last executing test programs: 1.663789576s ago: executing program 0 (id=577): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010ac05418200f8ff0000010902240001000000000904000001030000000921000000010105000905810300000000"], 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="4713fbfa82974198f6271081d43a42a7e57e0000000000000000000d8e6365beb984e80c099d"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="000905"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000300)={0x14, &(0x7f0000000140)={0x0, 0xf, 0x95, {0x95, 0x23, "664357f2a13e83e0d38bef8612269ee951ff8ec8628f12470163115471b815f278f409414e15593b0f25b3e262a0d93c4dedeb61f20b914c5b60ec29ae55b7a639fe1b1cb0df85c0491f335190b176011cfa76fbc5018de09b8afa3087ef03bc220b3c54b4420aafbaea6c5d5c98d2866dafa232b153b15d850111ac2d64b0b63457e138c9752a1cefe8f9ac19446358cc4fd1"}}, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, &(0x7f0000000540)={0x34, &(0x7f0000000800)={0x20, 0x17, 0x5f, "f1a7af162b7be18c676422eb3217cf51757dcad5b76ea43491a5e9bf066d0b3845970800ff80ac7aaf3fe2c80c3b5f3cdfb9c5b6be16f52d0cc73d3d4073fd6b4d98b893af6561893a90a1e6bfb3ac01570a4968d6c3ecb07b85a5560c8bc3"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000280)={0x20, 0x0, 0x29, {0x27, "fba02dd760eba77eb23ab6ac819dafa29e82ddf89a9e8e117488e86e47f314681a17f05b10ea88"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x1}}) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003080)=[{0x10, 0x112, 0x6}], 0xd}}, {{&(0x7f0000000000)=@ax25={{0x3, @bcast}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="8b8e0402ba311d2c1ea9ae491cbb63d679cc621660dce2d059c58855bfbf345aa247bae8873cf4590876e2327f238fd96cdbccfb0e404c8b332f4a8a0560a25e7d01f72c4c61a1eb708d9374100ac6ff0fd666a2373cec0a3c2fadea9043faf40111715befea8fce2fcf"}], 0x0, &(0x7f0000000180)=[{0x0, 0x107, 0xffff, "0c25822185f347f98bba07a73c3bb3ae05e129812c18e1c46a02051325deb15c3d4094ad8e9495c8fb1decb24a0d05f4a4b4cc65d087c153990a97dad546aa49c03e378bda1cc984b6483838cb2a96632bbf2efa445e7da4aa319bf64ca68a57c6d9cc6ca03005ad"}]}}], 0x1, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x84) openat$cgroup_pressure(r3, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) r4 = openat(r3, &(0x7f00000005c0)='./file0\x00', 0x1c3000, 0xa2) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0xf00) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x20}) openat$rnullb(0xffffffffffffff9c, 0x0, 0x20002, 0x0) write$binfmt_elf32(r3, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x1d, 0x81, 0x81, 0x6, 0x3, 0x3e, 0x7, 0x2de, 0x38, 0x68, 0x8, 0x45, 0x20, 0x3, 0x4, 0xfff7, 0x6}, [{0xc8e9caa2, 0x5, 0x10, 0x8, 0x7, 0xfffffffb, 0x7, 0x80}, {0x5, 0x0, 0xfffffffd, 0x10001, 0xfffffff8, 0x3, 0xe, 0x101}, {0x4, 0x4, 0xffffffff, 0x2c, 0x1ff, 0x7f, 0x480000, 0x2d}], "28326872c559cab339e15bbe142474425e1186909d11fea524f6763eb3b4f3356ed31441dc8cdaf31ef6ada449e650da9f87117a77a6c7dec7ac1f8efe3c0a3f6d46bc53c3ba23a7360092fa83428c87cf352fd332029ac1ae4037c95b465a85db345cd5017ca8395168b3bfedd741036d3241650b6730c1c803ec1ce37d4c92d41b69e6e739e4b2788aae116fe8d7c47fb048823fdb12b6c81486b1fa8424958dc680fb172ad685278558154b1db76b16497ffdadb016c29c968d63a617a0b5efcc997940ddd4ca1682d70911f01e0302e8e01a92742687a89e8b102e3fd85684", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x779) pipe(&(0x7f00000000c0)) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x1) 1.454488259s ago: executing program 1 (id=579): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000180), 0x12) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000540)=[@acquire, @release], 0x0, 0x0, 0x0}) 1.384080569s ago: executing program 3 (id=580): r0 = socket$igmp(0x2, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@loopback, 0x78, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 1.3720562s ago: executing program 3 (id=581): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom(r2, 0x0, 0x0, 0x2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x2, 0x4, 0x3, 0x0, 0x7, 0x0, 0x4, 0xf, 0x81, 0x8, 0x8, 0x2, 0x0, 0x3, 0xa, 0x9, 0x57, 0xb3, 0xd, '\x00', 0x1, 0xc3d2}) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000040)) ioctl$FS_IOC_GETFLAGS(r0, 0x400452c9, 0x0) 1.36002231s ago: executing program 1 (id=582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db9638edbc"}) write$cgroup_devices(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e030800dd5c98"], 0xffdd) 1.004854205s ago: executing program 3 (id=585): statx(0xffffffffffffff9c, 0x0, 0x6000, 0x20, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x18, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x5, 0xd, 0x0, 0x1, [@generic="a9"]}]}, 0x18}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000200)=""/56, 0x38) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) creat(&(0x7f00000004c0)='./file1\x00', 0x51) 967.027146ms ago: executing program 1 (id=586): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x7c682000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = dup3(r7, r6, 0x0) connect$inet(r8, &(0x7f0000005340)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) (async) openat$cgroup(r8, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) (async) read$FUSE(r8, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r14 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)="ef22937fd966fd2e5a34123544f84c7e5834d4da7140b061c00c0a26c5b79e449ee8b3740a0cf4c057af62119205a7a2d96855ee0f000a0461b3e88a3929252c382797a233cbb61e4a921bd724420825a98ebf1b187541956bdff61b58b8afbff9a12cb6afa24838c3bad54f9e6c6a8024695b1b1133081a42b6c61e9e1ada3b455d2f15014cac3b08ac4a9e78c9e2e373451a99a5319db43c5c902e62d049f9f196f68b0d569e1935975183aa36f0d79c9bd2abe82d471defc55c55cabd27c01036be4994a377081dd9bd48cbcd0f73353e73aedd23cf002fc55ed725f2f780d7396e407b9526dc9f8b5f32f1e56294454a8cf6adf86a3e754325bc9b", 0xfd, 0xfffffffffffffffb) keyctl$chown(0x4, r14, r12, r13) (async) write$P9_RSTATu(r8, &(0x7f0000000600)=ANY=[@ANYBLOB="5e0000007d01000000470002008d00000040dc8ec8dc532390191b1f40eb9c0200000003000000000000000000248003000000e3b5911d2cc269ed00245b5d08006e6581de830b960024d8ff268bc250e430e456e43f9e46e36482f71ea5dda7c0c1cd2dfaf8bfb7c88969c9ef1dab341d2e8d009ae838fc2f86cbe8119708bd7e8924ef4570e981b4cf7da956a6cce4e56291cf1ba13ec83978b98a28cb77dd8fdba850cf0988b5426f5fba71d944a61a78d7ee1581e7", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r12], 0x5e) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x800, &(0x7f00000003c0)={[{@nfs_export_off}], [{@fowner_gt={'fowner>', r5}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/self/net/pfkey\x00'}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@measure}, {@hash}, {@appraise_type}]}) close(r4) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4ed430448b52cdfc}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x108) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002880)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/247, 0xf7, 0x0, 0xa}}, &(0x7f00000004c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000c01000/0x3000)=nil, 0x3000, 0x1000002, 0x8010, r3, 0xa2d1b000) 847.822927ms ago: executing program 2 (id=587): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 787.135008ms ago: executing program 3 (id=588): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x70, 0x0, &(0x7f0000000540)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/236, 0xec, 0x0, 0x23}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/140, 0x8c, 0x1, 0x2b}, @ptr={0x70742a85, 0xc, &(0x7f0000000000)=""/94, 0x5e, 0x2, 0x21}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}, @increfs_done={0x40106308, 0x1}, @release={0x40046306, 0x2}, @clear_death={0x400c630f, 0x1}], 0x21, 0x0, &(0x7f0000000340)="7343943beda8757fbe724148f540b1b13b24af32b37acfe2c4ef93bca1a6f6dfb9"}) 766.771499ms ago: executing program 2 (id=589): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@loopback, 0x78, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 631.730301ms ago: executing program 3 (id=590): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x31, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3}}, 0x2e) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = syz_usb_connect$cdc_ncm(0x4, 0x158, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x146, 0x2, 0x1, 0x80, 0x0, 0xc0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'k'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4, 0x200, 0x4f}, {0x6, 0x24, 0x1a, 0x2, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x2, 0x1, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}, @mdlm_detail={0xb3, 0x24, 0x13, 0x10, "466d03e6100204f12a17e2f57c4d41feb642dcd4daf23c9bf1b461db4fb132a0160f4932af216f1196a56587082ae34ca15c6785dd0899f4e2760f2d21d803b055ae60538c8440f772b3a2fe00875956a2f6c1158fde2af936b320ddd7f73f7ed395b8c16b696bceca765603703d91937f95ee094a40034c6874ba7d745475233c3a7d5b6ef94a5afa9487ca23dc17a539e878cd9ecee23c5bc2a617b03fce411d2048218c29630c7c28ac4752787a"}, @mdlm={0x15, 0x24, 0x12, 0xe44}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7f, 0x8, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x7, 0x49}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xb, 0x2, 0x2}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x0, 0xc, 0xf9, 0x60, 0x9}, 0x13, &(0x7f00000001c0)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0x4, 0x1, 0x2, 0x4}]}, 0x3, [{0xc9, &(0x7f0000000200)=@string={0xc9, 0x3, "90700bc35e3998271fc7ee019e13c08500ac528b156dbc6683ae7eec811bc26949174ab200c55997848407ddcb0b3030f84fca66f36ce5921d5c0d95614ec5c731111e7d4b8d64944769da0e2b9a26f38ff941728b0dddcbe3e3ed023c8816a89e5457f4dd480d1e5545c35afe4d0503b1f3ae1cf0597ef8de2c3beea5a2bf94c19568b1ab8075bb9b6af2518b4bb2f267c1af82e49f90a953ef57db82799a037be6b2dd9b72308f2c2ec44a48ca0c4cb4abcd09fd160d13e7fe619b210f202e416590d9978a51"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x424}}, {0x21, &(0x7f0000000340)=@string={0x21, 0x3, "3461d190da5cb3d8dfcad61bafb93529df68645597e14db89c9b889080a632"}}]}) syz_usb_control_io(r4, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x0, 0x3, 0xda, {0xda, 0x11, "61932aa291e947b81682355457746b7c0dbe4cc1147c74fcfaba2b9d8fc82261505d852b2b7c059833d0eefd18c028f051422effa222c01d628ca0d2ae81405e1928ce16481a45e5aae04e8dd40167c6329877d4ee8425aad6480407614d47d066f181f05ea2968d4f4d58d107fe6cab0e92e9875cddfc279f86c7a767c1bf80254724402c94fb534c268549a037475fe4718056e568ee883939d58de70e580917017dc302c0d9cadf18bbe8fea1474bce5f2debe89bb80e602dcd53164d171fe5f2d3645dde9474ecc63f8c2831dfb2243f17c9b64dc0cf"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000000500)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xe, "ebf6ca46c6a40b63095bd26eaf272611"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xa, 0x5, 0x9}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x80, 0xb5, "834b7764", "2e52af78"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x4, 0x1, 0xe, 0xba, 0x3, 0x7}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000600)={0x0, 0x15, 0xfb, "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"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x4, 0x20}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "38b0"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x13, 0x6, @local}, &(0x7f0000000980)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "0344"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x64}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0xfc}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r5, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r2) splice(r3, 0x0, r0, 0x0, 0x1080000001, 0x6) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000bc0)) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, 0x0, 0x0) 631.325401ms ago: executing program 1 (id=591): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) r1 = open(&(0x7f00000021c0)='./file0\x00', 0x48442, 0x182) ftruncate(r1, 0x200002) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xc1}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xfb7f000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x2, 0x0, 0x4, {0xa, 0x4e21, 0x200, @private1, 0x8}}}, 0x32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x1a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) sendmsg$inet(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='@\x00'], 0x70}, 0x80) sendfile(r5, r4, 0x0, 0x80001d00c0d0) 616.182841ms ago: executing program 2 (id=592): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$igmp6(0xa, 0x3, 0x87) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r2, 0x1, 0x2, 0x0, &(0x7f0000000080)) close_range(r1, r0, 0x2) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/185, 0xb9}, {&(0x7f0000000340)=""/136, 0x88}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x3, 0x8006) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="bee40000000000000a004e1c135704240000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb63d504c3972132724b555f40eaae3d75c6dba2dc432ae8fbbad5ac6567b798fb5509aef5061b9ba8f632dfbd"], 0x90) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x400448dc, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @loopback=0x7f000000}}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000002680)={0x2020}, 0xffffff59) ftruncate(0xffffffffffffffff, 0xffffffffeed6b53c) 428.141644ms ago: executing program 2 (id=593): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x10, 0x1, 0x7, 0xffffffff, {{0x14, 0x4, 0x0, 0x2d, 0x50, 0x65, 0x0, 0xf, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x1f, 0x95, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010101, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x28}]}, @rr={0x7, 0x1b, 0xc1, [@rand_addr=0x64010101, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @private=0xa010101]}, @end]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @empty}, &(0x7f00000002c0)=0xc) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000012c40)=[{{&(0x7f0000010400)={0xa, 0x4e22, 0x101, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1d}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, r6}}}], 0x28}}], 0x1, 0x2400c801) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xc0, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40440c0}, 0x1) r8 = syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x5c) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x3, r8, 0x2, &(0x7f0000000000)) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000280)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 304.041616ms ago: executing program 2 (id=594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db9638edbc"}) write$cgroup_devices(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e030800dd5c98"], 0xffdd) 303.301426ms ago: executing program 0 (id=595): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1081, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a3680167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86ecb31e9be7b8e704287fe45ad3f169d7f67e798b0de3bf70f485f81ba5e9aef1ec5782c4c609ffdc93a3bdfeeb7e7cd05ea7023895be4a3f78f188fdbd83ded6dcdf1d429c12b1b250284110295e3515bfb117119839f13057ea2366d3c4b75b28f60afe17b195d04ff58dd2f3382bb57152f2928f9a91bbcc42057777ba13becb4552419caa2ffc325219a6995f5d1e9a193a1aede859834ef765009d6c242ad918ecf3fe62c8dfe2ff309cbce740950cdd05c8e0b7f75aa21731be678552b2d0024a4b3815fb52f056ba37f3f466afab6b5728def0fdef93655524121927df3a39af0845df7612e9ccdae25f406ac0ad7a0e4f980398597ab2c2291d87a1ed618b9e392f1d055d5290be67b6cec9e7505c41025d2aa6e82a4f693042989b5f4a9abfe0ec51fd9dcb972a054b80ee6a460fd422eaa971e2cb759c72e676e2877c667c6ce002be1ce6ba8380e6dd691590c84ba68d26f3284280dcacd082b42bf5aac71467b3fcd5d68ab1bc26cf48fe770ccff5f14ff8afafb18d3127a6d989b7d77665a7a9bf4cb488621c904acd0b073396ad8509c9ddb02eb1d23510a52289a5f0d7edba66d4ef271b9c6acc3bfa996b55f6808650236b0001132ef85fc5070b69144ff5fdd8d64f6c3e0dd22711f69a940ebdb4ab5ff6240da3160049d2047e6713d47ad0db40ec543c095ad67c8cbe438fb875927c98e265498b3da8d4ca54bac0e6efe759a2d4d4190e9fc8835599da8237f472411a71236bb930d28a26f49062d270f4087a6a709c005eebc9740ed54dd005c787c44badac9c720b0d424d0ded9bb8c24c0e842deedf386fc7714a31268292d3bcc53b1cf24b156445c8bf64336f742b1ba836eba0ae4a5aaa9a6f35d4f81734e16bce965795d5b1255609d1860fe11c9c536db078af94772830ba000c13e1d9383e3d862fa07f2199da148632c036bc19f6014eeb206a3654d390c78911deeabebf128def61122754e0a4696db82666a018f8d2f44b5aadc12809ade8bed1b1ba2adbb6e3e82180e26748dc30a8eda0edb21fcaa702632ed3fb4e89550c3e0e1fd2b5ecf1983d85bf9569b231e28155756bd97f1220cbc2b5b1c02dab88ee4a8970d4833b9e51529895afe5029823576297d4a917602fe08df57e1d7f63d050877ddf8e82a5383e15f313171b2d5618a1549f3dfced0732b887508ca5e134124d0ed0bd4b767115d1530f73504387e0364d73a2d3b114fcb49219b1c15e066c455b01672e49499995454a502236f5a5007895d3d1d8843007352a3ccc3f71d3e801efd0a6ef922bf39ead16e01ec20ebff2b1ce7cfd0984b26225cb1359b36efe9ad2ae1f6de4862c0faaa52f4d0eb4c13960ceb4aeaa10ae61a09a5abdb0c61661962a0aab14d465a8ae6f45826e1e66428cf8572eb53c98160df6613a62bb611c63f1ffb7a795a889fc16670f6302fd36ee4247bdd4282f1afb6042c832a4b0857cecae0a7090d9b11ae46d9186c710c8dd12911db573493329bea2c743734d86a577cf27aa01e4fc6c91f1fa34bba173d20b97ed8bb4bad43692df90bfd2b193b9e8b93a95ec0d0d42217395d89db511d2e9bbeb3ef47b7b2d81ab54b5c8faa760ef5c0493af13a9327c9432521ed6bfcb9d778d25031da41a983027fe7d794c26326053d38172444307d88501cdd26c3fdeafdf5f599d3dcfd39972f28ec3fb1fb40982615f5d71d6693a8774df072576834c69b89f209b458fad4671f0108fdfc8548a6fcf76a843369a3bca4d2974221ed9af224d151fa8aa73276ba65ca3d8bc98d6504f16bcac30c697f68cb1625b4f2259ee0c694951752845fa11c20fc4dda369d53918c3746918692ee2cda958612808b841b8d36ef3933f5340e1fc8fb10ac2ae97da921f6a67806831356d515c7a32468dfd3385c"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000040)='bbr\x00', 0x4) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (rerun: 32) pipe(&(0x7f0000000200)) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@read_timeout_ms={'read_timeout_ms', 0x3d, 0x839}}]}) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000d80)="10af5cfd2794b1c2e13d1af50d451c0e3c5b4340f3c98798de408d007e29fb0220a5f016f279ed070e9bbd1b2b2596a23adeba882f14ba5a8bd1d3b28a09f6de348d5308caa9f144c82da76d9b124d86b3e4d556afce2e0a43cad7f010d00a1c91f5a0b5c934d63141a4270206fe798cfee36eb5ada3383154764f049e2238641ad5603ba4282a0b743527c14a4e33d67c4648855ca6e467cc61fb6c4fcf6d8e494256d540c0e9d7018683be7f1c647d62132f0502673a021c600d2ffae9d2532584621ed54de6092f78150b98c9d827ed350ae3e1e04effdf55dc4c876d417bea8235bc57cdeaed965fcf64a88b3712b79ac57c677ae8e6", 0xf8}, {&(0x7f0000000300)="545a666dfd25130a7c3b8949cd62720ce5baedc5e8888f3d41a32a646e50d65e5bace2a6e25f7cb8d2", 0x29}, {&(0x7f0000000340)="c1ff0dd7034fe54d155af1afef90939447deab3bab70fff1d960d904c582fbbff00b589085375401049731bcb9de0baf12beed1c3946f0144b172cef383b6c4869c1d1006b44df031a3aab51140939a435d975c7c3673e51667c29b6eae8e0ed6da571014cdedcb667e9141b", 0x6c}], 0x3) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$TCFLSH(r3, 0x80045430, 0x2000000000002) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x0, &(0x7f00000003c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/74, 0x4a, 0x0, 0x1e}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000cc0)=""/188, 0xbc, 0x2, 0x1b}}, 0xffffffffffffffff}, 0x806075d96d808363}], 0x0, 0x0, 0x0}) 256.453396ms ago: executing program 0 (id=596): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r0, 0x1b9, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x6}) 222.054567ms ago: executing program 1 (id=597): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 142.810198ms ago: executing program 0 (id=598): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0x4018aee2, &(0x7f0000000000)) fchown(r0, r1, r2) 142.285148ms ago: executing program 1 (id=599): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x8000000001}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) 64.937149ms ago: executing program 0 (id=600): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@loopback, 0x78, r0}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) 64.187589ms ago: executing program 2 (id=601): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x3, 0x4, 0xf, 0x0, 0xac, 0x6, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x0, 0x1, 0x1, 0x4, 0x7, 0x1, 0x1, '\x00', 0x0, 0x8000000000000001}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x8, 0x0, 0x0, 0x0, 0xfe, 0xfc}, {0x3000, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0x1, 0xd, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3c, 0x0, 0x13}, {0x10000, 0x3000, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x5000, 0xe, 0xfe}, {0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0xa, 0x26, 0x4}, {0x80a0000}, {0xdddd1000, 0x8}, 0xddf8ffdb, 0x0, 0x0, 0x2b, 0x0, 0x3800, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x3, 0x4, 0xf, 0x0, 0xac, 0x6, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x0, 0x1, 0x1, 0x4, 0x7, 0x1, 0x1, '\x00', 0x0, 0x8000000000000001}) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x8, 0x0, 0x0, 0x0, 0xfe, 0xfc}, {0x3000, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0x1, 0xd, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3c, 0x0, 0x13}, {0x10000, 0x3000, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x5000, 0xe, 0xfe}, {0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0xa, 0x26, 0x4}, {0x80a0000}, {0xdddd1000, 0x8}, 0xddf8ffdb, 0x0, 0x0, 0x2b, 0x0, 0x3800, 0x0, [0x0, 0x0, 0x1]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) 1.45079ms ago: executing program 3 (id=602): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff004) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x6, @local, 0x6}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$snapshot(r4, &(0x7f0000000040)="0700655f88", 0x5) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'allow_other', 0x3a, '', 0x3a, './cgroup.cpu/cpuset.cpus', 0x3a, [0x46, 0x46]}, 0x45) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000400)='.dead\x00', &(0x7f0000000440)=@keyring={'key_or_keyring:', r6}) write$snapshot(r4, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x4c20, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0xa, 0x401, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x8, 0x0, 0x9, 0x5}, 0x8, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d3, 0x6c}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x2c000, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{}, {@subsystem='memory'}]}) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f00000000c0)=0x8000000) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r8, 0x9, 0x2}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, r10) recvmsg(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000340)=""/259, 0x103}, 0x0) 0s ago: executing program 0 (id=603): mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext']) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x1) ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x800, 0x82) read$FUSE(r2, 0x0, 0x0) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x9) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0xf, 0x0, [{0x4b564d02, 0x0, 0x7f}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. [ 23.278685][ T36] audit: type=1400 audit(1750442289.570:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.280127][ T281] cgroup: Unknown subsys name 'net' [ 23.301441][ T36] audit: type=1400 audit(1750442289.570:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.328919][ T36] audit: type=1400 audit(1750442289.600:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.329180][ T281] cgroup: Unknown subsys name 'devices' [ 23.529656][ T281] cgroup: Unknown subsys name 'hugetlb' [ 23.535311][ T281] cgroup: Unknown subsys name 'rlimit' [ 23.629615][ T36] audit: type=1400 audit(1750442289.920:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.652907][ T36] audit: type=1400 audit(1750442289.920:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.663835][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.677865][ T36] audit: type=1400 audit(1750442289.920:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.709394][ T36] audit: type=1400 audit(1750442289.970:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.734866][ T36] audit: type=1400 audit(1750442289.970:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.769409][ T36] audit: type=1400 audit(1750442290.060:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.795002][ T36] audit: type=1400 audit(1750442290.060:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.795062][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.092877][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.100242][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.107422][ T288] bridge_slave_0: entered allmulticast mode [ 25.113712][ T288] bridge_slave_0: entered promiscuous mode [ 25.120055][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.127149][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.134207][ T290] bridge_slave_0: entered allmulticast mode [ 25.140568][ T290] bridge_slave_0: entered promiscuous mode [ 25.148456][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.155596][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.162768][ T291] bridge_slave_0: entered allmulticast mode [ 25.169068][ T291] bridge_slave_0: entered promiscuous mode [ 25.175239][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.182441][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.189572][ T288] bridge_slave_1: entered allmulticast mode [ 25.195820][ T288] bridge_slave_1: entered promiscuous mode [ 25.204702][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.211817][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.218948][ T290] bridge_slave_1: entered allmulticast mode [ 25.225207][ T290] bridge_slave_1: entered promiscuous mode [ 25.233034][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.240152][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.247285][ T291] bridge_slave_1: entered allmulticast mode [ 25.253544][ T291] bridge_slave_1: entered promiscuous mode [ 25.285479][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.292641][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.299918][ T289] bridge_slave_0: entered allmulticast mode [ 25.306174][ T289] bridge_slave_0: entered promiscuous mode [ 25.312800][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.319869][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.326986][ T289] bridge_slave_1: entered allmulticast mode [ 25.333290][ T289] bridge_slave_1: entered promiscuous mode [ 25.490040][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.497186][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.504474][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.511551][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.533522][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.540614][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.547946][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.554989][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.573716][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.580818][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.588151][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.595197][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.619363][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.626437][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.633760][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.640837][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.663073][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.670401][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.678104][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.685879][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.693229][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.700543][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.708165][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.715505][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.736358][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.743459][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.751335][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.758430][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.768807][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.775879][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.799862][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.806964][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.834737][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.841853][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.849808][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.856895][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.886217][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.893320][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.901144][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.908220][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.921352][ T288] veth0_vlan: entered promiscuous mode [ 25.941179][ T288] veth1_macvtap: entered promiscuous mode [ 25.954516][ T291] veth0_vlan: entered promiscuous mode [ 25.965462][ T290] veth0_vlan: entered promiscuous mode [ 26.002094][ T290] veth1_macvtap: entered promiscuous mode [ 26.012888][ T291] veth1_macvtap: entered promiscuous mode [ 26.020603][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.027698][ T289] veth0_vlan: entered promiscuous mode [ 26.092761][ T289] veth1_macvtap: entered promiscuous mode [ 26.131130][ T313] rust_binder: Write failure EINVAL in pid:2 [ 26.165567][ T313] syzkaller0: entered promiscuous mode [ 26.178116][ T313] syzkaller0: entered allmulticast mode [ 26.536644][ T305] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.686798][ T305] usb 4-1: Using ep0 maxpacket: 16 [ 26.693250][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.704409][ T305] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.717269][ T305] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 26.726319][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.736096][ T305] usb 4-1: config 0 descriptor?? [ 26.988352][ T337] overlay: ./file0 is not a directory [ 27.147571][ T305] microsoft 0003:045E:07DA.0001: unbalanced delimiter at end of report description [ 27.157520][ T305] microsoft 0003:045E:07DA.0001: parse failed [ 27.163677][ T305] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 27.361726][ T9] usb 4-1: USB disconnect, device number 2 [ 27.386783][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.536625][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 27.544190][ T353] rust_binder: Write failure EINVAL in pid:14 [ 27.545008][ T10] usb 2-1: config 