last executing test programs: 3m8.391846864s ago: executing program 2 (id=335): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m8.330687319s ago: executing program 2 (id=337): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, &(0x7f0000000300)="4625bb7328291e27241d5e90a0e4f786d5e28b5af9798b0011691dc45f020e74dfe695eaa8b21bf696c4172679af9fbebebeadf3f63f3cff51e31835d1e764bc726794dbf68c7dff17b92f01be4a847434477d29bda8268314722bf3db3c942259e42b7483ddd643b5adb4669476e969a786b2dce51872be184927eb5046aa12290af71829b2b0b16e346e743d869b125c5ac9ce1b90179eb66a7fc54ba9411187dd8beefef3aa382637103d99a2076f7d615475c100cf3dccf2eccacf20aa5dfa577ab1980dfa4304cf95e68602ee8e573defef035bbf9f34cbc01345", 0xdd, 0x2004c845, &(0x7f0000000440)=@sco={0x1f, @none}, 0xc6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r4, 0x1000007, 0x13, r3, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m7.925821331s ago: executing program 2 (id=339): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') ftruncate(r0, 0x2463ab6b) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'vlan1\x00', &(0x7f0000000200)=@ethtool_sset_info={0x4a, 0x0, 0x101}}) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, 0x0) (async) mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) (async) userfaultfd(0x801) 3m7.921388662s ago: executing program 2 (id=341): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) ppoll(&(0x7f0000000040)=[{r1, 0x2}, {r1, 0xe260}], 0x2, 0x0, 0x0, 0x0) r2 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = fcntl$dupfd(r4, 0x406, r4) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200002000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x800) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000001b40)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0xffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000280)="9e574c2f698e840ceaab115dad14445fcf933ce17100ecb8121fd442b7fa4d70ea252dff720912c2739ed282ac0fc149262d90bfe308675804c2534c56e0c0ae959e36ef92ff50f4abd8e4a2f287f2e2c9c25bf2c611e2cdd88a48b1c733e14a0d07a4390977a553bdf659d2bb6cd872549399a0d25e120a88562466fb2219e3d35318c2a6a219c4b66be30457a35b3ac612dca17d17275280256068f36a668403c4c904a3b74c8a2a9bcce54a5803b804597b567f1382cdf5b47e5489b21dc31a902712abf19d507110e4fcb643564693df4bc8ca655d7a647cf3647def8583ec6eb0363e8a85f383273f03e40ebe4877d050f7e3", 0xf5}, {&(0x7f0000000400)="fc41af60407300fa1f7531c4ea484eb664d14e2a6c561ea05d312956ce177239d24de619cf30b374affb4499287fa6c41fd90c76505fa7f70995a06ad0d9600df258cde4e368440bc1c5909c0786f9929e", 0x51}, {&(0x7f0000000380)}, {&(0x7f0000000480)="b9112012c1d4cbc9cce99c4ff5dc1a269f322a9f09ee1075e6e75634b2d887e3552c7e237d4cf8451ad45bc987b010a1ee6e6d9e725b90d1df08959b0c71ef95e21479a92c804ba3690101b5b973b28a2d95c4f305cab4f57c1b1f0a762881d83f739304a27b9935bb8ada99d97b25355d29631f2e134bbc8d107f46cc3e17f7dc66fcbe8f29ed6e65c4ba355287a8eca6eca8b8f4889fc15f5051ddf8db7e64f6fb0ab7512e90d6085ca1e2ea4d6312e99868d9d8a0f73e6b61462e192d8fb7d7a4e5f69fd8b5a12bcef1a6710cc6ded54208597c45334b8b3b846ef0da19014904a10fc2a44b69bc86545728cbc3117b1ae371110d709fa9ee", 0xfa}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="ba0f4f29c082ec5e3d56fe2636b742db60fdfc2397eed157c95548f6aa94873712e2bb25907838fbf9c06983f6e60799d59acdb14b0829dfa98509e4a7f51bfc67cc1b7ef7a1a68b2473803cb7e991df1797dac9e4fa4f69449e9ee412ec039a018b334e2bc70df6a6d91be3ea465e7d0107bb6d8fb3abf294b95754f4f821cbf6fd6160220d8245a92a1856bb5ec020577b1cbd3185cae176d45af2060e72e2d9824e8553ac292d1779e2e4934283f078e006cb4aa6ffc63b46b87d554d137f10018a62344331a9f03fdeeecf8fbff78b", 0xd1}, {&(0x7f0000001680)="a08a0d81a3e39dffef13b41e8a66f0558da6414ddd80ec30ca868c517c4e275e460d25e87da4229d3286da937658a535e6341bc740d55ab3958cbe488700b518f87db8fe20d3f792d78dac526dc9d7660065e69b5679cc0333c692d581fdcc9d34f7477317017060d694edfe3fc7397016edeac44e6d4b8e76f229c0846ccec92cc37ad1156702b94f98d3f9f06a4b52e8718b5233033cd76677a3476c378b48fbc80eaa6be56b941b49c9b7d3c08ded32906235d1be11a2fde1e1e30004f621242c83dff2c65ffc0b8379992ab2ec459605b306cdf49d6a93835451f0a1d5f54d83bc86272d222d54", 0xe9}], 0x7, &(0x7f0000001900)=ANY=[@ANYBLOB="14000000000000002900000008000000ff7f000000000000140000000000000029000000340000000f0000000000000024000000000000002900000032000000fe0000aa00"/80, @ANYRES32=0x0, @ANYBLOB="000000001400000000000000290000000b0000000000000600000000"], 0x70}}, {{&(0x7f0000001980)={0xa, 0x4e23, 0xdbd, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f00000019c0)="3b027b04c0d5bc47ada9ba2c5e9e3f89a7227f0ec96f8617c01d0211d3850aed7241ee88ed9c043adb36da9215a49d93663741469243708a14081733acd30959659c45bd82eebaee1ca7376055334180f615433b7fae8a9a97f0905a98f68b3e77b9209fa3a7a8c54dbb6d1c163c537a11a0db6a54dcbb5208a065f1689638018cd4cbab72eca43f89b53d1ee0c9caf1ffe4e7d66952e5c2a06c2a02cba935374be485ec8d0c0416428b1fa765c61de4e2fcce538d4928541fce74802dadfec330b2", 0xc2}], 0x1, &(0x7f0000001b00)=[@hoplimit={{0x14, 0x29, 0x34, 0x8000}}], 0x18}}], 0x2, 0x931766f6319eed40) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r7) sendmsg$FOU_CMD_GET(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1200004}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000098", @ANYRES16=r8, @ANYBLOB="000228bd7000ffdbdf2503000000050002000a00000004000500"], 0x20}, 0x1, 0x0, 0x0, 0x4002}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') syz_clone3(&(0x7f0000000080)={0x120296480, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r9, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) 3m7.281922324s ago: executing program 2 (id=356): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x68800, 0x20) read$FUSE(r0, &(0x7f0000002040)={0x2020}, 0x2020) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000080)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000100)) 3m7.182539961s ago: executing program 2 (id=357): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x3a, &(0x7f0000000000)={0x3e, 0xfffffffd, 0x3}) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x5, &(0x7f0000000140)={0x2, 0xffffffff}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r8, 0x125f, 0x0) 3m7.181964082s ago: executing program 32 (id=357): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x3a, &(0x7f0000000000)={0x3e, 0xfffffffd, 0x3}) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x5, &(0x7f0000000140)={0x2, 0xffffffff}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r8, 0x125f, 0x0) 4.530901045s ago: executing program 3 (id=3539): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x7ffff004) 3.886799177s ago: executing program 4 (id=3554): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) open(0x0, 0x14103e, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) 3.685373044s ago: executing program 3 (id=3555): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) 3.640841427s ago: executing program 3 (id=3556): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x8cff, 0x0, 0x0) 3.586758681s ago: executing program 3 (id=3557): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000440)='./bus\x00', 0x11d) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x80000001) 3.126828588s ago: executing program 3 (id=3566): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x7, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003738605c005240300f99a010203010902360002010100090904e308000933560705240600000e00000000000000"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 3.075161483s ago: executing program 4 (id=3568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{0x0}], 0x1) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000) close_range(r0, 0xffffffffffffffff, 0x0) 2.997899419s ago: executing program 4 (id=3570): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unshare(0x8040600) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) 2.891681507s ago: executing program 4 (id=3572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 2.891416788s ago: executing program 4 (id=3575): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000440)='./bus\x00', 0x11d) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) 2.643504607s ago: executing program 4 (id=3579): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x62941, 0x2, 0x10}, 0x18) 1.262445598s ago: executing program 3 (id=3591): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 491.097051ms ago: executing program 0 (id=3604): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, 0x0, 0x0, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000009) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x406, r3) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write$cgroup_pid(r5, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, 0x0) 434.828875ms ago: executing program 0 (id=3605): openat$rtc(0xffffffffffffff9c, 0x0, 0x103a02, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0xfffffffffffffffc) 303.089016ms ago: executing program 0 (id=3606): munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents64(r0, &(0x7f0000002f40)=""/4077, 0xfed) 289.450776ms ago: executing program 0 (id=3607): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e23, @empty=0xfdfd}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 'lo\x00'}) 230.828131ms ago: executing program 0 (id=3609): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001400010025bd7000fddbdf25010908254e244e2203"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) 230.732182ms ago: executing program 0 (id=3610): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYRES16=r0], 0x0) 34.802007ms ago: executing program 1 (id=3613): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6e34, @mcast2, 0x8}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) getsockname(r0, 0x0, &(0x7f0000000300)) 34.705477ms ago: executing program 1 (id=3614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x29) 34.663037ms ago: executing program 1 (id=3615): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0141040b"], 0xf) 34.596357ms ago: executing program 1 (id=3616): r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r0, &(0x7f0000004440)={0x2020}, 0x2020) 24.318668ms ago: executing program 1 (id=3617): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000440)=""/139, 0x8b}], 0x4, 0x2, 0x8) 0s ago: executing program 1 (id=3618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x7) kernel console output (not intermixed with test programs): 162.810810][ T36] audit: type=1400 audit(1755349340.796:1338): avc: denied { read } for pid=6593 comm="syz.0.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 162.945310][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 162.951536][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 162.959658][ T10] usb 4-1: config 0 has no interface number 0 [ 162.967162][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 162.976197][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.984201][ T10] usb 4-1: Product: syz [ 162.988396][ T10] usb 4-1: Manufacturer: syz [ 162.992986][ T10] usb 4-1: SerialNumber: syz [ 162.998357][ T10] usb 4-1: config 0 descriptor?? [ 163.004200][ T10] smsc95xx v2.0.0 [ 163.667105][ T6589] rust_binder: Write failure EINVAL in pid:1078 [ 163.878865][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 163.895863][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 163.905156][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 163.916032][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 163.925154][ T10] usb 4-1: USB disconnect, device number 72 [ 164.078311][ T36] audit: type=1400 audit(1755349341.995:1339): avc: denied { create } for pid=6624 comm="syz.1.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 164.103612][ T6627] fuse: Bad value for 'fd' [ 164.162764][ T6640] 9pnet: Could not find request transport: fd$rfdno=+`:BJ9(8W0x0000000000000003 [ 164.190908][ T36] audit: type=1400 audit(1755349342.100:1340): avc: denied { getopt } for pid=6643 comm="syz.0.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.436360][ T9] rust_binder: 6588: removing orphan mapping 0:24 [ 164.553855][ T36] audit: type=1400 audit(1755349342.446:1341): avc: denied { rename } for pid=6712 comm="syz.4.1890" name="file0" dev="tmpfs" ino=2711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 165.138406][ T6731] 9pnet_fd: Insufficient options for proto=fd [ 165.155687][ T6733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=6733 comm=syz.4.1898 [ 166.047451][ T6741] overlayfs: failed to clone upperpath [ 166.119950][ T6745] xt_NFQUEUE: number of total queues is 0 [ 166.126329][ T6745] fuse: Unknown parameter '/dev/rnullb0' [ 166.160182][ T6747] tipc: Enabling of bearer rejected, failed to enable media [ 166.245275][ T6756] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 166.272710][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1909'. [ 166.411669][ T6779] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 166.411793][ T6779] rust_binder: inc_ref_done called when no active inc_refs [ 166.419804][ T6779] rust_binder: 1113: no such ref 3 [ 166.477023][ T6790] netlink: 57 bytes leftover after parsing attributes in process `syz.3.1917'. [ 166.662624][ T36] audit: type=1400 audit(1755349344.501:1342): avc: denied { map } for pid=6801 comm="syz.3.1921" path="socket:[35683]" dev="sockfs" ino=35683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.688161][ T36] audit: type=1400 audit(1755349344.501:1343): avc: denied { read accept } for pid=6801 comm="syz.3.1921" path="socket:[35683]" dev="sockfs" ino=35683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.717031][ T36] audit: type=1400 audit(1755349344.550:1344): avc: denied { append } for pid=6806 comm="syz.3.1922" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 166.912841][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1924'. [ 166.921984][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1924'. [ 166.930965][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1924'. [ 166.940227][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1924'. [ 166.950663][ T6811] overlayfs: disabling nfs_export due to verity=require [ 166.958467][ T6811] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 166.966448][ T36] audit: type=1400 audit(1755349344.785:1345): avc: denied { getattr } for pid=6810 comm="syz.3.1924" name="/" dev="incremental-fs" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 166.970637][ T6811] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 167.000181][ T6811] rust_binder: 1136: no such ref 2 [ 167.344091][ T36] audit: type=1326 audit(1755349345.167:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6793 comm="syz.4.