last executing test programs: 2.873188564s ago: executing program 3 (id=1038): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(0x3) 2.872954044s ago: executing program 3 (id=1040): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000000500)=[{}]) 2.805635435s ago: executing program 3 (id=1042): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) lseek(r2, 0x0, 0x3) 2.765538106s ago: executing program 3 (id=1045): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='numa_maps\x00') lseek(r0, 0x401, 0x0) 2.709828607s ago: executing program 3 (id=1046): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000002010500002097d86c00000000d1c2ff2e7463d00b691b57520000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 2.709582387s ago: executing program 3 (id=1047): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r2, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000000cc0)={0x0, &(0x7f0000000140)={0x18, 0x0, 0x7fffffffffffffff, {0x5c55804f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.657289088s ago: executing program 2 (id=1049): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRESHEX=r0, @ANYRES16=r0], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 2.56190872s ago: executing program 2 (id=1050): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket(0xa, 0x3, 0x87) sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.56160016s ago: executing program 2 (id=1051): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x50041, 0x8, 0x9}, 0x18) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x2, 0x80000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0xc094}], 0x2000000000000073, 0x0, 0x0, 0xffffffffffffff3a) 2.56137255s ago: executing program 2 (id=1052): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x40000000}) 2.56127365s ago: executing program 2 (id=1053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c00028005000100980000003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14004400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffe00000020c000280050001"], 0xc8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 2.55010448s ago: executing program 2 (id=1054): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0xc0089364, 0x1000000000000) 393.751962ms ago: executing program 0 (id=1091): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x14c) chroot(&(0x7f0000000100)='./file0/file0\x00') chroot(&(0x7f0000000080)='./file0\x00') r0 = open$dir(0x0, 0x0, 0x0) fchownat(r0, 0x0, 0x0, 0x0, 0x6000) chroot(&(0x7f0000000100)='./file0/file0/..\x00') 393.698752ms ago: executing program 0 (id=1092): r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000180)=0x40000000, 0x4) 377.127133ms ago: executing program 0 (id=1095): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x28) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 304.657234ms ago: executing program 0 (id=1101): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10000410, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x0, 0x3, &(0x7f0000000100)="09001000", 0x4) 265.423835ms ago: executing program 0 (id=1103): open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x0, 0x400000000000) mlockall(0x2) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r4, 0x4) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r5, 0x0) sync() 58.115889ms ago: executing program 1 (id=1120): r0 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) lseek(r0, 0xfffffffffffffffd, 0x2) 57.866209ms ago: executing program 1 (id=1121): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0) open(0x0, 0x78e, 0x0) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x2e, &(0x7f0000000040)={@empty}, 0x14) 57.768659ms ago: executing program 1 (id=1122): r0 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0, 0x0) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00') link(&(0x7f0000000100)='./file0\x00', 0x0) 57.208718ms ago: executing program 1 (id=1123): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r0, 0x0, 0x15, &(0x7f0000001080)=""/4096, &(0x7f0000000100)=0x1000) 57.030158ms ago: executing program 0 (id=1124): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r1, 0x0, 0x3, &(0x7f0000000100)="09001000", 0x4) sendmsg$unix(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="10000000ffff000006"], 0x10}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40002) 1.80149ms ago: executing program 1 (id=1125): r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2f, 0x0, 0x0) 0s ago: executing program 1 (id=1126): sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="137d27ca7717f53cbdbde63a7ed556161cdb056d6a89dc012165c256745da0924b88b31c93c6ba29da38eb5bd409d735722c7e7d39fe3c5b6a679f6e05b3cb00c2b735bc4f68e4bced4a58a2527a184df9afa5d5fdb78058fba066fa9de36e33b1538b3294270629e529646ec0db133d56aa801e6626ef14f8be0c3ef038f36d71ea6cc03d33f96b37dfc1747a8380f843761f92000000000000000000000000000000009c93be6e84aa86", 0xab, 0x10, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff"], 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="ec010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d00000905820200020000000905"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0xffffe000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20008890) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x164}, 0x1, 0x0, 0x0, 0x22000890}, 0x40014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) kernel console output (not intermixed with test programs): sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.034451][ T36] audit: type=1400 audit(1758685368.260:267): avc: denied { setopt } for pid=1037 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.116192][ T1050] capability: warning: `syz.1.226' uses 32-bit capabilities (legacy support in use) [ 44.198894][ T1057] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 44.212492][ T1057] rust_binder: Write failure EINVAL in pid:166 [ 44.256062][ T1067] can0: slcan on ptm0. [ 44.350231][ T1065] can0 (unregistered): slcan off ptm0. [ 44.452044][ T370] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 44.521313][ T1120] overlayfs: failed to clone upperpath [ 44.619509][ T370] usb 3-1: descriptor type invalid, skip [ 44.627269][ T370] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 8 [ 44.648425][ T370] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1024 [ 44.665304][ T370] usb 3-1: config 1 interface 0 has no altsetting 0 [ 44.681303][ T370] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.692959][ T370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.701273][ T370] usb 3-1: Product: 쉴䂔煸ᐶ鞃䏳閑脏䩕魋ٺ᜖㬍쇱㕣궡赬㎕◧協ྈ⍍ꭶ묊Ṵ挵䜘䩟峗㠸⯋뜘䆐࠱㏮錗”镖䰋筪㉗끖붖秵茥倸ᢆ꯸㑰ᑪ녁控⧣뚩﷝䙇ꢰ腕ﶳ訤滣헬兼㒈垤溣ꡂ醵燍埴腞훃䌯쎩ᨙີ鱹Ṻ傃ᝥ㒩妼ṫ퇂줣쒝酢雩㴑땋唹蛼 [ 44.715913][ T1143] netlink: 'syz.1.252': attribute type 4 has an invalid length. [ 44.731514][ T370] usb 3-1: Manufacturer: 쿢鍲潲쥗ካᗡ脜ﰹ㡐 폳염稠퍒䈑膃贂ɧ㧦䐆詩渥⦌കLɼꪝ᭪㪊춇꫃䰖낄됎존킜炟᭙ᄀᏌ㾰⻈╷欖쀑鯄᝺⩪ઙ艑 [ 44.749166][ T1143] netlink: 17 bytes leftover after parsing attributes in process `syz.1.252'. [ 44.761207][ T370] usb 3-1: SerialNumber: 莂臢艗앦༴䳫㸆㭏锿Ꟑ敛 [ 44.778480][ T1061] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 44.788266][ T1061] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 44.848311][ T1154] mmap: syz.1.255 (1154) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.963593][ T1164] kvm: kvm [1163]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x400010000 [ 44.973428][ T1165] kvm: kvm [1163]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x400010000 [ 45.001953][ T370] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 45.016602][ T370] usb 3-1: USB disconnect, device number 12 [ 45.058529][ T1175] netlink: 32 bytes leftover after parsing attributes in process `syz.3.263'. [ 45.067589][ T1175] tipc: Invalid UDP bearer configuration [ 45.067620][ T1175] tipc: Enabling of bearer rejected, failed to enable media [ 45.348481][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 45.381273][ T1192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=1192 comm=syz.0.267 [ 45.499088][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 45.510191][ T45] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 45.530535][ T45] usb 4-1: config 0 has no interface number 0 [ 45.534822][ T1207] 9pnet_fd: Insufficient options for proto=fd [ 45.536664][ T45] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 45.555453][ T45] usb 4-1: config 0 interface 196 has no altsetting 0 [ 45.564164][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 45.573835][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.582119][ T45] usb 4-1: Product: syz [ 45.588597][ T45] usb 4-1: Manufacturer: syz [ 45.603988][ T45] usb 4-1: SerialNumber: syz [ 45.615100][ T45] usb 4-1: config 0 descriptor?? [ 45.622706][ T1178] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 45.640239][ T1221] SELinux: ebitmap: truncated map [ 45.645337][ T1221] SELinux: failed to load policy [ 45.951282][ T1232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.951312][ T1232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.959187][ T1232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.965355][ T1232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.032934][ T45] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 46.048733][ T45] ipheth 4-1:0.196: probe with driver ipheth failed with error -22 [ 46.149321][ T1242] tipc: Enabling of bearer rejected, media not registered [ 46.228439][ T404] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 46.258446][ T1250] SELinux: ebitmap: truncated map [ 46.263555][ T1250] SELinux: failed to load policy [ 46.379505][ T404] usb 1-1: config 16 has an invalid interface number: 236 but max is 1 [ 46.387849][ T404] usb 1-1: config 16 has an invalid interface number: 175 but max is 1 [ 46.396137][ T404] usb 1-1: config 16 has no interface number 0 [ 46.402337][ T404] usb 1-1: config 16 has no interface number 1 [ 46.408545][ T404] usb 1-1: config 16 interface 175 altsetting 3 endpoint 0x1 has an invalid bInterval 201, changing to 4 [ 46.419815][ T404] usb 1-1: config 16 interface 175 altsetting 3 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 46.430616][ T404] usb 1-1: config 16 interface 175 has no altsetting 0 [ 46.437804][ T404] usb 1-1: language id specifier not provided by device, defaulting to English [ 46.451202][ T404] usb 1-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 46.460308][ T404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.527030][ T1255] input: syz0 as /devices/virtual/input/input8 [ 46.674505][ T404] usb 1-1: bad CDC descriptors [ 46.690216][ T404] usb 1-1: USB disconnect, device number 14 [ 46.723563][ T1268] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 47.018864][ T1276] rust_binder: Write failure EINVAL in pid:199 [ 47.186129][ T1278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:158 [ 47.210922][ T1280] SELinux: ebitmap: truncated map [ 47.225329][ T1280] SELinux: failed to load policy [ 47.834062][ T1299] rust_binder: Fixups oob 165 172 361 173 [ 47.834088][ T1299] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 47.839953][ T1299] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.848299][ T1299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:202 [ 47.872116][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 47.872135][ T36] audit: type=1400 audit(1758685372.120:304): avc: denied { connect } for pid=1300 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.919504][ T1305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.919534][ T1305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.074149][ T1315] netlink: 188 bytes leftover after parsing attributes in process `syz.0.309'. [ 48.091192][ T1315] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 48.091213][ T1315] rust_binder: Error while translating object. [ 48.100065][ T1315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.106249][ T1315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 48.119686][ T439] usb 4-1: USB disconnect, device number 8 [ 48.151459][ T1320] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 48.408503][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 48.558105][ T1348] overlay: Unknown parameter 'mask' [ 48.558484][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 48.569725][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 48.573588][ T36] audit: type=1400 audit(1758685372.820:305): avc: denied { create } for pid=1347 comm="syz.1.320" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.579827][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 48.601130][ T36] audit: type=1400 audit(1758685372.850:306): avc: denied { write } for pid=1347 comm="syz.1.320" name="file0" dev="tmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.610559][ T439] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 48.640190][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 48.651076][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.658670][ T36] audit: type=1400 audit(1758685372.850:307): avc: denied { open } for pid=1347 comm="syz.1.320" path="/124/bus/file0" dev="tmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.663621][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 48.698916][ T9] usb 1-1: SerialNumber: syz [ 48.704678][ T1322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.715353][ T36] audit: type=1400 audit(1758685372.960:308): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.738460][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 48.772963][ T1356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 48.798918][ T439] usb 4-1: Using ep0 maxpacket: 8 [ 48.805291][ T439] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 48.813941][ T439] usb 4-1: config 250 has an invalid interface number: 0 but max is -1 [ 48.823384][ T439] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 48.834875][ T439] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 48.845490][ T439] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 48.858482][ T439] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 48.876944][ T439] usb 4-1: Product: syz [ 48.881408][ T439] usb 4-1: SerialNumber: syz [ 48.888427][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 48.894125][ T439] hub 4-1:250.0: bad descriptor, ignoring hub [ 48.894727][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.901550][ T439] hub 4-1:250.0: probe with driver hub failed with error -5 [ 48.922679][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.930617][ T9] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 48.934227][ T45] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 48.953966][ T9] usb 1-1: USB disconnect, device number 15 [ 48.954564][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.989129][ T45] usb 3-1: config 0 descriptor?? [ 49.389087][ T404] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 49.399078][ T45] playstation 0003:054C:05C4.0002: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 49.465396][ T36] audit: type=1400 audit(1758685373.710:309): avc: denied { ioctl } for pid=1371 comm="syz.0.328" path="socket:[9316]" dev="sockfs" ino=9316 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.473172][ T1372] rust_binder: Error while translating object. [ 49.492178][ T1372] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.498635][ T1372] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 49.571762][ T404] usb 4-1: device firmware changed [ 49.574545][ T1374] __vm_enough_memory: pid: 1374, comm: syz.0.329, bytes: 18014402804453376 not enough memory for the allocation [ 49.581398][ T404] usb 4-1: USB disconnect, device number 9 [ 49.590671][ T36] audit: type=1400 audit(1758685373.830:310): avc: denied { rename } for pid=1373 comm="syz.0.329" name="file0" dev="tmpfs" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 49.599348][ T45] playstation 0003:054C:05C4.0002: Invalid reportID received, expected 18 got 163 [ 49.635849][ T45] playstation 0003:054C:05C4.0002: Failed to retrieve DualShock4 pairing info: -22 [ 49.645237][ T45] playstation 0003:054C:05C4.0002: Failed to get MAC address from DualShock4 [ 49.654055][ T45] playstation 0003:054C:05C4.0002: Failed to create dualshock4. [ 49.665512][ T45] playstation 0003:054C:05C4.0002: probe with driver playstation failed with error -22 [ 49.684055][ T1376] binder: Binderfs stats mode cannot be changed during a remount [ 49.710410][ T1383] tmpfs: Bad value for 'huge' [ 49.754144][ T1387] rust_binder: Read failure Err(EAGAIN) in pid:179 [ 49.754276][ T1386] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 49.766044][ T1387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 49.805165][ T1331] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.815108][ T1331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.821839][ T1331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:218 [ 49.855173][ T10] usb 3-1: USB disconnect, device number 13 [ 49.882101][ T1408] netlink: 9 bytes leftover after parsing attributes in process `syz.1.340'. [ 49.889773][ T1406] rust_binder: Error while translating object. [ 49.891143][ T1408] 0{: renamed from gretap0 (while UP) [ 49.891448][ T1406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.903011][ T1406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 49.903641][ T1408] 0{: entered allmulticast mode [ 49.926777][ T404] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 49.934553][ T1408] A link change request failed with some changes committed already. Interface 30{ may have been left with an inconsistent configuration, please check. [ 49.975930][ T1412] netlink: 9 bytes leftover after parsing attributes in process `syz.1.340'. [ 49.986389][ T1412] 1{: renamed from 30{ (while UP) [ 49.993303][ T1412] A link change request failed with some changes committed already. Interface 31{ may have been left with an inconsistent configuration, please check. [ 50.023900][ T36] audit: type=1400 audit(1758685374.270:311): avc: denied { bind } for pid=1414 comm="syz.1.343" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.060791][ T36] audit: type=1400 audit(1758685374.270:312): avc: denied { name_bind } for pid=1414 comm="syz.1.343" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 50.088438][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 50.101215][ T36] audit: type=1400 audit(1758685374.270:313): avc: denied { node_bind } for pid=1414 comm="syz.1.343" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 50.122016][ T404] usb 4-1: Using ep0 maxpacket: 8 [ 50.128155][ T404] usb 4-1: config 0 has no interfaces? [ 50.134971][ T404] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 50.144188][ T404] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 50.154524][ T404] usb 4-1: Product: syz [ 50.158744][ T404] usb 4-1: SerialNumber: syz [ 50.168675][ T404] usb 4-1: config 0 descriptor?? [ 50.249620][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 50.266625][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.277755][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.287750][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 50.301739][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 50.310839][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 50.319017][ T9] usb 1-1: Manufacturer: syz [ 50.324760][ T9] usb 1-1: config 0 descriptor?? [ 50.732119][ T9] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 50.739818][ T9] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 50.755524][ T9] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 50.885291][ T370] usb 4-1: USB disconnect, device number 10 [ 50.970853][ T1448] SELinux: ebitmap: truncated map [ 50.975984][ T1448] SELinux: failed to load policy [ 50.999476][ T1402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.008117][ T1402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.458478][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 51.609461][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.620520][ T10] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 51.631991][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0xE has invalid maxpacket 34474, setting to 64 [ 51.644217][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.653323][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.661350][ T10] usb 4-1: Product: syz [ 51.665510][ T10] usb 4-1: Manufacturer: syz [ 51.670137][ T10] usb 4-1: SerialNumber: syz [ 51.699030][ T1467] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 51.706713][ T489] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.938439][ T370] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 52.088508][ T370] usb 3-1: Using ep0 maxpacket: 16 [ 52.096441][ T370] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 52.105565][ T370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.113663][ T370] usb 3-1: Product: syz [ 52.117925][ T370] usb 3-1: Manufacturer: syz [ 52.122552][ T370] usb 3-1: SerialNumber: syz [ 52.127801][ T370] usb 3-1: config 0 descriptor?? [ 52.133864][ T370] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 52.141807][ T370] usb 3-1: Detected FT-X [ 52.277596][ T10] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 52.283877][ T10] cdc_ncm 4-1:1.0: bind() failure [ 52.288579][ T1482] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 52.290508][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 52.297704][ T1482] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 52.297732][ T1482] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 52.322593][ T10] cdc_ncm 4-1:1.1: bind() failure [ 52.333833][ T370] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 52.624371][ T1499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25706 sclass=netlink_route_socket pid=1499 comm=syz.0.370 [ 52.638007][ T1500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.648289][ T1500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.278269][ T1508] netlink: 'syz.1.373': attribute type 22 has an invalid length. [ 53.488551][ T1510] syz.1.374: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 53.518954][ T1510] CPU: 0 UID: 0 PID: 1510 Comm: syz.1.374 Not tainted syzkaller #0 31062737fedd5a84b75b602a907b4d4b613e131a [ 53.518998][ T1510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 53.519023][ T1510] Call Trace: [ 53.519031][ T1510] [ 53.519042][ T1510] __dump_stack+0x21/0x30 [ 53.519110][ T1510] dump_stack_lvl+0x10c/0x190 [ 53.519152][ T1510] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.519198][ T1510] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 53.519242][ T1510] dump_stack+0x19/0x20 [ 53.519281][ T1510] warn_alloc+0x1bc/0x2a0 [ 53.519324][ T1510] ? stack_depot_save_flags+0x38/0x800 [ 53.519360][ T1510] ? __cfi_warn_alloc+0x10/0x10 [ 53.519403][ T1510] ? kasan_save_track+0x4f/0x80 [ 53.519432][ T1510] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 53.519463][ T1510] ? xskq_create+0x68/0x2a0 [ 53.519507][ T1510] ? xsk_init_queue+0xb6/0x120 [ 53.519546][ T1510] ? xsk_setsockopt+0x43f/0x6f0 [ 53.519587][ T1510] ? do_sock_setsockopt+0x26a/0x400 [ 53.519627][ T1510] ? __x64_sys_setsockopt+0x1b8/0x250 [ 53.519683][ T1510] ? x64_sys_call+0x2adc/0x2ee0 [ 53.519728][ T1510] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.519779][ T1510] __vmalloc_node_range_noprof+0x135/0x1420 [ 53.519829][ T1510] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 53.519874][ T1510] ? avc_has_perm+0x144/0x220 [ 53.519916][ T1510] ? kasan_save_alloc_info+0x40/0x50 [ 53.519963][ T1510] ? __kasan_kmalloc+0x96/0xb0 [ 53.519997][ T1510] vmalloc_user_noprof+0x77/0x90 [ 53.520039][ T1510] ? xskq_create+0xdb/0x2a0 [ 53.520086][ T1510] xskq_create+0xdb/0x2a0 [ 53.520127][ T1510] xsk_init_queue+0xb6/0x120 [ 53.520184][ T1510] xsk_setsockopt+0x43f/0x6f0 [ 53.520227][ T1510] ? __cfi_xsk_setsockopt+0x10/0x10 [ 53.520266][ T1510] ? do_futex+0x356/0x500 [ 53.520299][ T1510] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 53.520341][ T1510] ? security_socket_setsockopt+0x33/0xd0 [ 53.520369][ T1510] ? __cfi_xsk_setsockopt+0x10/0x10 [ 53.520410][ T1510] do_sock_setsockopt+0x26a/0x400 [ 53.520451][ T1510] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 53.520498][ T1510] __x64_sys_setsockopt+0x1b8/0x250 [ 53.520542][ T1510] x64_sys_call+0x2adc/0x2ee0 [ 53.520590][ T1510] do_syscall_64+0x58/0xf0 [ 53.520627][ T1510] ? clear_bhb_loop+0x50/0xa0 [ 53.520658][ T1510] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.520705][ T1510] RIP: 0033:0x7f40cb38eec9 [ 53.520733][ T1510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.520763][ T1510] RSP: 002b:00007f40cc154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 53.520793][ T1510] RAX: ffffffffffffffda RBX: 00007f40cb5e5fa0 RCX: 00007f40cb38eec9 [ 53.520836][ T1510] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 53.520855][ T1510] RBP: 00007f40cb411f91 R08: 0000000000000004 R09: 0000000000000000 [ 53.520875][ T1510] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.520895][ T1510] R13: 00007f40cb5e6038 R14: 00007f40cb5e5fa0 R15: 00007ffdb8413678 [ 53.520920][ T1510] [ 53.523224][ T1510] Mem-Info: [ 53.728622][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.750291][ T9] usb 1-1: USB disconnect, device number 16 [ 53.862776][ T1510] active_anon:9883 inactive_anon:0 isolated_anon:0 [ 53.862776][ T1510] active_file:15902 inactive_file:18501 isolated_file:0 [ 53.862776][ T1510] unevictable:0 dirty:36 writeback:0 [ 53.862776][ T1510] slab_reclaimable:5765 slab_unreclaimable:77742 [ 53.862776][ T1510] mapped:24231 shmem:3039 pagetables:1002 [ 53.862776][ T1510] sec_pagetables:3 bounce:0 [ 53.862776][ T1510] kernel_misc_reclaimable:0 [ 53.862776][ T1510] free:1500593 free_pcp:5536 free_cma:0 [ 53.878433][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 53.878454][ T36] audit: type=1400 audit(1758685378.110:321): avc: denied { ioctl } for pid=1509 comm="syz.1.374" path="socket:[9600]" dev="sockfs" ino=9600 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.937949][ T1510] Node 0 active_anon:39532kB inactive_anon:0kB active_file:63608kB inactive_file:74704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96924kB dirty:144kB writeback:0kB shmem:12156kB shmem_thp:6144kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6420kB pagetables:4008kB sec_pagetables:12kB all_unreclaimable? no [ 53.970977][ T1510] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:5724kB free_cma:0kB [ 54.001158][ T1510] lowmem_reserve[]: 0 3921 3921 [ 54.006069][ T1510] Normal free:3051664kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39532kB inactive_anon:0kB active_file:63608kB inactive_file:78304kB unevictable:0kB writepending:144kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:2624kB local_pcp:564kB free_cma:0kB [ 54.052742][ T1510] lowmem_reserve[]: 0 0 0 [ 54.062602][ T1510] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 54.087496][ T1510] Normal: 34*4kB (M) 296*8kB (M) 339*16kB (UM) 383*32kB (UME) 354*64kB (UME) 89*128kB (UME) 47*256kB (UME) 35*512kB (ME) 22*1024kB (ME) 9*2048kB (UME) 714*4096kB (M) = 3049688kB [ 54.105703][ T1510] 39813 total pagecache pages [ 54.123624][ T1510] 0 pages in swap cache [ 54.152181][ T1510] Free swap = 124996kB [ 54.159047][ T1510] Total swap = 124996kB [ 54.163336][ T1510] 2097051 pages RAM [ 54.167213][ T1510] 0 pages HighMem/MovableOnly [ 54.172317][ T1510] 351537 pages reserved [ 54.176585][ T1510] 0 pages cma reserved [ 54.184280][ T1510] Memory allocations: [ 54.188549][ T1510] 0 B 0 init/main.c:1370 func:do_initcalls [ 54.195906][ T1510] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 54.204311][ T1510] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 54.218764][ T1510] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 54.228128][ T10] usb 4-1: USB disconnect, device number 11 [ 54.252461][ T1510] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 54.265496][ T1510] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 54.274406][ T1510] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 54.282721][ T1510] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 54.291028][ T1510] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 54.299192][ T1510] 0 B 0 init/initramfs.c:101 func:find_link [ 54.306702][ T36] audit: type=1400 audit(1758685378.370:322): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 54.693321][ T370] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 54.700647][ T370] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 54.708024][ T370] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 54.716391][ T1516] netlink: 'syz.3.376': attribute type 12 has an invalid length. [ 54.717254][ T370] usb 3-1: USB disconnect, device number 14 [ 54.732971][ T370] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 54.743217][ T370] ftdi_sio 3-1:0.0: device disconnected [ 54.760700][ T1525] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 54.760748][ T1525] rust_binder: Error while translating object. [ 54.769713][ T1525] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.775919][ T1525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235 [ 54.812694][ T1530] netlink: 76 bytes leftover after parsing attributes in process `syz.2.382'. [ 