_loop+0x35/0x90 [ 28.887785][ T410] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.887807][ T410] RIP: 0033:0x7f460e98d33c [ 28.887828][ T410] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 28.887846][ T410] RSP: 002b:00007f460f767030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 28.887871][ T410] RAX: ffffffffffffffda RBX: 00007f460ebb5fa0 RCX: 00007f460e98d33c [ 28.887887][ T410] RDX: 000000000000000f RSI: 00007f460f7670a0 RDI: 0000000000000004 [ 28.887901][ T410] RBP: 00007f460f767090 R08: 0000000000000000 R09: 0000000000000000 [ 28.887910][ T410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 28.887919][ T410] R13: 0000000000000000 R14: 00007f460ebb5fa0 R15: 00007fffa9dfc0e8 [ 28.887932][ T410] [ 29.076103][ T411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.140564][ T411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.150381][ T411] rust_binder: Error while translating object. [ 29.150407][ T411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 29.156698][ T411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:11 [ 29.195096][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 29.195115][ T36] audit: type=1400 audit(1750462917.370:150): avc: denied { create } for pid=420 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 29.240386][ T36] audit: type=1400 audit(1750462917.370:151): avc: denied { bind } for pid=420 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 29.262077][ T36] audit: type=1400 audit(1750462917.390:152): avc: denied { read } for pid=405 comm="syz.1.37" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.284511][ T36] audit: type=1400 audit(1750462917.390:153): avc: denied { open } for pid=405 comm="syz.1.37" path="net:[4026532302]" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.307738][ T36] audit: type=1400 audit(1750462917.390:154): avc: denied { ioctl } for pid=405 comm="syz.1.37" path="socket:[3638]" dev="sockfs" ino=3638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.335080][ T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 29.345188][ T31] asix 2-1:0.0: probe with driver asix failed with error -71 [ 29.353610][ T31] usb 2-1: USB disconnect, device number 2 [ 29.852577][ T432] netlink: 324 bytes leftover after parsing attributes in process `syz.1.47'. [ 30.119957][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.157508][ T437] netlink: 220 bytes leftover after parsing attributes in process `syz.2.49'. [ 30.180732][ T36] audit: type=1400 audit(1750462918.360:155): avc: denied { read write } for pid=439 comm="syz.2.50" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 30.204200][ T36] audit: type=1400 audit(1750462918.360:156): avc: denied { open } for pid=439 comm="syz.2.50" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 30.260459][ T441] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 30.274843][ T441] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 30.302485][ T10] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 30.311689][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.319775][ T10] usb 2-1: Product: syz [ 30.324080][ T10] usb 2-1: Manufacturer: syz [ 30.328767][ T10] usb 2-1: SerialNumber: syz [ 30.334308][ T10] usb 2-1: config 0 descriptor?? [ 30.420642][ T36] audit: type=1400 audit(1750462918.600:157): avc: denied { bind } for pid=443 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.441182][ T36] audit: type=1400 audit(1750462918.620:158): avc: denied { create } for pid=443 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.461832][ T36] audit: type=1400 audit(1750462918.640:159): avc: denied { write } for pid=443 comm="syz.0.51" path="socket:[3754]" dev="sockfs" ino=3754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.779941][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.932742][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.941981][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.950434][ T45] usb 1-1: Product: syz [ 30.953542][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 30.955054][ T45] usb 1-1: Manufacturer: syz [ 30.969818][ T10] asix 2-1:0.0: probe with driver asix failed with error -71 [ 30.973689][ T45] usb 1-1: SerialNumber: syz [ 30.980250][ T10] usb 2-1: USB disconnect, device number 3 [ 31.012982][ T440] overlayfs: statfs failed on './file0' [ 31.013107][ T441] overlayfs: statfs failed on './file0' [ 31.116364][ T438] usb 4-1: USB disconnect, device number 2 [ 31.289952][ T64] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.439913][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 31.446487][ T64] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.456929][ T64] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 31.466041][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.478029][ T64] usb 3-1: config 0 descriptor?? [ 31.521900][ T471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:61 [ 31.610234][ T45] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 31.625792][ T45] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 31.631956][ T45] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 31.769929][ T64] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.922984][ T64] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 31.932143][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.940201][ T64] usb 2-1: Product: syz [ 31.944422][ T64] usb 2-1: Manufacturer: syz [ 31.949033][ T64] usb 2-1: SerialNumber: syz [ 31.954482][ T64] usb 2-1: config 0 descriptor?? [ 32.040904][ T45] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 32.055950][ T45] usb 1-1: USB disconnect, device number 2 [ 32.062311][ T45] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 32.249961][ T64] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.409953][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 32.416311][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.427320][ T64] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.440867][ T64] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 2.00 [ 32.450666][ T64] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 32.458726][ T64] usb 4-1: Manufacturer: syz [ 32.464165][ T64] usb 4-1: config 0 descriptor?? [ 32.601662][ T483] rust_binder: Write failure EINVAL in pid:27 [ 32.873005][ T64] syz: Invalid code 65791 type 1 [ 32.887255][ T64] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input4 [ 32.900976][ T64] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 33.201180][ T524] __nla_validate_parse: 4 callbacks suppressed [ 33.201200][ T524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 33.258705][ T531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.83'. [ 33.282684][ T533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 33.387544][ T546] netlink: 112 bytes leftover after parsing attributes in process `syz.0.90'. [ 33.418916][ T548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 33.548296][ T554] netlink: 80 bytes leftover after parsing attributes in process `syz.0.94'. [ 33.713023][ T45] usb 4-1: USB disconnect, device number 3 [ 33.805285][ T578] netlink: 260 bytes leftover after parsing attributes in process `syz.0.102'. [ 33.828867][ T580] Zero length message leads to an empty skb [ 33.847684][ T582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 34.034039][ T587] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.126914][ T438] usb 3-1: USB disconnect, device number 2 [ 34.192948][ T595] netlink: 112 bytes leftover after parsing attributes in process `syz.2.109'. [ 34.259907][ T599] netlink: 'syz.3.111': attribute type 4 has an invalid length. [ 34.288293][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 34.288311][ T36] audit: type=1400 audit(1750462922.398:198): avc: denied { setopt } for pid=596 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.324592][ T45] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 34.335815][ T36] audit: type=1400 audit(1750462922.445:199): avc: denied { setopt } for pid=603 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.355107][ T36] audit: type=1400 audit(1750462922.445:200): avc: denied { write } for pid=603 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.374603][ T36] audit: type=1400 audit(1750462922.445:201): avc: denied { read } for pid=603 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.496249][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.504431][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 