0 has an invalid interface number: 27 but max is 0 [ 27.562609][ T10] usb 2-1: config 0 has no interface number 0 [ 27.569244][ T10] usb 2-1: config 0 interface 27 has no altsetting 0 [ 27.586341][ T353] syzkaller0: entered promiscuous mode [ 27.591967][ T353] syzkaller0: entered allmulticast mode [ 27.593708][ T10] usb 2-1: New USB device found, idVendor=04a5, idProduct=4027, bcdDevice=f2.12 [ 27.608283][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.616335][ T10] usb 2-1: Product: syz [ 27.620665][ T10] usb 2-1: Manufacturer: syz [ 27.625304][ T10] usb 2-1: SerialNumber: syz [ 27.632247][ T10] usb 2-1: config 0 descriptor?? [ 27.766688][ T305] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.839121][ T343] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.854577][ T10] pl2303 2-1:0.27: required endpoints missing [ 27.864151][ T10] usb 2-1: USB disconnect, device number 2 [ 27.916633][ T305] usb 3-1: Using ep0 maxpacket: 8 [ 27.922838][ T305] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.936609][ T305] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 27.945694][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.956679][ T305] usb 3-1: config 0 descriptor?? [ 28.367143][ T305] usbhid 3-1:0.0: can't add hid device: -71 [ 28.373160][ T305] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 28.385911][ T305] usb 3-1: USB disconnect, device number 2 [ 28.435449][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 28.435468][ T36] audit: type=1400 audit(1750442294.720:161): avc: denied { read } for pid=372 comm="syz.1.24" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 28.464386][ T36] audit: type=1400 audit(1750442294.720:162): avc: denied { open } for pid=372 comm="syz.1.24" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 28.488213][ T36] audit: type=1400 audit(1750442294.720:163): avc: denied { ioctl } for pid=372 comm="syz.1.24" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 28.562048][ T376] overlay: ./file0 is not a directory [ 28.762278][ T36] audit: type=1400 audit(1750442295.050:164): avc: denied { create } for pid=379 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 28.784086][ T36] audit: type=1400 audit(1750442295.070:165): avc: denied { setopt } for pid=379 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 28.918514][ T393] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.971546][ T36] audit: type=1400 audit(1750442295.260:166): avc: denied { write } for pid=392 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.993240][ T36] audit: type=1400 audit(1750442295.260:167): avc: denied { nlmsg_write } for pid=392 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.076627][ T305] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.145592][ T36] audit: type=1400 audit(1750442295.430:168): avc: denied { create } for pid=408 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.181935][ T36] audit: type=1400 audit(1750442295.460:169): avc: denied { connect } for pid=408 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.227170][ T36] audit: type=1400 audit(1750442295.510:170): avc: denied { read write } for pid=413 comm="syz.1.42" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.256611][ T305] usb 1-1: Using ep0 maxpacket: 16 [ 29.264600][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.295983][ T305] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.320760][ T305] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.329959][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.348563][ T305] usb 1-1: config 0 descriptor?? [ 29.768172][ T305] microsoft 0003:045E:07DA.0002: unbalanced delimiter at end of report description [ 29.803414][ T305] microsoft 0003:045E:07DA.0002: parse failed [ 29.815802][ T305] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 29.970064][ T461] netlink: 4276 bytes leftover after parsing attributes in process `syz.1.58'. [ 29.978220][ T305] usb 1-1: USB disconnect, device number 2 [ 30.072314][ T470] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.762523][ T480] rust_binder: Write failure EINVAL in pid:25 [ 30.784433][ T483] overlay: ./file0 is not a directory [ 31.141517][ T508] rust_binder: Write failure EINVAL in pid:57 [ 31.960678][ T539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 32.667132][ T562] tipc: Started in network mode [ 32.674358][ T562] tipc: Node identity , cluster identity 4711 [ 32.706651][ T562] tipc: Failed to set node id, please configure manually [ 32.713747][ T562] tipc: Enabling of bearer rejected, failed to enable media [ 32.815567][ T565] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 32.977131][ T574] rust_binder: Write failure EINVAL in pid:34 [ 33.301457][ T591] ======================================================= [ 33.301457][ T591] WARNING: The mand mount option has been deprecated and [ 33.301457][ T591] and is ignored by this kernel. Remove the mand [ 33.301457][ T591] option from the mount to silence this warning. [ 33.301457][ T591] ======================================================= [ 33.343373][ T593] overlayfs: missing 'workdir' [ 33.379453][ T591] binder: Unknown parameter 'dã' [ 33.473108][ T36] kauditd_printk_skb: 330 callbacks suppressed [ 33.473126][ T36] audit: type=1400 audit(1750442299.760:501): avc: denied { sqpoll } for pid=599 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.506617][ T339] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.515102][ T36] audit: type=1400 audit(1750442299.760:502): avc: denied { create } for pid=599 comm="syz.2.119" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.569373][ T36] audit: type=1400 audit(1750442299.760:503): avc: denied { map } for pid=599 comm="syz.2.119" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.573010][ T605] rust_binder: Write failure EINVAL in pid:66 [ 33.618362][ T36] audit: type=1400 audit(1750442299.760:504): avc: denied { read write } for pid=599 comm="syz.2.119" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.652044][ T36] audit: type=1400 audit(1750442299.790:505): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.685207][ T36] audit: type=1400 audit(1750442299.790:506): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.714132][ T339] usb 2-1: Using ep0 maxpacket: 16 [ 33.721001][ T36] audit: type=1400 audit(1750442299.790:507): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.748816][ T339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.768920][ T339] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 33.787824][ T339] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 33.799987][ T36] audit: type=1400 audit(1750442299.800:508): avc: denied { ioctl } for pid=588 comm="syz.1.114" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.857317][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.887969][ T339] usb 2-1: config 0 descriptor?? [ 33.901860][ T36] audit: type=1400 audit(1750442299.800:509): avc: denied { ioctl } for pid=588 comm="syz.1.114" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.964436][ T36] audit: type=1400 audit(1750442299.800:510): avc: denied { ioctl } for pid=588 comm="syz.1.114" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.338089][ T339] usbhid 2-1:0.0: can't add hid device: -71 [ 34.349459][ T339] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 34.397169][ T339] usb 2-1: USB disconnect, device number 3 [ 34.660404][ T634] syzkaller0: entered promiscuous mode [ 34.677799][ T634] syzkaller0: entered allmulticast mode [ 35.884333][ T658] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 35.913658][ T658] SELinux: failed to load policy [ 35.936818][ T660] syzkaller0: entered promiscuous mode [ 35.942351][ T660] syzkaller0: entered allmulticast mode [ 36.042399][ T663] rust_binder: Write failure EINVAL in pid:97 [ 36.387188][ T677] binder: Bad value for 'stats' [ 36.514504][ T681] FAULT_INJECTION: forcing a failure. [ 36.514504][ T681] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.546910][ T681] CPU: 1 UID: 0 PID: 681 Comm: syz.3.151 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 36.546944][ T681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.546966][ T681] Call Trace: [ 36.546973][ T681] [ 36.546981][ T681] __dump_stack+0x21/0x30 [ 36.547017][ T681] dump_stack_lvl+0x10c/0x190 [ 36.547041][ T681] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.547065][ T681] ? vfs_write+0x8ba/0xe80 [ 36.547091][ T681] dump_stack+0x19/0x20 [ 36.547113][ T681] should_fail_ex+0x3d9/0x530 [ 36.547136][ T681] should_fail+0xf/0x20 [ 36.547156][ T681] should_fail_usercopy+0x1e/0x30 [ 36.547180][ T681] _copy_from_user+0x22/0xb0 [ 36.547207][ T681] __sys_connect+0x136/0x440 [ 36.547236][ T681] ? __cfi___sys_connect+0x10/0x10 [ 36.547266][ T681] ? __kasan_check_read+0x15/0x20 [ 36.547290][ T681] __x64_sys_connect+0x7e/0x90 [ 36.547317][ T681] x64_sys_call+0x1c2f/0x2ee0 [ 36.547343][ T681] do_syscall_64+0x58/0xf0 [ 36.547369][ T681] ? clear_bhb_loop+0x35/0x90 [ 36.547399][ T681] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.547427][ T681] RIP: 0033:0x7f1f7098e929 [ 36.547448][ T681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.547464][ T681] RSP: 002b:00007f1f71828038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 36.547491][ T681] RAX: ffffffffffffffda RBX: 00007f1f70bb5fa0 RCX: 00007f1f7098e929 [ 36.547507][ T681] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 36.547520][ T681] RBP: 00007f1f71828090 R08: 0000000000000000 R09: 0000000000000000 [ 36.547533][ T681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.547545][ T681] R13: 0000000000000000 R14: 00007f1f70bb5fa0 R15: 00007ffe34d07c58 [ 36.547562][ T681] [ 36.571342][ T683] rust_binder: Failed copying remainder into alloc: EFAULT [ 36.762907][ T683] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 36.770304][ T683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 36.806825][ T683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:117 [ 36.880534][ T688] syzkaller0: entered promiscuous mode [ 36.907553][ T688] syzkaller0: entered allmulticast mode [ 36.941340][ T692] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.941924][ T692] rust_binder: Write failure EINVAL in pid:120 [ 37.201605][ T704] rust_binder: Error while translating object. [ 37.216585][ T704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 37.233077][ T704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:102 [ 37.246584][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.247230][ T702] input: syz1 as /devices/virtual/input/input5 [ 37.416593][ T31] usb 1-1: device descriptor read/64, error -71 [ 37.456638][ T339] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.606691][ T339] usb 2-1: Using ep0 maxpacket: 16 [ 37.614291][ T339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.625721][ T339] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 37.639450][ T339] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 37.649179][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.657872][ T31] usb 1-1: device descriptor read/64, error -71 [ 37.669573][ T339] usb 2-1: config 0 descriptor?? [ 37.896609][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.036639][ T31] usb 1-1: device descriptor read/64, error -71 [ 38.087332][ T339] usbhid 2-1:0.0: can't add hid device: -71 [ 38.099329][ T339] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 38.118493][ T339] usb 2-1: USB disconnect, device number 4 [ 38.276607][ T31] usb 1-1: device descriptor read/64, error -71 [ 38.386790][ T31] usb usb1-port1: attempt power cycle [ 38.477524][ T36] kauditd_printk_skb: 1257 callbacks suppressed [ 38.477543][ T36] audit: type=1400 audit(1750442304.770:1768): avc: denied { ioctl } for pid=695 comm="syz.0.157" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.485933][ T724] syzkaller0: entered promiscuous mode [ 38.532185][ T724] syzkaller0: entered allmulticast mode [ 38.545410][ T36] audit: type=1400 audit(1750442304.770:1769): avc: denied { ioctl } for pid=695 comm="syz.0.157" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.574917][ T36] audit: type=1400 audit(1750442304.870:1770): avc: denied { create } for pid=721 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.595717][ T36] audit: type=1400 audit(1750442304.880:1771): avc: denied { getopt } for pid=721 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.616481][ T36] audit: type=1400 audit(1750442304.880:1772): avc: denied { setopt } for pid=721 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.646644][ T36] audit: type=1400 audit(1750442304.880:1773): avc: denied { create } for pid=721 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.709534][ T36] audit: type=1400 audit(1750442304.880:1774): avc: denied { bind } for pid=721 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.734214][ T728] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.738316][ T728] rust_binder: Write failure EINVAL in pid:126 [ 38.740474][ T36] audit: type=1400 audit(1750442304.880:1775): avc: denied { write } for pid=721 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.758453][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.779612][ T36] audit: type=1400 audit(1750442304.930:1776): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.807981][ T36] audit: type=1400 audit(1750442304.930:1777): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.839172][ T31] usb 1-1: device descriptor read/8, error -71 [ 38.970337][ T31] usb 1-1: device descriptor read/8, error -71 [ 39.236590][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.258409][ T747] syzkaller0: entered promiscuous mode [ 39.268329][ T747] syzkaller0: entered allmulticast mode [ 39.279184][ T31] usb 1-1: device descriptor read/8, error -71 [ 39.428245][ T31] usb 1-1: device descriptor read/8, error -71 [ 39.568417][ T31] usb usb1-port1: unable to enumerate USB device [ 40.102936][ T772] rust_binder: Error while translating object. [ 40.102966][ T772] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.109957][ T774] rust_binder: Write failure EINVAL in pid:145 [ 40.126618][ T772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 40.405155][ T784] syzkaller0: entered promiscuous mode [ 40.456151][ T784] syzkaller0: entered allmulticast mode [ 40.636307][ T792] tipc: Started in network mode [ 40.641263][ T792] tipc: Node identity 72d41e2e3c02, cluster identity 4711 [ 40.648773][ T792] tipc: Enabled bearer , priority 0 [ 40.662460][ T792] syzkaller0: MTU too low for tipc bearer [ 40.668358][ T792] tipc: Disabling bearer [ 40.754045][ T794] syzkaller0: entered promiscuous mode [ 40.763793][ T794] syzkaller0: entered allmulticast mode [ 40.805315][ T797] rust_binder: Write failure EINVAL in pid:61 [ 41.561452][ T822] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.569511][ T822] rust_binder: Write failure EINVAL in pid:138 [ 41.746599][ T709] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 41.929392][ T709] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.965081][ T709] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 41.997151][ T709] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.041126][ T709] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.066580][ T709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.085573][ T709] usb 1-1: Product: syz [ 42.094833][ T709] usb 1-1: Manufacturer: syz [ 42.114921][ T709] usb 1-1: SerialNumber: syz [ 42.176803][ T845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.177374][ T845] rust_binder: Write failure EINVAL in pid:153 [ 42.229879][ T845] syzkaller0: entered promiscuous mode [ 42.241775][ T845] syzkaller0: entered allmulticast mode [ 42.339873][ T817] Zero length message leads to an empty skb [ 42.448767][ T847] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.451040][ T709] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 42.491521][ T709] cdc_ncm 1-1:1.0: bind() failure [ 42.507494][ T709] usb 1-1: USB disconnect, device number 7 [ 43.087220][ T709] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 43.165894][ T869] rust_binder: Write failure EINVAL in pid:166 [ 43.199591][ T869] syzkaller0: entered promiscuous mode [ 43.225467][ T869] syzkaller0: entered allmulticast mode [ 43.256615][ T709] usb 4-1: Using ep0 maxpacket: 16 [ 43.270248][ T709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.299909][ T709] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 43.326771][ T709] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 43.348284][ T709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.367918][ T709] usb 4-1: config 0 descriptor?? [ 43.493966][ T36] kauditd_printk_skb: 691 callbacks suppressed [ 43.493986][ T36] audit: type=1400 audit(1750442309.780:2469): avc: denied { map } for pid=875 comm="syz.2.228" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.566928][ T36] audit: type=1400 audit(1750442309.780:2470): avc: denied { read } for pid=875 comm="syz.2.228" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.646594][ T36] audit: type=1400 audit(1750442309.780:2471): avc: denied { map } for pid=875 comm="syz.2.228" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.706630][ T36] audit: type=1400 audit(1750442309.780:2472): avc: denied { read } for pid=875 comm="syz.2.228" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.776669][ T36] audit: type=1400 audit(1750442309.880:2474): avc: denied { ioctl } for pid=855 comm="syz.3.220" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.803698][ T36] audit: type=1400 audit(1750442309.880:2473): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.837616][ T36] audit: type=1400 audit(1750442309.880:2475): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.869405][ T36] audit: type=1400 audit(1750442309.880:2476): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.950061][ T36] audit: type=1400 audit(1750442309.940:2477): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.983364][ T36] audit: type=1400 audit(1750442309.940:2478): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.719953][ T904] rust_binder: Write failure EINVAL in pid:175 [ 44.738003][ T904] syzkaller0: entered promiscuous mode [ 44.749793][ T904] syzkaller0: entered allmulticast mode [ 44.817585][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 44.976593][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 44.984560][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 44.994655][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 45.009719][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.018910][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 45.026955][ T10] usb 2-1: SerialNumber: syz [ 45.036846][ T899] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 45.045067][ T10] usb 2-1: bad CDC descriptors [ 45.186578][ T305] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 45.275553][ T339] usb 2-1: USB disconnect, device number 5 [ 45.346571][ T305] usb 3-1: Using ep0 maxpacket: 32 [ 45.354732][ T305] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 45.365478][ T305] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.378410][ T305] usb 3-1: config 1 interface 0 has no altsetting 0 [ 45.388453][ T305] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 45.397583][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.405592][ T305] usb 3-1: Product: syz [ 45.409800][ T305] usb 3-1: Manufacturer: syz [ 45.414420][ T305] usb 3-1: SerialNumber: syz [ 45.422798][ T911] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 45.667513][ T305] usb 3-1: USB disconnect, device number 3 [ 45.757377][ T914] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 45.757422][ T914] rust_binder: Error while translating object. [ 45.766216][ T914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.776683][ T914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80 [ 45.888636][ T709] usbhid 4-1:0.0: can't add hid device: -71 [ 45.914149][ T918] rust_binder: Write failure EINVAL in pid:178 [ 45.943365][ T709] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 45.969684][ T709] usb 4-1: USB disconnect, device number 3 [ 46.169911][ T932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.212892][ T934] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 46.238302][ T932] syzkaller0: entered promiscuous mode [ 46.292125][ T932] syzkaller0: entered allmulticast mode [ 46.448037][ T943] syz.1.251 uses obsolete (PF_INET,SOCK_PACKET) [ 46.473200][ T943] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.615305][ T953] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.254' sets config #5 [ 46.632936][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.691077][ T952] fuse: Invalid rootmode [ 46.708112][ T952] rust_binder: Error while translating object. [ 46.708151][ T952] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 46.714405][ T952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:176 [ 46.724156][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 46.825128][ T957] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 46.896572][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 46.919906][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 46.942044][ T10] usb 2-1: config 0 has no interface number 0 [ 46.956758][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 46.978486][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 47.006567][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.017918][ T10] usb 2-1: Product: syz [ 47.029809][ T10] usb 2-1: Manufacturer: syz [ 47.044782][ T965] syzkaller0: entered promiscuous mode [ 47.046576][ T10] usb 2-1: SerialNumber: syz [ 47.067662][ T10] usb 2-1: config 0 descriptor?? [ 47.077291][ T965] syzkaller0: entered allmulticast mode [ 47.084209][ T10] smsc75xx v1.0.0 [ 47.304364][ T943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.331350][ T943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.649873][ T989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:98 [ 47.689523][ T984] rust_binder: Error while translating object. [ 47.698824][ T984] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.705129][ T984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:185 [ 47.756582][ T347] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 47.940025][ T347] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.966609][ T347] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.989968][ T347] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.006575][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.024773][ T347] usb 3-1: Product: syz [ 48.029054][ T347] usb 3-1: Manufacturer: syz [ 48.033959][ T347] usb 3-1: SerialNumber: syz [ 48.266766][ T347] usb 3-1: 0:2 : does not exist [ 48.303540][ T347] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 48.332879][ T347] usb 3-1: USB disconnect, device number 4 [ 48.367830][ T329] udevd[329]: setting mode of /dev/bus/usb/003/004 to 020664 failed: No such file or directory [ 48.407101][ T329] udevd[329]: setting owner of /dev/bus/usb/003/004 to uid=0, gid=0 failed: No such file or directory [ 48.505141][ T36] kauditd_printk_skb: 613 callbacks suppressed [ 48.505161][ T36] audit: type=1400 audit(1750442314.790:3092): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.576631][ T36] audit: type=1400 audit(1750442314.790:3093): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.646586][ T36] audit: type=1400 audit(1750442314.790:3094): avc: denied { read write } for pid=993 comm="syz.0.269" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.662264][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.702961][ T36] audit: type=1400 audit(1750442314.790:3095): avc: denied { read write open } for pid=993 comm="syz.0.269" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.796617][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 48.804179][ T36] audit: type=1400 audit(1750442314.790:3096): avc: denied { ioctl } for pid=993 comm="syz.0.269" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.829595][ T36] audit: type=1400 audit(1750442314.790:3097): avc: denied { ioctl } for pid=993 comm="syz.0.269" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.872067][ T36] audit: type=1400 audit(1750442314.800:3098): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.966900][ T36] audit: type=1400 audit(1750442314.830:3099): avc: denied { ioctl } for pid=993 comm="syz.0.269" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.009916][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 49.047863][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.065079][ T36] audit: type=1400 audit(1750442314.830:3100): avc: denied { ioctl } for pid=993 comm="syz.0.269" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.106587][ T45] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 49.123164][ T36] audit: type=1400 audit(1750442314.870:3101): avc: denied { read } for pid=995 comm="syz.3.270" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.126578][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.186699][ T45] usb 1-1: config 0 descriptor?? [ 49.296572][ T347] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 49.482658][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 49.499834][ T347] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 49.514653][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 49.523067][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.544230][ T10] usb 2-1: USB disconnect, device number 6 [ 49.552587][ T347] usb 3-1: Product: syz [ 49.569756][ T347] usb 3-1: Manufacturer: syz [ 49.574431][ T347] usb 3-1: SerialNumber: syz [ 49.588911][ T347] usb 3-1: config 0 descriptor?? [ 49.603714][ T45] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 49.638452][ T45] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 49.665704][ T45] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 49.695998][ T45] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 49.708197][ T45] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 49.729886][ T45] ortek 0003:1223:3F07.0003: hidraw0: USB HID v0.07 Device [HID 1223:3f07] on usb-dummy_hcd.0-1/input0 [ 49.808398][ T10] usb 1-1: USB disconnect, device number 8 [ 49.887940][ T1027] rust_binder: Write failure EFAULT in pid:193 [ 49.937057][ T347] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 49.994951][ T347] asix 3-1:0.0: probe with driver asix failed with error -71 [ 50.025427][ T347] usb 3-1: USB disconnect, device number 5 [ 50.030313][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 50.068728][ T1028] fido_id[1028]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 50.196643][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 50.204130][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.215100][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.227974][ T45] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 50.237040][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.246881][ T45] usb 4-1: config 0 descriptor?? [ 50.316619][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 50.405757][ T1036] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55466 sclass=netlink_xfrm_socket pid=1036 comm=syz.0.284 [ 50.423896][ T1036] rust_binder: Error while translating object. [ 50.423931][ T1036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 50.430236][ T1036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:107 [ 50.476573][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 50.510101][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 50.536566][ T9] usb 2-1: config 0 has no interface number 0 [ 50.566628][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 50.580860][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 50.610171][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 50.626612][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.646699][ T9] usb 2-1: Product: syz [ 50.655518][ T9] usb 2-1: Manufacturer: syz [ 50.666580][ T9] usb 2-1: SerialNumber: syz [ 50.679273][ T45] microsoft 0003:045E:07DA.0004: unbalanced delimiter at end of report description [ 50.691366][ T9] usb 2-1: config 0 descriptor?? [ 50.703205][ T1032] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 50.713513][ T45] microsoft 0003:045E:07DA.0004: parse failed [ 50.713942][ T1032] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 50.736630][ T45] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22 [ 50.892075][ T45] usb 4-1: USB disconnect, device number 4 [ 50.957756][ T1032] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 50.967276][ T1032] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 51.076574][ T347] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 51.186589][ T709] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 51.216632][ T347] usb 3-1: device descriptor read/64, error -71 [ 51.336604][ T709] usb 1-1: Using ep0 maxpacket: 8 [ 51.344381][ T709] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.357265][ T709] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 51.366325][ T709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.376320][ T709] usb 1-1: config 0 descriptor?? [ 51.385710][ T1032] fuse: Bad value for 'group_id' [ 51.390740][ T1032] fuse: Bad value for 'group_id' [ 51.466592][ T347] usb 3-1: device descriptor read/64, error -71 [ 51.486969][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 51.498474][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 51.512140][ T9] asix 2-1:0.251: probe with driver asix failed with error -71 [ 51.527290][ T9] usb 2-1: USB disconnect, device number 7 [ 51.705947][ T1064] binder: Unknown parameter '0x0000000000000000' [ 51.706630][ T347] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 51.793226][ T709] ortek 0003:1223:3F07.0005: unknown main item tag 0x0 [ 51.800191][ T709] ortek 0003:1223:3F07.0005: unknown main item tag 0x0 [ 51.807148][ T709] ortek 0003:1223:3F07.0005: unknown main item tag 0x0 [ 51.814029][ T709] ortek 0003:1223:3F07.0005: unknown main item tag 0x0 [ 51.820987][ T709] ortek 0003:1223:3F07.0005: unknown main item tag 0x0 [ 51.829497][ T709] ortek 0003:1223:3F07.0005: hidraw0: USB HID v0.07 Device [HID 1223:3f07] on usb-dummy_hcd.0-1/input0 [ 51.846646][ T347] usb 3-1: device descriptor read/64, error -71 [ 51.994790][ T709] usb 1-1: USB disconnect, device number 9 [ 52.099077][ T347] usb 3-1: device descriptor read/64, error -71 [ 52.217043][ T347] usb usb3-port1: attempt power cycle [ 52.407978][ T1074] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 52.566636][ T347] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 52.592953][ T1078] rust_binder: Error while translating object. [ 52.592993][ T1078] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.608133][ T1078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:229 [ 52.618630][ T347] usb 3-1: device descriptor read/8, error -71 [ 52.749511][ T1082] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 52.779374][ T347] usb 3-1: device descriptor read/8, error -71 [ 53.026626][ T347] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 53.069120][ T347] usb 3-1: device descriptor read/8, error -71 [ 53.100388][ T1098] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 53.100413][ T1098] rust_binder: Error in use_page_slow: EBUSY [ 53.110833][ T1098] rust_binder: use_range failure EBUSY [ 53.116888][ T709] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 53.116915][ T1098] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 53.130877][ T1098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 53.138615][ T1098] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 53.148173][ T1098] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:241 [ 53.203007][ T347] usb 3-1: device descriptor read/8, error -71 [ 53.318978][ T709] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 53.328541][ T709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.336866][ T347] usb usb3-port1: unable to enumerate USB device [ 53.344647][ T709] usb 1-1: config 0 descriptor?? [ 53.506588][ T36] kauditd_printk_skb: 697 callbacks suppressed [ 53.506607][ T36] audit: type=1400 audit(1750442319.790:3781): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.562431][ T36] audit: type=1400 audit(1750442319.790:3782): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.591033][ T36] audit: type=1400 audit(1750442319.790:3783): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.642600][ T36] audit: type=1400 audit(1750442319.840:3784): avc: denied { ioctl } for pid=1087 comm="syz.0.305" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.686580][ T36] audit: type=1400 audit(1750442319.840:3785): avc: denied { ioctl } for pid=1087 comm="syz.0.305" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.776577][ T36] audit: type=1400 audit(1750442319.850:3786): avc: denied { read } for pid=1114 comm="syz.1.316" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.820149][ T36] audit: type=1400 audit(1750442319.850:3787): avc: denied { read open } for pid=1114 comm="syz.1.316" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.871431][ T36] audit: type=1400 audit(1750442319.880:3788): avc: denied { ioctl } for pid=1114 comm="syz.1.316" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.899550][ T1125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:256 [ 53.941622][ T36] audit: type=1400 audit(1750442319.910:3789): avc: denied { read write } for pid=1114 comm="syz.1.316" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 54.005386][ T36] audit: type=1400 audit(1750442319.910:3790): avc: denied { read write open } for pid=1114 comm="syz.1.316" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 54.166652][ T339] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 54.175355][ T1088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.175428][ T1088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 54.187711][ T709] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 54.207586][ T709] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 54.236647][ T709] asix 1-1:0.0: probe with driver asix failed with error -71 [ 54.245235][ T709] usb 1-1: USB disconnect, device number 10 [ 54.339015][ T339] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 64 [ 54.348909][ T339] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 1023 [ 54.359776][ T339] usb 3-1: config 1 interface 0 has no altsetting 0 [ 54.369534][ T339] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 54.378643][ T339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.387487][ T339] usb 3-1: Product: Ԍ [ 54.391830][ T339] usb 3-1: SerialNumber: Ñ™ [ 54.400341][ T1124] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 54.408246][ T1124] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 54.526589][ T45] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 54.677319][ T45] usb 2-1: device descriptor read/64, error -71 [ 54.844665][ T1139] kvm: kvm [1138]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 54.936666][ T45] usb 2-1: device descriptor read/64, error -71 [ 55.088262][ T1147] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 55.186600][ T45] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 55.205810][ T339] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 55.220583][ T339] usb 3-1: USB disconnect, device number 10 [ 55.228469][ T339] usblp0: removed [ 55.326643][ T45] usb 2-1: device descriptor read/64, error -71 [ 55.566602][ T45] usb 2-1: device descriptor read/64, error -71 [ 55.676708][ T45] usb usb2-port1: attempt power cycle [ 56.026680][ T45] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 56.083456][ T45] usb 2-1: device descriptor read/8, error -71 [ 56.207722][ T1168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 56.256511][ T45] usb 2-1: device descriptor read/8, error -71 [ 56.446573][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 56.516600][ T45] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 56.539767][ T45] usb 2-1: device descriptor read/8, error -71 [ 56.572743][ T1178] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 56.606585][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 56.614813][ T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 56.623839][ T9] usb 3-1: config 0 has no interface number 0 [ 56.630278][ T9] usb 3-1: config 0 interface 2 has no altsetting 0 [ 56.643996][ T9] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 56.657006][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.665160][ T9] usb 3-1: Product: syz [ 56.670634][ T9] usb 3-1: Manufacturer: syz [ 56.675458][ T9] usb 3-1: SerialNumber: syz [ 56.685257][ T9] usb 3-1: config 0 descriptor?? [ 56.695648][ T45] usb 2-1: device descriptor read/8, error -71 [ 56.806688][ T45] usb usb2-port1: unable to enumerate USB device [ 57.171082][ T9] usb 3-1: USB disconnect, device number 11 [ 57.347594][ T902] udevd[902]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.473752][ T1190] process 'syz.3.346' launched './file1' with NULL argv: empty string added [ 57.507192][ T1190] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.510088][ T1190] rust_binder: Write failure EINVAL in pid:283 [ 57.518025][ T1190] rust_binder: Write failure EINVAL in pid:283 [ 57.748790][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 57.755377][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 57.786633][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 57.793588][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 57.816913][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 57.831974][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 57.856962][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 57.863496][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 57.906870][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 57.913392][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 57.931388][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 57.976426][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 57.986877][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 57.994428][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.016905][ T1207] capability: warning: `syz.3.353' uses deprecated v2 capabilities in a way that may be insecure [ 58.026753][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.033924][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.054917][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.086661][ T1207] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 58.096942][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.101750][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.116334][ T1207] rust_binder: Write failure EINVAL in pid:289 [ 58.135127][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.156891][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.175465][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.186441][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.199068][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.206672][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.213248][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.235721][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.258731][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.265273][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.279965][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.286571][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.286608][ T1221] input: syz0 as /devices/virtual/input/input6 [ 58.293227][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.305553][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.315668][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.329604][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.338100][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.347905][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.376976][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.386926][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.407187][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.425433][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.432673][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.440427][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.448757][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.477733][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.494466][ T1198] rust_binder: Write failure EINVAL in pid:145 [ 58.500757][ T347] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 58.525309][ T36] kauditd_printk_skb: 604 callbacks suppressed [ 58.525327][ T36] audit: type=1400 audit(1750442324.810:4395): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.601516][ T36] audit: type=1400 audit(1750442324.820:4396): avc: denied { ioctl } for pid=1218 comm="syz.2.359" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.676573][ T36] audit: type=1400 audit(1750442324.830:4397): avc: denied { ioctl } for pid=1218 comm="syz.2.359" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.686591][ T347] usb 3-1: device descriptor read/64, error -71 [ 58.739547][ T36] audit: type=1400 audit(1750442324.830:4398): avc: denied { ioctl } for pid=1218 comm="syz.2.359" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.816699][ T36] audit: type=1400 audit(1750442324.830:4399): avc: denied { ioctl } for pid=1218 comm="syz.2.359" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.893866][ T36] audit: type=1400 audit(1750442324.840:4400): avc: denied { ioctl } for pid=1218 comm="syz.2.359" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.976576][ T36] audit: type=1400 audit(1750442324.850:4401): avc: denied { ioctl } for pid=1218 comm="syz.2.359" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.996610][ T347] usb 3-1: device descriptor read/64, error -71 [ 59.038634][ T1245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 59.039124][ T1244] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.048350][ T36] audit: type=1400 audit(1750442324.850:4402): avc: denied { ioctl } for pid=1218 comm="syz.2.359" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.107053][ T1245] audit: audit_backlog=65 > audit_backlog_limit=64 [ 59.123801][ T36] audit: type=1400 audit(1750442324.850:4403): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.131602][ T1245] rust_binder: Error while translating object. [ 59.148966][ T1245] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.155201][ T1245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 59.266585][ T347] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 59.426580][ T347] usb 3-1: device descriptor read/64, error -71 [ 59.587668][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 59.667008][ T347] usb 3-1: device descriptor read/64, error -71 [ 59.751981][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 59.761952][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 59.776570][ T45] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 59.790908][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.796774][ T347] usb usb3-port1: attempt power cycle [ 59.806864][ T45] usb 2-1: config 0 descriptor?? [ 60.023914][ T45] usb 2-1: string descriptor 0 read error: -71 [ 60.039399][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 60.045493][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 60.065779][ T45] usb 2-1: USB disconnect, device number 12 [ 60.116593][ T709] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 60.148166][ T347] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 60.199485][ T347] usb 3-1: device descriptor read/8, error -71 [ 60.276582][ T709] usb 1-1: Using ep0 maxpacket: 16 [ 60.284019][ T709] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 60.294608][ T709] usb 1-1: config 0 has no interface number 0 [ 60.301030][ T709] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 60.312257][ T709] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 60.326811][ T709] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 60.337981][ T709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.346018][ T709] usb 1-1: Product: syz [ 60.352586][ T347] usb 3-1: device descriptor read/8, error -71 [ 60.357022][ T709] usb 1-1: Manufacturer: syz [ 60.365309][ T709] usb 1-1: SerialNumber: syz [ 60.375503][ T709] usb 1-1: config 0 descriptor?? [ 60.382915][ T1265] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 60.394248][ T1265] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 60.596620][ T347] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 60.615930][ T1265] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 60.632790][ T347] usb 3-1: device descriptor read/8, error -71 [ 60.639535][ T1265] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 60.779331][ T347] usb 3-1: device descriptor read/8, error -71 [ 60.886907][ T347] usb usb3-port1: unable to enumerate USB device [ 61.056623][ T1265] fuse: Bad value for 'group_id' [ 61.061620][ T1265] fuse: Bad value for 'group_id' [ 61.127913][ T709] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 61.138191][ T709] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 61.151315][ T709] asix 1-1:0.251: probe with driver asix failed with error -71 [ 61.160135][ T709] usb 1-1: USB disconnect, device number 11 [ 61.491555][ T1300] syzkaller0: entered promiscuous mode [ 61.501133][ T1300] syzkaller0: entered allmulticast mode [ 61.750543][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.778363][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.796890][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.811679][ T1317] fuse: Unknown parameter 'g ' [ 