54.832529][ T1530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'. [ 54.838448][ T36] audit: type=1400 audit(1758685379.080:323): avc: denied { accept } for pid=1532 comm="syz.0.384" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.843526][ T1530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.902863][ T36] audit: type=1326 audit(1758685379.150:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1540 comm="syz.1.388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40cb38eec9 code=0x0 [ 54.917077][ T1542] 9pnet_fd: Insufficient options for proto=fd [ 55.003761][ T1550] rust_binder: Write failure EFAULT in pid:205 [ 55.017287][ T1553] binder: Bad value for 'defcontext' [ 55.058452][ T45] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 55.209521][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 55.220710][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.230634][ T45] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 55.239744][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.249548][ T45] usb 4-1: config 0 descriptor?? [ 55.288503][ T370] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 55.439850][ T370] usb 1-1: not running at top speed; connect to a high speed hub [ 55.448456][ T370] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 55.459339][ T370] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 55.472294][ T370] usb 1-1: config 1 interface 0 has no altsetting 0 [ 55.480329][ T370] usb 1-1: New USB device found, idVendor=046d, idProduct=005c, bcdDevice= 0.40 [ 55.489437][ T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.497449][ T370] usb 1-1: Product: 偺痤娚线㔕ᭊᒡ虠幏엲⇛ᕥ不ଯ혒﹃Ꞗꘆᕂ팱傁梷踓᣹띂ᇅ⥡꺐㝗驮ᚩ窊㗆㼡ퟦꭓ䩉ꗋ㞏ᑿ腖ᡆ␴贩⺭鐋샔鿍ॿᘭ肂⡬侓搷䯅꯶뢽܇ဟ㖗懆콺ꎒ槬쾷 [ 55.520345][ T370] usb 1-1: Manufacturer: ъ [ 55.524905][ T370] usb 1-1: SerialNumber: syz [ 55.530581][ T1555] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 55.653698][ T1557] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.653724][ T1557] rust_binder: Read failure Err(EFAULT) in pid:240 [ 55.664473][ T45] isku 0003:1E7D:319C.0004: item fetching failed at offset 5/7 [ 55.679173][ T45] isku 0003:1E7D:319C.0004: parse failed [ 55.680981][ T1560] rust_binder: Error while translating object. [ 55.684888][ T45] isku 0003:1E7D:319C.0004: probe with driver isku failed with error -22 [ 55.684974][ T1560] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.699598][ T1560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 55.710524][ T36] audit: type=1400 audit(1758685379.960:325): avc: denied { setattr } for pid=1559 comm="syz.2.396" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.768405][ T36] audit: type=1326 audit(1758685380.010:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1567 comm="syz.1.400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40cb38eec9 code=0x0 [ 55.867134][ T1527] netlink: 64 bytes leftover after parsing attributes in process `syz.3.381'. [ 55.901166][ T10] usb 4-1: USB disconnect, device number 12 [ 55.951807][ T1555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.960414][ T1555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.972078][ T370] usbhid 1-1:1.0: can't add hid device: -71 [ 55.978034][ T370] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 55.987642][ T370] usb 1-1: USB disconnect, device number 17 [ 55.998495][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 56.149692][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.160780][ T9] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 56.172533][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0xE has invalid maxpacket 34474, setting to 64 [ 56.184766][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.194008][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.202011][ T9] usb 3-1: Product: syz [ 56.206185][ T9] usb 3-1: Manufacturer: syz [ 56.210811][ T9] usb 3-1: SerialNumber: syz [ 56.492183][ T1574] rust_binder: Write failure EFAULT in pid:211 [ 56.507602][ T36] audit: type=1400 audit(1758685380.750:327): avc: denied { setattr } for pid=1575 comm="syz.0.403" name="secretmem" dev="secretmem" ino=9797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.512937][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 56.547269][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.584731][ T1577] fido_id[1577]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.668413][ T36] audit: type=1326 audit(1758685380.910:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1589 comm="syz.1.409" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40cb38eec9 code=0x0 [ 56.818926][ T9] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 56.825000][ T9] cdc_ncm 3-1:1.0: bind() failure [ 56.830149][ T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 56.838898][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 56.845718][ T9] cdc_ncm 3-1:1.1: bind() failure [ 56.999620][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 57.008290][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.018439][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 57.027431][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.041439][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 57.050533][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 57.058573][ T10] usb 1-1: Product: syz [ 57.062822][ T10] usb 1-1: Manufacturer: syz [ 57.070245][ T10] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 57.173067][ T1592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.181722][ T1592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.282948][ T65] usb 1-1: USB disconnect, device number 18 [ 57.511304][ T36] audit: type=1400 audit(1758685381.760:329): avc: denied { mount } for pid=1595 comm="syz.1.411" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 57.518474][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 57.533612][ T36] audit: type=1400 audit(1758685381.760:330): avc: denied { search } for pid=1595 comm="syz.1.411" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 57.668468][ T10] usb 4-1: device descriptor read/64, error -71 [ 57.908447][ T10] usb 4-1: device descriptor read/64, error -71 [ 58.148494][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 58.287495][ T1605] netlink: 40 bytes leftover after parsing attributes in process `syz.0.415'. [ 58.296489][ T10] usb 4-1: device descriptor read/64, error -71 [ 58.393318][ T1610] rust_binder: 225: no such ref 0 [ 58.398474][ T1610] rust_binder: 225: no such ref 0 [ 58.403581][ T1610] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 58.410688][ T1610] rust_binder: 225: no such ref 64 [ 58.415934][ T1610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:225 [ 58.548466][ T10] usb 4-1: device descriptor read/64, error -71 [ 58.668545][ T10] usb usb4-port1: attempt power cycle [ 58.765537][ T45] usb 3-1: USB disconnect, device number 15 [ 58.860120][ T1620] rust_binder: 1619 RLIMIT_NICE not set [ 58.868221][ T370] rust_binder: 1618: removing orphan mapping 0:4240 [ 58.870046][ T1622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=1622 comm=syz.1.421 [ 58.901931][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 58.901950][ T36] audit: type=1400 audit(1758685383.150:336): avc: denied { unmount } for pid=1627 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.960983][ T1636] veth1: entered allmulticast mode [ 58.979111][ T1636] overlayfs: failed to clone upperpath [ 59.008480][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 59.016149][ T36] audit: type=1400 audit(1758685383.250:337): avc: denied { ioctl } for pid=1643 comm="syz.0.429" path="socket:[10416]" dev="sockfs" ino=10416 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.054726][ T1647] veth1: left allmulticast mode [ 59.076634][ T10] usb 4-1: device descriptor read/8, error -71 [ 59.128963][ T36] audit: type=1400 audit(1758685383.370:338): avc: denied { bind } for pid=1653 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.169000][ T36] audit: type=1400 audit(1758685383.370:339): avc: denied { ioctl } for pid=1653 comm="syz.0.431" path="socket:[10426]" dev="sockfs" ino=10426 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.219455][ T10] usb 4-1: device descriptor read/8, error -71 [ 59.317714][ T1659] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 59.317747][ T1659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 59.325926][ T1659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:242 [ 59.458545][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 59.489504][ T10] usb 4-1: device descriptor read/8, error -71 [ 59.619559][ T10] usb 4-1: device descriptor read/8, error -71 [ 59.728554][ T10] usb usb4-port1: unable to enumerate USB device [ 59.940115][ T36] audit: type=1400 audit(1758685384.190:340): avc: denied { read } for pid=1668 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.179082][ T1683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 60.190862][ T1683] rust_binder: Error while translating object. [ 60.190896][ T1683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 60.197183][ T1683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:257 [ 60.207177][ T1683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:257 [ 60.302198][ T36] audit: type=1400 audit(1758685384.550:341): avc: denied { shutdown } for pid=1684 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.366383][ T36] audit: type=1400 audit(1758685384.580:342): avc: denied { read } for pid=1684 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.543296][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.543330][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.549877][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.556321][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.562796][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.569259][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.575728][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.582189][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.588665][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.595101][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.601566][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.608003][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.614474][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.620978][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.627425][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.633893][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.640444][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.646868][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.653317][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.659772][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.666204][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.672679][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.679151][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.685571][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.688662][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 60.692042][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.706168][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.712643][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.719112][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.725549][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.732015][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.738491][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.744921][ T1703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.748442][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 60.789069][ T36] audit: type=1326 audit(1758685385.040:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1707 comm="syz.1.447" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40cb38eec9 code=0x0 [ 60.814702][ T1706] rust_binder: Error in use_page_slow: ESRCH [ 60.814722][ T1706] rust_binder: use_range failure ESRCH [ 60.820774][ T1706] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 60.826402][ T1706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 60.834629][ T1706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:278 [ 60.848432][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 60.864137][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 60.873004][ T9] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 60.875827][ T1711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:280 [ 60.881520][ T9] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 60.882643][ T1711] rust_binder: Error while translating object. [ 60.890964][ T9] usb 4-1: config 13 has no interface number 0 [ 60.901416][ T1711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 60.907249][ T9] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 60.913638][ T1711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:280 [ 60.922865][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 60.947545][ T9] usb 4-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.955492][ T1713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.960924][ T9] usb 4-1: config 13 interface 50 has no altsetting 0 [ 60.963136][ T1713] netlink: 32 bytes leftover after parsing attributes in process `syz.2.449'. [ 60.968335][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.974644][ T1713] tipc: Invalid UDP bearer configuration [ 60.983164][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.994308][ T1713] tipc: Enabling of bearer rejected, failed to enable media [ 60.999736][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 61.013291][ T1713] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 61.017910][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.027168][ T1713] rust_binder: Write failure EINVAL in pid:282 [ 61.034254][ T9] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 61.058427][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.066921][ T9] usb 4-1: Product: syz [ 61.071428][ T10] usb 1-1: config 0 descriptor?? [ 61.077874][ T9] usb 4-1: Manufacturer: syz [ 61.087809][ T9] usb 4-1: SerialNumber: syz [ 61.093997][ T1691] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.310011][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 61.325950][ T9] usb 4-1: USB disconnect, device number 17 [ 61.350035][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.484760][ T10] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.0006/input/input12 [ 61.498021][ T10] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.0006/input/input13 [ 61.520743][ T10] kye 0003:0458:5012.0006: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0 [ 61.728442][ T36] audit: type=1400 audit(1758685385.970:344): avc: denied { read } for pid=1740 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.886864][ T36] audit: type=1400 audit(1758685386.130:345): avc: denied { read } for pid=1745 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.928119][ T1748] netlink: 'syz.3.459': attribute type 4 has an invalid length. [ 61.936152][ T1748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 61.973704][ T1751] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.153943][ T1754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.461'. [ 62.251257][ T1756] devpts: called with bogus options [ 62.257133][ T1756] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 62.291996][ T1760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 62.408492][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 62.518618][ C0] kye 0003:0458:5012.0006: usb_submit_urb(ctrl) failed: -1 [ 62.558451][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 62.564665][ T45] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 62.573024][ T45] usb 3-1: config 250 has an invalid interface number: 0 but max is -1 [ 62.581339][ T45] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 62.591753][ T45] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 62.602022][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 62.611244][ T45] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 62.619560][ T45] usb 3-1: Product: syz [ 62.623871][ T45] usb 3-1: SerialNumber: syz [ 62.630407][ T45] hub 3-1:250.0: bad descriptor, ignoring hub [ 62.636541][ T45] hub 3-1:250.0: probe with driver hub failed with error -5 [ 62.843615][ T404] rust_binder: 1749: removing orphan mapping 0:24 [ 62.912085][ T1763] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 62.919148][ T1763] overlayfs: failed to set xattr on upper [ 62.924892][ T1763] overlayfs: ...falling back to uuid=null. [ 63.009565][ T1777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.471'. [ 63.018586][ T1777] netlink: 31 bytes leftover after parsing attributes in process `syz.3.471'. [ 63.027521][ T1777] netlink: 'syz.3.471': attribute type 3 has an invalid length. [ 63.035275][ T1777] netlink: 'syz.3.471': attribute type 2 has an invalid length. [ 63.042971][ T1777] netlink: 31 bytes leftover after parsing attributes in process `syz.3.471'. [ 63.088732][ T31] usb 3-1: reset high-speed USB device number 16 using dummy_hcd [ 63.250760][ T31] usb 3-1: device firmware changed [ 63.262156][ T31] usb 3-1: USB disconnect, device number 16 [ 63.288464][ T45] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 63.298814][ T10] usb 1-1: USB disconnect, device number 19 [ 63.410123][ T1783] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 63.410154][ T1783] rust_binder: Error while translating object. [ 63.422620][ T45] usb 4-1: device descriptor read/64, error -71 [ 63.426365][ T1783] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.435336][ T1783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 63.558471][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 63.668460][ T45] usb 4-1: device descriptor read/64, error -71 [ 63.718452][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 63.724678][ T31] usb 3-1: config 0 has no interfaces? [ 63.731390][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 63.740482][ T31] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 63.748864][ T31] usb 3-1: Product: syz [ 63.753029][ T31] usb 3-1: SerialNumber: syz [ 63.758259][ T31] usb 3-1: config 0 descriptor?? [ 63.908463][ T45] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 63.964661][ T31] usb 3-1: USB disconnect, device number 17 [ 64.038428][ T45] usb 4-1: device descriptor read/64, error -71 [ 64.098291][ T1808] rust_binder: 278: no such ref 3 [ 64.103432][ T1808] rust_binder: 278: no such ref 1 [ 64.108630][ T1808] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 64.115901][ T1808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 64.116605][ T1808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 64.145130][ T1810] SELinux: ebitmap: truncated map [ 64.159405][ T1810] SELinux: failed to load policy [ 64.191444][ T1813] can0: slcan on ptm0. [ 64.221514][ T1812] can0 (unregistered): slcan off ptm0. [ 64.288449][ T45] usb 4-1: device descriptor read/64, error -71 [ 64.298007][ T1815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 64.298032][ T1815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:285 [ 64.398626][ T45] usb usb4-port1: attempt power cycle [ 64.569006][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 64.729506][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.740509][ T31] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 64.752077][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0xE has invalid maxpacket 34474, setting to 64 [ 64.763008][ T45] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 64.772013][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.781119][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.789201][ T31] usb 1-1: Product: syz [ 64.793424][ T31] usb 1-1: Manufacturer: syz [ 64.798156][ T31] usb 1-1: SerialNumber: syz [ 64.803536][ T45] usb 4-1: device descriptor read/8, error -71 [ 64.818549][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 64.939470][ T45] usb 4-1: device descriptor read/8, error -71 [ 64.968431][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 64.999087][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 65.007391][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 65.015000][ T9] usb 3-1: can't read configurations, error -71 [ 65.178452][ T45] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 65.199807][ T45] usb 4-1: device descriptor read/8, error -71 [ 65.228816][ T1851] tipc: Enabling of bearer rejected, failed to enable media [ 65.329502][ T45] usb 4-1: device descriptor read/8, error -71 [ 65.363926][ T1881] overlayfs: failed to clone upperpath [ 65.438538][ T45] usb usb4-port1: unable to enumerate USB device [ 65.524278][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 65.524297][ T36] audit: type=1400 audit(1758685389.770:352): avc: denied { listen } for pid=1891 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 65.531102][ T1892] rust_binder: Got transaction with invalid offset. [ 65.550556][ T1892] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.557207][ T1892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 65.682806][ T1899] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.692107][ T1900] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.814247][ T1817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.831428][ T1817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.842641][ T31] cdc_ncm 1-1:1.0: bind() failure [ 65.854257][ T31] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 65.864445][ T31] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 65.885657][ T31] usb 1-1: USB disconnect, device number 20 [ 66.019050][ T36] audit: type=1326 audit(1758685390.270:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1911 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cb38eec9 code=0x7fc00000 [ 66.068842][ T1917] SELinux: ebitmap: truncated map [ 66.079701][ T1917] SELinux: failed to load policy [ 66.154393][ T1929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'. [ 66.333987][ T1933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.529'. [ 66.354991][ T1936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.407617][ T1948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:329 [ 66.419196][ T1944] can0: slcan on ptm0. [ 66.452637][ T1944] can0 (unregistered): slcan off ptm0. [ 66.606847][ T1975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 66.641200][ T36] audit: type=1400 audit(1758685390.890:354): avc: denied { read } for pid=1981 comm="syz.0.537" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.670548][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 66.678642][ T1982] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 66.678667][ T1982] rust_binder: Error while translating object. [ 66.691247][ T1982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.697697][ T1982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299 [ 66.741745][ T1988] FAT-fs (rnullb0): bogus number of reserved sectors [ 66.757637][ T1988] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 66.838468][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 66.849018][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 66.857481][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 66.866268][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 66.875341][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 66.885047][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 66.894927][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 66.905092][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 66.914934][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 66.927940][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 66.937025][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.945696][ T9] usb 4-1: config 0 descriptor?? [ 67.088472][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 67.153420][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 67.165484][ T9] usb 4-1: USB disconnect, device number 22 [ 67.172324][ T9] usblp0: removed [ 67.222844][ T1999] can0: slcan on ptm0. [ 67.239512][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.250535][ T31] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 67.264712][ T1999] can0 (unregistered): slcan off ptm0. [ 67.270536][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0xE has invalid maxpacket 34474, setting to 64 [ 67.283145][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.299786][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.320700][ T31] usb 1-1: Product: syz [ 67.324921][ T31] usb 1-1: Manufacturer: syz [ 67.339889][ T31] usb 1-1: SerialNumber: syz [ 67.360764][ T2023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.398005][ T2032] fuse: Bad value for 'fd' [ 67.412442][ T2034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:339 [ 67.427158][ T2038] fuse: Bad value for 'fd' [ 67.588425][ T45] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 67.606634][ T36] audit: type=1400 audit(1758685391.850:355): avc: denied { ioctl } for pid=2060 comm="syz.1.555" path="/245/file2" dev="tmpfs" ino=1337 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.738425][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 67.744633][ T45] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 67.753065][ T45] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 67.761823][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 67.773329][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.783153][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 67.792858][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 67.802637][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 67.812398][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 67.825393][ T45] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 67.834562][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.843290][ T45] usb 4-1: config 0 descriptor?? [ 68.049803][ T45] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 68.250783][ T36] audit: type=1400 audit(1758685392.500:356): avc: denied { read write } for pid=1947 comm="syz.3.534" name="lp0" dev="devtmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 68.298419][ T36] audit: type=1400 audit(1758685392.500:357): avc: denied { open } for pid=1947 comm="syz.3.534" path="/dev/usb/lp0" dev="devtmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 68.309129][ T10] usb 4-1: USB disconnect, device number 23 [ 68.342897][ T10] usblp0: removed [ 68.363064][ T2102] /dev/rnullb0: Can't open blockdev [ 68.382411][ T1994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.420317][ T1994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.530059][ T2115] netlink: 182 bytes leftover after parsing attributes in process `syz.1.570'. [ 69.250906][ T31] cdc_ncm 1-1:1.0: bind() failure [ 69.257397][ T31] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 69.266540][ T31] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 69.276673][ T2121] can0: slcan on ptm0. [ 69.281307][ T31] usb 1-1: USB disconnect, device number 21 [ 69.329649][ T2122] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 69.351898][ T36] audit: type=1400 audit(1758685393.600:358): avc: denied { ioctl } for pid=2118 comm="syz.2.571" path="socket:[11943]" dev="sockfs" ino=11943 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.387620][ T2122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=2122 comm=syz.2.571 [ 69.450825][ T2121] can0 (unregistered): slcan off ptm0. [ 69.485647][ T36] audit: type=1400 audit(1758685393.730:359): avc: denied { lock } for pid=2153 comm="syz.0.577" path="socket:[13022]" dev="sockfs" ino=13022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.655138][ T2184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 69.688429][ T65] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 69.788463][ T370] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 69.838433][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 69.844598][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.855656][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.865458][ T65] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 69.874547][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.883403][ T65] usb 4-1: config 0 descriptor?? [ 69.939532][ T370] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.950555][ T370] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 69.962066][ T370] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0xE has invalid maxpacket 34474, setting to 64 [ 69.974546][ T370] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.983728][ T370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.991770][ T370] usb 3-1: Product: syz [ 69.996023][ T370] usb 3-1: Manufacturer: syz [ 70.000655][ T370] usb 3-1: SerialNumber: syz [ 70.212922][ T2190] 9pnet_fd: Insufficient options for proto=fd [ 70.262328][ T2202] veth1: entered allmulticast mode [ 70.291352][ T65] cherry 0003:046A:0027.0007: unknown main item tag 0x0 [ 70.298360][ T65] cherry 0003:046A:0027.0007: item fetching failed at offset 19/69 [ 70.306757][ T65] cherry 0003:046A:0027.0007: probe with driver cherry failed with error -22 [ 70.490978][ T31] usb 