34.513269][ T45] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 34.522148][ T45] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 34.532269][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.542669][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.551802][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.559866][ T45] usb 1-1: Product: syz [ 34.564040][ T45] usb 1-1: Manufacturer: syz [ 34.568629][ T45] usb 1-1: SerialNumber: syz [ 34.627885][ T438] usb 2-1: USB disconnect, device number 4 [ 34.660073][ T36] audit: type=1400 audit(1750462922.744:202): avc: denied { bind } for pid=608 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.679277][ T609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=609 comm=syz.1.114 [ 34.708687][ T36] audit: type=1400 audit(1750462922.782:203): avc: denied { ioctl } for pid=610 comm="syz.1.115" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.709795][ T611] input: syz0 as /devices/virtual/input/input5 [ 34.743790][ T611] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.746221][ T36] audit: type=1400 audit(1750462922.819:204): avc: denied { checkpoint_restore } for pid=610 comm="syz.1.115" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.746900][ T612] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 34.812361][ T45] usb 1-1: 0:2 : does not exist [ 34.825317][ T45] usb 1-1: USB disconnect, device number 3 [ 34.842304][ T617] netlink: 4276 bytes leftover after parsing attributes in process `syz.1.117'. [ 34.949073][ T622] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.959422][ T622] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 34.966806][ T622] rust_binder: Write failure EINVAL in pid:79 [ 34.998342][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.253946][ T438] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 35.387081][ T36] audit: type=1400 audit(1750462923.427:205): avc: denied { write } for pid=638 comm="syz.0.127" path="socket:[5061]" dev="sockfs" ino=5061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.415727][ T36] audit: type=1400 audit(1750462923.427:206): avc: denied { getopt } for pid=638 comm="syz.0.127" lport=59480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.447618][ T438] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 35.455970][ T438] usb 2-1: config 0 has no interface number 0 [ 35.464167][ T438] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 35.484745][ T438] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 35.497410][ T438] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 35.510605][ T438] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 35.522590][ T438] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 35.532660][ T438] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 35.551524][ T438] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 35.560670][ T438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.573379][ T438] usb 2-1: config 0 descriptor?? [ 35.578780][ T626] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 35.803697][ T438] usb 2-1: USB disconnect, device number 5 [ 35.839892][ T36] audit: type=1400 audit(1750462923.848:207): avc: denied { connect } for pid=665 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.413227][ T690] FAULT_INJECTION: forcing a failure. [ 36.413227][ T690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.426357][ T690] CPU: 1 UID: 0 PID: 690 Comm: syz.1.146 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 36.426393][ T690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.426403][ T690] Call Trace: [ 36.426409][ T690] [ 36.426415][ T690] __dump_stack+0x21/0x30 [ 36.426439][ T690] dump_stack_lvl+0x10c/0x190 [ 36.426466][ T690] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.426502][ T690] dump_stack+0x19/0x20 [ 36.426519][ T690] should_fail_ex+0x3d9/0x530 [ 36.426537][ T690] should_fail+0xf/0x20 [ 36.426551][ T690] should_fail_usercopy+0x1e/0x30 [ 36.426568][ T690] _copy_to_user+0x24/0xa0 [ 36.426588][ T690] simple_read_from_buffer+0xed/0x160 [ 36.426612][ T690] proc_fail_nth_read+0x19e/0x210 [ 36.426626][ T690] ? __ptrace_may_access+0x3e0/0x570 [ 36.426646][ T690] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 36.426660][ T690] ? bpf_lsm_file_permission+0xd/0x20 [ 36.426677][ T690] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 36.426690][ T690] vfs_read+0x278/0xb60 [ 36.426708][ T690] ? __cfi_vfs_read+0x10/0x10 [ 36.426725][ T690] ? __kasan_check_write+0x18/0x20 [ 36.426743][ T690] ? mutex_lock+0x92/0x1c0 [ 36.426757][ T690] ? __cfi_mutex_lock+0x10/0x10 [ 36.426770][ T690] ? __fget_files+0x2c5/0x340 [ 36.426791][ T690] ksys_read+0x141/0x250 [ 36.426809][ T690] ? __cfi_ksys_read+0x10/0x10 [ 36.426825][ T690] ? __se_sys_pidfd_open+0x1c4/0x240 [ 36.426840][ T690] ? __kasan_check_read+0x15/0x20 [ 36.426856][ T690] __x64_sys_read+0x7f/0x90 [ 36.426882][ T690] x64_sys_call+0x2638/0x2ee0 [ 36.426910][ T690] do_syscall_64+0x58/0xf0 [ 36.426933][ T690] ? clear_bhb_loop+0x35/0x90 [ 36.426956][ T690] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.426977][ T690] RIP: 0033:0x7f8099f8d33c [ 36.426990][ T690] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 36.427003][ T690] RSP: 002b:00007f809ad84030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 36.427018][ T690] RAX: ffffffffffffffda RBX: 00007f809a1b5fa0 RCX: 00007f8099f8d33c [ 36.427030][ T690] RDX: 000000000000000f RSI: 00007f809ad840a0 RDI: 0000000000000004 [ 36.427039][ T690] RBP: 00007f809ad84090 R08: 0000000000000000 R09: 0000000000000000 [ 36.427049][ T690] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 36.427058][ T690] R13: 0000000000000000 R14: 00007f809a1b5fa0 R15: 00007ffeca451a98 [ 36.427070][ T690] [ 36.707418][ T695] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 36.707438][ T695] rust_binder: Error while translating object. [ 36.718519][ T695] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.724732][ T695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 36.784605][ T703] tipc: Can't bind to reserved service type 0 [ 37.392161][ T438] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.458318][ T717] netlink: 'syz.2.158': attribute type 4 has an invalid length. [ 37.553446][ T438] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 37.565953][ T438] usb 1-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 37.577731][ T438] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 37.588897][ T438] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 37.598799][ T438] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 37.608025][ T438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.618610][ T438] usb 1-1: invalid MIDI out EP 0 [ 37.628419][ T438] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 37.643567][ T721] rust_binder: Error while translating object. [ 37.643596][ T721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 37.646607][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.650507][ T721] rust_binder: Failure BR_FAILED_REPLY { source: ENOENT } during reply - delivering BR_FAILED_REPLY to sender. [ 37.675627][ T721] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:72 [ 37.688786][ T721] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.836211][ T715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.865760][ T715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.875582][ T715] rust_binder: Write failure EFAULT in pid:165 [ 37.881701][ T61] usb 1-1: USB disconnect, device number 4 [ 37.895425][ T752] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.031897][ T764] capability: warning: `syz.1.175' uses deprecated v2 capabilities in a way that may be insecure [ 38.260855][ T780] random: crng reseeded on system resumption [ 38.286379][ T780] SELinux: policydb magic number 0x2f5b29 does not match expected magic number 0xf97cff8c [ 38.296458][ T780] SELinux: failed to load policy [ 38.302619][ T780] rust_binder: Error while translating object. [ 38.302651][ T780] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 38.309279][ T780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:117 [ 38.554946][ T804] __nla_validate_parse: 15 callbacks suppressed [ 38.554965][ T804] netlink: 80 bytes leftover after parsing attributes in process `syz.0.193'. [ 38.559775][ T799] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 38.579473][ T799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:132 [ 38.591416][ T806] netlink: 76 bytes leftover after parsing attributes in process `syz.0.194'. [ 38.631078][ T809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 38.788522][ T829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:136 [ 38.792507][ T829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:136 [ 38.828160][ T833] netlink: 168 bytes leftover after parsing attributes in process `syz.0.206'. [ 38.879127][ T837] netlink: 260 bytes leftover after parsing attributes in process `syz.0.207'. [ 38.964530][ T847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 39.019043][ T855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:146 [ 39.021338][ T855] rust_binder: Write failure EINVAL in pid:146 [ 39.051153][ T859] netlink: 220 bytes leftover after parsing attributes in process `syz.1.217'. [ 39.098382][ T863] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 39.162491][ T877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.224'. [ 39.214678][ T885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.226'. [ 39.232456][ T888] netlink: 112 bytes leftover after parsing attributes in process `syz.0.227'. [ 39.253503][ T891] netlink: 112 bytes leftover after parsing attributes in process `syz.2.229'. [ 39.300679][ T895] rust_binder: Error while translating object. [ 39.300716][ T895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 39.307126][ T895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:219 [ 39.373639][ T897] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.383311][ T897] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 39.487338][ T438] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.565849][ T924] rust_binder: Error while translating object. [ 39.565881][ T924] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.585166][ T924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:170 [ 39.595303][ T924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:170 [ 39.669093][ T438] usb 2-1: Using ep0 maxpacket: 32 [ 39.687079][ T438] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 39.699050][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 39.699064][ T36] audit: type=1400 audit(1750462927.459:242): avc: denied { ioctl } for pid=940 comm="syz.3.251" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.731298][ T438] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 39.740823][ T438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.749181][ T438] usb 2-1: Product: syz [ 39.765470][ T438] usb 2-1: Manufacturer: syz [ 39.770171][ T438] usb 2-1: SerialNumber: syz [ 39.781629][ T438] usb 2-1: config 0 descriptor?? [ 39.873190][ T959] tmpfs: Unknown parameter ' [ 39.873190][ T959] Y*^]i' [ 39.893596][ T435] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 39.966866][ T36] audit: type=1400 audit(1750462927.702:243): avc: denied { write } for pid=973 comm="syz.0.265" name="/" dev="incremental-fs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.991015][ T36] audit: type=1400 audit(1750462927.702:244): avc: denied { add_name } for pid=973 comm="syz.0.265" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.020349][ T36] audit: type=1400 audit(1750462927.702:245): avc: denied { create } for pid=973 comm="syz.0.265" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.041347][ T36] audit: type=1400 audit(1750462927.702:246): avc: denied { associate } for pid=973 comm="syz.0.265" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 40.063324][ T36] audit: type=1400 audit(1750462927.730:247): avc: denied { remove_name } for pid=973 comm="syz.0.265" name="file0" dev="incremental-fs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.087587][ T36] audit: type=1400 audit(1750462927.730:248): avc: denied { rmdir } for pid=973 comm="syz.0.265" name="file0" dev="incremental-fs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.110779][ T435] usb 3-1: Using ep0 maxpacket: 16 [ 40.118229][ T36] audit: type=1400 audit(1750462927.730:249): avc: denied { setopt } for pid=973 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.127416][ T45] usb 2-1: USB disconnect, device number 6 [ 40.139697][ T36] audit: type=1400 audit(1750462927.730:250): avc: denied { map } for pid=973 comm="syz.0.265" path="socket:[7301]" dev="sockfs" ino=7301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.169577][ T435] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 40.180187][ T36] audit: type=1400 audit(1750462927.730:251): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 40.182270][ T435] usb 3-1: config 0 has no interface number 0 [ 40.209356][ T435] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 40.219664][ T435] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 40.236965][ T435] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 40.238105][ T992] rust_binder: Write failure EINVAL in pid:158 [ 40.246123][ T435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.260501][ T435] usb 3-1: Product: syz [ 40.270702][ T435] usb 3-1: Manufacturer: syz [ 40.275351][ T435] usb 3-1: SerialNumber: syz [ 40.286352][ T435] usb 3-1: config 0 descriptor?? [ 40.292700][ T939] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 40.299965][ T939] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 40.304770][ T61] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.371820][ T1004] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 40.379358][ T1004] rust_binder: Write failure EINVAL in pid:167 [ 40.434499][ T1007] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 40.441108][ T1007] rust_binder: Error while translating object. [ 40.454555][ T1007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.460910][ T1007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:261 [ 40.473340][ T1010] SELinux: security_context_str_to_sid () failed with errno=-22 [ 40.492288][ T61] usb 4-1: Using ep0 maxpacket: 32 [ 40.508519][ T61] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 40.518765][ T61] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 40.525636][ T939] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 40.528772][ T61] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 27648, setting to 1024 [ 40.545880][ T939] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 40.547079][ T61] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 40.565089][ T61] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 40.588466][ T61] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 40.599284][ T61] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.602499][ T1015] netlink: 'syz.1.281': attribute type 4 has an invalid length. [ 40.608190][ T61] usb 4-1: config 0 descriptor?? [ 40.620687][ T977] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 40.764946][ T1024] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=1024 comm=syz.1.285 [ 40.820778][ T1028] fuse: Unknown parameter '0x000000000000000300000000000000000003' [ 40.834636][ T1028] overlay: filesystem on ./bus not supported as upperdir [ 40.844655][ T61] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 40.855461][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.862654][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.993843][ T939] netlink: 'syz.2.250': attribute type 64 has an invalid length. [ 41.016571][ T435] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 41.026722][ T435] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 41.058916][ T435] asix 3-1:0.251: probe with driver asix failed with error -71 [ 41.070339][ T435] usb 3-1: USB disconnect, device number 3 [ 41.083473][ T1035] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.337222][ T1044] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 41.337251][ T1044] rust_binder: Error while translating object. [ 41.346175][ T1045] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 41.360281][ T1045] rust_binder: Error while translating object. [ 41.371585][ T1044] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.384798][ T1045] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.400144][ T1044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:202 [ 41.431898][ T1045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:202 [ 41.721139][ T1061] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 