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2563f8ebe9 code=0x7fc00000 [ 167.394761][ T360] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 167.543591][ T6828] fuseblk: Bad value for 'fd' [ 167.547290][ T360] usb 4-1: Using ep0 maxpacket: 16 [ 167.554566][ T360] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 167.563664][ T360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.573035][ T360] usb 4-1: config 0 descriptor?? [ 167.579086][ T360] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 167.788414][ T360] usb 4-1: Detected FT232A [ 167.793376][ T360] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 167.803112][ T360] usb 4-1: USB disconnect, device number 73 [ 167.809498][ T360] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 167.819987][ T360] ftdi_sio 4-1:0.0: device disconnected [ 168.468361][ T6893] overlayfs: failed to clone upperpath [ 168.475291][ T6893] overlayfs: conflicting options: userxattr,redirect_dir=on [ 168.805730][ T10] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 168.958836][ T10] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.970565][ T10] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 168.981577][ T10] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 168.992835][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 169.001893][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.010759][ T6912] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.229224][ T10] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 169.237888][ T10] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input41 [ 169.244515][ T6932] rust_binder: Error while translating object. [ 169.247978][ T6932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 169.254332][ T6932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1155 [ 169.255858][ T10] usb 4-1: USB disconnect, device number 74 [ 169.290574][ T36] audit: type=1400 audit(1755349347.079:1347): avc: denied { setattr } for pid=6933 comm="syz.3.1970" name="/" dev="incremental-fs" ino=2120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.469158][ T6960] overlayfs: failed to clone upperpath [ 169.483207][ T6960] overlayfs: missing 'lowerdir' [ 169.489040][ T6962] overlayfs: failed to resolve './file2': -2 [ 169.513702][ T6963] overlayfs: failed to resolve './file2': -2 [ 169.544112][ T6962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61206 sclass=netlink_route_socket pid=6962 comm=syz.1.1981 [ 169.871178][ T6967] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.892452][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.908052][ T6967] bridge_slave_0: entered allmulticast mode [ 169.924676][ T6967] bridge_slave_0: entered promiscuous mode [ 169.935154][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.952418][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.963738][ T6967] bridge_slave_1: entered allmulticast mode [ 169.988163][ T6967] bridge_slave_1: entered promiscuous mode [ 170.140966][ T6986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1987'. [ 170.141074][ T36] audit: type=1400 audit(1755349347.931:1348): avc: denied { getopt } for pid=6984 comm="syz.3.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 170.150980][ T6985] rust_binder: Error while translating object. [ 170.170532][ T6985] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 170.176728][ T6985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1160 [ 170.197033][ T6989] overlayfs: missing 'lowerdir' [ 170.288835][ T13] bridge_slave_0: left allmulticast mode [ 170.294709][ T13] bridge_slave_0: left promiscuous mode [ 170.300480][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.327532][ T13] bridge0 (unregistering): left allmulticast mode [ 170.423681][ T9] rust_binder: 6990: removing orphan mapping 0:4224 [ 170.442206][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.449285][ T6967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.456613][ T6967] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.463662][ T6967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.495369][ T13] veth1_macvtap: left promiscuous mode [ 170.503090][ T13] veth0_vlan: left promiscuous mode [ 170.601634][ T7030] 9pnet_fd: Insufficient options for proto=fd [ 170.609198][ T5657] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.624194][ T5657] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.643670][ T5658] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.650733][ T5658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.659614][ T5658] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.666695][ T5658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.710067][ T6967] veth0_vlan: entered promiscuous mode [ 170.726135][ T6967] veth1_macvtap: entered promiscuous mode [ 170.804568][ T7054] rust_binder: Write failure EINVAL in pid:2 [ 170.816642][ T7056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.841710][ T7056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.855384][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.874433][ T7056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.885815][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.894501][ T7056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.156831][ T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 171.229978][ T7067] overlayfs: failed to clone upperpath [ 171.319526][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.331175][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 171.341553][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2014'. [ 171.342450][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 171.352229][ T7072] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2014'. [ 171.361036][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.382541][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.392082][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.401700][ T10] usb 4-1: config 0 descriptor?? [ 171.445640][ T7074] /dev/sr0: Can't lookup blockdev [ 171.451770][ T7074] 9pnet_fd: Insufficient options for proto=fd [ 171.692077][ T36] audit: type=1326 audit(1755349349.471:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.0.2019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5fb58ebe9 code=0x0 [ 171.770855][ T7092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2021'. [ 171.811735][ T10] plantronics 0003:047F:FFFF.001E: ignoring exceeding usage max [ 171.822662][ T10] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 171.832262][ T10] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 171.895452][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.902600][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.911121][ T7097] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.918179][ T7097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.925531][ T7097] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.932586][ T7097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.593155][ T7120] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 172.601877][ T7120] rust_binder: Write failure EINVAL in pid:20 [ 172.661288][ T7128] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.975542][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 173.136186][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 173.143294][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 173.154792][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.164065][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.172377][ T9] usb 1-1: Product: 퍅ﾶꨣ᷹鎳ؤ絳짦柰焽帥紨㎢㊷㨴ﾓ㴮Ҷ㷩㇧⚏㳩د줴ᮬ틦⅄澠兔⿕Ȗ翬⹰梑⫺㖓Ჶ꺆ݴ [ 173.187011][ T9] usb 1-1: Manufacturer: ഠ⾾䕂젼複鋩ᶲ빴摲놔銰穱ᆿ瀄禍⚽呗诇倌婌쌙࢏풏羆࣯㫀㘵鱗 [ 173.199878][ T9] usb 1-1: SerialNumber: 㡀슭묛Ί⁠졏븢迂֬圯愪ᨼ닞描வ훩凃揓昢〜ꅻ弘얄ഈﻦࠖ죷ꔼ⺅壊蚤ꈸ횄Ⴒꊎ૸ۀ炾ጌ厧篒鸰찓⨕띘㥼㞮⎀붱詧猎⢗죩氃磫횱ꧩ数暩৺釥ᕳ埽盌䚁쪅ᰑ汤ꔕ協㚢⠩缂镆漫浟ߡ㕣웖ബ잠좈㳺ᶏ躵 [ 173.375439][ T36] audit: type=1400 audit(1755349351.134:1350): avc: denied { getattr } for pid=7169 comm="syz.4.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.395023][ T36] audit: type=1326 audit(1755349351.134:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.4.2045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2563f8ebe9 code=0x0 [ 173.441230][ T36] audit: type=1400 audit(1755349351.204:1352): avc: denied { checkpoint_restore } for pid=7135 comm="syz.0.2034" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 173.500758][ T9] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 173.510048][ T9] usb 1-1: USB disconnect, device number 33 [ 173.518395][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 173.766734][ T36] audit: type=1400 audit(1755349351.533:1353): avc: denied { watch_reads } for pid=7181 comm="syz.1.2049" path="/406/file0" dev="tmpfs" ino=2268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.805810][ T7184] overlayfs: failed to resolve './file1': -2 [ 173.898927][ T442] usb 4-1: USB disconnect, device number 75 [ 173.980178][ T7212] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.019128][ T7214] fuse: Unknown parameter 'zd' [ 174.031710][ T7215] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2058'. [ 174.094053][ T7215] incfs_lookup_dentry err:-5 [ 174.094622][ T7216] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 174.098728][ T7216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 174.105291][ T7215] incfs: Can't find or create .index dir in ./file0 [ 174.106795][ T7216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1211 [ 174.116268][ T7215] incfs: mount failed -5 [ 174.138309][ T442] rust_binder: 0: removing orphan mapping 0:4224 [ 174.287914][ T36] audit: type=1400 audit(1755349352.051:1354): avc: denied { lock } for pid=7224 comm="syz.4.2062" path="socket:[38703]" dev="sockfs" ino=38703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 174.318271][ T7227] fuse: Bad value for 'fd' [ 174.828886][ T7244] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7244 comm=syz.3.2069 [ 174.841542][ T36] audit: type=1400 audit(1755349352.610:1355): avc: denied { getopt } for pid=7243 comm="syz.3.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.029322][ T7261] overlayfs: failed to clone upperpath [ 175.036266][ T36] audit: type=1400 audit(1755349352.800:1356): avc: denied { ioctl } for pid=7260 comm="syz.1.2076" path="socket:[38755]" dev="sockfs" ino=38755 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.240048][ T7280] overlayfs: failed to clone upperpath [ 175.284389][ T7286] tipc: Started in network mode [ 175.289322][ T7286] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 175.298219][ T7286] tipc: Enabling of bearer rejected, failed to enable media [ 175.339240][ T7296] overlayfs: failed to clone upperpath [ 175.383582][ T7300] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2091'. [ 175.498409][ T7308] overlayfs: failed to clone upperpath [ 175.632460][ T510] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 175.782713][ T510] usb 1-1: Using ep0 maxpacket: 32 [ 175.789118][ T510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 175.800545][ T510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 175.812268][ T510] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 175.821470][ T510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.837557][ T510] usb 1-1: config 0 descriptor?? [ 175.843663][ T7302] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.856175][ T510] hub 1-1:0.0: USB hub found [ 175.960064][ T7329] overlay: Unknown parameter 'fowner' [ 176.024846][ T7343] netlink: 'syz.1.2107': attribute type 2 has an invalid length. [ 176.135818][ T510] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 176.160672][ T7353] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2111'. [ 176.170531][ T7353] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2111'. [ 176.394944][ T510] usbhid 1-1:0.0: can't add hid device: -71 [ 176.400981][ T510] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 176.424019][ T510] usb 1-1: USB disconnect, device number 34 [ 177.025456][ T7424] fuse: Bad value for 'fd' [ 177.034011][ T7421] KVM: debugfs: duplicate directory 7421-11 [ 177.250081][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2148'. [ 177.340673][ T7467] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 177.381691][ T7467] netlink: 'syz.4.2152': attribute type 4 has an invalid length. [ 177.443082][ T36] audit: type=1400 audit(1755349355.196:1357): avc: denied { execute } for pid=7486 comm="syz.1.2157" name="file0" dev="ramfs" ino=40250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 177.465483][ T36] audit: type=1400 audit(1755349355.196:1358): avc: denied { execute_no_trans } for pid=7486 comm="syz.1.2157" path="/file0" dev="ramfs" ino=40250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 177.491831][ T7490] netlink: 8568 bytes leftover after parsing attributes in process `syz.4.2158'. [ 177.511555][ T36] audit: type=1326 audit(1755349355.266:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.4.2159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2563f8ebe9 code=0x0 [ 177.845265][ T546] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 178.006704][ T546] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 178.019140][ T546] usb 4-1: config 0 has no interface number 0 [ 178.025339][ T546] usb 4-1: config 0 interface 9 altsetting 132 endpoint 0x6 has invalid wMaxPacketSize 0 [ 178.035909][ T546] usb 4-1: config 0 interface 9 altsetting 132 has an endpoint descriptor with address 0x31, changing to 0x1 [ 178.047637][ T546] usb 4-1: config 0 interface 9 altsetting 132 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 178.059007][ T546] usb 4-1: config 0 interface 9 has no altsetting 0 [ 178.067322][ T546] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 178.076736][ T546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.084798][ T546] usb 4-1: Product: syz [ 178.093859][ T546] usb 4-1: Manufacturer: syz [ 178.098792][ T546] usb 4-1: SerialNumber: syz [ 178.104466][ T546] usb 4-1: config 0 descriptor?? [ 178.331101][ T546] ftdi_sio 4-1:0.9: FTDI USB Serial Device converter detected [ 178.340967][ T546] usb 4-1: Detected SIO [ 178.348934][ T546] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 178.364405][ T546] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 178.375156][ T546] usb 4-1: USB disconnect, device number 76 [ 178.382076][ T546] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 178.391834][ T546] ftdi_sio 4-1:0.9: device disconnected [ 178.477825][ T7547] @: renamed from vlan0 (while UP) [ 178.854456][ T7563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 178.854485][ T7563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1244 [ 178.874567][ T7565] rust_binder: Write failure EFAULT in pid:1246 [ 178.896194][ T36] audit: type=1400 audit(1755349356.655:1360): avc: denied { watch } for pid=7566 comm="syz.3.2187" path="pipe:[40380]" dev="pipefs" ino=40380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 179.184640][ T36] audit: type=1400 audit(1755349356.935:1361): avc: denied { create } for pid=7589 comm="syz.4.