4-1: USB disconnect, device number 24 [ 71.011002][ T2164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.020282][ T2164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.030880][ T370] cdc_ncm 3-1:1.0: bind() failure [ 71.039690][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.040870][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.047459][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.054101][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.054185][ T370] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 71.061084][ T370] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 71.067266][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.077408][ T370] usb 3-1: USB disconnect, device number 20 [ 71.086129][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.093325][ T2201] veth1: left allmulticast mode [ 71.096303][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.107247][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.113750][ T2230] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 71.120468][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.120493][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.135145][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.141792][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.148288][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.154808][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.161404][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.167891][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.174413][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.181075][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.187555][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.194049][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.200636][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.207091][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.213538][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.220056][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.226481][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.232923][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.239656][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.246191][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.252664][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.259273][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.265826][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.272321][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.278829][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.285281][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.296710][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.306517][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.324799][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.331737][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.338208][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.344683][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.351157][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.357576][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.364140][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.370606][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.377047][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.383610][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.390173][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.398452][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.408455][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.414950][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.422581][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.429164][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.435649][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.442254][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.448819][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.455272][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.461851][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.468295][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.474912][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.481468][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.487909][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.494512][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.501065][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.507502][ T36] audit: type=1400 audit(1758685395.750:360): avc: denied { name_bind } for pid=2254 comm="syz.0.604" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 71.534943][ T2229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.567688][ T2262] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 71.568873][ T36] audit: type=1400 audit(1758685395.810:361): avc: denied { relabelfrom } for pid=2261 comm="syz.0.607" name="RAWv6" dev="sockfs" ino=13113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.606532][ T36] audit: type=1400 audit(1758685395.830:362): avc: denied { relabelto } for pid=2261 comm="syz.0.607" name="RAWv6" dev="sockfs" ino=13113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 71.635412][ T36] audit: type=1400 audit(1758685395.840:363): avc: denied { accept } for pid=2263 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 71.641999][ T2264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 71.656205][ T36] audit: type=1400 audit(1758685395.840:364): avc: denied { bind } for pid=2263 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.685054][ T2264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 71.808438][ T65] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 71.923722][ T2280] netlink: 'syz.2.614': attribute type 1 has an invalid length. [ 71.931447][ T2280] netlink: 160 bytes leftover after parsing attributes in process `syz.2.614'. [ 71.958452][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 71.964855][ T65] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 71.973098][ T65] usb 4-1: config 0 has no interface number 0 [ 71.979243][ T65] usb 4-1: config 0 interface 230 has no altsetting 0 [ 71.987485][ T65] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 71.996777][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.004958][ T65] usb 4-1: Product: syz [ 72.009299][ T65] usb 4-1: Manufacturer: syz [ 72.013925][ T65] usb 4-1: SerialNumber: syz [ 72.027387][ T65] usb 4-1: config 0 descriptor?? [ 72.036252][ T65] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 72.038018][ T2285] netlink: 'syz.1.616': attribute type 4 has an invalid length. [ 72.044859][ T65] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 72.051915][ T2285] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.616'. [ 72.254915][ T2300] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.258413][ T36] audit: type=1400 audit(1758685396.500:365): avc: denied { append } for pid=2299 comm="syz.2.621" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.289593][ T36] audit: type=1400 audit(1758685396.500:366): avc: denied { map } for pid=2299 comm="syz.2.621" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.340687][ T2301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 72.340735][ T2301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:382 [ 72.445107][ T36] audit: type=1400 audit(1758685396.690:367): avc: denied { lock } for pid=2303 comm="syz.0.622" path="/dev/binderfs/binder1" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.571336][ T2313] overlayfs: overlapping lowerdir path [ 72.597838][ T36] audit: type=1400 audit(1758685396.840:368): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 72.721243][ T36] audit: type=1400 audit(1758685396.970:369): avc: denied { mounton } for pid=2329 comm="syz.1.630" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.148982][ T2343] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 73.149007][ T2343] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 73.157002][ T2343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:386 [ 73.228447][ T404] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 73.398417][ T404] usb 1-1: Using ep0 maxpacket: 32 [ 73.409177][ T404] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 73.417579][ T404] usb 1-1: config 0 has no interface number 0 [ 73.425967][ T404] usb 1-1: config 0 interface 184 has no altsetting 0 [ 73.434404][ T404] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 73.444305][ T404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.452379][ T404] usb 1-1: Product: syz [ 73.456654][ T404] usb 1-1: Manufacturer: syz [ 73.461547][ T404] usb 1-1: SerialNumber: syz [ 73.468634][ T404] usb 1-1: config 0 descriptor?? [ 73.474444][ T404] smsc75xx v1.0.0 [ 73.541487][ T2371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 73.541523][ T2371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:282 [ 73.878461][ T404] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 73.898991][ T404] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 73.908723][ T404] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 73.919037][ T404] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 73.928322][ T404] usb 1-1: USB disconnect, device number 22 [ 73.994783][ T2384] can0: slcan on ptm0. [ 74.021046][ T2384] can0 (unregistered): slcan off ptm0. [ 74.278491][ T582] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 74.320886][ T65] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 74.330598][ T65] usb 4-1: USB disconnect, device number 25 [ 74.395092][ T2415] fuse: Bad value for 'rootmode' [ 74.428440][ T582] usb 3-1: Using ep0 maxpacket: 32 [ 74.434832][ T582] usb 3-1: too many configurations: 36, using maximum allowed: 8 [ 74.444923][ T582] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 74.459076][ T2419] rust_binder: 372: no such ref 2 [ 74.466535][ T582] usb 3-1: can't read configurations, error -61 [ 74.468549][ T2419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:372 [ 74.477260][ T2420] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 74.621996][ T2434] binder: Bad value for 'defcontext' [ 74.628459][ T582] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 74.715605][ T2444] /dev/nullb0: Can't lookup blockdev [ 74.788536][ T582] usb 3-1: Using ep0 maxpacket: 32 [ 74.794079][ T582] usb 3-1: too many configurations: 36, using maximum allowed: 8 [ 74.803074][ T582] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 74.810707][ T582] usb 3-1: can't read configurations, error -61 [ 74.817123][ T582] usb usb3-port1: attempt power cycle [ 74.888484][ T65] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 74.988452][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 75.038420][ T65] usb 1-1: Using ep0 maxpacket: 8 [ 75.047955][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short [ 75.067691][ T65] usb 1-1: config 6 has an invalid interface number: 248 but max is 0 [ 75.075942][ T65] usb 1-1: config 6 has no interface number 0 [ 75.083605][ T65] usb 1-1: config 6 interface 248 has no altsetting 0 [ 75.092282][ T65] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 75.101709][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.109832][ T65] usb 1-1: Product: syz [ 75.114013][ T65] usb 1-1: Manufacturer: syz [ 75.118734][ T65] usb 1-1: SerialNumber: syz [ 75.138839][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 75.149038][ T9] usb 4-1: config 4 has an invalid interface number: 215 but max is 0 [ 75.157283][ T9] usb 4-1: config 4 has no interface number 0 [ 75.163430][ T582] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 75.172455][ T9] usb 4-1: New USB device found, idVendor=76da, idProduct=6a4e, bcdDevice=8c.0b [ 75.181679][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.189955][ T9] usb 4-1: Product: syz [ 75.194651][ T582] usb 3-1: Using ep0 maxpacket: 32 [ 75.198225][ T2459] 9pnet_fd: Insufficient options for proto=fd [ 75.199841][ T9] usb 4-1: Manufacturer: syz [ 75.210668][ T9] usb 4-1: SerialNumber: syz [ 75.215512][ T582] usb 3-1: too many configurations: 36, using maximum allowed: 8 [ 75.225237][ T582] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 75.227330][ T2461] netlink: 'syz.1.667': attribute type 6 has an invalid length. [ 75.239060][ T582] usb 3-1: can't read configurations, error -61 [ 75.240843][ T2461] netlink: 'syz.1.667': attribute type 4 has an invalid length. [ 75.254551][ T2461] netlink: 'syz.1.667': attribute type 6 has an invalid length. [ 75.262363][ T2461] netlink: 5944 bytes leftover after parsing attributes in process `syz.1.667'. [ 75.330431][ T65] ums-karma 1-1:6.248: USB Mass Storage device detected [ 75.360548][ T65] usb 1-1: USB disconnect, device number 23 [ 75.368547][ T582] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 75.388744][ T582] usb 3-1: Using ep0 maxpacket: 32 [ 75.394233][ T582] usb 3-1: too many configurations: 36, using maximum allowed: 8 [ 75.403213][ T582] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 75.410852][ T582] usb 3-1: can't read configurations, error -61 [ 75.417252][ T582] usb usb3-port1: unable to enumerate USB device [ 75.439887][ T9] hub 4-1:4.215: bad descriptor, ignoring hub [ 75.446029][ T9] hub 4-1:4.215: probe with driver hub failed with error -5 [ 75.453658][ T9] usb 4-1: bad CDC descriptors [ 75.478922][ T9] usb 4-1: USB disconnect, device number 26 [ 75.965153][ T2484] input: syz0 as /devices/virtual/input/input14 [ 76.114958][ T2500] mmap: syz.1.680 (2500): VmData 29339648 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 76.228451][ T404] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 76.379868][ T404] usb 4-1: unable to get BOS descriptor or descriptor too short [ 76.388007][ T404] usb 4-1: not running at top speed; connect to a high speed hub [ 76.396774][ T404] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.407273][ T404] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.418164][ T404] usb 4-1: string descriptor 0 read error: -22 [ 76.424461][ T404] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.433617][ T404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.444141][ T404] usb 4-1: 0:2 : does not exist [ 76.608436][ T31] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 76.759709][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 76.767744][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 76.776210][ T31] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 76.784632][ T31] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 76.792906][ T31] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 