41.739251][ T1061] rust_binder: Error while translating object. [ 41.756118][ T1061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.764817][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.785862][ T1061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 42.433925][ T1094] rust_binder: Error while translating object. [ 42.443210][ T1094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 42.449776][ T1094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:214 [ 42.555999][ T1100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.565064][ T1100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220 [ 43.218649][ T435] usb 4-1: USB disconnect, device number 4 [ 43.239481][ T435] usblp0: removed [ 43.545998][ T1116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1116 comm=syz.3.319 [ 43.703236][ T1131] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 43.751208][ T1135] rust_binder: Error while translating object. [ 43.760608][ T1135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 43.766889][ T1135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:116 [ 43.977435][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.992789][ T1062] Bluetooth: hci0: command 0x1003 tx timeout [ 44.239185][ T1148] __nla_validate_parse: 18 callbacks suppressed [ 44.239205][ T1148] netlink: 324 bytes leftover after parsing attributes in process `syz.1.332'. [ 44.341581][ T1153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.341609][ T1153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.351578][ T1153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.358160][ T1153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.383646][ T1153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.390172][ T1153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.396693][ T1153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.403381][ T1153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.410043][ T1153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.584278][ T1159] netlink: 80 bytes leftover after parsing attributes in process `syz.1.336'. [ 44.623685][ T1163] rust_binder: Error in use_page_slow: ESRCH [ 44.640230][ T1163] rust_binder: use_range failure ESRCH [ 44.640257][ T1163] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 44.645757][ T1163] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 44.661630][ T1163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:228 [ 44.801797][ T1165] netlink: 'syz.3.338': attribute type 4 has an invalid length. [ 45.204794][ T1173] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 45.204814][ T1173] rust_binder: Error while translating object. [ 45.228245][ T1173] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.234623][ T1173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132 [ 45.278138][ T1176] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 45.278152][ T1175] rust_binder: Error in use_page_slow: ESRCH [ 45.278165][ T1175] rust_binder: use_range failure ESRCH [ 45.292640][ T1175] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 45.298178][ T1175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 45.306586][ T1175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:134 [ 45.313715][ T1176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 45.335139][ T1176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:134 [ 45.380989][ T1178] rust_binder: Write failure EFAULT in pid:137 [ 45.754633][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 45.774514][ T1196] netlink: 260 bytes leftover after parsing attributes in process `syz.1.352'. [ 45.826415][ T1199] netlink: 324 bytes leftover after parsing attributes in process `syz.1.353'. [ 45.863692][ T1202] netlink: 80 bytes leftover after parsing attributes in process `syz.2.355'. [ 45.974917][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 45.974936][ T36] audit: type=1400 audit(1750462933.324:272): avc: denied { setopt } for pid=1205 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.978957][ T1206] input: syz0 as /devices/virtual/input/input6 [ 46.072751][ T61] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 46.105848][ T1218] netlink: 220 bytes leftover after parsing attributes in process `syz.2.362'. [ 46.163379][ T1220] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 46.163407][ T1220] rust_binder: Error while translating object. [ 46.181612][ T1220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.199009][ T1220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246 [ 46.218417][ T1224] netlink: 168 bytes leftover after parsing attributes in process `syz.2.365'. [ 46.243890][ T61] usb 4-1: Using ep0 maxpacket: 16 [ 46.263958][ T61] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.283126][ T1226] netlink: 76 bytes leftover after parsing attributes in process `syz.1.366'. [ 46.295066][ T61] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 46.311895][ T61] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 46.321085][ T61] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 46.329212][ T61] usb 4-1: Manufacturer: syz [ 46.339055][ T61] usb 4-1: config 0 descriptor?? [ 46.375960][ T36] audit: type=1400 audit(1750462933.707:273): avc: denied { create } for pid=1229 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 46.536103][ T1234] netlink: 96 bytes leftover after parsing attributes in process `syz.2.370'. [ 46.793550][ T1238] rust_binder: Write failure EINVAL in pid:249 [ 46.794236][ T61] syz: Invalid code 65791 type 1 [ 46.820899][ T61] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input7 [ 46.849392][ T61] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 47.010299][ T36] audit: type=1400 audit(1750462934.297:274): avc: denied { append } for pid=1245 comm="syz.1.374" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 47.388720][ T36] audit: type=1400 audit(1750462934.652:275): avc: denied { write } for pid=1263 comm="syz.1.381" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 47.413464][ T36] audit: type=1400 audit(1750462934.671:276): avc: denied { open } for pid=1263 comm="syz.1.381" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 47.413638][ T1264] rust_binder: Got transaction with invalid offset. [ 47.439948][ T1264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.446791][ T1264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:273 [ 47.645166][ T1273] overlayfs: missing 'lowerdir' [ 47.657750][ T61] usb 4-1: USB disconnect, device number 5 [ 47.671287][ T36] audit: type=1400 audit(1750462934.914:277): avc: denied { ioctl } for pid=1272 comm="syz.2.385" path="socket:[9754]" dev="sockfs" ino=9754 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.836285][ T1279] capability: warning: `syz.2.387' uses 32-bit capabilities (legacy support in use) [ 48.075017][ T1288] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 48.075049][ T1288] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 48.083202][ T1288] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 48.157035][ T1291] netlink: 'syz.2.392': attribute type 4 has an invalid length. [ 48.215133][ T1294] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.424690][ T36] audit: type=1400 audit(1750462935.616:278): avc: denied { bind } for pid=1312 comm="syz.3.401" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.456825][ T36] audit: type=1400 audit(1750462935.616:279): avc: denied { name_bind } for pid=1312 comm="syz.3.401" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 48.489427][ T36] audit: type=1400 audit(1750462935.616:280): avc: denied { node_bind } for pid=1312 comm="syz.3.401" saddr=fe88::4 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 48.617141][ T61] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 48.670592][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 48.765733][ T36] audit: type=1400 audit(1750462935.934:281): avc: denied { mount } for pid=1319 comm="syz.1.404" name="/" dev="ramfs" ino=9912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 48.810687][ T61] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.831018][ T61] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1328, setting to 1024 [ 48.852347][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 48.857676][ T61] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.890223][ T61] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.907275][ T31] usb 4-1: config 1 has an invalid descriptor of length 165, skipping remainder of the config [ 48.926594][ T61] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.937898][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.959959][ T61] usb 3-1: config 0 descriptor?? [ 48.965645][ T1311] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 48.975345][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.991285][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.999544][ T31] usb 4-1: Product: syz [ 49.012653][ T31] usb 4-1: Manufacturer: Й [ 49.017266][ T31] usb 4-1: SerialNumber: syz [ 49.066631][ T1330] random: crng reseeded on system resumption [ 49.194436][ T1332] binder: Bad value for 'max' [ 49.407450][ T61] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.415251][ T61] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.422728][ T61] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.430360][ T61] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.437790][ T61] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.445312][ T61] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.453373][ T61] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 49.465308][ T61] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 49.474765][ T1313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.489887][ T1313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.512512][ T31] usb 4-1: 0:2 : does not exist [ 49.521866][ T31] usb 4-1: USB disconnect, device number 6 [ 49.536606][ T607] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 49.696999][ T607] usb 2-1: Using ep0 maxpacket: 8 [ 49.702532][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.720736][ T607] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.730950][ T607] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.739911][ T61] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 49.748884][ T607] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.758013][ T607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.766066][ T607] usb 2-1: Product: 崙큳묕羟䕲騇屉ᒟ噝㯹⶙₫睏ጌ嫗溩ᾉ係儒誢凢稈ᧂ벸艈ｑԲᥪ藉 [ 49.778299][ T607] usb 2-1: Manufacturer: К [ 49.782850][ T607] usb 2-1: SerialNumber: 긨슆偌Ⲥꤓ쓞쒘猇Պ녞呁㔤傺ﵥ㱲횗칋뱲ቓʠ⬦龼㙽홒⌌輣ܲ晟㗘蠌⅘㧵⏑쪐䖌튦볤㈷ꦏꚅﳺ♪釪醰缓꽕厳｛䉥彧䂤薝䗓궖剹஄玷ͤ綒푠뫤頠咠♸꺥㒕耚낟儐鵐룈뜌ߕ剔Ⱶ塂튯⓯程 [ 49.900039][ T61] usb 1-1: Using ep0 maxpacket: 16 [ 49.906321][ T61] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.917259][ T61] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 49.930814][ T61] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 49.939944][ T61] usb 1-1: New USB device strings: Mfr=15, Product=0, SerialNumber=0 [ 49.948057][ T61] usb 1-1: Manufacturer: syz [ 49.953362][ T61] usb 1-1: config 0 descriptor?? [ 50.219830][ T1368] __nla_validate_parse: 13 callbacks suppressed [ 50.219845][ T1368] netlink: 324 bytes leftover after parsing attributes in process `syz.3.421'. [ 50.241474][ T1338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.256653][ T1338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.269541][ T607] usb 2-1: 0:2 : does not exist [ 50.279969][ T607] usb 2-1: USB disconnect, device number 7 [ 50.302892][ T1359] udevd[1359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.374631][ T1375] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.374666][ T1375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 50.390366][ T61] syz: Invalid code 65791 type 1 [ 50.408000][ T61] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input8 [ 50.419897][ T61] microsoft 0003:045E:07DA.0004: input,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 50.824188][ T1379] netlink: 80 bytes leftover after parsing attributes in process `syz.2.424'. [ 50.849885][ T1383] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 50.849947][ T1383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:280 [ 50.861000][ T1383] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 50.870264][ T1383] rust_binder: Read failure Err(EFAULT) in pid:280 [ 50.900167][ T1389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 50.933031][ T1393] netlink: 76 bytes leftover after parsing attributes in process `syz.2.431'. [ 50.970168][ T1399] netlink: 260 bytes leftover after parsing attributes in process `syz.1.433'. [ 51.211464][ T1417] netlink: 88 bytes leftover after parsing attributes in process `syz.2.442'. [ 51.254572][ T407] usb 1-1: USB disconnect, device number 5 [ 51.256370][ T1423] netlink: 168 bytes leftover after parsing attributes in process `syz.2.444'. [ 51.300047][ T1425] netlink: 96 bytes leftover after parsing attributes in process `syz.2.446'. [ 51.323589][ T1429] netlink: 112 bytes leftover after parsing attributes in process `syz.2.448'. [ 51.558554][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 51.558571][ T36] audit: type=1326 audit(1750462938.553:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1447 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e98e929 code=0x7ffc0000 [ 51.588959][ T36] audit: type=1326 audit(1750462938.553:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1447 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e98e929 code=0x7ffc0000 [ 51.613260][ T10] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 51.621023][ T36] audit: type=1326 audit(1750462938.571:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1447 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f460e98e929 code=0x7ffc0000 [ 51.645100][ T36] audit: type=1326 audit(1750462938.581:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1447 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e98e929 code=0x7ffc0000 [ 51.668578][ T36] audit: type=1326 audit(1750462938.581:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1447 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e98e929 code=0x7ffc0000 [ 51.804061][ T10] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 51.818667][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.828864][ T1453] netlink: 76 bytes leftover after parsing attributes in process `syz.0.458'. [ 51.829610][ T10] usb 4-1: config 0 descriptor?? [ 51.927392][ T1461] netlink: 'syz.0.462': attribute type 4 has an invalid length. [ 51.941932][ T607] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 52.022968][ T1470] rust_binder: Write failure EINVAL in pid:336 [ 52.115124][ T607] usb 3-1: device firmware changed [ 52.126738][ T61] usb 3-1: USB disconnect, device number 4 [ 52.185657][ T1487] rust_binder: Error while translating object. [ 52.185689][ T1487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 52.192156][ T1487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:308 [ 52.273655][ T61] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 52.298926][ T1496] syz.1.478 uses obsolete (PF_INET,SOCK_PACKET) [ 52.337447][ T36] audit: type=1326 audit(1750462939.273:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1499 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8099f8e929 code=0x7ffc0000 [ 52.361761][ T1500] rust_binder: Write failure EFAULT in pid:349 [ 52.382941][ T36] audit: type=1326 audit(1750462939.273:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1499 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8099f8e929 code=0x7ffc0000 [ 52.421051][ T36] audit: type=1326 audit(1750462939.301:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1499 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8099f8e929 code=0x7ffc0000 [ 52.460689][ T36] audit: type=1326 audit(1750462939.301:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1499 comm=BF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8099f8e929 code=0x7ffc0000 [ 52.483574][ T36] audit: type=1326 audit(1750462939.301:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1499 comm=BF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8099f8e929 code=0x7ffc0000 [ 52.506356][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 52.509607][ T61] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.516849][ T10] asix 4-1:0.0: probe with driver asix failed with error -61 [ 52.540959][ T61] usb 3-1: config 0 has no interfaces? [ 52.551715][ T61] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 52.567629][ T61] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.579751][ T61] usb 3-1: config 0 descriptor?? [ 52.700931][ T607] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 52.893384][ T607] usb 1-1: Using