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.246359][ T442] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 179.397503][ T442] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.408922][ T442] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.419484][ T442] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 179.428714][ T442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.437697][ T442] usb 4-1: config 0 descriptor?? [ 179.724644][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2204'. [ 179.735715][ T442] usb 4-1: string descriptor 0 read error: -71 [ 179.755119][ T442] usbhid 4-1:0.0: can't add hid device: -71 [ 179.761259][ T442] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 179.770220][ T442] usb 4-1: USB disconnect, device number 77 [ 180.304805][ T7636] netlink: 'syz.1.2216': attribute type 1 has an invalid length. [ 180.350032][ T7641] binfmt_misc: register: failed to install interpreter file ./file0 [ 180.371126][ T7648] lo: entered promiscuous mode [ 180.376269][ T7648] lo: left promiscuous mode [ 180.546573][ T7676] fuse: Unknown parameter '0x0000000000000008' [ 180.579272][ T7676] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.579308][ T7676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1265 [ 180.685748][ T7704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2240'. [ 180.917150][ T546] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 181.067178][ T546] usb 4-1: Using ep0 maxpacket: 32 [ 181.073359][ T546] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 181.081727][ T546] usb 4-1: config 0 has no interface number 0 [ 181.089158][ T546] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 181.098668][ T546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.106666][ T546] usb 4-1: Product: syz [ 181.110844][ T546] usb 4-1: Manufacturer: syz [ 181.115446][ T546] usb 4-1: SerialNumber: syz [ 181.121814][ T546] usb 4-1: config 0 descriptor?? [ 181.127813][ T546] smsc95xx v2.0.0 [ 181.296138][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.303256][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.310405][ T7732] bridge_slave_0: entered allmulticast mode [ 181.316692][ T7732] bridge_slave_0: entered promiscuous mode [ 181.323218][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.330384][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.337518][ T7732] bridge_slave_1: entered allmulticast mode [ 181.343781][ T7732] bridge_slave_1: entered promiscuous mode [ 181.423110][ T5657] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.430389][ T5657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.440829][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.447886][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.475168][ T7732] veth0_vlan: entered promiscuous mode [ 181.486632][ T7732] veth1_macvtap: entered promiscuous mode [ 181.542852][ T546] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 181.555967][ T546] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 181.568561][ T7751] /dev/rnullb0: Can't open blockdev [ 181.660319][ T7764] rust_binder: Write failure EINVAL in pid:11 [ 181.689649][ T36] audit: type=1400 audit(1755349359.443:1362): avc: denied { mounton } for pid=7769 comm="syz.1.2262" path="/" dev="ramfs" ino=41011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 181.912816][ T7790] netlink: 57 bytes leftover after parsing attributes in process `syz.1.2266'. [ 181.940748][ T7793] netlink: 'syz.1.2267': attribute type 2 has an invalid length. [ 181.958644][ T442] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 182.087576][ T442] usb 5-1: device descriptor read/64, error -71 [ 182.169989][ T7811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7811 comm=syz.1.2270 [ 182.327580][ T442] usb 5-1: device descriptor read/64, error -71 [ 182.488704][ T7815] rust_binder: Error while translating object. [ 182.488737][ T7813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.488770][ T7815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 182.495159][ T7813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.503882][ T7815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1271 [ 182.577651][ T442] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 182.589491][ T36] audit: type=1326 audit(1755349360.343:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7826 comm="syz.0.2276" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5fb58ebe9 code=0x0 [ 182.640780][ T36] audit: type=1326 audit(1755349360.393:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7826 comm="syz.0.2276" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5fb58ebe9 code=0x0 [ 182.717701][ T442] usb 5-1: device descriptor read/64, error -71 [ 182.725545][ T7833] batadv_slave_1: entered promiscuous mode [ 182.951828][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2281'. [ 182.957744][ T442] usb 5-1: device descriptor read/64, error -71 [ 183.029468][ T7860] fuse: Unknown parameter '0x00000000000000040x0000000000000006' [ 183.037056][ T7862] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 183.061875][ T7866] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 183.062057][ T7867] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 183.070000][ T7866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1279 [ 183.079552][ T442] usb usb5-port1: attempt power cycle [ 183.089975][ T7867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1279 [ 183.437951][ T442] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 183.468821][ T442] usb 5-1: device descriptor read/8, error -71 [ 183.478171][ T7881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.486674][ T7881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.496591][ T7881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1293 [ 183.504823][ T7831] batadv_slave_1: left promiscuous mode [ 183.598968][ T442] usb 5-1: device descriptor read/8, error -71 [ 183.847899][ T442] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 183.861881][ T36] audit: type=1326 audit(1755349361.623:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.1.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35138ebe9 code=0x7fc00000 [ 183.886200][ T442] usb 5-1: device descriptor read/8, error -71 [ 183.970464][ T7899] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2301'. [ 184.013766][ T7907] binder: Unknown parameter 'defcontext01777777777777777777777' [ 184.023004][ T442] usb 5-1: device descriptor read/8, error -71 [ 184.029615][ T7909] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2305'. [ 184.040164][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.048688][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.057076][ T7911] rust_binder: Write failure EFAULT in pid:1297 [ 184.148065][ T442] usb usb5-port1: unable to enumerate USB device [ 184.582778][ T7928] __vm_enough_memory: pid: 7928, comm: syz.3.2314, bytes: 18014402804453376 not enough memory for the allocation [ 184.658845][ T7933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1303 [ 184.666205][ T429] rust_binder: 7929: removing orphan mapping 0:24 [ 184.898810][ T7941] tmpfs: Bad value for 'nr_blocks' [ 185.096842][ T7964] cgroup: fork rejected by pids controller in /syz1 [ 185.306247][ T8110] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 185.306284][ T8110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 185.384678][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2341'. [ 186.091380][ T8142] devpts: called with bogus options [ 186.133828][ T8150] netlink: 'syz.0.2350': attribute type 7 has an invalid length. [ 186.141788][ T8150] netlink: 'syz.0.2350': attribute type 5 has an invalid length. [ 186.149796][ T8150] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2350'. [ 186.212780][ T8156] tipc: Enabling of bearer rejected, failed to enable media [ 186.848652][ T546] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 186.859686][ T546] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -110 [ 187.786025][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.100424][ T8217] overlayfs: failed to clone upperpath [ 188.341796][ T8245] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 188.350565][ T8245] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 188.358924][ T8245] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 188.429292][ T8252] can0: slcan on ptm1. [ 188.718338][ T10] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 188.771562][ T8295] overlayfs: failed to clone upperpath [ 188.817148][ T36] audit: type=1326 audit(1755349366.573:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.0.2400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5fb58ebe9 code=0x0 [ 188.869388][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.879549][ T10] usb 5-1: config 0 has no interfaces? [ 188.885012][ T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 188.894097][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.902684][ T10] usb 5-1: config 0 descriptor?? [ 189.045988][ T8309] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 189.069430][ T8312] netlink: 'syz.1.2403': attribute type 1 has an invalid length. [ 189.077256][ T8312] netlink: 'syz.1.2403': attribute type 2 has an invalid length. [ 189.110416][ T10] usb 5-1: USB disconnect, device number 26 [ 189.145442][ T8320] overlayfs: failed to clone upperpath [ 189.200565][ T8252] can0 (unregistered): slcan off ptm1. [ 189.254351][ T36] audit: type=1400 audit(1755349367.012:1367): avc: denied { getopt } for pid=8338 comm="syz.1.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 189.395726][ T8363] input: syz0 as /devices/virtual/input/input43 [ 189.782361][ T8398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2423'. [ 189.808331][ T391] Bluetooth: hci0: command 0x1003 tx timeout [ 189.808356][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.066185][ T36] audit: type=1400 audit(1755349367.822:1368): avc: denied { mounton } for pid=8421 comm="syz.4.2432" path="/23/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 190.189788][ T36] audit: type=1400 audit(1755349367.952:1369): avc: denied { unmount } for pid=7732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 190.212486][ T8426] syzkaller0: entered promiscuous mode [ 190.217960][ T8426] syzkaller0: entered allmulticast mode [ 190.294954][ T36] audit: type=1326 audit(1755349368.052:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a90f8ebe9 code=0x7fc00000 [ 190.385097][ T8439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1318 [ 190.453541][ T8450] 9pnet_fd: Insufficient options for proto=fd [ 190.482660][ T8452] 9pnet_fd: Insufficient options for proto=fd [ 190.517416][ T8460] pim6reg1: entered promiscuous mode [ 190.522901][ T8460] pim6reg1: entered allmulticast mode [ 190.770079][ T8466] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 190.770383][ T36] audit: type=1400 audit(1755349368.532:1371): avc: denied { load_policy } for pid=8465 comm="syz.3.2445" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 190.780366][ T8466] SELinux: failed to load policy [ 191.055694][ T8475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1337 [ 191.071653][ T8479] overlayfs: missing 'lowerdir' [ 191.137703][ T36] audit: type=1326 audit(1755349368.882:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a90f85ba7 code=0x7fc00000 [ 191.182241][ T36] audit: type=1326 audit(1755349368.882:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a90f2add9 code=0x7fc00000 [ 191.207149][ T36] audit: type=1326 audit(1755349368.882:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3a90f2ae9f code=0x7fc00000 [ 191.246439][ T36] audit: type=1326 audit(1755349368.892:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3a90f8ebe9 code=0x7fc00000 [ 191.839784][ T8522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.948402][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 191.967401][ T510] rust_binder: 8520: removing orphan mapping 0:24 [ 192.025432][ T8529] 9pnet_fd: Insufficient options for proto=fd [ 192.109758][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.120809][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.130675][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.143633][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.152809][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.161548][ T10] usb 5-1: config 0 descriptor?? [ 192.181143][ T8534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.189709][ T8534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.571594][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 192.579145][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 192.586544][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 192.593980][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 192.601401][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 192.608926][ T10] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 192.616471][ T10] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 192.625575][ T10] plantronics 0003:047F:FFFF.001F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 192.642716][ T10] usb 5-1: USB disconnect, device number 27 [ 192.665512][ T8538] fido_id[8538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 192.736315][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2470'. [ 192.746186][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2470'. [ 192.755553][ T8549] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 192.762803][ T8549] rust_binder: Failed to allocate buffer. len:18446744073709551048, is_oneway:false [ 192.762828][ T8549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 192.774612][ T8551] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2471'. [ 192.780593][ T8549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:105 [ 192.838753][ T8561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=8561 comm=syz.4.2474 [ 192.879315][ T8567] x_tables: unsorted underflow at hook 4 [ 192.888717][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.897250][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.019020][ T8576] /dev/rnullb0: Can't open blockdev [ 193.420057][ T8581] rust_binder: 1391: no such ref 0 [ 193.476867][ T8590] 9pnet_fd: Insufficient options for proto=fd [ 193.534919][ T8598] netlink: 'syz.0.2486': attribute type 4 has an invalid length. [ 194.028442][ T510] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 194.158435][ T510] usb 5-1: device descriptor read/64, error -71 [ 194.319599][ T8611] rust_binder: Failed to allocate buffer. len:5264, is_oneway:false [ 194.364250][ T8617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.365428][ T8618] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 194.372654][ T8617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.381762][ T8618] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 194.398437][ T510] usb 5-1: device descriptor read/64, error -71 [ 194.420151][ T8625] 9pnet_fd: Insufficient options for proto=fd [ 194.477281][ T8648] overlayfs: failed to clone upperpath [ 194.616311][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 194.616332][ T36] audit: type=1400 audit(1755349372.372:1378): avc: denied { getopt } for pid=8678 comm="syz.0.