76.802085][ T31] usb 1-1: config 129 has no interface number 0 [ 76.808349][ T31] usb 1-1: config 129 has no interface number 1 [ 76.814661][ T31] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 76.827933][ T31] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 76.838892][ T31] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 76.852084][ T31] usb 1-1: config 129 interface 135 has no altsetting 0 [ 76.859093][ T31] usb 1-1: config 129 interface 5 has no altsetting 0 [ 76.867407][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 76.876517][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.884556][ T31] usb 1-1: Product: syz [ 76.888777][ T31] usb 1-1: Manufacturer: syz [ 76.893396][ T31] usb 1-1: SerialNumber: syz [ 77.066631][ T2487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.130739][ T2549] rust_binder: Fixups oob 165 172 361 173 [ 77.137349][ T2549] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 77.143227][ T2549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.151558][ T2549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:394 [ 77.624210][ T2566] binder: Bad value for 'max' [ 77.668512][ T2571] 9pnet_fd: Insufficient options for proto=fd [ 77.692623][ T2576] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 77.692654][ T2576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 77.700937][ T2576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:421 [ 77.711186][ T2576] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.774866][ T2582] FAULT_INJECTION: forcing a failure. [ 77.774866][ T2582] name failslab, interval 1, probability 0, space 0, times 1 [ 77.794252][ T2582] CPU: 1 UID: 0 PID: 2582 Comm: syz.0.710 Not tainted syzkaller #0 31062737fedd5a84b75b602a907b4d4b613e131a [ 77.794291][ T2582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.794307][ T2582] Call Trace: [ 77.794314][ T2582] [ 77.794324][ T2582] __dump_stack+0x21/0x30 [ 77.794365][ T2582] dump_stack_lvl+0x10c/0x190 [ 77.794397][ T2582] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.794440][ T2582] dump_stack+0x19/0x20 [ 77.794471][ T2582] should_fail_ex+0x3d9/0x530 [ 77.794495][ T2582] should_failslab+0xac/0x100 [ 77.794522][ T2582] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 77.794546][ T2582] ? dup_task_struct+0xbc/0xc50 [ 77.794574][ T2582] ? kasan_save_track+0x4f/0x80 [ 77.794600][ T2582] dup_task_struct+0xbc/0xc50 [ 77.794627][ T2582] ? copy_process+0x3220/0x3220 [ 77.794655][ T2582] ? __kasan_check_write+0x18/0x20 [ 77.794690][ T2582] copy_process+0x538/0x3220 [ 77.794722][ T2582] ? __cfi_copy_process+0x10/0x10 [ 77.794750][ T2582] ? __kasan_check_write+0x18/0x20 [ 77.794785][ T2582] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 77.794812][ T2582] vhost_task_create+0x1d6/0x350 [ 77.794837][ T2582] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 77.794865][ T2582] ? __cfi_vhost_task_create+0x10/0x10 [ 77.794890][ T2582] ? __cfi_vhost_task_fn+0x10/0x10 [ 77.794913][ T2582] ? __kasan_check_write+0x18/0x20 [ 77.794948][ T2582] ? mutex_lock+0x92/0x1c0 [ 77.794981][ T2582] ? __cfi_mutex_lock+0x10/0x10 [ 77.795013][ T2582] ? kernel_text_address+0xa9/0xe0 [ 77.795044][ T2582] kvm_mmu_post_init_vm+0x156/0x2d0 [ 77.795078][ T2582] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 77.795110][ T2582] ? _parse_integer_limit+0x195/0x1e0 [ 77.795147][ T2582] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 77.795179][ T2582] ? kstrtoull+0x13b/0x1e0 [ 77.795213][ T2582] ? kstrtouint+0x78/0xf0 [ 77.795248][ T2582] ? ioctl_has_perm+0x1aa/0x4d0 [ 77.795275][ T2582] ? __asan_memcpy+0x5a/0x80 [ 77.795309][ T2582] ? ioctl_has_perm+0x3e0/0x4d0 [ 77.795336][ T2582] ? has_cap_mac_admin+0xd0/0xd0 [ 77.795364][ T2582] ? __kasan_check_write+0x18/0x20 [ 77.795398][ T2582] ? mutex_lock_killable+0x92/0x1c0 [ 77.795439][ T2582] ? __cfi_mutex_lock_killable+0x10/0x10 [ 77.795473][ T2582] ? proc_fail_nth_write+0x17e/0x210 [ 77.795506][ T2582] kvm_vcpu_ioctl+0x96f/0xee0 [ 77.795529][ T2582] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 77.795552][ T2582] ? __cfi_vfs_write+0x10/0x10 [ 77.795573][ T2582] ? __kasan_check_write+0x18/0x20 [ 77.795608][ T2582] ? mutex_unlock+0x8b/0x240 [ 77.795640][ T2582] ? __cfi_mutex_unlock+0x10/0x10 [ 77.795671][ T2582] ? __fget_files+0x2c5/0x340 [ 77.795699][ T2582] ? __fget_files+0x2c5/0x340 [ 77.795724][ T2582] ? bpf_lsm_file_ioctl+0xd/0x20 [ 77.795756][ T2582] ? security_file_ioctl+0x34/0xd0 [ 77.795781][ T2582] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 77.795803][ T2582] __se_sys_ioctl+0x135/0x1b0 [ 77.795829][ T2582] __x64_sys_ioctl+0x7f/0xa0 [ 77.795854][ T2582] x64_sys_call+0x1878/0x2ee0 [ 77.795888][ T2582] do_syscall_64+0x58/0xf0 [ 77.795915][ T2582] ? clear_bhb_loop+0x50/0xa0 [ 77.795938][ T2582] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.795974][ T2582] RIP: 0033:0x7f458b58eec9 [ 77.795995][ T2582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.796016][ T2582] RSP: 002b:00007f458c4df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.796042][ T2582] RAX: ffffffffffffffda RBX: 00007f458b7e5fa0 RCX: 00007f458b58eec9 [ 77.796061][ T2582] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 77.796076][ T2582] RBP: 00007f458c4df090 R08: 0000000000000000 R09: 0000000000000000 [ 77.796092][ T2582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.796107][ T2582] R13: 00007f458b7e6038 R14: 00007f458b7e5fa0 R15: 00007fff0259ccd8 [ 77.796128][ T2582] [ 78.211745][ T2585] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 78.282486][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 78.282508][ T36] audit: type=1400 audit(1758685402.530:388): avc: denied { create } for pid=2584 comm="syz.2.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.603730][ T2607] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.626588][ T2611] rust_binder: 412: no such ref 0 [ 78.638232][ T2611] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 78.647066][ T2611] rust_binder: 412: no such ref 64 [ 78.652431][ T2611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:412 [ 78.684042][ T36] audit: type=1400 audit(1758685402.930:389): avc: denied { create } for pid=2608 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 78.720161][ T2613] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 78.720190][ T2613] rust_binder: Error while translating object. [ 78.732233][ T2617] netlink: 96 bytes leftover after parsing attributes in process `syz.0.721'. [ 78.747735][ T2613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.747767][ T2613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:414 [ 78.818025][ T2627] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 78.834387][ T2627] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 78.896758][ T2636] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.903129][ T36] audit: type=1400 audit(1758685403.150:390): avc: denied { connect } for pid=2635 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.912153][ T2638] rust_binder: Write failure EFAULT in pid:436 [ 78.948118][ T36] audit: type=1400 audit(1758685403.180:391): avc: denied { accept } for pid=2635 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.978457][ T36] audit: type=1400 audit(1758685403.190:392): avc: denied { read } for pid=95 comm="acpid" name="mouse3" dev="devtmpfs" ino=563 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 79.000250][ T36] audit: type=1400 audit(1758685403.190:393): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/mouse3" dev="devtmpfs" ino=563 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 79.027256][ T2640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.027658][ T36] audit: type=1400 audit(1758685403.190:394): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/mouse3" dev="devtmpfs" ino=563 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 79.066228][ T404] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 79.076983][ T404] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 79.091994][ T404] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 79.111590][ T404] usb 4-1: USB disconnect, device number 27 [ 79.137933][ T31] usb 1-1: MIDIStreaming interface descriptor not found [ 79.163330][ T31] usb 1-1: USB disconnect, device number 24 [ 79.206656][ T2654] rust_binder: 2651 RLIMIT_NICE not set [ 79.206872][ T2651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.732'. [ 79.228161][ T36] audit: type=1400 audit(1758685403.470:395): avc: denied { create } for pid=2655 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 79.256684][ T2654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.274489][ T2660] rust_binder: Write failure EINVAL in pid:441 [ 79.279204][ T2644] rust_binder: Error in use_page_slow: ESRCH [ 79.285934][ T36] audit: type=1400 audit(1758685403.530:396): avc: denied { ioctl } for pid=2655 comm="syz.3.734" path="net:[4026532548]" dev="nsfs" ino=4026532548 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.292453][ T2644] rust_binder: use_range failure ESRCH [ 79.325116][ T65] rust_binder: 0: removing orphan mapping 0:4224 [ 79.345834][ T2644] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 79.345867][ T2644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 79.354189][ T2644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:433 [ 79.415275][ T2667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:448 [ 79.432767][ T2669] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 79.555872][ T2667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.671555][ T2672] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.678093][ T2672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:438 [ 80.114860][ T2680] can0: slcan on ptm0. [ 80.179650][ T2679] can0 (unregistered): slcan off ptm0. [ 80.211582][ T2694] binder: Unknown parameter 'max(I b|' [ 80.335778][ T36] audit: type=1400 audit(1758685404.580:397): avc: denied { write } for pid=2714 comm="syz.2.746" name="usbmon1" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 80.409396][ T2720] rust_binder: Write failure EINVAL in pid:448 [ 80.409556][ T2720] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 80.416483][ T2720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.747'. [ 80.468312][ T2728] can0: slcan on ptm0. [ 80.526110][ T2732] rust_binder: pid 2732 performed invalid decrement on ref [ 80.681522][ T2728] can0 (unregistered): slcan off ptm0. [ 80.978461][ T31] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 81.129422][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 81.135979][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 81.144490][ T31] usb 3-1: config 6 has an invalid interface number: 248 but max is 0 [ 81.152769][ T31] usb 3-1: config 6 has no interface number 0 [ 81.159023][ T31] usb 3-1: config 6 interface 248 has no altsetting 0 [ 81.167481][ T31] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 81.176699][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.184963][ T31] usb 3-1: Product: syz [ 81.189334][ T31] usb 3-1: Manufacturer: syz [ 81.193964][ T31] usb 3-1: SerialNumber: syz [ 81.407988][ T31] ums-karma 3-1:6.248: USB Mass Storage device detected [ 81.453145][ T31] usb 3-1: USB disconnect, device number 25 [ 82.088449][ T65] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 82.168473][ T31] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 82.239531][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 82.250537][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 82.263394][ T65] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 82.272506][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.281196][ T65] usb 4-1: config 0 descriptor?? [ 82.286436][ T2826] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.294568][ T65] usbhid 4-1:0.0: can't add hid device: -22 [ 82.300628][ T65] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 82.319579][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.330586][ T31] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 82.342053][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0xE has invalid maxpacket 34474, setting to 64 [ 82.354474][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.363626][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.371691][ T31] usb 3-1: Product: syz [ 82.375877][ T31] usb 3-1: Manufacturer: syz [ 82.380509][ T31] usb 3-1: SerialNumber: syz [ 82.426769][ T2831] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.433823][ T2830] rust_binder: Error in use_page_slow: ESRCH [ 82.433868][ T2830] rust_binder: use_range failure ESRCH [ 82.440128][ T2830] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 82.445631][ T2830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 82.453765][ T2830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:451 [ 82.497534][ T65] usb 4-1: USB disconnect, device number 28 [ 82.519161][ T2831] netlink: 92 bytes leftover after parsing attributes in process `syz.0.776'. [ 83.298467][ T65] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 83.392086][ T31] cdc_ncm 3-1:1.0: bind() failure [ 83.398320][ T31] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 83.406522][ T31] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 83.416201][ T31] usb 3-1: USB disconnect, device number 26 [ 83.448450][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 83.454598][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.464790][ T65] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.473727][ T65] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 83.485210][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 83.496343][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 83.507482][ T65] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 83.516684][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.526521][ T65] hub 4-1:1.0: bad descriptor, ignoring hub [ 83.532493][ T65] hub 4-1:1.0: probe with driver hub failed with error -5 [ 83.539850][ T65] cdc_wdm 4-1:1.0: skipping garbage [ 83.545095][ T65] cdc_wdm 4-1:1.0: skipping garbage [ 83.550373][ T65] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 83.588475][ T370] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 83.718432][ T370] usb 1-1: device descriptor read/64, error -71 [ 83.838505][ T31] usb 4-1: USB disconnect, device number 29 [ 83.911846][ T2845] __vm_enough_memory: pid: 2845, comm: syz.2.782, bytes: 18014402804453376 not enough memory for the allocation [ 83.935517][ T2850] binder: Bad value for 'max' [ 83.958443][ T370] usb 1-1: device descriptor read/64, error -71 [ 