ep0 maxpacket: 32 [ 52.905219][ T607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 52.919782][ T607] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 52.929810][ T607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 60927, setting to 1024 [ 52.941219][ T607] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 52.951518][ T607] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 52.964769][ T607] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 52.974014][ T607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.983095][ T607] usb 1-1: config 0 descriptor?? [ 52.988429][ T1512] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 53.177554][ T1525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.186594][ T1525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.211861][ T607] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 53.249874][ T1526] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 53.385146][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 53.556207][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 53.562403][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.573382][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.586983][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 53.596084][ T10] usb 2-1: New USB device strings: Mfr=17, Product=0, SerialNumber=0 [ 53.604386][ T10] usb 2-1: Manufacturer: syz [ 53.609829][ T10] usb 2-1: config 0 descriptor?? [ 54.045770][ T10] syz: Invalid code 65791 type 1 [ 54.054108][ T10] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input9 [ 54.066090][ T10] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 54.840165][ T10] usb 3-1: USB disconnect, device number 5 [ 54.910510][ T435] usb 2-1: USB disconnect, device number 8 [ 54.949604][ T607] usb 4-1: USB disconnect, device number 7 [ 55.362924][ T61] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 55.480728][ T1574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:368 [ 55.501917][ T61] usb 3-1: device descriptor read/64, error -71 [ 55.581795][ T1583] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.667198][ T435] usb 1-1: USB disconnect, device number 6 [ 55.682616][ T435] usblp0: removed [ 55.691107][ T1587] __nla_validate_parse: 14 callbacks suppressed [ 55.691126][ T1587] netlink: 112 bytes leftover after parsing attributes in process `syz.0.516'. [ 55.769259][ T61] usb 3-1: device descriptor read/64, error -71 [ 55.805720][ T1593] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 55.828107][ T1595] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 55.828132][ T1595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 55.836884][ T1595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:331 [ 55.898862][ T1601] FAULT_INJECTION: forcing a failure. [ 55.898862][ T1601] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 55.921556][ T1601] CPU: 0 UID: 0 PID: 1601 Comm: syz.0.523 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 55.921584][ T1601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.921594][ T1601] Call Trace: [ 55.921600][ T1601] [ 55.921607][ T1601] __dump_stack+0x21/0x30 [ 55.921629][ T1601] dump_stack_lvl+0x10c/0x190 [ 55.921647][ T1601] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.921664][ T1601] ? avc_has_perm_noaudit+0x286/0x360 [ 55.921682][ T1601] dump_stack+0x19/0x20 [ 55.921698][ T1601] should_fail_ex+0x3d9/0x530 [ 55.921715][ T1601] should_fail_alloc_page+0xeb/0x110 [ 55.921736][ T1601] __alloc_pages_noprof+0x19d/0x6c0 [ 55.921758][ T1601] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 55.921779][ T1601] ? selinux_file_open+0x457/0x610 [ 55.921812][ T1601] __pud_alloc+0xb3/0x900 [ 55.921832][ T1601] ? avc_has_extended_perms+0x7c7/0xdd0 [ 55.921848][ T1601] ? __cfi___pud_alloc+0x10/0x10 [ 55.921867][ T1601] ? avc_has_extended_perms+0x921/0xdd0 [ 55.921884][ T1601] handle_mm_fault+0x1885/0x1b90 [ 55.921906][ T1601] ? _parse_integer+0x2e/0x40 [ 55.921922][ T1601] ? __cfi_handle_mm_fault+0x10/0x10 [ 55.921941][ T1601] ? find_vma+0xcd/0x110 [ 55.921960][ T1601] ? ioctl_has_perm+0x384/0x4d0 [ 55.921982][ T1601] ? lock_mm_and_find_vma+0xb8/0x3a0 [ 55.922003][ T1601] do_user_addr_fault+0x4ca/0x1200 [ 55.922024][ T1601] exc_page_fault+0x59/0xc0 [ 55.922039][ T1601] asm_exc_page_fault+0x2b/0x30 [ 55.922062][ T1601] RIP: 0010:__put_user_4+0x11/0x30 [ 55.922083][ T1601] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 55.922097][ T1601] RSP: 0018:ffffc9000de6fd98 EFLAGS: 00050202 [ 55.922111][ T1601] RAX: 0000000000000151 RBX: 0000000000000000 RCX: 0000200000003c80 [ 55.922122][ T1601] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888116cd2108 [ 55.922133][ T1601] RBP: ffffc9000de6fe90 R08: ffff888116cd210b R09: 1ffff11022d9a421 [ 55.922145][ T1601] R10: dffffc0000000000 R11: ffffed1022d9a422 R12: ffff88813087ea80 [ 55.922156][ T1601] R13: 1ffff92001bcdfb8 R14: dffffc0000000000 R15: ffff888115a06950 [ 55.922171][ T1601] ? sock_ioctl+0x4c1/0x7b0 [ 55.922187][ T1601] ? __cfi_sock_ioctl+0x10/0x10 [ 55.922203][ T1601] ? __fget_files+0x2c5/0x340 [ 55.922231][ T1601] ? bpf_lsm_file_ioctl+0xd/0x20 [ 55.922247][ T1601] ? security_file_ioctl+0x34/0xd0 [ 55.922278][ T1601] ? __cfi_sock_ioctl+0x10/0x10 [ 55.922301][ T1601] __se_sys_ioctl+0x132/0x1b0 [ 55.922324][ T1601] __x64_sys_ioctl+0x7f/0xa0 [ 55.922344][ T1601] x64_sys_call+0x1878/0x2ee0 [ 55.922364][ T1601] do_syscall_64+0x58/0xf0 [ 55.922383][ T1601] ? clear_bhb_loop+0x35/0x90 [ 55.922406][ T1601] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.922428][ T1601] RIP: 0033:0x7fae3958e929 [ 55.922440][ T1601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.922452][ T1601] RSP: 002b:00007fae3a433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.922469][ T1601] RAX: ffffffffffffffda RBX: 00007fae397b5fa0 RCX: 00007fae3958e929 [ 55.922480][ T1601] RDX: 0000200000003c80 RSI: 0000000000008904 RDI: 0000000000000003 [ 55.922490][ T1601] RBP: 00007fae3a433090 R08: 0000000000000000 R09: 0000000000000000 [ 55.922500][ T1601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.922509][ T1601] R13: 0000000000000000 R14: 00007fae397b5fa0 R15: 00007ffc6897ac58 [ 55.922521][ T1601] [ 56.122531][ T61] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 56.318498][ T1620] overlay: filesystem on ./bus not supported as upperdir [ 56.341682][ T1624] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.342142][ T1622] netlink: 96 bytes leftover after parsing attributes in process `syz.0.531'. [ 56.357189][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.374989][ T1626] netlink: 324 bytes leftover after parsing attributes in process `syz.0.534'. [ 56.485445][ T61] usb 3-1: device descriptor read/64, error -71 [ 56.547406][ T1635] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 56.571629][ T1639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 56.723188][ T1644] rust_binder: Read failure Err(EAGAIN) in pid:393 [ 56.735596][ T1649] netlink: 88 bytes leftover after parsing attributes in process `syz.1.540'. [ 56.742071][ T61] usb 3-1: device descriptor read/64, error -71 [ 56.758670][ T1651] netlink: 'syz.1.541': attribute type 4 has an invalid length. [ 56.881097][ T61] usb usb3-port1: attempt power cycle [ 56.927228][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 56.927247][ T36] audit: type=1400 audit(1750462943.576:319): avc: denied { mount } for pid=1669 comm="syz.1.548" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 56.955934][ T36] audit: type=1400 audit(1750462943.604:320): avc: denied { search } for pid=1669 comm="syz.1.548" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 57.244482][ T61] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 57.255263][ T607] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 57.266954][ T61] usb 3-1: device descriptor read/8, error -71 [ 57.294842][ T36] audit: type=1326 audit(1750462943.913:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1627 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae3952ab19 code=0x7fc00000 [ 57.333868][ T36] audit: type=1400 audit(1750462943.950:322): avc: denied { accept } for pid=1677 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.368160][ T1681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.552'. [ 57.405878][ T61] usb 3-1: device descriptor read/8, error -71 [ 57.408149][ T1685] binder: Unknown parameter 'K' [ 57.415536][ T607] usb 2-1: Using ep0 maxpacket: 32 [ 57.418041][ T36] audit: type=1400 audit(1750462944.034:323): avc: denied { append } for pid=1684 comm="syz.0.554" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 57.446180][ T607] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.449806][ T1685] input: syz1 as /devices/virtual/input/input10 [ 57.460585][ T607] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.462500][ T1685] input: failed to attach handler leds to device input10, error: -6 [ 57.472426][ T607] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64255, setting to 1024 [ 57.491390][ T607] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 57.501451][ T607] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.514467][ T607] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 57.527040][ T607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.528523][ T1687] netlink: 112 bytes leftover after parsing attributes in process `syz.0.555'. [ 57.536386][ T607] usb 2-1: config 0 descriptor?? [ 57.550710][ T1676] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 57.583264][ T1689] rust_binder: Error while translating object. [ 57.583305][ T1689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.589693][ T1689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:371 [ 57.672161][ T61] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 57.705202][ T61] usb 3-1: device descriptor read/8, error -71 [ 57.774137][ T607] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 57.815866][ T1694] netlink: 260 bytes leftover after parsing attributes in process `syz.0.558'. [ 57.844192][ T61] usb 3-1: device descriptor read/8, error -71 [ 57.909706][ T36] audit: type=1400 audit(1750462944.493:324): avc: denied { create } for pid=1699 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 57.933574][ T1700] binder: Unknown parameter '' [ 57.960873][ T61] usb usb3-port1: unable to enumerate USB device [ 58.037420][ T1707] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.037833][ T1707] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 58.044653][ T1707] rust_binder: Error while translating object. [ 58.053349][ T1707] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.059569][ T1707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:389 [ 58.080261][ T1709] netlink: 4276 bytes leftover after parsing attributes in process `syz.0.564'. [ 58.190707][ T1719] FAULT_INJECTION: forcing a failure. [ 58.190707][ T1719] name failslab, interval 1, probability 0, space 0, times 1 [ 58.203431][ T1719] CPU: 0 UID: 0 PID: 1719 Comm: syz.0.569 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 58.203468][ T1719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.203480][ T1719] Call Trace: [ 58.203488][ T1719] [ 58.203497][ T1719] __dump_stack+0x21/0x30 [ 58.203522][ T1719] dump_stack_lvl+0x10c/0x190 [ 58.203541][ T1719] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.203559][ T1719] ? ioctl_has_perm+0x384/0x4d0 [ 58.203582][ T1719] dump_stack+0x19/0x20 [ 58.203598][ T1719] should_fail_ex+0x3d9/0x530 [ 58.203615][ T1719] should_failslab+0xac/0x100 [ 58.203636][ T1719] __kmalloc_noprof+0x69/0x450 [ 58.203653][ T1719] ? do_pagemap_cmd+0x40c/0xc20 [ 58.203668][ T1719] ? __kasan_check_write+0x18/0x20 [ 58.203685][ T1719] do_pagemap_cmd+0x40c/0xc20 [ 58.203699][ T1719] ? vfs_write+0x8ba/0xe80 [ 58.203717][ T1719] ? __cfi_do_pagemap_cmd+0x10/0x10 [ 58.203734][ T1719] ? __fget_files+0x2c5/0x340 [ 58.203755][ T1719] ? bpf_lsm_file_ioctl+0xd/0x20 [ 58.203771][ T1719] ? security_file_ioctl+0x34/0xd0 [ 58.203792][ T1719] ? __cfi_do_pagemap_cmd+0x10/0x10 [ 58.203806][ T1719] __se_sys_ioctl+0x132/0x1b0 [ 58.203827][ T1719] __x64_sys_ioctl+0x7f/0xa0 [ 58.203847][ T1719] x64_sys_call+0x1878/0x2ee0 [ 58.203867][ T1719] do_syscall_64+0x58/0xf0 [ 58.203887][ T1719] ? clear_bhb_loop+0x35/0x90 [ 58.203911][ T1719] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.203933][ T1719] RIP: 0033:0x7fae3958e929 [ 58.203946][ T1719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.203959][ T1719] RSP: 002b:00007fae3a433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.203975][ T1719] RAX: ffffffffffffffda RBX: 00007fae397b5fa0 RCX: 00007fae3958e929 [ 58.203987][ T1719] RDX: 0000200000000100 RSI: 00000000c0606610 RDI: 0000000000000004 [ 58.203997][ T1719] RBP: 00007fae3a433090 R08: 0000000000000000 R09: 0000000000000000 [ 58.204007][ T1719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.204016][ T1719] R13: 0000000000000000 R14: 00007fae397b5fa0 R15: 00007ffc6897ac58 [ 58.204029][ T1719] [ 58.432413][ T36] audit: type=1400 audit(1750462944.970:325): avc: denied { read append } for pid=1720 comm="syz.2.570" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.459370][ T36] audit: type=1400 audit(1750462944.970:326): avc: denied { open } for pid=1720 comm="syz.2.570" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.466009][ T1723] FAULT_INJECTION: forcing a failure. [ 58.466009][ T1723] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 58.496076][ T1723] CPU: 1 UID: 0 PID: 1723 Comm: syz.0.571 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 58.496112][ T1723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.496139][ T1723] Call Trace: [ 58.496147][ T1723] [ 58.496156][ T1723] __dump_stack+0x21/0x30 [ 58.496188][ T1723] dump_stack_lvl+0x10c/0x190 [ 58.496214][ T1723] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.496246][ T1723] ? __kasan_check_read+0x15/0x20 [ 58.496267][ T1723] dump_stack+0x19/0x20 [ 58.496283][ T1723] should_fail_ex+0x3d9/0x530 [ 58.496300][ T1723] should_fail_alloc_page+0xeb/0x110 [ 58.496321][ T1723] __alloc_pages_noprof+0x19d/0x6c0 [ 58.496336][ T1723] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 58.496351][ T1723] ? selinux_file_open+0x457/0x610 [ 58.496374][ T1723] ? __cfi__raw_spin_lock+0x10/0x10 [ 58.496396][ T1723] __pmd_alloc+0xb3/0x9b0 [ 58.496417][ T1723] ? avc_has_extended_perms+0x7c7/0xdd0 [ 58.496433][ T1723] ? __cfi___pmd_alloc+0x10/0x10 [ 58.496454][ T1723] ? avc_has_extended_perms+0x921/0xdd0 [ 58.496473][ T1723] handle_mm_fault+0xd16/0x1b90 [ 58.496501][ T1723] ? __cfi_handle_mm_fault+0x10/0x10 [ 58.496521][ T1723] ? find_vma+0xcd/0x110 [ 58.496539][ T1723] ? ioctl_has_perm+0x384/0x4d0 [ 58.496561][ T1723] ? lock_mm_and_find_vma+0xb8/0x3a0 [ 58.496585][ T1723] do_user_addr_fault+0x4ca/0x1200 [ 58.496607][ T1723] exc_page_fault+0x59/0xc0 [ 58.496626][ T1723] asm_exc_page_fault+0x2b/0x30 [ 58.496652][ T1723] RIP: 0010:__put_user_4+0x11/0x30 [ 58.496673][ T1723] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 58.496687][ T1723] RSP: 0018:ffffc9000e417d98 EFLAGS: 00050202 [ 58.496701][ T1723] RAX: 0000000000000193 RBX: 0000000000000000 RCX: 0000200000003c80 [ 58.496712][ T1723] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88813408c288 [ 58.496722][ T1723] RBP: ffffc9000e417e90 R08: ffff88813408c28b R09: 1ffff11026811851 [ 58.496734][ T1723] R10: dffffc0000000000 R11: ffffed1026811852 R12: ffff88813087ea80 [ 58.496745][ T1723] R13: 1ffff92001c82fb8 R14: dffffc0000000000 R15: ffff888110d9bc10 [ 58.496759][ T1723] ? sock_ioctl+0x4c1/0x7b0 [ 58.496776][ T1723] ? __cfi_sock_ioctl+0x10/0x10 [ 58.496792][ T1723] ? __fget_files+0x2c5/0x340 [ 58.496812][ T1723] ? bpf_lsm_file_ioctl+0xd/0x20 [ 58.496829][ T1723] ? security_file_ioctl+0x34/0xd0 [ 58.496849][ T1723] ? __cfi_sock_ioctl+0x10/0x10 [ 58.496864][ T1723] __se_sys_ioctl+0x132/0x1b0 [ 58.496885][ T1723] __x64_sys_ioctl+0x7f/0xa0 [ 58.496905][ T1723] x64_sys_call+0x1878/0x2ee0 [ 58.496925][ T1723] do_syscall_64+0x58/0xf0 [ 58.496944][ T1723] ? clear_bhb_loop+0x35/0x90 [ 58.496966][ T1723] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.496990][ T1723] RIP: 0033:0x7fae3958e929 [ 58.497001][ T1723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.497013][ T1723] RSP: 002b:00007fae3a433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.497028][ T1723] RAX: ffffffffffffffda RBX: 00007fae397b5fa0 RCX: 00007fae3958e929 [ 58.497039][ T1723] RDX: 0000200000003c80 RSI: 0000000000008904 RDI: 0000000000000003 [ 58.497049][ T1723] RBP: 00007fae3a433090 R08: 0000000000000000 R09: 0000000000000000 [ 58.497059][ T1723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.497068][ T1723] R13: 0000000000000000 R14: 00007fae397b5fa0 R15: 00007ffc6897ac58 [ 58.497080][ T1723] [ 58.509817][ T1725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 58.519380][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.547110][ T1062] Bluetooth: hci0: command 0x1003 tx timeout [ 58.609799][ T1728] SELinux: security_context_str_to_sid () failed with errno=-22 [ 59.029903][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 59.091001][ T1734] rust_binder: Error while translating object. [ 59.091038][ T1734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 59.097377][ T1734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:409 [ 59.190256][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 59.206285][ T31] usb 3-1: config 1 interface 0 altsetting 74 bulk endpoint 0x1 has invalid maxpacket 8 [ 59.216412][ T31] usb 3-1: config 1 interface 0 altsetting 74 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.229657][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 59.237980][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 59.247333][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.255543][ T31] usb 3-1: Product: ᛨ妉閩뀚⾥⎞㔍㵁☙闷ㄢ䈴鲣᱖擜気￪羳劷࣫Ṯ顶醂軜憍얱嘬ȥ냃둏쪋恍駩㿏㱜ၼ㎻㠂欫㗅䑨녨Ⲹ껓貺薊貄좒衎挳퍧懶컔˰갡酿ꛛ斳ͻ席㍋၊뺫窗災ᯘ鑊녤봹㬁⡞䙮䇀쮝创鱢חⱈԿ⇞턮셳ꋠ挽䘜늘牕郭ｓి❶詵굍䝗➒讗殑 [ 59.288511][ T31] usb 3-1: Manufacturer: 㫛즋憄舄뵂옊ࡩ䙶த氲௠爻퉸⎈가祇䥂㔸㪋靹㱖٫鍃슒 [ 59.301888][ T31] usb 3-1: SerialNumber: ࠊ [ 59.310809][ T1726] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.318116][ T1726] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.342617][ T1754] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 59.342617][ T1754] null pointer dereference occurred [ 59.355377][ T1754] ------------[ cut here ]------------ [ 59.361032][ T1754] kernel BUG at rust/helpers/bug.c:7! [ 59.366883][ T1754] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 59.373872][ T1754] CPU: 0 UID: 0 PID: 1754 Comm: syz.0.586 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 59.387279][ T1754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.397366][ T1754] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 59.402694][ T1754] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 9a 45 a4 96 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 d0 81 ed 1a 90 90 90 90 90 90 90 90 90 [ 59.422401][ T1754] RSP: 0018:ffffc9000e4171d0 EFLAGS: 00010246 [ 59.428519][ T1754] RAX: 000000000000005a RBX: 1ffff92001c82e3c RCX: db4bdc1e43a29800 [ 59.436527][ T1754] RDX: ffffc90001681000 RSI: 0000000000002c08 RDI: 0000000000002c09 [ 59.444533][ T1754] RBP: ffffc9000e4171d0 R08: ffffc9000e416ec7 R09: 1ffff92001c82dd8 [ 59.452546][ T1754] R10: dffffc0000000000 R11: fffff52001c82dd9 R12: 0000000000000000 [ 59.460570][ T1754] R13: dffffc0000000000 R14: ffffc9000e417200 R15: ffffc9000e417230 [ 59.468587][ T1754] FS: 00007fae3a4336c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 59.477561][ T1754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.484171][ T1754] CR2: 0000200000001000 CR3: 000000011e220000 CR4: 00000000003526b0 [ 59.492181][ T1754] Call Trace: [ 59.495482][ T1754] [ 59.498450][ T1754] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 59.505945][ T1754] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 59.513999][ T1754] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 59.527680][ T1754] ? p9pdu_vwritef+0x2720/0x2720 [ 59.532670][ T1754] ? radix_tree_node_alloc+0x1af/0x400 [ 59.538200][ T1754] ? __cfi_p9pdu_vwritef+0x10/0x10 [ 59.542974][ T36] audit: type=1400 audit(1750495713.857:327): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 59.543349][ T1754] ? p9pdu_vwritef+0x1c5e/0x2720 [ 59.565490][ T36] audit: type=1400 audit(1750495713.857:328): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.570014][ T1754] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 59.570069][ T1754] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 59.608156][ T1754] ? p9pdu_writef+0xdb/0x130 [ 59.612781][ T1754] ? p9pdu_vwritef+0x2720/0x2720 [ 59.617751][ T1754] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 59.626899][ T1754] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 59.635784][ T1754] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 59.643641][ T1754] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 59.651328][ T1754] ? p9_client_prepare_req+0x732/0xa10 [ 59.656824][ T1754] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 59.665109][ T1754] ? __kasan_check_write+0x18/0x20 [ 59.670258][ T1754] ? _raw_spin_lock+0x8c/0x120 [ 59.675075][ T1754] ? __cfi__raw_spin_lock+0x10/0x10 [ 59.680301][ T1754] ? __kasan_check_write+0x18/0x20 [ 59.685436][ T1754] ? _raw_spin_lock+0x8c/0x120 [ 59.690232][ T1754] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 59.698499][ T1754] p9_fd_request+0x391/0x520 [ 59.703133][ T1754] p9_client_rpc+0x2f9/0xb40 [ 59.707770][ T1754] ? bt_sock_poll+0x477/0x7b0 [ 59.712479][ T1754] ? p9_fid_create+0x3d0/0x3d0 [ 59.717284][ T1754] ? __cfi_sock_poll+0x10/0x10 [ 59.722145][ T1754] ? p9_conn_create+0x4c9/0x570 [ 59.727086][ T1754] ? p9_fd_create+0x2f3/0x4c0 [ 59.731814][ T1754] p9_client_create+0x96a/0x1190 [ 59.736792][ T1754] ? __cfi_p9_client_create+0x10/0x10 [ 59.742237][ T1754] ? kasan_save_alloc_info+0x40/0x50 [ 59.747576][ T1754] ? __kasan_kmalloc+0x96/0xb0 [ 59.752398][ T1754] ? kstrdup+0x7b/0x140 [ 59.756599][ T1754] ? __kasan_check_write+0x18/0x20 [ 59.761904][ T1754] v9fs_session_init+0x1e1/0x1820 [ 59.766986][ T1754] ? __cfi_v9fs_session_init+0x10/0x10 [ 59.772917][ T1754] ? kasan_save_alloc_info+0x40/0x50 [ 59.778235][ T1754] ? __kasan_kmalloc+0x96/0xb0 [ 59.783040][ T1754] ? v9fs_mount+0xbd/0xa00 [ 59.787485][ T1754] v9fs_mount+0xd7/0xa00 [ 59.791751][ T1754] ? selinux_sb_eat_lsm_opts+0xa69/0xb40 [ 59.797409][ T1754] ? __cfi_v9fs_mount+0x10/0x10 [ 59.802300][ T1754] ? selinux_capable+0x38/0x50 [ 59.807087][ T1754] legacy_get_tree+0x103/0x1b0 [ 59.811878][ T1754] ? __cfi_v9fs_mount+0x10/0x10 [ 59.816751][ T1754] vfs_get_tree+0x9e/0x290 [ 59.821194][ T1754] do_new_mount+0x251/0xb40 [ 59.825728][ T1754] path_mount+0x688/0x1050 [ 59.830205][ T1754] ? putname+0x113/0x150 [ 59.834481][ T1754] __se_sys_mount+0x2bd/0x480 [ 59.839177][ T1754] ? __x64_sys_mount+0xf0/0xf0 [ 59.843958][ T1754] ? __kasan_check_write+0x18/0x20 [ 59.849085][ T1754] ? fpregs_restore_userregs+0x11d/0x260 [ 59.854740][ T1754] __x64_sys_mount+0xc3/0xf0 [ 59.859346][ T1754] x64_sys_call+0x2021/0x2ee0 [ 59.864048][ T1754] do_syscall_64+0x58/0xf0 [ 59.868489][ T1754] ? clear_bhb_loop+0x35/0x90 [ 59.873198][ T1754] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.879122][ T1754] RIP: 0033:0x7fae3958e929 [ 59.883561][ T1754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.903275][ T1754] RSP: 002b:00007fae3a433038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.911709][ T1754] RAX: ffffffffffffffda RBX: 00007fae397b5fa0 RCX: 00007fae3958e929 [ 59.919699][ T1754] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 59.927679][ T1754] RBP: 00007fae39610b39 R08: 0000200000000340 R09: 0000000000000000 [ 59.935661][ T1754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.943647][ T1754] R13: 0000000000000000 R14: 00007fae397b5fa0 R15: 00007ffc6897ac58 [ 59.951740][ T1754] [ 59.954768][ T1754] Modules linked in: [ 59.959398][ T1754] ---[ end trace 0000000000000000 ]--- [ 59.975116][ T1754] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 59.980587][ T1754] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 9a 45 a4 96 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 d0 81 ed 1a 90 90 90 90 90 90 90 90 90 [ 59.992708][ T31] usb 3-1: USB disconnect, device number 10 [ 60.008049][ T1754] RSP: 0018:ffffc9000e4171d0 EFLAGS: 00010246 [ 60.014343][ T1754] RAX: 000000000000005a RBX: 1ffff92001c82e3c RCX: db4bdc1e43a29800 [ 60.026208][ T1754] RDX: ffffc90001681000 RSI: 0000000000002c08 RDI: 0000000000002c09 [ 60.034298][ T1754] RBP: ffffc9000e4171d0 R08: ffffc9000e416ec7 R09: 1ffff92001c82dd8 [ 60.042390][ T1754] R10: dffffc0000000000 R11: fffff52001c82dd9 R12: 0000000000000000 [ 60.050464][ T1754] R13: dffffc0000000000 R14: ffffc9000e417200 R15: ffffc9000e417230 [ 60.058515][ T1754] FS: 00007fae3a4336c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 60.068244][ T1754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.074868][ T1754] CR2: 00007f5e33cedd69 CR3: 000000011e220000 CR4: 00000000003526b0 [ 60.082903][ T1754] Kernel panic - not syncing: Fatal exception [ 60.089250][ T1754] Kernel Offset: disabled [ 60.093585][ T1754] Rebooting in 86400 seconds..