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 194.659272][ T510] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 194.747855][ T8689] netlink: 'syz.0.2516': attribute type 15 has an invalid length. [ 194.756657][ T8689] 9pnet_fd: Insufficient options for proto=fd [ 194.798547][ T510] usb 5-1: device descriptor read/64, error -71 [ 195.048435][ T510] usb 5-1: device descriptor read/64, error -71 [ 195.158553][ T510] usb usb5-port1: attempt power cycle [ 195.498470][ T510] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 195.519495][ T510] usb 5-1: device descriptor read/8, error -71 [ 195.582716][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2533'. [ 195.649546][ T510] usb 5-1: device descriptor read/8, error -71 [ 195.825589][ T8747] netlink: 328 bytes leftover after parsing attributes in process `syz.3.2536'. [ 195.888468][ T510] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 195.909527][ T510] usb 5-1: device descriptor read/8, error -71 [ 196.050376][ T510] usb 5-1: device descriptor read/8, error -71 [ 196.158569][ T510] usb usb5-port1: unable to enumerate USB device [ 196.271885][ T8776] overlayfs: failed to resolve './file1': -2 [ 196.340783][ T8786] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 196.351497][ T36] audit: type=1400 audit(1755349531.111:1379): avc: denied { relabelto } for pid=8785 comm="syz.1.2550" name="file0" dev="tmpfs" ino=3237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 196.382174][ T36] audit: type=1400 audit(1755349531.111:1380): avc: denied { associate } for pid=8785 comm="syz.1.2550" name="file0" dev="tmpfs" ino=3237 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 196.410042][ T36] audit: type=1400 audit(1755349531.141:1381): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0" dev="tmpfs" ino=3237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 197.021267][ T8818] netlink: 'syz.1.2561': attribute type 1 has an invalid length. [ 197.029128][ T8818] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2561'. [ 197.198426][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 197.283240][ T8837] binder: Unknown parameter 'f' [ 197.358408][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 197.366729][ T8841] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2570'. [ 197.371149][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.400413][ T10] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 197.428398][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.437198][ T10] usb 5-1: config 0 descriptor?? [ 197.655370][ T8852] veth1: entered allmulticast mode [ 197.661093][ T8851] veth1: left allmulticast mode [ 197.709617][ T8861] overlayfs: failed to clone upperpath [ 197.783958][ T36] audit: type=1400 audit(1755349532.541:1382): avc: denied { create } for pid=8871 comm="syz.0.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 197.855839][ T8877] /dev/rnullb0: Can't open blockdev [ 197.875183][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2583'. [ 197.885786][ T8880] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 128, size: 12) [ 197.885812][ T8880] rust_binder: Error while translating object. [ 197.896385][ T8880] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 197.902624][ T8880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1459 [ 197.940033][ T8884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.957827][ T8884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.966318][ T8884] binder: Unknown parameter 'context' [ 198.054236][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.062871][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.076371][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 198.082407][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 198.091998][ T10] usb 5-1: USB disconnect, device number 32 [ 198.103292][ T8889] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 198.110553][ T8889] rust_binder: Write failure EINVAL in pid:133 [ 198.122618][ T8892] rust_binder: 8891 RLIMIT_NICE not set [ 198.133472][ T9] rust_binder: 8890: removing orphan mapping 0:1024 [ 198.332284][ T8908] overlayfs: failed to clone upperpath [ 198.363524][ T510] rust_binder: 8902: removing orphan mapping 0:24 [ 198.373372][ T510] rust_binder: 0: removing orphan mapping 24:1024 [ 198.378940][ T8910] binder: Unknown parameter 'max`C' [ 198.555208][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.566656][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.574058][ T8917] bridge_slave_0: entered allmulticast mode [ 198.581097][ T8917] bridge_slave_0: entered promiscuous mode [ 198.587696][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.595200][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.602380][ T8917] bridge_slave_1: entered allmulticast mode [ 198.608866][ T8917] bridge_slave_1: entered promiscuous mode [ 198.620139][ T8933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.668838][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2600'. [ 198.845657][ T5657] bridge_slave_1: left allmulticast mode [ 198.856388][ T5657] bridge_slave_1: left promiscuous mode [ 198.864669][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.865971][ T5657] : port 2(bridge_slave_1) entered disabled state [ 198.874967][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.893600][ T5657] bridge_slave_0: left allmulticast mode [ 198.903576][ T5657] bridge_slave_0: left promiscuous mode [ 198.909396][ T5657] : port 1(bridge_slave_0) entered disabled state [ 199.030177][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.037272][ T8917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.044646][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.051708][ T8917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.071607][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.079078][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.088921][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.095970][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.105008][ T5658] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.112083][ T5658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.121556][ T5657] tipc: Left network mode [ 199.139578][ T8917] veth0_vlan: entered promiscuous mode [ 199.151307][ T8917] veth1_macvtap: entered promiscuous mode [ 199.160639][ T5657] veth1_macvtap: left promiscuous mode [ 199.166174][ T5657] veth0_vlan: left promiscuous mode [ 199.275719][ T8955] cgroup: none used incorrectly [ 199.398760][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2607'. [ 199.408748][ T8968] option changes via remount are deprecated (pid=8967 comm=syz.1.2607) [ 199.476744][ T8983] fuse: Unknown parameter '/dev/fuse' [ 199.513868][ T8988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.513894][ T8988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.528090][ T8988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.537715][ T8988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.711020][ T9003] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 199.717461][ T9003] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 199.726900][ T9003] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1489 [ 199.751502][ T10] rust_binder: 9001: removing orphan mapping 0:24 [ 199.780897][ T36] audit: type=1400 audit(1755349534.541:1383): avc: denied { create } for pid=9044 comm="syz.3.2631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 199.801275][ T9045] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.822548][ T36] audit: type=1400 audit(1755349534.581:1384): avc: denied { read write } for pid=9010 comm="syz.4.2620" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 199.851241][ T36] audit: type=1400 audit(1755349534.581:1385): avc: denied { ioctl open } for pid=9010 comm="syz.4.2620" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 199.948992][ T9054] >: renamed from veth0_vlan (while UP) [ 199.955514][ T9054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9054 comm=syz.3.2632 [ 199.957806][ T36] audit: type=1400 audit(1755349534.711:1386): avc: denied { mounton } for pid=9053 comm="syz.3.2632" path="/484/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 200.005952][ T36] audit: type=1400 audit(1755349534.761:1387): avc: denied { append } for pid=9060 comm="syz.3.2634" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 200.213605][ T36] audit: type=1400 audit(1755349534.971:1388): avc: denied { map } for pid=9060 comm="syz.3.2634" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 200.270402][ T9074] overlayfs: failed to clone upperpath [ 200.276219][ T9074] overlayfs: failed to clone upperpath [ 200.342717][ T36] audit: type=1400 audit(1755349535.101:1389): avc: denied { execute } for pid=9088 comm="syz.4.2641" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 200.515763][ T9121] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 200.515787][ T9121] rust_binder: Error while translating object. [ 200.525971][ T9121] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 200.536535][ T9121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 200.570804][ T9133] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 200.592604][ T36] audit: type=1400 audit(1755349535.351:1390): avc: denied { sys_module } for pid=9135 comm="syz.3.2655" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 200.653315][ T9141] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.666884][ T9142] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 200.668062][ T9140] rust_binder: Error while translating object. [ 200.675331][ T9140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 200.682568][ T9140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1520 [ 200.787772][ T360] rust_binder: 0: removing orphan mapping 0:4224 [ 200.801940][ T9154] rust_binder: Failed to allocate buffer. len:18446744073709551392, is_oneway:false [ 200.802008][ T9154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 200.811982][ T9154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:40 [ 200.850351][ T9156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 200.966637][ T9168] /dev/rnullb0: Can't open blockdev [ 200.993760][ T9171] netlink: 'syz.1.2666': attribute type 11 has an invalid length. [ 200.996915][ T9172] 9pnet_fd: Insufficient options for proto=fd [ 201.067365][ T9183] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 201.074598][ T9183] rust_binder: 63: no such ref 2 [ 201.206818][ T9188] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 201.431227][ T9193] xt_NFQUEUE: number of total queues is 0 [ 201.960444][ T36] audit: type=1400 audit(1755349536.721:1391): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 201.985284][ T9232] input: syz1 as /devices/virtual/input/input46 [ 201.991877][ T9232] input: failed to attach handler leds to device input46, error: -6 [ 202.111596][ T36] audit: type=1400 audit(1755349536.871:1392): avc: denied { accept } for pid=9251 comm="syz.1.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.164391][ T9255] rust_binder: Write failure EFAULT in pid:212 [ 202.177949][ T9259] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 202.184254][ T9259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1546 [ 202.955372][ T9293] KVM: debugfs: duplicate directory 9293-11 [ 203.400240][ T9326] rust_binder: Failed copying into alloc: EFAULT [ 203.400266][ T9326] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 203.406737][ T9326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 203.418588][ T9326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:102 [ 203.519080][ T9338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 203.528302][ T9338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1571 [ 203.555944][ T9341] /dev/rnullb0: Can't open blockdev [ 203.618286][ T9352] 9pnet_fd: Insufficient options for proto=fd [ 203.649807][ T9357] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 203.656932][ T9357] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 203.657282][ T9357] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 203.685634][ T9364] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 203.701737][ T9368] /dev/rnullb0: Can't open blockdev [ 203.721207][ T9370] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 203.749438][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'. [ 203.848710][ T9391] rust_binder: Read failure Err(EFAULT) in pid:259 [ 203.859342][ T9394] binder: Binderfs stats mode cannot be changed during a remount [ 203.959692][ T9401] futex_wake_op: syz.0.2745 tries to shift op by -1; fix this program [ 203.984525][ T9404] netlink: 'syz.0.2746': attribute type 27 has an invalid length. [ 203.984681][ T9406] netlink: 'syz.0.2746': attribute type 27 has an invalid length. [ 203.993695][ T9405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 204.001470][ T9404] tipc: Enabling of bearer rejected, failed to enable media [ 204.078454][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 204.238412][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 204.244579][ T10] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 204.252903][ T10] usb 2-1: config 0 has no interface number 0 [ 204.260423][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 204.269497][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.277469][ T10] usb 2-1: Product: syz [ 204.281635][ T10] usb 2-1: Manufacturer: syz [ 204.286229][ T10] usb 2-1: SerialNumber: syz [ 204.291749][ T10] usb 2-1: config 0 descriptor?? [ 204.348417][ T546] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 204.478422][ T546] usb 5-1: device descriptor read/64, error -71 [ 204.497295][ T10] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 204.503757][ T10] usb 2-1: No valid video chain found. [ 204.579383][ T9436] overlayfs: failed to clone upperpath [ 204.585184][ T9436] overlayfs: failed to clone upperpath [ 204.591034][ T9436] overlayfs: failed to clone upperpath [ 204.596849][ T9436] overlayfs: failed to clone upperpath [ 204.602624][ T9436] overlayfs: failed to clone upperpath [ 204.608720][ T9436] overlayfs: failed to clone upperpath [ 204.614848][ T9436] overlayfs: failed to clone upperpath [ 204.620649][ T9436] overlayfs: failed to clone upperpath [ 204.626415][ T9436] overlayfs: failed to clone upperpath [ 204.632176][ T9436] overlayfs: failed to clone upperpath [ 204.637935][ T9436] overlayfs: failed to clone upperpath [ 204.643760][ T9436] overlayfs: failed to clone upperpath [ 204.649546][ T9436] overlayfs: failed to clone upperpath [ 204.655257][ T9436] overlayfs: failed to clone upperpath [ 204.661048][ T9436] overlayfs: failed to clone upperpath [ 204.666753][ T9436] overlayfs: failed to clone upperpath [ 204.672569][ T9436] overlayfs: failed to clone upperpath [ 204.678309][ T9436] overlayfs: failed to clone upperpath [ 204.684072][ T9436] overlayfs: failed to clone upperpath [ 204.690009][ T9436] overlayfs: failed to clone upperpath [ 204.696083][ T9436] overlayfs: failed to clone upperpath [ 204.701954][ T9436] overlayfs: failed to clone upperpath [ 204.707779][ T9436] overlayfs: failed to clone upperpath [ 204.714151][ T9436] overlayfs: failed to clone upperpath [ 204.719912][ T9436] overlayfs: failed to clone upperpath [ 204.725639][ T9436] overlayfs: failed to clone upperpath [ 204.728534][ T546] usb 5-1: device descriptor read/64, error -71 [ 204.738045][ T9436] overlayfs: failed to clone upperpath [ 204.743779][ T9436] overlayfs: failed to clone upperpath [ 204.749554][ T9436] overlayfs: failed to clone upperpath [ 204.755320][ T9436] overlayfs: failed to clone upperpath [ 204.761204][ T9436] overlayfs: failed to clone upperpath [ 204.761989][ T10] usb 2-1: USB disconnect, device number 58 [ 204.772995][ T9436] overlayfs: failed to clone upperpath [ 204.778833][ T9436] overlayfs: failed to clone upperpath [ 204.784567][ T9436] overlayfs: failed to clone upperpath [ 204.790339][ T9436] overlayfs: failed to clone upperpath [ 204.796066][ T9436] overlayfs: failed to clone upperpath [ 204.801845][ T9436] overlayfs: failed to clone upperpath [ 204.807618][ T9436] overlayfs: failed to clone upperpath [ 204.813465][ T9436] overlayfs: failed to clone upperpath [ 204.819197][ T9436] overlayfs: failed to clone upperpath [ 204.824973][ T9436] overlayfs: failed to clone upperpath [ 204.830793][ T9436] overlayfs: failed to clone upperpath [ 204.836516][ T9436] overlayfs: failed to clone upperpath [ 204.842333][ T9436] overlayfs: failed to clone upperpath [ 204.848125][ T9436] overlayfs: failed to clone upperpath [ 204.853975][ T9436] overlayfs: failed to clone upperpath [ 204.859744][ T9436] overlayfs: failed to clone upperpath [ 204.865457][ T9436] overlayfs: failed to clone upperpath [ 204.871897][ T9436] overlayfs: failed to clone upperpath [ 204.877676][ T9436] overlayfs: failed to clone upperpath [ 204.883447][ T9436] overlayfs: failed to clone upperpath [ 204.889261][ T9436] overlayfs: failed to clone upperpath [ 204.894959][ T9436] overlayfs: failed to clone upperpath [ 204.900839][ T9436] overlayfs: failed to clone upperpath [ 204.906617][ T9436] overlayfs: failed to clone upperpath [ 204.912573][ T9436] overlayfs: failed to clone upperpath [ 204.918354][ T9436] overlayfs: failed to clone upperpath [ 204.924190][ T9436] overlayfs: failed to clone upperpath [ 204.930096][ T9436] overlayfs: failed to clone upperpath [ 204.935939][ T9436] overlayfs: failed to clone upperpath [ 204.941793][ T9436] overlayfs: failed to clone upperpath [ 204.947570][ T9436] overlayfs: failed to clone upperpath [ 204.953491][ T9436] overlayfs: failed to clone upperpath [ 204.959507][ T9436] overlayfs: failed to clone upperpath [ 204.965261][ T9436] overlayfs: failed to clone upperpath [ 204.970776][ T546] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 205.012489][ T9450] overlay: Unknown parameter 'uid<00000000000000000000' [ 205.056627][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 205.056656][ T36] audit: type=1400 audit(1755349539.811:1397): avc: denied { setopt } for pid=9458 comm="syz.0.