83.963705][ T2856] input: syz0 as /devices/virtual/input/input15 [ 84.198440][ T370] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 84.328425][ T370] usb 1-1: device descriptor read/64, error -71 [ 84.578426][ T370] usb 1-1: device descriptor read/64, error -71 [ 84.689147][ T370] usb usb1-port1: attempt power cycle [ 85.028441][ T370] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 85.051718][ T370] usb 1-1: device descriptor read/8, error -71 [ 85.162003][ T2894] binder: Unknown parameter '0x0000000020207374 7_4V!Y^wxd2%O' [ 85.182964][ T370] usb 1-1: device descriptor read/8, error -71 [ 85.189562][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 85.189579][ T36] audit: type=1400 audit(1758685409.440:402): avc: denied { getattr } for pid=2899 comm="syz.3.800" path="cgroup:[4026532520]" dev="nsfs" ino=4026532520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.219336][ T36] audit: type=1400 audit(1758685409.440:403): avc: denied { mounton } for pid=2899 comm="syz.3.800" path="/124/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 85.378457][ T31] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 85.428450][ T370] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 85.449615][ T370] usb 1-1: device descriptor read/8, error -71 [ 85.528416][ T31] usb 3-1: Invalid ep0 maxpacket: 16 [ 85.579459][ T370] usb 1-1: device descriptor read/8, error -71 [ 85.658445][ T31] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 85.688540][ T370] usb usb1-port1: unable to enumerate USB device [ 85.818437][ T31] usb 3-1: Invalid ep0 maxpacket: 16 [ 85.823970][ T31] usb usb3-port1: attempt power cycle [ 86.035199][ T2938] overlayfs: failed to resolve './file0': -2 [ 86.121968][ T2943] fuseblk: Unknown parameter 'group_' [ 86.178436][ T31] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 86.198809][ T31] usb 3-1: Invalid ep0 maxpacket: 16 [ 86.328459][ T31] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 86.349718][ T31] usb 3-1: Invalid ep0 maxpacket: 16 [ 86.355251][ T31] usb usb3-port1: unable to enumerate USB device [ 86.360259][ T2945] rust_binder: Failed copying into alloc: EFAULT [ 86.361646][ T2945] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 86.368113][ T2945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 86.376630][ T2945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:458 [ 86.738436][ T370] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 86.779735][ T2961] netlink: 7020 bytes leftover after parsing attributes in process `syz.1.823'. [ 86.886680][ T2969] incfs_lookup_dentry err:-13 [ 86.892017][ T2969] incfs: Can't find or create .index dir in ./bus [ 86.898730][ T2969] incfs: mount failed -13 [ 86.900631][ T370] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.920195][ T370] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 86.927249][ T36] audit: type=1400 audit(1758685411.170:404): avc: denied { accept } for pid=2972 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.932353][ T370] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0xE has invalid maxpacket 34474, setting to 64 [ 86.963775][ T370] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.972907][ T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.980939][ T370] usb 1-1: Product: syz [ 86.985122][ T370] usb 1-1: Manufacturer: syz [ 86.989779][ T370] usb 1-1: SerialNumber: syz [ 87.763913][ T2991] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.763943][ T2991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:376 [ 87.852424][ T2996] binder: Unknown parameter 'fowner' [ 88.000387][ T370] cdc_ncm 1-1:1.0: bind() failure [ 88.007119][ T370] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 88.015440][ T370] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 88.025141][ T370] usb 1-1: USB disconnect, device number 29 [ 88.145926][ T3028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'. [ 88.173552][ T3030] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.174132][ T3030] rust_binder: Error while translating object. [ 88.181375][ T3034] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 88.188072][ T3030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 88.196959][ T3034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 88.206607][ T3030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:505 [ 88.216220][ T3034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:505 [ 88.356893][ T3058] GUP no longer grows the stack in syz.1.858 (3058): 200000005000-200000008000 (200000004000) [ 88.376442][ T3058] CPU: 0 UID: 0 PID: 3058 Comm: syz.1.858 Not tainted syzkaller #0 31062737fedd5a84b75b602a907b4d4b613e131a [ 88.376481][ T3058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 88.376497][ T3058] Call Trace: [ 88.376505][ T3058] [ 88.376514][ T3058] __dump_stack+0x21/0x30 [ 88.376555][ T3058] dump_stack_lvl+0x10c/0x190 [ 88.376590][ T3058] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.376624][ T3058] ? futex_lock_pi_atomic+0xdd/0xc70 [ 88.376655][ T3058] dump_stack+0x19/0x20 [ 88.376694][ T3058] fixup_user_fault+0x63d/0x6d0 [ 88.376726][ T3058] fault_in_user_writeable+0x76/0xe0 [ 88.376751][ T3058] futex_lock_pi+0x258/0xa10 [ 88.376781][ T3058] ? __cfi_futex_lock_pi+0x10/0x10 [ 88.376811][ T3058] ? __kasan_check_write+0x18/0x20 [ 88.376849][ T3058] ? wake_up_q+0x10f/0x1c0 [ 88.376889][ T3058] ? __cfi_futex_wake_mark+0x10/0x10 [ 88.376921][ T3058] ? mas_find+0x358/0x5f0 [ 88.376943][ T3058] ? __kasan_check_write+0x18/0x20 [ 88.376981][ T3058] do_futex+0x25c/0x500 [ 88.377006][ T3058] ? __cfi_do_futex+0x10/0x10 [ 88.377031][ T3058] ? __vm_munmap+0x2c7/0x370 [ 88.377057][ T3058] __se_sys_futex+0x28f/0x300 [ 88.377083][ T3058] ? __x64_sys_futex+0x110/0x110 [ 88.377110][ T3058] ? __kasan_check_write+0x18/0x20 [ 88.377147][ T3058] __x64_sys_futex+0xe9/0x110 [ 88.377174][ T3058] x64_sys_call+0x227f/0x2ee0 [ 88.377211][ T3058] do_syscall_64+0x58/0xf0 [ 88.377239][ T3058] ? clear_bhb_loop+0x50/0xa0 [ 88.377263][ T3058] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.377301][ T3058] RIP: 0033:0x7f40cb38eec9 [ 88.377321][ T3058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.377344][ T3058] RSP: 002b:00007f40cc154038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 88.377370][ T3058] RAX: ffffffffffffffda RBX: 00007f40cb5e5fa0 RCX: 00007f40cb38eec9 [ 88.377390][ T3058] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 88.377408][ T3058] RBP: 00007f40cb411f91 R08: 0000000000000000 R09: 0000000000000000 [ 88.377425][ T3058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.377441][ T3058] R13: 00007f40cb5e6038 R14: 00007f40cb5e5fa0 R15: 00007ffdb8413678 [ 88.377463][ T3058] [ 88.481136][ T3051] overlayfs: failed to resolve 'dont_appraise': -2 [ 88.484139][ T36] audit: type=1400 audit(1758685412.730:405): avc: denied { read } for pid=3050 comm="syz.2.855" path="socket:[16076]" dev="sockfs" ino=16076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.607256][ T3064] binder: Bad value for 'defcontext' [ 88.610093][ T36] audit: type=1400 audit(1758685412.730:406): avc: denied { mounton } for pid=3050 comm="syz.2.855" path="/173/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 88.665245][ T3066] netlink: 104 bytes leftover after parsing attributes in process `syz.0.860'. [ 88.788560][ T370] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 88.829988][ T3070] tipc: Can't bind to reserved service type 1 [ 88.840036][ T36] audit: type=1400 audit(1758685413.090:407): avc: denied { append } for pid=3069 comm="syz.3.861" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.098604][ T441] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 89.174888][ T3078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 89.250092][ T441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.262212][ T441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.272554][ T441] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 89.281779][ T441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.296388][ T441] usb 4-1: config 0 descriptor?? [ 89.308444][ T3082] deleting an unspecified loop device is not supported. [ 89.315704][ T36] audit: type=1400 audit(1758685413.550:408): avc: denied { write } for pid=3081 comm="syz.2.866" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.623747][ T441] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 89.631268][ T441] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 89.641670][ T441] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 89.649338][ T441] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 89.656824][ T441] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 89.668783][ T441] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 89.738858][ T441] playstation 0003:054C:0DF2.0008: Invalid byte count transferred, expected 20 got 0 [ 89.748443][ T441] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense pairing info: -22 [ 89.758934][ T441] playstation 0003:054C:0DF2.0008: Failed to get MAC address from DualSense [ 89.767660][ T441] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 89.775815][ T441] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -22 [ 89.847494][ T3115] rust_binder: Error while translating object. [ 89.847529][ T3115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.853836][ T3115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:474 [ 89.940959][ T65] usb 4-1: USB disconnect, device number 30 [ 90.235087][ T3134] tipc: Enabling of bearer rejected, failed to enable media [ 90.244131][ T3135] tipc: Enabling of bearer rejected, failed to enable media [ 90.288898][ T3137] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.289736][ T3137] rust_binder: Error while translating object. [ 90.296307][ T3137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 90.302576][ T3137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:518 [ 90.568429][ T65] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 90.728748][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 90.740997][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 90.757158][ T65] usb 3-1: config 6 has an invalid interface number: 248 but max is 0 [ 90.769951][ T65] usb 3-1: config 6 has no interface number 0 [ 90.782647][ T65] usb 3-1: config 6 interface 248 has no altsetting 0 [ 90.799007][ T65] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 90.812562][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.828501][ T65] usb 3-1: Product: syz [ 90.837105][ T65] usb 3-1: Manufacturer: syz [ 90.846149][ T65] usb 3-1: SerialNumber: syz [ 90.880812][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.880867][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.889817][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.896069][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.902603][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.908996][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.915309][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.921785][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.928099][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.934627][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.941090][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.947366][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.953964][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.960371][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.966693][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.973164][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.979661][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.985922][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.992487][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 90.998935][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.005268][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.011886][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.018251][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.024741][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.031208][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.037481][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.044045][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.050549][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.059364][ T65] ums-karma 3-1:6.248: USB Mass Storage device detected [ 91.073762][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.073791][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.080445][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.087124][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.096621][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.103134][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.103251][ T3153] netlink: 'syz.2.888': attribute type 4 has an invalid length. [ 91.123606][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.123634][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.132187][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.139642][ T3153] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.888'. [ 91.155894][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.155924][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.156539][ T65] usb 3-1: USB disconnect, device number 32 [ 91.162736][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.174765][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.184837][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.191535][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.197864][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.211389][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.228528][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.236974][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.244480][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.253779][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.260230][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.266551][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.273081][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.279580][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.285873][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.292380][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.298792][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.305681][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.312202][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.318858][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.325225][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.331750][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.339967][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.346283][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.352748][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.359068][ T3146] rust_binder: Write failure EFAULT in pid:480 [ 91.399575][ T3167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.454335][ T3175] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 91.472360][ T3175] overlayfs: missing 'lowerdir' [ 91.588484][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 91.708428][ T441] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 91.739459][ T9] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 91.747618][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.757884][ T9] usb 4-1: config 0 has no interface number 0 [ 91.765405][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 91.774623][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.782657][ T9] usb 4-1: Product: syz [ 91.786830][ T9] usb 4-1: Manufacturer: syz [ 91.791458][ T9] usb 4-1: SerialNumber: syz [ 91.796636][ T9] usb 4-1: config 0 descriptor?? [ 91.858439][ T441] usb 3-1: Using ep0 maxpacket: 8 [ 91.864999][ T441] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.873741][ T441] usb 3-1: config 6 has an invalid interface number: 248 but max is 0 [ 91.881987][ T441] usb 3-1: config 6 has no interface number 0 [ 91.888113][ T441] usb 3-1: config 6 interface 248 has no altsetting 0 [ 91.896396][ T441] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 91.905525][ T441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.913589][ T441] usb 3-1: Product: syz [ 91.917770][ T441] usb 3-1: Manufacturer: syz [ 91.922416][ T441] usb 3-1: SerialNumber: syz [ 92.083619][ T9] usb 4-1: USB disconnect, device number 31 [ 92.130868][ T441] ums-karma 3-1:6.248: USB Mass Storage device detected [ 92.180422][ T441] usb 3-1: USB disconnect, device number 33 [ 92.345359][ T3190] binder: Unknown parameter 'context[7' [ 92.618471][ T441] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 92.778409][ T441] usb 1-1: Using ep0 maxpacket: 8 [ 92.795701][ T441] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 92.804142][ T441] usb 1-1: config 250 has an invalid interface number: 0 but max is -1 [ 92.812500][ T441] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 92.823132][ T441] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 92.834207][ T441] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 92.843452][ T441] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 92.851835][ T441] usb 1-1: Product: syz [ 92.856137][ T441] usb 1-1: SerialNumber: syz [ 92.946400][ T441] hub 1-1:250.0: bad descriptor, ignoring hub [ 92.985213][ T3216] veth1: entered allmulticast mode [ 93.007269][ T3216] SELinux: ebitmap: truncated map [ 93.012000][ T441] hub 1-1:250.0: probe with driver hub failed with error -5 [ 93.012756][ T3216] SELinux: failed to load policy [ 93.147921][ T3196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.156480][ T3196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.268543][ T582] usb 1-1: USB disconnect, device number 30 [ 93.645267][ T3237] can0: slcan on ptm0. [ 93.730021][ T3237] can0 (unregistered): slcan off ptm0. [ 93.765183][ T3257] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 93.817211][ T3215] veth1: left allmulticast mode [ 93.918421][ T441] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 94.068404][ T441] usb 1-1: Using ep0 maxpacket: 8 [ 94.074593][ T441] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 94.085791][ T404] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 94.093384][ T441] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.106255][ T441] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.112950][ T441] usb 1-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 94.122146][ T441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.130780][ T441] usb 1-1: config 0 descriptor?? [ 94.270171][ T404] usb 3-1: config 11 has an invalid interface number: 108 but max is 1 [ 94.278524][ T404] usb 3-1: config 11 has an invalid interface number: 24 but max is 1 [ 94.286747][ T404] usb 3-1: config 11 has no interface number 0 [ 94.292962][ T404] usb 3-1: config 11 has no interface number 1 [ 94.299243][ T404] usb 3-1: config 11 interface 108 altsetting 5 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 94.310250][ T404] usb 3-1: config 11 interface 108 altsetting 5 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 94.321342][ T404] usb 3-1: config 11 interface 108 altsetting 5 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 94.333111][ T404] usb 3-1: config 11 interface 24 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 94.343868][ T404] usb 3-1: config 11 interface 24 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 94.357616][ T404] usb 3-1: config 11 interface 24 altsetting 9 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 94.366304][ T36] audit: type=1400 audit(1758685418.610:409): avc: denied { write } for pid=3280 comm="syz.3.920" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.368777][ T404] usb 3-1: config 11 interface 24 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 94.391805][ T3281] random: crng reseeded on system resumption [ 94.404542][ T404] usb 3-1: config 11 interface 24 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 94.418325][ T36] audit: type=1400 audit(1758685418.640:410): avc: denied { open } for pid=3280 comm="syz.3.920" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.427201][ T404] usb 3-1: config 11 interface 24 altsetting 9 has an endpoint descriptor with address 0x74, changing to 0x4 [ 94.454032][ T404] usb 3-1: config 11 interface 24 altsetting 9 endpoint 0x4 has an invalid bInterval 238, changing to 11 [ 94.465404][ T404] usb 3-1: config 11 interface 24 altsetting 9 endpoint 0x4 has invalid maxpacket 50776, setting to 1024 [ 94.476693][ T404] usb 3-1: config 11 interface 24 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 94.487442][ T404] usb 3-1: config 11 interface 24 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 94.498188][ T404] usb 3-1: config 11 interface 24 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 94.505374][ T36] audit: type=1400 audit(1758685418.750:411): avc: denied { listen } for pid=3283 comm="syz.3.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 94.509195][ T404] usb 3-1: config 11 interface 24 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 94.530459][ T3284] fuse: Bad value for 'rootmode' [ 94.540763][ T404] usb 3-1: config 11 interface 24 altsetting 9 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 94.558132][ T404] usb 3-1: config 11 interface 108 has no altsetting 0 [ 94.565048][ T404] usb 3-1: config 11 interface 24 has no altsetting 0 [ 94.573497][ T404] usb 3-1: New USB device found, idVendor=19d2, idProduct=1127, bcdDevice= 3.d3 [ 94.582708][ T404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.590806][ T404] usb 3-1: Product: 䳈Åꃡ뽏⍌౛䅎シ⎄聴䪖疢ꊛᩊ崸➮䥏癳ꦜᶫ풱栮﷧褑毜᥵τ溇헚ᙅ揌腖✬婙䤩๮꼟sᙎ작枙瀕ᨲ⺙鄄졷ފ기箶悼⠪鯷퉪銵挚᠔㬐⌀䆆♁⿜Ϊ礄থ풥螇㵡ꕾ℗⽒㠨훍߃圧뻄垭韫ᘅ坒㯳돶絹䧺 [ 94.617874][ T404] usb 3-1: Manufacturer: 该윿㇟嬎佔쒿誯ꗼ誄ꚹ≼臵誩উऑ磗එ␓漅ﲳ囧☴圏쪝乑Ꝼꂮ⟫蒾䕎㽍턀ឭ׃㏉㜧ඇ儲衤♟鍦॓隿᭫䣳ᨱྙ漤铄㷷䍀⣠貂ᥨృ痎႟䌥繦䎉枧ꏹ㛏ꯔ└䩴细躬즈퉼㐧♶䧶ꮨꚝ뇄ﻍ䨨 [ 94.646697][ T404] usb 3-1: SerialNumber: syz [ 94.856721][ T36] audit: type=1400 audit(1758685419.100:412): avc: denied { create } for pid=3269 comm="syz.2.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 94.883626][ T404] usb 3-1: USB disconnect, device number 34 [ 95.178117][ T36] audit: type=1400 audit(1758685419.420:413): avc: denied { getopt } for pid=3292 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.198065][ T3294] binder: Bad value for 'stats' [ 95.198080][ T3293] binder: Bad value for 'stats' [ 96.741494][ T441] usbhid 1-1:0.0: can't add hid device: -71 [ 96.747899][ T441] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 96.773973][ T441] usb 1-1: USB disconnect, device number 31 [ 96.954695][ T36] audit: type=1400 audit(1758685421.200:414): avc: denied { mounton } for pid=3327 comm="syz.1.937" path="/416/file0" dev="tmpfs" ino=2247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.034330][ T36] audit: type=1400 audit(1758685421.230:415): avc: denied { setattr } for pid=3327 comm="syz.1.937" name="file0" dev="tmpfs" ino=2247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.366551][ T36] audit: type=1400 audit(1758685421.607:416): avc: denied { relabelfrom } for pid=3360 comm="syz.0.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.396026][ T36] audit: type=1400 audit(1758685421.607:417): avc: denied { relabelto } for pid=3360 comm="syz.0.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.634066][ T36] audit: type=1400 audit(1758685421.877:418): avc: denied { write } for pid=3412 comm="syz.3.977" name="icmp" dev="proc" ino=4026532573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 99.308597][ T3521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3521 comm=syz.0.1026 [ 99.350388][ T3527] bridge0: port 3(veth0) entered blocking state [ 99.357172][ T3527] bridge0: port 3(veth0) entered disabled state [ 99.363705][ T3527] veth0: entered allmulticast mode [ 99.369468][ T3527] veth0: entered promiscuous mode [ 99.374725][ T3527] bridge0: port 3(veth0) entered blocking state [ 99.381039][ T3527] bridge0: port 3(veth0) entered forwarding state [ 99.452968][ T3533] af_packet: tpacket_rcv: packet too big, clamped from 56730 to 3952. macoff=96 [ 99.599651][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 99.599671][ T36] audit: type=1400 audit(1758685424.848:424): avc: denied { mounton } for pid=3554 comm="syz.3.1042" path="/173/file0" dev="tmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.786259][ T3574] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 102.806811][ T3583] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI [ 102.819447][ T3583] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 102.827882][ T3583] CPU: 0 UID: 0 PID: 3583 Comm: syz.2.1054 Not tainted syzkaller #0 31062737fedd5a84b75b602a907b4d4b613e131a [ 102.839514][ T3583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.849662][ T3583] RIP: 0010:fuse_file_release+0x29e/0x400 [ 102.855401][ T3583] Code: 00 74 12 48 89 df e8 b1 e8 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 64 e7 a0 ff 48 ba 00 00 00 00 00 fc [ 102.875015][ T3583] RSP: 0018:ffffc9000e927d00 EFLAGS: 00010202 [ 102.881119][ T3583] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff888134af8000 [ 102.889094][ T3583] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff888119bb1278 [ 102.897068][ T3583] RBP: ffffc9000e927d48 R08: 0000000000000003 R09: 0000000000000004 [ 102.905046][ T3583] R10: dffffc0000000000 R11: fffff52001d24f70 R12: 0000000000008000 [ 102.913057][ T3583] R13: ffff888130c66880 R14: ffff888119bb1200 R15: 00000000000000c8 [ 102.921062][ T3583] FS: 000055555f5b0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 102.930026][ T3583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.936727][ T3583] CR2: 00002000000010c0 CR3: 000000011e596000 CR4: 00000000003526b0 [ 102.944733][ T3583] Call Trace: [ 102.948210][ T3583] [ 102.951163][ T3583] ? __kasan_check_write+0x18/0x20 [ 102.956325][ T3583] fuse_release+0x13e/0x1b0 [ 102.960861][ T3583] ? __cfi_fuse_release+0x10/0x10 [ 102.965915][ T3583] __fput+0x1fb/0xa00 [ 102.969930][ T3583] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 102.975529][ T3583] ____fput+0x20/0x30 [ 102.979554][ T3583] task_work_run+0x1e0/0x250 [ 102.984197][ T3583] ? __cfi_task_work_run+0x10/0x10 [ 102.989319][ T3583] ? __kasan_check_write+0x18/0x20 [ 102.994449][ T3583] resume_user_mode_work+0x36/0x50 [ 102.999604][ T3583] syscall_exit_to_user_mode+0x64/0xb0 [ 103.005094][ T3583] do_syscall_64+0x64/0xf0 [ 103.009538][ T3583] ? clear_bhb_loop+0x50/0xa0 [ 103.014215][ T3583] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.020115][ T3583] RIP: 0033:0x7f66d1d8eec9 [ 103.024602][ T3583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.044327][ T3583] RSP: 002b:00007ffe4249db98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 103.052744][ T3583] RAX: 0000000000000000 RBX: 0000000000018610 RCX: 00007f66d1d8eec9 [ 103.060716][ T3583] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 103.068788][ T3583] RBP: 00007f66d1fe7da0 R08: 0000000000000001 R09: 000000084249de8f [ 103.076772][ T3583] R10: 0000001b2df20000 R11: 0000000000000246 R12: 00007f66d1fe609c [ 103.084750][ T3583] R13: 00007f66d1fe6090 R14: ffffffffffffffff R15: 00007ffe4249dcb0 [ 103.092744][ T3583] [ 103.095766][ T3583] Modules linked in: [ 103.101877][ T36] audit: type=1400 audit(1758685428.348:425): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 103.103589][ T3583] ---[ end trace 0000000000000000 ]--- [ 103.125026][ T36] audit: type=1400 audit(1758685428.348:426): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.125062][ T36] audit: type=1400 audit(1758685428.348:427): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.125092][ T36] audit: type=1400 audit(1758685428.348:428): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.125120][ T36] audit: type=1400 audit(1758685428.348:429): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.125148][ T36] audit: type=1400 audit(1758685428.348:430): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.125178][ T36] audit: type=1400 audit(1758685428.348:431): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.260194][ T3583] RIP: 0010:fuse_file_release+0x29e/0x400 [ 103.266043][ T3583] Code: 00 74 12 48 89 df e8 b1 e8 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 64 e7 a0 ff 48 ba 00 00 00 00 00 fc [ 103.287961][ T3583] RSP: 0018:ffffc9000e927d00 EFLAGS: 00010202 [ 103.297116][ T3583] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff888134af8000 [ 103.305345][ T3583] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff888119bb1278 [ 103.313433][ T3583] RBP: ffffc9000e927d48 R08: 0000000000000003 R09: 0000000000000004 [ 103.321492][ T3583] R10: dffffc0000000000 R11: fffff52001d24f70 R12: 0000000000008000 [ 103.329654][ T3583] R13: ffff888130c66880 R14: ffff888119bb1200 R15: 00000000000000c8 [ 103.337641][ T3583] FS: 000055555f5b0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 103.346620][ T3583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.353278][ T3583] CR2: 00007f2ad63b3ad8 CR3: 000000011e596000 CR4: 00000000003526b0 [ 103.361392][ T3583] Kernel panic - not syncing: Fatal exception [ 103.367958][ T3583] Kernel Offset: disabled [ 103.372287][ T3583] Rebooting in 86400 seconds..