61.821656][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.840565][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.856483][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.870076][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.878351][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.885843][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.894652][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.902996][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.911435][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.919768][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.928251][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.942903][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.957365][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.972520][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.983783][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 61.992201][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.002107][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.015287][ T1321] rust_binder: Write failure EINVAL in pid:238 [ 62.015340][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.027045][ T1322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.031991][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.055718][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.064221][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.072489][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.080899][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.089157][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.102954][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.112347][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.121697][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.130403][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.138780][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.146283][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.155168][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.163523][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.172200][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.180671][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.189006][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.196516][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.210714][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.220179][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.229625][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.238006][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.245763][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.254702][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.268645][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.292221][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.300480][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.308118][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.315786][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.323312][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.330758][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.338210][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.345627][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.366582][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.374034][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.386574][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.394032][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.404058][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.411904][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.419635][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.427943][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.437775][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.445756][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.453789][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.461336][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.468955][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.475975][ T1336] syzkaller0: entered promiscuous mode [ 62.476368][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.483313][ T1336] syzkaller0: entered allmulticast mode [ 62.489379][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.502985][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.510514][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.518026][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.525483][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.532977][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.540467][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.547933][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.555372][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.566606][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.574052][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.575882][ T1334] syzkaller0: entered promiscuous mode [ 62.596586][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.596626][ T1334] syzkaller0: entered allmulticast mode [ 62.604015][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.604044][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.625291][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.633081][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.641133][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.649200][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.657241][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.664695][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.672984][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.683175][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.691236][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.699317][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.707462][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.714891][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.725695][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.733747][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.741884][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.749982][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.758101][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.765525][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.776560][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.784000][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.806919][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.814382][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.831469][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.846583][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.854019][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.861538][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.868983][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.876404][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.883896][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.897837][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.905472][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.913157][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.920630][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.928087][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.935503][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.942957][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.950410][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.957863][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.965286][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.972758][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 62.980250][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.000571][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.012191][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.026575][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.034011][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.042268][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.050175][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.062938][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.070428][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.077864][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.085283][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.092742][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.100214][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.108623][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.118575][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.126311][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.135010][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.145412][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.157946][ T1346] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 63.167179][ T1346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 63.181040][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.198229][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.206041][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.215758][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.248655][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.258968][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.266410][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.274462][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.282376][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.290409][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.298090][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.305692][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.313318][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.321014][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.329482][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.337663][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.345099][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.353487][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.361581][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.369727][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.378625][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.386118][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.394499][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.402652][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.410749][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.418894][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.426321][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.434908][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.443161][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.451847][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.460155][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.469589][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.477891][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.485528][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.494010][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.502347][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.510541][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.518686][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.526113][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.534694][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.542831][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.550996][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.559091][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.567223][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.574686][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.584832][ T36] kauditd_printk_skb: 528 callbacks suppressed [ 63.584850][ T36] audit: type=1400 audit(1750442329.880:4924): avc: denied { sys_module } for pid=1340 comm="syz.3.406" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.606663][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.620107][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.628419][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.635917][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.644485][ T709] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 63.652719][ T709] hid-generic 01FF:0004:0400.0006: item fetching failed at offset 212/213 [ 63.663215][ T709] hid-generic 01FF:0004:0400.0006: probe with driver hid-generic failed with error -22 [ 63.713060][ T36] audit: type=1400 audit(1750442330.000:4925): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.780352][ T36] audit: type=1400 audit(1750442330.000:4926): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.886581][ T36] audit: type=1400 audit(1750442330.000:4927): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.953918][ T36] audit: type=1400 audit(1750442330.090:4928): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.044238][ T36] audit: type=1400 audit(1750442330.090:4929): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.070145][ T1357] syzkaller0: entered promiscuous mode [ 64.075654][ T1357] syzkaller0: entered allmulticast mode [ 64.106565][ T36] audit: type=1400 audit(1750442330.090:4930): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.160043][ T1360] syzkaller0: entered promiscuous mode [ 64.177688][ T36] audit: type=1400 audit(1750442330.140:4931): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.178686][ T1360] syzkaller0: entered allmulticast mode [ 64.276587][ T36] audit: type=1400 audit(1750442330.140:4932): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.376041][ T36] audit: type=1400 audit(1750442330.140:4933): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.513761][ T1368] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 64.546107][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.546448][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.555294][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.606959][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.607278][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.656953][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.657272][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.688487][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.690667][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.729083][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.729417][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.777587][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.777945][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.805685][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.806750][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.838551][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.839503][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.876607][ T347] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 64.884749][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.885089][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.947102][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.947463][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.954267][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.002294][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.002794][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.027671][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.028359][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.036078][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.050981][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.051307][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.056586][ T347] usb 3-1: Using ep0 maxpacket: 16 [ 65.059901][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.067565][ T347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.070979][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.076057][ T347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.088319][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.103584][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.111473][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.116710][ T347] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 65.156565][ T347] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 65.166047][ T347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.177546][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.178132][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.185908][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.186864][ T347] usb 3-1: config 0 descriptor?? [ 65.209184][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.209512][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.220635][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.228222][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.235743][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.244749][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.253099][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.261324][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.270474][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.278831][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.286468][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.295373][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.423403][ T1389] syzkaller0: entered promiscuous mode [ 65.442714][ T1389] syzkaller0: entered allmulticast mode [ 65.647905][ T347] microsoft 0003:045E:07DA.0007: unknown main item tag 0x5 [ 65.655281][ T347] microsoft 0003:045E:07DA.0007: unknown main item tag 0xd [ 65.726618][ T347] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.733943][ T347] microsoft 0003:045E:07DA.0007: unknown global tag 0xc [ 65.739914][ T1399] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.742438][ T1399] rust_binder: inc_ref_done called when no active inc_refs [ 65.767361][ T347] microsoft 0003:045E:07DA.0007: item 0 0 1 12 parsing failed [ 65.786767][ T347] microsoft 0003:045E:07DA.0007: parse failed [ 65.792933][ T347] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 65.914704][ T347] usb 3-1: USB disconnect, device number 16 [ 66.184536][ T1415] syzkaller0: entered promiscuous mode [ 66.195190][ T1415] syzkaller0: entered allmulticast mode [ 66.816602][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 66.836587][ T347] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 66.979588][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.996569][ T45] usb 3-1: config 0 has no interfaces? [ 66.996593][ T347] usb 2-1: Using ep0 maxpacket: 16 [ 67.006582][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 67.026552][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.039926][ T347] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 67.054784][ T45] usb 3-1: config 0 descriptor?? [ 67.059977][ T347] usb 2-1: config 0 has no interface number 0 [ 67.066097][ T347] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 67.099421][ T347] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 67.130605][ T1436] syzkaller0: entered promiscuous mode [ 67.136149][ T1436] syzkaller0: entered allmulticast mode [ 67.146428][ T347] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 67.155603][ T347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.176560][ T347] usb 2-1: Product: syz [ 67.180797][ T347] usb 2-1: Manufacturer: syz [ 67.185422][ T347] usb 2-1: SerialNumber: syz [ 67.205884][ T347] usb 2-1: config 0 descriptor?? [ 67.213432][ T1424] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 67.237089][ T1424] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 67.333758][ T1438] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 67.337022][ T1439] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.460629][ T1424] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 67.488428][ T1424] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 67.662420][ T1446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.681697][ T1446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.816647][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 67.903118][ T1424] fuse: Bad value for 'group_id' [ 67.908179][ T1424] fuse: Bad value for 'group_id' [ 67.951636][ T347] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 67.956611][ T45] usb 1-1: device descriptor read/64, error -71 [ 67.966714][ T347] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 67.984589][ T347] asix 2-1:0.251: probe with driver asix failed with error -71 [ 67.995197][ T347] usb 2-1: USB disconnect, device number 13 [ 68.206604][ T45] usb 1-1: device descriptor read/64, error -71 [ 68.446674][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 68.586582][ T45] usb 1-1: device descriptor read/64, error -71 [ 68.638362][ T36] kauditd_printk_skb: 599 callbacks suppressed [ 68.638381][ T36] audit: type=1400 audit(1750442334.930:5533): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.692042][ T36] audit: type=1400 audit(1750442334.930:5534): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.739404][ T36] audit: type=1400 audit(1750442334.930:5535): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.768173][ T36] audit: type=1400 audit(1750442334.960:5536): avc: denied { create } for pid=1455 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.788149][ T36] audit: type=1400 audit(1750442334.980:5537): avc: denied { read } for pid=1451 comm="syz.1.452" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.819714][ T36] audit: type=1400 audit(1750442334.980:5538): avc: denied { read open } for pid=1451 comm="syz.1.452" path="net:[4026532302]" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.844262][ T36] audit: type=1400 audit(1750442334.980:5539): avc: denied { create } for pid=1451 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.870086][ T36] audit: type=1400 audit(1750442334.980:5540): avc: denied { ioctl } for pid=1455 comm="syz.3.453" path="socket:[11357]" dev="sockfs" ino=11357 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.900719][ T45] usb 1-1: device descriptor read/64, error -71 [ 68.902982][ T36] audit: type=1400 audit(1750442334.980:5541): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.945259][ T36] audit: type=1400 audit(1750442335.010:5542): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.027049][ T45] usb usb1-port1: attempt power cycle [ 69.134593][ T1468] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.214548][ T1469] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:309 [ 69.376775][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 69.429544][ T45] usb 1-1: device descriptor read/8, error -71 [ 69.516671][ T347] usb 3-1: USB disconnect, device number 17 [ 69.574163][ T45] usb 1-1: device descriptor read/8, error -71 [ 69.826587][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 69.859652][ T45] usb 1-1: device descriptor read/8, error -71 [ 69.879830][ T1490] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 69.896768][ T1490] rust_binder: Write failure EINVAL in pid:272 [ 69.945645][ T1492] input: syz1 as /devices/virtual/input/input7 [ 69.978365][ T1492] input: failed to attach handler leds to device input7, error: -6 [ 70.037554][ T45] usb 1-1: device descriptor read/8, error -71 [ 70.157077][ T45] usb usb1-port1: unable to enumerate USB device [ 70.249878][ T1501] syzkaller0: entered promiscuous mode [ 70.286941][ T1501] syzkaller0: entered allmulticast mode [ 70.335244][ T1506] mmap: syz.2.475 (1506) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.796589][ T10] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 70.982188][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 71.138299][ T10] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 71.297189][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 71.319879][ T10] usb usb3-port1: attempt power cycle [ 71.366631][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 71.517391][ T1543] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.520187][ T1543] rust_binder: Error while translating object. [ 71.526635][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 71.529831][ T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 71.544756][ T1543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.546276][ T1543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:328 [ 71.556658][ T9] usb 1-1: config 0 has no interface number 0 [ 71.587777][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 71.598500][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 71.620601][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 71.637367][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.656633][ T9] usb 1-1: Product: syz [ 71.660858][ T9] usb 1-1: Manufacturer: syz [ 71.665487][ T9] usb 1-1: SerialNumber: syz [ 71.686602][ T10] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 71.697956][ T9] usb 1-1: config 0 descriptor?? [ 71.705516][ T1527] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 71.719125][ T10] usb 3-1: device descriptor read/8, error -71 [ 71.727033][ T1527] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 71.857539][ T10] usb 3-1: device descriptor read/8, error -71 [ 71.960838][ T1527] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 71.970181][ T1527] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 72.096582][ T10] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 72.116587][ T709] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 72.139216][ T10] usb 3-1: device descriptor read/8, error -71 [ 72.266692][ T709] usb 4-1: device descriptor read/64, error -71 [ 72.280845][ T10] usb 3-1: device descriptor read/8, error -71 [ 72.385477][ T1527] fuse: Bad value for 'group_id' [ 72.397492][ T1527] fuse: Bad value for 'group_id' [ 72.426762][ T10] usb usb3-port1: unable to enumerate USB device [ 72.467785][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 72.496626][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 72.526670][ T9] asix 1-1:0.251: probe with driver asix failed with error -71 [ 72.536596][ T709] usb 4-1: device descriptor read/64, error -71 [ 72.543803][ T9] usb 1-1: USB disconnect, device number 16 [ 72.796583][ T709] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 72.946579][ T709] usb 4-1: device descriptor read/64, error -71 [ 73.256570][ T709] usb 4-1: device descriptor read/64, error -71 [ 73.366641][ T709] usb usb4-port1: attempt power cycle [ 73.647146][ T36] kauditd_printk_skb: 568 callbacks suppressed [ 73.647166][ T36] audit: type=1400 audit(1750442339.940:6111): avc: denied { ioctl } for pid=1550 comm="syz.3.492" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.707122][ T709] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 73.717164][ T36] audit: type=1400 audit(1750442339.960:6112): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.763312][ T709] usb 4-1: device descriptor read/8, error -71 [ 73.779308][ T36] audit: type=1400 audit(1750442339.960:6113): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.826573][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 73.828196][ T36] audit: type=1400 audit(1750442339.960:6114): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.895159][ T36] audit: type=1400 audit(1750442339.990:6115): avc: denied { ioctl } for pid=1558 comm="syz.0.496" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.921511][ T36] audit: type=1400 audit(1750442340.000:6116): avc: denied { read } for pid=1565 comm="syz.2.499" dev="nsfs" ino=4026532482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.930069][ T709] usb 4-1: device descriptor read/8, error -71 [ 73.944725][ T36] audit: type=1400 audit(1750442340.000:6117): avc: denied { read open } for pid=1565 comm="syz.2.499" path="net:[4026532482]" dev="nsfs" ino=4026532482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.996565][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 74.004405][ T45] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 74.036552][ T45] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.036945][ T36] audit: type=1400 audit(1750442340.000:6118): avc: denied { create } for pid=1565 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.060864][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 74.090980][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 74.099121][ T36] audit: type=1400 audit(1750442340.050:6119): avc: denied { ioctl } for pid=1558 comm="syz.0.496" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.110686][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.166585][ T45] usb 1-1: Product: syz [ 74.170872][ T45] usb 1-1: Manufacturer: syz [ 74.175493][ T45] usb 1-1: SerialNumber: syz [ 74.178765][ T36] audit: type=1400 audit(1750442340.050:6120): avc: denied { ioctl } for pid=1550 comm="syz.3.492" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.195994][ T1561] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 74.226585][ T709] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 74.259616][ T709] usb 4-1: device descriptor read/8, error -71 [ 74.396636][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 74.416865][ T709] usb 4-1: device descriptor read/8, error -71 [ 74.464552][ T45] usb 1-1: USB disconnect, device number 17 [ 74.539295][ T709] usb usb4-port1: unable to enumerate USB device [ 74.576659][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 74.586104][ T9] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 74.597317][ T9] usb 3-1: config 0 has no interface number 0 [ 74.607136][ T9] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 74.621675][ T9] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 74.629392][ T1581] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.652739][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 74.670077][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.679279][ T9] usb 3-1: Product: syz [ 74.683481][ T9] usb 3-1: Manufacturer: syz [ 74.689031][ T9] usb 3-1: SerialNumber: syz [ 74.705303][ T9] usb 3-1: config 0 descriptor?? [ 74.711838][ T1574] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 74.720792][ T1574] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 74.932595][ T1574] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 74.941415][ T1574] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 75.360591][ T1574] fuse: Bad value for 'group_id' [ 75.370113][ T1574] fuse: Bad value for 'group_id' [ 75.456610][ T9] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 75.476574][ T9] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 75.519478][ T1601] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.527259][ T9] asix 3-1:0.251: probe with driver asix failed with error -71 [ 75.570533][ T9] usb 3-1: USB disconnect, device number 22 [ 75.908306][ T1611] syzkaller0: entered promiscuous mode [ 75.914088][ T1611] syzkaller0: entered allmulticast mode [ 76.410023][ T1625] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.415416][ T1625] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 