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 205.064964][ T9459] incfs: Options parsing error. -22 [ 205.087339][ T9459] incfs: mount failed -22 [ 205.108485][ T546] usb 5-1: device descriptor read/64, error -71 [ 205.269170][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2773'. [ 205.348412][ T546] usb 5-1: device descriptor read/64, error -71 [ 205.367667][ T36] audit: type=1400 audit(1755349540.121:1398): avc: denied { read } for pid=9500 comm="syz.0.2777" name="file0" dev="tmpfs" ino=1326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 205.461762][ T36] audit: type=1326 audit(1755349540.221:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9514 comm="syz.1.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 205.468577][ T546] usb usb5-port1: attempt power cycle [ 205.485343][ T36] audit: type=1326 audit(1755349540.221:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9514 comm="syz.1.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 205.515691][ T36] audit: type=1326 audit(1755349540.221:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9514 comm="syz.1.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 205.516360][ T9520] batadv_slave_1: entered promiscuous mode [ 205.539525][ T36] audit: type=1326 audit(1755349540.221:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9514 comm="syz.1.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 205.582661][ T36] audit: type=1326 audit(1755349540.221:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9514 comm="syz.1.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 205.606327][ T36] audit: type=1326 audit(1755349540.221:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9514 comm="syz.1.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 205.629876][ T36] audit: type=1326 audit(1755349540.221:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9514 comm="syz.1.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 205.653426][ T36] audit: type=1326 audit(1755349540.221:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9514 comm="syz.1.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 205.838443][ T546] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 205.859451][ T546] usb 5-1: device descriptor read/8, error -71 [ 205.972920][ T9527] 9pnet_fd: Insufficient options for proto=fd [ 205.989633][ T546] usb 5-1: device descriptor read/8, error -71 [ 206.230266][ T9521] batadv_slave_1: left promiscuous mode [ 206.238439][ T546] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 206.265859][ T546] usb 5-1: device descriptor read/8, error -71 [ 206.399387][ T546] usb 5-1: device descriptor read/8, error -71 [ 206.508529][ T546] usb usb5-port1: unable to enumerate USB device [ 206.668471][ T360] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 206.819499][ T360] usb 2-1: config 25 has an invalid descriptor of length 0, skipping remainder of the config [ 206.829785][ T360] usb 2-1: config 25 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.842809][ T360] usb 2-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 206.852001][ T360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.868976][ T360] usbhid 2-1:25.0: couldn't find an input interrupt endpoint [ 207.140825][ T9568] rust_binder: Error while translating object. [ 207.140861][ T9568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 207.147070][ T9568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:286 [ 207.829499][ T9576] rust_binder: Error while translating object. [ 207.838940][ T9576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 207.845308][ T9576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1610 [ 207.864530][ T9581] binder: Unknown parameter 'defcontext01777777777777777777777' [ 207.896064][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.905506][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.928640][ T9590] tc_dump_action: action bad kind [ 208.258466][ T442] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 208.408409][ T442] usb 5-1: Using ep0 maxpacket: 16 [ 208.414609][ T442] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 208.422890][ T442] usb 5-1: config 0 has no interface number 0 [ 208.429109][ T442] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 208.438674][ T442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.450564][ T442] usb 5-1: config 0 descriptor?? [ 208.458690][ T9602] overlayfs: missing 'lowerdir' [ 208.495294][ T9613] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9613 comm=syz.0.2813 [ 208.596049][ T9611] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 1160, size: 4096) [ 208.596068][ T9611] rust_binder: Error while translating object. [ 208.606925][ T9611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 208.613138][ T9611] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 208.622581][ T9611] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1627 [ 208.654155][ T546] rust_binder: 9610: removing orphan mapping 0:24 [ 208.669889][ T9595] rust_binder: Error in use_page_slow: ESRCH [ 208.669893][ T9619] rust_binder: Error in use_page_slow: ESRCH [ 208.669906][ T9595] rust_binder: use_range failure ESRCH [ 208.669920][ T9595] rust_binder: Failed to allocate buffer. len:176, is_oneway:false [ 208.675888][ T9619] rust_binder: use_range failure ESRCH [ 208.675907][ T9619] rust_binder: Failed to allocate buffer. len:176, is_oneway:false [ 208.675927][ T9619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 208.682480][ T9595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 208.687378][ T9619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:296 [ 208.695584][ T9595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:296 [ 208.736703][ T10] usb 5-1: USB disconnect, device number 37 [ 208.860529][ T9625] rust_binder: Error while translating object. [ 208.860561][ T9625] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 208.866752][ T9625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1638 [ 208.943918][ T9627] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 209.025531][ T9630] rust_binder: 1642: no such ref 2 [ 209.030706][ T9630] rust_binder: inc_ref_done called when no active inc_refs [ 209.031162][ T9629] rust_binder: Error while translating object. [ 209.038440][ T9629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 209.044629][ T9629] rust_binder: Failure BR_FAILED_REPLY { source: ENOENT } during reply - delivering BR_FAILED_REPLY to sender. [ 209.054066][ T9629] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1642 [ 209.070678][ T10] rust_binder: 9628: removing orphan mapping 0:24 [ 209.280841][ T9652] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 209.290579][ T9652] netlink: 'syz.4.2827': attribute type 2 has an invalid length. [ 209.438020][ T546] usb 2-1: USB disconnect, device number 59 [ 209.495137][ T9674] /dev/rnullb0: Can't open blockdev [ 209.514067][ T9676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.514382][ T9676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:154 [ 209.604868][ T9685] veth1_macvtap: left promiscuous mode [ 209.619560][ T9685] macsec0: entered promiscuous mode [ 209.624786][ T9685] macsec0: entered allmulticast mode [ 209.632680][ T9685] veth1_macvtap: entered promiscuous mode [ 209.638543][ T9685] veth1_macvtap: entered allmulticast mode [ 209.641147][ T9689] overlayfs: workdir and upperdir must be separate subtrees [ 209.644454][ T9685] macsec0: left promiscuous mode [ 209.644561][ T9685] macsec0: left allmulticast mode [ 209.662177][ T9685] veth1_macvtap: left allmulticast mode [ 209.752366][ T442] rust_binder: 9691: removing orphan mapping 0:4224 [ 209.755706][ T9701] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 209.774621][ T9703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.791595][ T9703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.968450][ T510] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 210.028427][ T546] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 210.119393][ T510] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.130139][ T510] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 210.139061][ T510] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 210.153284][ T510] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 210.162373][ T510] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.170368][ T510] usb 5-1: Product: syz [ 210.174529][ T510] usb 5-1: Manufacturer: syz [ 210.179151][ T510] usb 5-1: SerialNumber: syz [ 210.184284][ T510] usb 5-1: config 0 descriptor?? [ 210.198406][ T546] usb 2-1: Using ep0 maxpacket: 16 [ 210.204595][ T546] usb 2-1: config 0 has an invalid interface number: 141 but max is 0 [ 210.212909][ T546] usb 2-1: config 0 has no interface number 0 [ 210.219039][ T546] usb 2-1: too many endpoints for config 0 interface 141 altsetting 45: 246, using maximum allowed: 30 [ 210.230095][ T546] usb 2-1: config 0 interface 141 altsetting 45 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 210.243395][ T546] usb 2-1: config 0 interface 141 has no altsetting 0 [ 210.250199][ T546] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 210.259239][ T546] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.267850][ T546] usb 2-1: config 0 descriptor?? [ 210.314777][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2845'. [ 210.356942][ T9717] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 210.364189][ T9717] rust_binder: Write failure EINVAL in pid:1674 [ 210.375876][ T9721] fuse: Bad value for 'fd' [ 210.551829][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 210.554262][ T9730] binder: Unknown parameter 'fscontext?}' [ 210.558353][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 210.674638][ T9706] rust_binder: Error while translating object. [ 210.674690][ T9706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 210.680934][ T9706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:167 [ 210.691755][ T546] ftdi_sio 2-1:0.141: FTDI USB Serial Device converter detected [ 210.709057][ T546] usb 2-1: Detected FT232A [ 210.713914][ T546] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 210.723254][ T546] usb 2-1: USB disconnect, device number 60 [ 210.729654][ T546] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 210.739436][ T546] ftdi_sio 2-1:0.141: device disconnected [ 210.891999][ T9739] new mount options do not match the existing superblock, will be ignored [ 210.906557][ T510] usb 5-1: USB disconnect, device number 38 [ 210.917582][ T9741] overlayfs: failed to resolve './file1': -2 [ 211.216006][ T9764] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 211.237500][ T9766] 9pnet_fd: Insufficient options for proto=fd [ 211.372648][ T9773] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.382797][ T9776] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.388642][ T9773] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.429468][ T9773] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 211.522582][ T9784] pim6reg1: entered promiscuous mode [ 211.535852][ T9784] pim6reg1: entered allmulticast mode [ 211.591940][ T9784] tipc: Started in network mode [ 211.596811][ T9784] tipc: Node identity 8ed8dbcc2813, cluster identity 4711 [ 211.604036][ T9784] tipc: Enabled bearer , priority 0 [ 211.611087][ T9784] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2868'. [ 211.620769][ T9784] tipc: Resetting bearer [ 211.634880][ T9784] tipc: Disabling bearer [ 211.698431][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 211.718290][ T9795] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.718645][ T9794] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551611) [ 211.725066][ T9794] rust_binder: Error while translating object. [ 211.737223][ T9794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 211.743437][ T9794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 211.817469][ T9798] overlayfs: failed to resolve './file1': -2 [ 211.838425][ T10] usb 5-1: device descriptor read/64, error -71 [ 212.015483][ T9803] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.025725][ T9803] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 212.039414][ T9803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:202 [ 212.078445][ T10] usb 5-1: device descriptor read/64, error -71 [ 212.216429][ T9821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2881'. [ 212.266195][ T9835] 9pnet_fd: Insufficient options for proto=fd [ 212.283751][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 212.283768][ T36] audit: type=1400 audit(1755349547.041:1441): avc: denied { relabelfrom } for pid=9837 comm="syz.0.2886" name="NETLINK" dev="sockfs" ino=51751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 212.314406][ T36] audit: type=1401 audit(1755349547.041:1442): op=setxattr invalid_context="system_u:object_r:checkpolicy_exec_t:s0" [ 212.329436][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 212.438436][ T510] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 212.468456][ T10] usb 5-1: device descriptor read/64, error -71 [ 212.589424][ T510] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 212.598533][ T510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.607043][ T510] usb 2-1: config 0 descriptor?? [ 212.612039][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 212.633235][ T9850] rust_binder: Error in use_page_slow: ESRCH [ 212.633257][ T9850] rust_binder: use_range failure ESRCH [ 212.639356][ T9850] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 212.644892][ T9850] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 212.652842][ T9850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1687 [ 212.694309][ T9854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.712927][ T9854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.718443][ T10] usb 5-1: device descriptor read/64, error -71 [ 212.828505][ T10] usb usb5-port1: attempt power cycle [ 213.168464][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 213.189424][ T10] usb 5-1: device descriptor read/8, error -71 [ 213.238647][ T510] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 213.268464][ T510] asix 2-1:0.0: probe with driver asix failed with error -71 [ 213.280443][ T510] usb 2-1: USB disconnect, device number 61 [ 213.310995][ T36] audit: type=1400 audit(1755349548.061:1443): avc: denied { remount } for pid=9863 comm="syz.1.2895" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 213.326201][ T10] usb 5-1: device descriptor read/8, error -71 [ 213.346895][ T9866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2896'. [ 213.371958][ T36] audit: type=1400 audit(1755349548.131:1444): avc: denied { setattr } for pid=9867 comm="syz.1.2897" name="RAW" dev="sockfs" ino=52620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 213.421430][ T9871] tipc: Can't bind to reserved service type 0 [ 213.489052][ T9877] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2900'. [ 213.510797][ T9877] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2900'. [ 213.519956][ T9877] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2900'. [ 213.588435][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 213.629739][ T10] usb 5-1: device descriptor read/8, error -71 [ 213.651140][ T9890] rust_binder: Error while translating object. [ 213.651210][ T9890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 213.657489][ T9890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:243 [ 213.759492][ T10] usb 5-1: device descriptor read/8, error -71 [ 213.863749][ T9907] rust_binder: Error while translating object. [ 213.863797][ T9907] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 213.876706][ T9907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1716 [ 213.898603][ T10] usb usb5-port1: unable to enumerate USB device [ 213.938637][ T9909] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1113132006 (1113132006 ns) > initial count (497682314 ns). Using initial count to start timer. [ 214.009069][ T9914] binder: Unknown parameter 'ma' [ 214.240722][ T9922] rust_binder: Error while translating object. [ 214.240761][ T9922] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 214.246943][ T9922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:256 [ 214.511468][ T9939] rust_binder: Write failure EINVAL in pid:267 [ 214.580901][ T9953] overlayfs: failed to clone lowerpath [ 214.587702][ T36] audit: type=1400 audit(1755349549.341:1445): avc: denied { write } for pid=9949 comm="syz.4.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 214.982107][ T9968] __vm_enough_memory: pid: 9968, comm: syz.4.2928, bytes: 18014402804453376 not enough memory for the allocation [ 215.244497][ T546] rust_binder: 9938: removing orphan mapping 0:24 [ 215.269800][ T9973] rust_binder: Fixups oob 156 120 160 164 [ 215.269828][ T9973] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 215.275621][ T9973] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 215.283918][ T9973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270 [ 216.062525][ T36] audit: type=1400 audit(1755349550.821:1446): avc: denied { search } for pid=10020 comm="syz.0.2945" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 216.489611][T10078] cgroup: fork rejected by pids controller in /syz0 [ 216.588443][ T429] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 216.773944][T10138] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 216.781440][T10138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:364 [ 216.782100][ T429] usb 2-1: not running at top speed; connect to a high speed hub [ 216.815881][ T429] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 216.824969][ T429] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 216.840481][ T429] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.851194][ T429] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.871399][ T429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.883038][ T429] usb 2-1: Product: syz [ 216.887255][ T429] usb 2-1: Manufacturer: syz [ 216.891904][ T429] usb 2-1: SerialNumber: syz [ 217.098247][T10054] rust_binder: Error in use_page_slow: ESRCH [ 217.098272][T10054] rust_binder: use_range failure ESRCH [ 217.104340][T10054] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 217.109851][T10054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 217.117855][T10054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:298 [ 217.131490][ T429] usb 2-1: 0:2 : does not exist [ 217.147106][ T429] usb 2-1: USB disconnect, device number 62 [ 217.218042][T10166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.226556][T10166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.238865][T10166] fuse: Bad value for 'fd' [ 217.245779][ T36] audit: type=1326 audit(1755349552.001:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.3.2973" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f137b98ebe9 code=0x0 [ 217.456615][T10173] overlayfs: failed to clone upperpath [ 217.491099][T10172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 217.491134][T10172] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 217.500730][T10172] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:373 [ 217.517575][ T329] rust_binder: 10171: removing orphan mapping 0:24 [ 217.755092][ T36] audit: type=1400 audit(1755349552.511:1448): avc: denied { append } for pid=10196 comm="syz.1.2984" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.848085][T10208] binder: Unknown parameter '0x0000000000000000' [ 218.414230][T10212] rust_binder: Error while translating object. [ 218.414310][T10212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 218.420584][T10212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:383 [ 218.540643][T10216] overlayfs: failed to clone upperpath [ 218.678401][ T329] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 218.818433][ T329] usb 5-1: device descriptor read/64, error -71 [ 218.987307][T10234] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 219.058407][ T329] usb 5-1: device descriptor read/64, error -71 [ 219.298419][ T329] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 219.390534][T10267] overlayfs: failed to resolve './file0': -2 [ 219.428510][ T329] usb 5-1: device descriptor read/64, error -71 [ 219.453870][ T36] audit: type=1400 audit(1755349554.211:1449): avc: denied { execute } for pid=10274 comm="syz.0.3009" path="pipe:[57104]" dev="pipefs" ino=57104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 219.510340][T10277] tipc: Enabling of bearer rejected, failed to enable media [ 219.668422][ T329] usb 5-1: device descriptor read/64, error -71 [ 219.778513][ T329] usb usb5-port1: attempt power cycle [ 219.989545][T10280] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3011'. [ 220.065312][T10291] netlink: 'syz.0.3015': attribute type 4 has an invalid length. [ 220.118434][ T329] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 220.139498][ T329] usb 5-1: device descriptor read/8, error -71 [ 220.241515][T10302] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 220.251721][ T36] audit: type=1400 audit(1755349555.011:1450): avc: denied { relabelto } for pid=10301 comm="syz.3.3018" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 220.269404][ T329] usb 5-1: device descriptor read/8, error -71 [ 220.279778][ T36] audit: type=1400 audit(1755349555.011:1451): avc: denied { associate } for pid=10301 comm="syz.3.3018" name="ptp0" dev="devtmpfs" ino=196 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 220.332537][ T36] audit: type=1400 audit(1755349555.071:1452): avc: denied { read write } for pid=10301 comm="syz.3.3018" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 220.360329][ T36] audit: type=1400 audit(1755349555.071:1453): avc: denied { open } for pid=10301 comm="syz.3.3018" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 220.389081][ T36] audit: type=1400 audit(1755349555.081:1454): avc: denied { ioctl } for pid=10301 comm="syz.3.3018" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 220.475398][T10309] rust_binder: Write failure EFAULT in pid:1741 [ 220.528583][ T329] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 220.569422][ T329] usb 5-1: device descriptor read/8, error -71 [ 220.703879][ T329] usb 5-1: device descriptor read/8, error -71 [ 220.819015][ T329] usb usb5-port1: unable to enumerate USB device [ 220.837892][T10339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=10339 comm=syz.0.3029 [ 220.894416][T10349] 9pnet_fd: Insufficient options for proto=fd [ 221.464054][T10372] netlink: 680 bytes leftover after parsing attributes in process `syz.4.3041'. [ 221.473799][T10372] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 221.481096][T10372] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:387 [ 221.496627][T10375] ptm ptm6: ldisc open failed (-12), clearing slot 6 [ 221.532161][T10382] rust_binder: 394: no such ref 0 [ 221.540657][T10384] rust_binder: 394: no such ref 0 [ 221.546166][T10382] rust_binder: 394: no such ref 0 [ 221.552315][ T36] audit: type=1400 audit(1755349556.311:1455): avc: denied { audit_write } for pid=10383 comm="syz.0.3044" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 221.573676][T10382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:394 [ 221.580093][ T36] audit: type=1107 audit(1755349556.311:1456): pid=10383 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 221.724205][T10393] netlink: 'syz.4.3047': attribute type 12 has an invalid length. [ 222.060436][ T36] audit: type=1400 audit(1755349556.821:1457): avc: denied { create } for pid=10403 comm="syz.1.3052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 222.251029][T10452] SELinux: Context system_u:object_r:fsadm_log_t:s0 is not valid (left unmapped). [ 222.276279][T10455] __vm_enough_memory: pid: 10455, comm: syz.4.3070, bytes: 18014402804453376 not enough memory for the allocation [ 222.318819][T10466] binder: Unknown parameter 'fscontext?}' [ 222.324930][T10466] binder: Unknown parameter 'fscontext?}' [ 222.379716][T10472] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3075'. [ 222.420858][T10453] 9pnet_fd: Insufficient options for proto=fd [ 222.452363][T10477] rust_binder: Write failure EINVAL in pid:386 [ 222.474566][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3078'. [ 222.480021][T10486] rust_binder: 432: no such ref 0 [ 222.496306][T10486] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 222.568629][T10490] tmpfs: Unknown parameter 'we' [ 222.700514][T10505] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 222.708792][T10505] rust_binder: Write failure EINVAL in pid:405 [ 222.728665][T10508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:407 [ 222.882998][T10520] binder: Bad value for 'max' [ 223.363949][T10522] overlayfs: failed to set uuid (136/file1, err=-1); falling back to uuid=null. [ 223.455244][T10533] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 223.466545][T10533] rust_binder: Read failure Err(EFAULT) in pid:416 [ 223.897342][T10555] rust_binder: Error while translating object. [ 223.904044][T10555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 223.910281][T10555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1770 [ 223.965578][T10559] input: syz0 as /devices/virtual/input/input50 [ 223.995515][T10563] /dev/rnullb0: Can't open blockdev [ 224.042347][T10570] can0: slcan on ptm0. [ 224.079611][T10568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 224.079644][T10568] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 224.089937][T10568] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:423 [ 224.101763][T10570] can0 (unregistered): slcan off ptm0. [ 224.112213][ T329] rust_binder: 10567: removing orphan mapping 0:24 [ 224.370600][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 224.370618][ T36] audit: type=1400 audit(1755349559.131:1464): avc: denied { write } for pid=10620 comm="syz.1.3115" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 224.470510][ T36] audit: type=1400 audit(1755349559.231:1465): avc: denied { create } for pid=10630 comm="syz.1.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 224.471243][T10631] 9pnet_fd: Insufficient options for proto=fd [ 224.666865][T10643] rust_binder: Write failure EINVAL in pid:458 [ 224.667097][T10643] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 224.680790][T10643] rust_binder: Write failure EINVAL in pid:458 [ 224.780726][T10664] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 224.794321][T10664] rust_binder: Write failure EINVAL in pid:462 [ 224.794502][T10664] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 224.810106][T10664] rust_binder: Write failure EINVAL in pid:462 [ 224.960389][T10674] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 225.117298][T10697] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3134'. [ 225.281323][T10705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3141'. [ 225.875465][ T36] audit: type=1326 audit(1755349560.631:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10685 comm="syz.4.