76.589468][ T1630] fuse: Bad value for 'fd' [ 76.624104][ T1630] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 76.642387][ T1630] overlayfs: missing 'lowerdir' [ 76.810868][ T1635] syzkaller0: entered promiscuous mode [ 76.816403][ T1635] syzkaller0: entered allmulticast mode [ 77.029400][ T1640] overlay: ./bus is not a directory [ 77.488742][ T1651] binder: Bad value for 'stats' [ 77.838212][ T1661] syzkaller0: entered promiscuous mode [ 77.843770][ T1661] syzkaller0: entered allmulticast mode [ 78.453638][ T1677] rust_binder: Error in use_page_slow: ESRCH [ 78.453663][ T1677] rust_binder: use_range failure ESRCH [ 78.506369][ T1677] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 78.526589][ T1677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 78.602914][ T1677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:321 [ 78.656693][ T36] kauditd_printk_skb: 500 callbacks suppressed [ 78.656711][ T36] audit: type=1400 audit(2000000000.140:6621): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.741457][ T36] audit: type=1400 audit(2000000000.140:6622): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.766461][ T1687] syzkaller0: entered promiscuous mode [ 78.780482][ T36] audit: type=1400 audit(2000000000.180:6623): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.784145][ T1687] syzkaller0: entered allmulticast mode [ 78.837479][ T1689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.886584][ T36] audit: type=1400 audit(2000000000.180:6624): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.910604][ T1693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:345 [ 78.941724][ T1693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:345 [ 78.978806][ T36] audit: type=1400 audit(2000000000.180:6625): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.032889][ T36] audit: type=1400 audit(2000000000.310:6626): avc: denied { create } for pid=1688 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.060600][ T36] audit: type=1400 audit(2000000000.310:6627): avc: denied { ioctl } for pid=1688 comm="syz.1.548" path="socket:[14666]" dev="sockfs" ino=14666 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.086696][ T36] audit: type=1400 audit(2000000000.310:6628): avc: denied { read } for pid=1688 comm="syz.1.548" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.125493][ T36] audit: type=1400 audit(2000000000.310:6629): avc: denied { read open } for pid=1688 comm="syz.1.548" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.150794][ T36] audit: type=1400 audit(2000000000.310:6630): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.695877][ T1715] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.963750][ T1724] syzkaller0: entered promiscuous mode [ 79.975913][ T1724] syzkaller0: entered allmulticast mode [ 80.176567][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 80.336563][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 80.357101][ T10] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 80.369571][ T10] usb 2-1: config 0 has no interface number 0 [ 80.375712][ T10] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 80.410864][ T10] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 80.433656][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 80.456576][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.464658][ T10] usb 2-1: Product: syz [ 80.484195][ T10] usb 2-1: Manufacturer: syz [ 80.491625][ T10] usb 2-1: SerialNumber: syz [ 80.519336][ T10] usb 2-1: config 0 descriptor?? [ 80.529273][ T1723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.550659][ T1723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.807778][ T1723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.817849][ T1723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.911982][ T1749] syzkaller0: entered promiscuous mode [ 80.926682][ T1749] syzkaller0: entered allmulticast mode [ 81.277331][ T1723] fuse: Bad value for 'group_id' [ 81.291692][ T1723] fuse: Bad value for 'group_id' [ 81.351378][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 81.362061][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 81.374307][ T10] asix 2-1:0.251: probe with driver asix failed with error -71 [ 81.395948][ T10] usb 2-1: USB disconnect, device number 14 [ 81.926634][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 81.975910][ T1769] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.077500][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 82.109373][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.122559][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.138039][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice=f8.00 [ 82.156554][ T31] usb 1-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 82.175006][ T31] usb 1-1: Manufacturer: syz [ 82.176435][ T1776] syzkaller0: entered promiscuous mode [ 82.183260][ T31] usb 1-1: config 0 descriptor?? [ 82.205725][ T31] usbhid 1-1:0.0: can't add hid device: -22 [ 82.221961][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 82.227229][ T1776] syzkaller0: entered allmulticast mode [ 82.310461][ T1782] netlink: 76 bytes leftover after parsing attributes in process `syz.2.584'. [ 82.425884][ T1764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.456778][ T1764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.516497][ T10] usb 1-1: USB disconnect, device number 18 [ 82.668176][ T1796] rust_binder: Error while translating object. [ 82.668213][ T1796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 82.674445][ T1796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:464 [ 82.864719][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 82.888050][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 82.895593][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 82.903016][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 82.912674][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 82.934295][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 82.944843][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 82.952384][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 82.960074][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 82.967452][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 83.125963][ T1810] syzkaller0: entered promiscuous mode [ 83.165807][ T1810] syzkaller0: entered allmulticast mode [ 83.373251][ T1826] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 83.373251][ T1826] null pointer dereference occurred [ 83.376153][ T1828] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.424313][ T1826] ------------[ cut here ]------------ [ 83.429879][ T1826] kernel BUG at rust/helpers/bug.c:7! [ 83.457886][ T1832] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.469764][ T1826] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 83.483260][ T1826] CPU: 0 UID: 0 PID: 1826 Comm: syz.1.599 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 83.496667][ T1826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.506755][ T1826] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 83.512095][ T1826] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 a1 61 d3 77 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 eb a5 9a fb 90 90 90 90 90 90 90 90 90 [ 83.531741][ T1826] RSP: 0018:ffffc900111ef1d0 EFLAGS: 00010246 [ 83.537857][ T1826] RAX: 000000000000005a RBX: 1ffff9200223de3c RCX: 01c4edf8571db000 [ 83.545879][ T1826] RDX: ffffc900019b2000 RSI: 0000000000005d4e RDI: 0000000000005d4f [ 83.553886][ T1826] RBP: ffffc900111ef1d0 R08: ffffc900111eeec7 R09: 1ffff9200223ddd8 [ 83.561874][ T1826] R10: dffffc0000000000 R11: fffff5200223ddd9 R12: 0000000000000000 [ 83.564901][ T1837] random: crng reseeded on system resumption [ 83.569876][ T1826] R13: dffffc0000000000 R14: ffffc900111ef200 R15: ffffc900111ef230 [ 83.569900][ T1826] FS: 00007f0a41e8e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 83.569922][ T1826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.569936][ T1826] CR2: 00007fd43485ef40 CR3: 0000000120694000 CR4: 00000000003526b0 [ 83.569956][ T1826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.569970][ T1826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.623444][ T1826] Call Trace: [ 83.626757][ T1826] [ 83.629717][ T1826] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 83.637227][ T1826] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 83.645252][ T1826] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 83.658515][ T1838] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 83.658845][ T1826] ? p9pdu_vwritef+0x2720/0x2720 [ 83.673443][ T1826] ? radix_tree_node_alloc+0x1af/0x400 [ 83.678955][ T1826] ? __cfi_p9pdu_vwritef+0x10/0x10 [ 83.684123][ T1826] ? p9pdu_vwritef+0x1c5e/0x2720 [ 83.689108][ T1826] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 83.697225][ T1826] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 83.698192][ T36] kauditd_printk_skb: 629 callbacks suppressed [ 83.698210][ T36] audit: type=1400 audit(2000000005.160:7260): avc: denied { write } for pid=1831 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.706039][ T1826] ? p9pdu_writef+0xdb/0x130 [ 83.706077][ T1826] ? p9pdu_vwritef+0x2720/0x2720 [ 83.713493][ T36] audit: type=1400 audit(2000000005.160:7261): avc: denied { write } for pid=1831 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.731193][ T1826] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 83.731247][ T1826] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 83.731280][ T1826] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 83.731314][ T1826] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 83.757837][ T1837] cgroup: subsys name conflicts with all [ 83.759771][ T1826] ? p9_client_prepare_req+0x732/0xa10 [ 83.769483][ T36] audit: type=1400 audit(2000000005.220:7262): avc: denied { create } for pid=1831 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.777746][ T1826] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 83.777789][ T1826] ? __kasan_check_write+0x18/0x20 [ 83.777812][ T1826] ? _raw_spin_lock+0x8c/0x120 [ 83.799573][ T36] audit: type=1400 audit(2000000005.220:7263): avc: denied { setopt } for pid=1831 comm="syz.3.602" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.804354][ T1826] ? __cfi__raw_spin_lock+0x10/0x10 [ 83.826097][ T36] audit: type=1400 audit(2000000005.220:7264): avc: denied { mounton } for pid=1831 comm="syz.3.602" path="/185/file0" dev="tmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.832149][ T1826] ? __kasan_check_write+0x18/0x20 [ 83.832181][ T1826] ? _raw_spin_lock+0x8c/0x120 [ 83.839948][ T36] audit: type=1400 audit(2000000005.270:7265): avc: denied { create } for pid=1831 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.842075][ T1826] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 83.864178][ T36] audit: type=1400 audit(2000000005.270:7266): avc: denied { create } for pid=1831 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.867582][ T1826] p9_fd_request+0x391/0x520 [ 83.867620][ T1826] p9_client_rpc+0x2f9/0xb40 [ 83.892221][ T36] audit: type=1400 audit(2000000005.270:7267): avc: denied { write } for pid=1831 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.895244][ T1826] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 83.902030][ T36] audit: type=1400 audit(2000000005.270:7268): avc: denied { write } for pid=1831 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.919469][ T1826] ? p9_fid_create+0x3d0/0x3d0 [ 83.919502][ T1826] ? __cfi_tun_chr_poll+0x10/0x10 [ 83.919525][ T1826] ? p9_conn_create+0x4c9/0x570 [ 83.919553][ T1826] ? p9_fd_create+0x2f3/0x4c0 [ 83.919581][ T1826] p9_client_create+0x96a/0x1190 [ 83.932824][ T36] audit: type=1400 audit(2000000005.270:7269): avc: denied { read } for pid=1831 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.947177][ T1826] ? __cfi_p9_client_create+0x10/0x10 [ 83.947212][ T1826] ? kasan_save_alloc_info+0x40/0x50 [ 83.947236][ T1826] ? __kasan_kmalloc+0x96/0xb0 [ 84.061164][ T1826] ? kstrdup+0x7b/0x140 [ 84.065337][ T1826] ? __kasan_check_write+0x18/0x20 [ 84.070458][ T1826] v9fs_session_init+0x1e1/0x1820 [ 84.075497][ T1826] ? __cfi_v9fs_session_init+0x10/0x10 [ 84.080969][ T1826] ? kasan_save_alloc_info+0x40/0x50 [ 84.086316][ T1826] ? __kasan_kmalloc+0x96/0xb0 [ 84.091099][ T1826] ? v9fs_mount+0xbd/0xa00 [ 84.095531][ T1826] v9fs_mount+0xd7/0xa00 [ 84.099787][ T1826] ? selinux_sb_eat_lsm_opts+0xa69/0xb40 [ 84.105439][ T1826] ? __cfi_v9fs_mount+0x10/0x10 [ 84.110302][ T1826] ? selinux_capable+0x38/0x50 [ 84.115098][ T1826] legacy_get_tree+0x103/0x1b0 [ 84.119902][ T1826] ? __cfi_v9fs_mount+0x10/0x10 [ 84.124764][ T1826] vfs_get_tree+0x9e/0x290 [ 84.129188][ T1826] do_new_mount+0x251/0xb40 [ 84.133698][ T1826] path_mount+0x688/0x1050 [ 84.138121][ T1826] ? putname+0x113/0x150 [ 84.142378][ T1826] __se_sys_mount+0x2bd/0x480 [ 84.147064][ T1826] ? __x64_sys_mount+0xf0/0xf0 [ 84.151849][ T1826] ? __kasan_check_write+0x18/0x20 [ 84.156986][ T1826] ? fpregs_restore_userregs+0x11d/0x260 [ 84.162657][ T1826] __x64_sys_mount+0xc3/0xf0 [ 84.167267][ T1826] x64_sys_call+0x2021/0x2ee0 [ 84.171955][ T1826] do_syscall_64+0x58/0xf0 [ 84.176388][ T1826] ? clear_bhb_loop+0x35/0x90 [ 84.181103][ T1826] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.187037][ T1826] RIP: 0033:0x7f0a40f8e929 [ 84.191464][ T1826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.211085][ T1826] RSP: 002b:00007f0a41e8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.219547][ T1826] RAX: ffffffffffffffda RBX: 00007f0a411b5fa0 RCX: 00007f0a40f8e929 [ 84.227559][ T1826] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 84.235569][ T1826] RBP: 00007f0a41010b39 R08: 0000200000000240 R09: 0000000000000000 [ 84.243582][ T1826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.251589][ T1826] R13: 0000000000000000 R14: 00007f0a411b5fa0 R15: 00007ffc530e7998 [ 84.259601][ T1826] [ 84.262652][ T1826] Modules linked in: [ 84.267353][ T1826] ---[ end trace 0000000000000000 ]--- [ 84.274083][ T1826] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 84.279634][ T1826] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 a1 61 d3 77 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 eb a5 9a fb 90 90 90 90 90 90 90 90 90 [ 84.307079][ T1826] RSP: 0018:ffffc900111ef1d0 EFLAGS: 00010246 [ 84.322178][ T1826] RAX: 000000000000005a RBX: 1ffff9200223de3c RCX: 01c4edf8571db000 [ 84.330266][ T1826] RDX: ffffc900019b2000 RSI: 0000000000005d4e RDI: 0000000000005d4f [ 84.343733][ T1826] RBP: ffffc900111ef1d0 R08: ffffc900111eeec7 R09: 1ffff9200223ddd8 [ 84.363754][ T1826] R10: dffffc0000000000 R11: fffff5200223ddd9 R12: 0000000000000000 [ 84.371941][ T1826] R13: dffffc0000000000 R14: ffffc900111ef200 R15: ffffc900111ef230 [ 84.380051][ T1826] FS: 00007f0a41e8e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 84.389090][ T1826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.396010][ T1826] CR2: 00007fd43485ef40 CR3: 0000000120694000 CR4: 00000000003526b0 [ 84.404033][ T1826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.412106][ T1826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.420578][ T1826] Kernel panic - not syncing: Fatal exception [ 84.426958][ T1826] Kernel Offset: disabled [ 84.431293][ T1826] Rebooting in 86400 seconds..