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a90f8ebe9 code=0x7fc00000 [ 225.943149][T10725] overlayfs: failed to clone lowerpath [ 226.018227][T10736] rust_binder: Write failure EFAULT in pid:1792 [ 226.018314][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.034297][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.034326][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.049429][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.049462][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.056012][T10738] rust_binder: Error in use_page_slow: ESRCH [ 226.069290][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.069323][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.076042][T10738] rust_binder: use_range failure ESRCH [ 226.088656][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.088682][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.091040][T10738] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 226.111179][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.111205][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.117646][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.118557][T10738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 226.139974][T10738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1792 [ 226.140028][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.150962][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.155586][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.162918][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.169286][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.175841][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.182230][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.188752][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.196140][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.201869][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.208507][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.214887][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.221472][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.228017][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.234593][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.246254][T10742] kvm: kvm [10741]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x350200000000 [ 226.263484][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.263550][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.270612][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.276519][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.283113][T10736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.295966][T10744] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3156'. [ 226.321592][T10746] 9pnet_fd: Insufficient options for proto=fd [ 226.330196][T10746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.338712][T10747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.339461][T10746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.347201][T10747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.558437][ T329] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 226.638774][T10781] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 226.655889][T10785] rust_binder: Read failure Err(EFAULT) in pid:506 [ 226.708417][ T329] usb 2-1: Using ep0 maxpacket: 16 [ 226.721267][ T329] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 226.729505][ T329] usb 2-1: config 1 has no interface number 0 [ 226.735630][ T329] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 226.745570][ T329] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 226.755641][ T329] usb 2-1: config 1 interface 105 has no altsetting 0 [ 226.762078][T10788] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 226.764009][ T329] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 226.780451][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.788669][ T329] usb 2-1: Product: syz [ 226.792843][ T329] usb 2-1: Manufacturer: syz [ 226.797424][ T329] usb 2-1: SerialNumber: syz [ 226.802888][T10749] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 226.810214][T10749] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 227.018411][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 227.158415][ T10] usb 5-1: device descriptor read/64, error -71 [ 227.226284][T10749] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 227.233776][T10749] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 227.398450][ T10] usb 5-1: device descriptor read/64, error -71 [ 227.442124][T10749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.452439][T10749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.460945][ T329] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 227.461238][ T36] audit: type=1400 audit(1755349562.221:1467): avc: denied { write } for pid=10748 comm="syz.1.3158" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.488464][ T329] aqc111 2-1:1.105: probe with driver aqc111 failed with error -32 [ 227.496989][ T36] audit: type=1400 audit(1755349562.221:1468): avc: denied { remove_name } for pid=10748 comm="syz.1.3158" name="binder0" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.512284][ T329] usb 2-1: USB disconnect, device number 63 [ 227.525362][ T36] audit: type=1400 audit(1755349562.221:1469): avc: denied { unlink } for pid=10748 comm="syz.1.3158" name="binder0" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 227.648408][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 227.798462][ T10] usb 5-1: device descriptor read/64, error -71 [ 227.938780][T10822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 227.938817][T10821] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 228.011581][ T36] audit: type=1400 audit(1755349562.771:1470): avc: denied { append } for pid=10825 comm="syz.1.3187" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 228.038447][ T10] usb 5-1: device descriptor read/64, error -71 [ 228.045560][ T36] audit: type=1400 audit(1755349562.801:1471): avc: denied { map } for pid=10827 comm="syz.3.3188" path="socket:[61526]" dev="sockfs" ino=61526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 228.076050][T10831] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.083272][T10831] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.092079][T10831] SELinux: security_context_str_to_sid () failed with errno=-22 [ 228.148559][ T10] usb usb5-port1: attempt power cycle [ 228.175483][T10839] /dev/rnullb0: Can't open blockdev [ 228.488411][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 228.509587][ T10] usb 5-1: device descriptor read/8, error -71 [ 228.639585][ T10] usb 5-1: device descriptor read/8, error -71 [ 228.878460][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 228.899587][ T10] usb 5-1: device descriptor read/8, error -71 [ 228.915108][T10841] kvm: pic: non byte write [ 228.922746][T10841] binder: Binderfs stats mode cannot be changed during a remount [ 228.970068][T10844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.979540][T10844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.038775][ T10] usb 5-1: device descriptor read/8, error -71 [ 229.062940][ T36] audit: type=1326 audit(1755349563.821:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.1.3193" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb544f8ebe9 code=0x0 [ 229.148738][ T10] usb usb5-port1: unable to enumerate USB device [ 229.758455][T10860] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 229.765788][T10860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1844 [ 229.766108][T10861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 229.904712][T10881] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 229.981783][T10894] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 230.860276][T10913] overlay: ./file0 is not a directory [ 231.068445][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 231.140832][T10937] 9pnet_fd: Insufficient options for proto=fd [ 231.219431][ T10] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 231.227890][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.239166][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.250712][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.262448][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.273482][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.284550][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.294882][T10956] 9pnet_fd: Insufficient options for proto=fd [ 231.295786][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.318905][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.332850][ T10] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.32 [ 231.347546][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.359204][ T10] usb 5-1: config 0 descriptor?? [ 231.371118][ T10] usb 5-1: bad CDC descriptors [ 231.378867][ T10] cdc_acm 5-1:0.0: Zero length descriptor references [ 231.385594][ T10] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 231.409436][T10979] 9pnet_fd: Insufficient options for proto=fd [ 231.488046][T10987] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1050 sclass=netlink_xfrm_socket pid=10987 comm=syz.0.3236 [ 231.511990][T10992] __vm_enough_memory: pid: 10992, comm: syz.1.3238, bytes: 18014402804453376 not enough memory for the allocation [ 231.577079][ T360] usb 5-1: USB disconnect, device number 52 [ 231.606664][ T329] usb 4-1: USB disconnect, device number 78 [ 231.674985][T10996] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3240'. [ 231.684174][T10996] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3240'. [ 231.700392][T10996] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3240'. [ 231.710512][T10996] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3240'. [ 231.730383][T10996] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3240'. [ 231.739532][T10996] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3240'. [ 231.751779][T10996] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3240'. [ 231.760937][T10996] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3240'. [ 231.772566][T10996] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3240'. [ 231.784169][T10996] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3240'. [ 232.000966][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.008548][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.110124][T10999] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.117236][T10999] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.124553][T10999] bridge_slave_0: entered allmulticast mode [ 232.131108][T10999] bridge_slave_0: entered promiscuous mode [ 232.139305][ T13] tipc: Left network mode [ 232.140219][T10999] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.150823][T10999] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.157933][T10999] bridge_slave_1: entered allmulticast mode [ 232.164220][T10999] bridge_slave_1: entered promiscuous mode [ 232.194733][ T36] audit: type=1400 audit(1755349566.951:1473): avc: denied { setattr } for pid=11017 comm="syz.1.3245" name="HCI" dev="sockfs" ino=62083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 232.340931][T10999] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.347989][T10999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.355300][T10999] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.362379][T10999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.383670][ T5657] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.390929][ T5657] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.401277][ T5658] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.408370][ T5658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.416930][ T5657] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.423984][ T5657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.448096][T10999] veth0_vlan: entered promiscuous mode [ 232.460497][T10999] veth1_macvtap: entered promiscuous mode [ 232.558427][ T329] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 232.712042][ T329] usb 2-1: not running at top speed; connect to a high speed hub [ 232.720943][ T329] usb 2-1: config 110 has an invalid interface number: 206 but max is 3 [ 232.729419][ T329] usb 2-1: config 110 has an invalid descriptor of length 0, skipping remainder of the config [ 232.739702][ T329] usb 2-1: config 110 has 1 interface, different from the descriptor's value: 4 [ 232.748886][ T329] usb 2-1: config 110 has no interface number 0 [ 232.755234][ T329] usb 2-1: config 110 interface 206 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 232.768479][ T329] usb 2-1: config 110 interface 206 has no altsetting 0 [ 232.776792][ T329] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=d3.0d [ 232.778514][ T10] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 232.786116][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.801743][ T329] usb 2-1: Product: 笰秛․멖颀喃⎣ꏫ錡皋ﰩㅥ㎀꫹翪⠲濪軩쫸偻갖蒕偸윭玁ꋌ劦㼞Ḱ橕㿋階鉅戥ᣀ仜㯎篩暃젷𧻓⒴䜞햗具姍萅䉆㶂硵ﵯ⬝ퟌࣺ⾌䀩 [ 232.822382][ T329] usb 2-1: Manufacturer: ѣ [ 232.826905][ T329] usb 2-1: SerialNumber: syz [ 232.948439][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 232.955059][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 232.963690][ T10] usb 4-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 232.974148][ T10] usb 4-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 232.984339][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 232.994437][ T10] usb 4-1: string descriptor 0 read error: -22 [ 233.000879][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 233.010207][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.023279][T11033] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 233.034101][ T36] audit: type=1400 audit(1755349567.791:1474): avc: denied { getopt } for pid=11024 comm="syz.1.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 233.055936][ T329] usb 2-1: USB disconnect, device number 64 [ 233.231321][T11061] tmpfs: Unknown parameter 'hugrZ' [ 233.236899][T11033] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 233.249057][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 79 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 233.261678][ T10] usb 4-1: USB disconnect, device number 79 [ 233.269510][ T10] usblp0: removed [ 233.269574][ T360] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 233.428499][ T360] usb 5-1: Using ep0 maxpacket: 16 [ 233.434885][ T360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.445832][ T360] usb 5-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 233.454903][ T360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.463696][ T360] usb 5-1: config 0 descriptor?? [ 233.562902][T11063] binder: Unknown parameter '' [ 233.760186][T11083] 9pnet_fd: Insufficient options for proto=fd [ 233.760196][T11084] 9pnet_fd: Insufficient options for proto=fd [ 233.832524][T11098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 233.832562][T11098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 233.875881][ T360] wacom 0003:056A:00E5.0020: ignoring exceeding usage max [ 233.901457][ T360] wacom 0003:056A:00E5.0020: hidraw0: USB HID v0.01 Device [HID 056a:00e5] on usb-dummy_hcd.4-1/input0 [ 234.077557][ T510] usb 5-1: USB disconnect, device number 53 [ 234.198418][ T360] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 234.328410][ T360] usb 4-1: device descriptor read/64, error -71 [ 234.568410][ T360] usb 4-1: device descriptor read/64, error -71 [ 234.778683][T11140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:540 [ 234.808405][ T360] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 234.948445][ T360] usb 4-1: device descriptor read/64, error -71 [ 235.045094][ T36] audit: type=1400 audit(1755349569.801:1475): avc: denied { map } for pid=11141 comm="syz.4.3285" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 235.155741][T11152] overlayfs: failed to clone upperpath [ 235.161995][T11152] overlayfs: failed to clone upperpath [ 235.168082][T11152] overlayfs: failed to clone upperpath [ 235.174230][T11152] overlayfs: failed to clone upperpath [ 235.180234][T11152] overlayfs: failed to clone upperpath [ 235.186030][T11152] overlayfs: failed to clone upperpath [ 235.191867][T11152] overlayfs: failed to clone upperpath [ 235.197610][T11152] overlayfs: failed to clone upperpath [ 235.203436][T11152] overlayfs: failed to clone upperpath [ 235.209306][T11152] overlayfs: failed to clone upperpath [ 235.218422][ T360] usb 4-1: device descriptor read/64, error -71 [ 235.328517][ T360] usb usb4-port1: attempt power cycle [ 235.418440][ T546] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 235.499434][T11180] netlink: 'syz.0.3299': attribute type 11 has an invalid length. [ 235.508539][T11182] netlink: 'syz.0.3299': attribute type 11 has an invalid length. [ 235.570347][ T546] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 235.577201][T11186] 9pnet_fd: Insufficient options for proto=fd [ 235.581336][ T546] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 235.587505][T11185] 9pnet_fd: Insufficient options for proto=fd [ 235.598760][ T546] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 235.612305][ T546] usb 5-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 235.620442][ T546] usb 5-1: Product: syz [ 235.624629][ T546] usb 5-1: Manufacturer: syz [ 235.629251][ T546] usb 5-1: SerialNumber: syz [ 235.634357][ T546] usb 5-1: config 0 descriptor?? [ 235.639597][T11156] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 235.668451][ T360] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 235.689600][ T360] usb 4-1: device descriptor read/8, error -71 [ 235.819540][ T360] usb 4-1: device descriptor read/8, error -71 [ 235.849548][T11156] __vm_enough_memory: pid: 11156, comm: syz.4.3290, bytes: 18014402804453376 not enough memory for the allocation [ 235.862182][ T45] usb 5-1: USB disconnect, device number 54 [ 236.058418][ T360] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 236.079468][ T360] usb 4-1: device descriptor read/8, error -71 [ 236.209734][ T360] usb 4-1: device descriptor read/8, error -71 [ 236.318539][ T360] usb usb4-port1: unable to enumerate USB device [ 236.468075][ T36] audit: type=1400 audit(1755349571.221:1476): avc: denied { mounton } for pid=11208 comm="syz.4.3308" path="/178/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.468107][T11209] fuse: Bad value for 'group_id' [ 236.495580][T11209] fuse: Bad value for 'group_id' [ 236.502774][T11209] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 236.510695][T11209] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 236.519208][T11209] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 236.527123][T11209] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 236.535927][ T36] audit: type=1326 audit(1755349571.291:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.0.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fb58ebe9 code=0x7fc00000 [ 236.562306][ T36] audit: type=1326 audit(1755349571.291:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.0.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5fb58ebe9 code=0x7fc00000 [ 236.634132][T11225] netlink: 'syz.0.3315': attribute type 1 has an invalid length. [ 237.393374][ T36] audit: type=1326 audit(1755349572.151:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11275 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fb58ebe9 code=0x7ffc0000 [ 237.427484][ T36] audit: type=1326 audit(1755349572.151:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11275 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fb58ebe9 code=0x7ffc0000 [ 237.453149][ T36] audit: type=1326 audit(1755349572.151:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11275 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa5fb58ebe9 code=0x7ffc0000 [ 237.476711][ T36] audit: type=1326 audit(1755349572.151:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11275 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fb58ebe9 code=0x7ffc0000 [ 237.500367][ T36] audit: type=1326 audit(1755349572.151:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11275 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fb58ebe9 code=0x7ffc0000 [ 237.523961][ T36] audit: type=1326 audit(1755349572.151:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11275 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fa5fb58ebe9 code=0x7ffc0000 [ 237.547529][ T36] audit: type=1326 audit(1755349572.151:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11275 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fb58ebe9 code=0x7ffc0000 [ 237.571289][ T36] audit: type=1326 audit(1755349572.151:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11275 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fb58ebe9 code=0x7ffc0000 [ 237.648080][T11285] __nla_validate_parse: 60 callbacks suppressed [ 237.648101][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3341'. [ 237.876257][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3355'. [ 238.794670][T11368] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 238.794696][T11368] rust_binder: Read failure Err(EFAULT) in pid:581 [ 238.814929][T11370] virtio-fs: tag not found [ 240.045471][ T36] audit: type=1326 audit(1755349574.701:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11383 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544f8ebe9 code=0x7fc00000 [ 240.929460][ T546] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 240.965788][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3405'. [ 241.103452][ T546] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 241.123936][ T546] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 241.145476][ T546] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.158526][ T546] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 241.166735][ T546] usb 5-1: SerialNumber: syz [ 241.173241][ T546] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 241.193952][ T546] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 241.201109][ T546] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 241.375398][ T546] usb 5-1: USB disconnect, device number 55 [ 242.038779][ T36] audit: type=1326 audit(1755349576.781:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11508 comm="syz.1.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 243.193324][T11582] input: syz1 as /devices/virtual/input/input56 [ 244.485487][T11669] rust_binder: Error while translating object. [ 244.485548][T11669] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 244.491836][T11669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 246.635172][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 246.635191][ T36] audit: type=1400 audit(1755349581.391:1496): avc: denied { mounton } for pid=11766 comm="syz.3.3555" path="/39/file0" dev="tmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 247.020238][T11780] 9pnet_fd: Insufficient options for proto=fd [ 247.049316][ T36] audit: type=1326 audit(1755349581.811:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.1.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 247.081658][ T36] audit: type=1326 audit(1755349581.831:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.1.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 247.107122][ T36] audit: type=1326 audit(1755349581.831:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.1.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 247.130753][ T36] audit: type=1326 audit(1755349581.841:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.1.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 247.154281][ T36] audit: type=1326 audit(1755349581.841:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.1.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 247.177939][ T36] audit: type=1326 audit(1755349581.841:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.1.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 247.201706][ T36] audit: type=1326 audit(1755349581.841:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.1.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb544fc14a5 code=0x7ffc0000 [ 247.243194][ T36] audit: type=1326 audit(1755349581.991:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.1.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb544f8ebe9 code=0x7ffc0000 [ 247.274648][ T36] audit: type=1326 audit(1755349582.001:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.1.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb544f2add9 code=0x7ffc0000 [ 248.078448][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 248.229534][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 248.237848][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 248.246748][ T10] usb 4-1: config 220 has an invalid descriptor of length 14, skipping remainder of the config [ 248.257121][ T10] usb 4-1: config 220 has no interface number 2 [ 248.263429][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 248.276587][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 248.283418][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 248.290353][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 248.298587][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 248.307625][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.315736][ T10] usb 4-1: Product: syz [ 248.320021][ T10] usb 4-1: Manufacturer: syz [ 248.324636][ T10] usb 4-1: SerialNumber: syz [ 248.533602][ T10] usb 4-1: selecting invalid altsetting 0 [ 248.539425][ T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 248.545767][ T10] usb 4-1: No valid video chain found. [ 248.554086][ T10] usb 4-1: USB disconnect, device number 84 [ 249.288400][ T2308] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 249.438444][ T2308] usb 4-1: Using ep0 maxpacket: 32 [ 249.444732][ T2308] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 249.452973][ T2308] usb 4-1: config 4 has no interface number 0 [ 249.459097][ T2308] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.470340][ T2308] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.480452][ T2308] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 249.489638][ T2308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.502087][ T2308] hub 4-1:4.128: USB hub found [ 249.703797][ T2308] hub 4-1:4.128: 2 ports detected [ 249.708955][ T2308] hub 4-1:4.128: Using single TT (err -22) [ 250.267727][ T2308] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 250.274388][ T2308] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 250.298771][ T2308] usb 4-1: USB disconnect, device number 85 [ 250.902819][T11819] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI [ 250.915417][T11819] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 250.923844][T11819] CPU: 1 UID: 0 PID: 11819 Comm: syz.4.3579 Not tainted 6.12.38-syzkaller-g3f3a5c5e782d #0 c9247809a66a5ebb3467d1c2e99b1dedbd707993 [ 250.937385][T11819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.947444][T11819] RIP: 0010:fuse_file_release+0x29e/0x400 [ 250.953190][T11819] Code: 00 74 12 48 89 df e8 81 f3 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 34 f2 a0 ff 48 ba 00 00 00 00 00 fc [ 250.972789][T11819] RSP: 0018:ffffc9000396fae0 EFLAGS: 00010202 [ 250.978857][T11819] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff88813fabcc00 [ 250.986850][T11819] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff888120e2c678 [ 250.994815][T11819] RBP: ffffc9000396fb28 R08: 0000000000000003 R09: 0000000000000004 [ 251.002781][T11819] R10: dffffc0000000000 R11: fffff5200072df2c R12: 000000000006a801 [ 251.010848][T11819] R13: ffff8881214a4d80 R14: ffff888120e2c600 R15: 00000000000000c8 [ 251.018819][T11819] FS: 0000555583897500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 251.027758][T11819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.034333][T11819] CR2: 00005555911e94a8 CR3: 0000000113db6000 CR4: 00000000003526b0 [ 251.042295][T11819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 251.050267][T11819] DR3: 000000000000e58e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 251.058244][T11819] Call Trace: [ 251.061524][T11819] [ 251.064460][T11819] fuse_release+0x13e/0x1b0 [ 251.068974][T11819] ? __cfi_fuse_release+0x10/0x10 [ 251.074045][T11819] __fput+0x1fb/0xa00 [ 251.078034][T11819] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 251.083589][T11819] ____fput+0x20/0x30 [ 251.087567][T11819] task_work_run+0x1e0/0x250 [ 251.092151][T11819] ? __cfi_task_work_run+0x10/0x10 [ 251.097272][T11819] ? __kasan_check_write+0x18/0x20 [ 251.102391][T11819] ? task_work_add+0x258/0x3f0 [ 251.107150][T11819] get_signal+0x1307/0x14f0 [ 251.111666][T11819] ? __kasan_check_write+0x18/0x20 [ 251.116775][T11819] ? _raw_spin_lock+0x8c/0x120 [ 251.121537][T11819] ? __cfi__raw_spin_lock+0x10/0x10 [ 251.126732][T11819] ? fput+0x1ac/0x240 [ 251.130711][T11819] arch_do_signal_or_restart+0x96/0x720 [ 251.136265][T11819] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 251.142421][T11819] ? __kasan_check_write+0x18/0x20 [ 251.147536][T11819] syscall_exit_to_user_mode+0x58/0xb0 [ 251.152986][T11819] do_syscall_64+0x64/0xf0 [ 251.157397][T11819] ? clear_bhb_loop+0x50/0xa0 [ 251.162064][T11819] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 251.168039][T11819] RIP: 0033:0x7f3a90f8ebe9 [ 251.172459][T11819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.192061][T11819] RSP: 002b:00007ffdc2982f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 251.200472][T11819] RAX: 0000000000000000 RBX: 000000000003c5ba RCX: 00007f3a90f8ebe9 [ 251.208438][T11819] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 251.216401][T11819] RBP: 00007f3a911b7da0 R08: 0000000000000001 R09: 00000007c298328f [ 251.224363][T11819] R10: 0000001b2f320000 R11: 0000000000000246 R12: 00007f3a911b609c [ 251.232327][T11819] R13: 00007f3a911b6090 R14: ffffffffffffffff R15: 00007ffdc29830b0 [ 251.240292][T11819] [ 251.243303][T11819] Modules linked in: [ 251.247378][T11819] ---[ end trace 0000000000000000 ]--- [ 251.253249][T11819] RIP: 0010:fuse_file_release+0x29e/0x400 [ 251.259147][T11819] Code: 00 74 12 48 89 df e8 81 f3 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 34 f2 a0 ff 48 ba 00 00 00 00 00 fc [ 251.278787][T11819] RSP: 0018:ffffc9000396fae0 EFLAGS: 00010202 [ 251.284853][T11819] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff88813fabcc00 [ 251.292846][T11819] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff888120e2c678 [ 251.300854][T11819] RBP: ffffc9000396fb28 R08: 0000000000000003 R09: 0000000000000004 [ 251.308847][T11819] R10: dffffc0000000000 R11: fffff5200072df2c R12: 000000000006a801 [ 251.316844][T11819] R13: ffff8881214a4d80 R14: ffff888120e2c600 R15: 00000000000000c8 [ 251.324852][T11819] FS: 0000555583897500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 251.334014][T11819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.340837][T11819] CR2: 00005555911e94a8 CR3: 0000000113db6000 CR4: 00000000003526b0 [ 251.348872][T11819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 251.356863][T11819] DR3: 000000000000e58e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 251.365012][T11819] Kernel panic - not syncing: Fatal exception [ 251.371441][T11819] Kernel Offset: disabled [ 251.375763][T11819] Rebooting in 86400 seconds..