last executing test programs: 2.755862069s ago: executing program 2 (id=1550): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x6, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x8e, 0x5, 0x8d, 0x40, 0x5c6, 0x9212, 0xfb9f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x1, 0xc0, 0x9, [{{0x9, 0x4, 0x5e, 0x5, 0x0, 0xb4, 0x35, 0xa4, 0xea}}]}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.173324748s ago: executing program 2 (id=1572): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x0) ioctl$EVIOCGREP(r0, 0x80284504, &(0x7f0000000040)=""/102) 2.164695298s ago: executing program 2 (id=1573): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0x9b, 0x40000ffffffff, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0xd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.0409589s ago: executing program 2 (id=1574): keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='\x00', 0x0) 2.0407864s ago: executing program 2 (id=1575): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.01667698s ago: executing program 2 (id=1576): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 1.122307513s ago: executing program 1 (id=1588): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)={0x4, 0x0, [{0x4000, 0x5b, &(0x7f0000000340)=""/91}, {0xdddd1000, 0x1000, &(0x7f0000000e80)=""/4096}, {0x80a0000, 0x59, &(0x7f00000003c0)=""/89}, {0x8000000, 0x69, &(0x7f0000000640)=""/105}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.023770005s ago: executing program 1 (id=1597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x100ed94, 0x3401, 0x0, 0x60b}, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 917.923186ms ago: executing program 1 (id=1590): ptrace(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 578.127622ms ago: executing program 0 (id=1595): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bridge_slave_0\x00', 0x7c54}) 571.291431ms ago: executing program 0 (id=1596): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r2, &(0x7f0000000500)={0x18, 0x0, r4}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x400, 0x0) 559.540582ms ago: executing program 0 (id=1598): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) read$eventfd(r1, &(0x7f0000000080), 0x8) 532.876352ms ago: executing program 0 (id=1599): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x0) ioctl$EVIOCGREP(r0, 0x80284504, &(0x7f0000000040)=""/102) 525.954783ms ago: executing program 0 (id=1600): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) 476.870653ms ago: executing program 0 (id=1601): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xdc, 0x7a, 0x22, 0x40, 0xac8, 0x321, 0xa1c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x68, 0x20, 0x0, 0x63, 0x74, 0x11}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, &(0x7f00000000c0)=0x18) 131.379238ms ago: executing program 3 (id=1606): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)={0x4, 0x0, [{0x4000, 0x5b, &(0x7f0000000340)=""/91}, {0xdddd1000, 0x1000, &(0x7f0000000e80)=""/4096}, {0x80a0000, 0x59, &(0x7f00000003c0)=""/89}, {0x8000000, 0x69, &(0x7f0000000640)=""/105}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 111.281778ms ago: executing program 3 (id=1607): keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='\x00', 0x0) 110.529098ms ago: executing program 3 (id=1608): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='#%::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<+\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[\a\x00\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce5<\x0e\xd25\fo\x8f^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x4) 66.932669ms ago: executing program 3 (id=1609): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) 66.761269ms ago: executing program 3 (id=1610): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f00000000c0)={0x8001, 0x0, 0x1, 0xf, 0x3, 0x3, 0x0, 0x6, 0x80000003}) 60.950839ms ago: executing program 1 (id=1611): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 53.529939ms ago: executing program 3 (id=1612): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 202.93µs ago: executing program 1 (id=1613): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x4c) 0s ago: executing program 1 (id=1614): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000700)=[@decrefs], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ][ T2962] RSP: 002b:00007fdf883a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 85.147809][ T2962] RAX: ffffffffffffffda RBX: 00007fdf877b5fa0 RCX: 00007fdf8758e929 [ 85.147825][ T2962] RDX: 0000000000000000 RSI: 0000000000fff000 RDI: 0000200000000000 [ 85.147840][ T2962] RBP: 00007fdf883a3090 R08: ffffffffffffffff R09: 0000000000000000 [ 85.147854][ T2962] R10: 0002000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 85.147869][ T2962] R13: 0000000000000000 R14: 00007fdf877b5fa0 R15: 00007fff9258ab18 [ 85.147884][ T2962] [ 85.472974][ T2966] rust_binder: Write failure EFAULT in pid:540 [ 85.498944][ T31] hid-generic C98F:0003:0000.0003: unknown main item tag 0x0 [ 85.512415][ T2975] FAULT_INJECTION: forcing a failure. [ 85.512415][ T2975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.512679][ T31] hid-generic C98F:0003:0000.0003: unknown main item tag 0x0 [ 85.526184][ T2975] CPU: 0 UID: 0 PID: 2975 Comm: syz.0.1053 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 85.526211][ T2975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.526223][ T2975] Call Trace: [ 85.526229][ T2975] [ 85.526237][ T2975] __dump_stack+0x21/0x30 [ 85.526263][ T2975] dump_stack_lvl+0x10c/0x190 [ 85.526282][ T2975] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.526304][ T2975] dump_stack+0x19/0x20 [ 85.526322][ T2975] should_fail_ex+0x3d9/0x530 [ 85.526342][ T2975] should_fail+0xf/0x20 [ 85.526359][ T2975] should_fail_usercopy+0x1e/0x30 [ 85.526378][ T2975] _copy_to_user+0x24/0xa0 [ 85.526399][ T2975] simple_read_from_buffer+0xed/0x160 [ 85.526425][ T2975] proc_fail_nth_read+0x19e/0x210 [ 85.526442][ T2975] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 85.526459][ T2975] ? bpf_lsm_file_permission+0xd/0x20 [ 85.526477][ T2975] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 85.526494][ T2975] vfs_read+0x278/0xb60 [ 85.526514][ T2975] ? __cfi_vfs_read+0x10/0x10 [ 85.526532][ T2975] ? __kasan_check_write+0x18/0x20 [ 85.526551][ T2975] ? mutex_lock+0x92/0x1c0 [ 85.526567][ T2975] ? __cfi_mutex_lock+0x10/0x10 [ 85.526583][ T2975] ? __fget_files+0x2c5/0x340 [ 85.526606][ T2975] ksys_read+0x141/0x250 [ 85.526625][ T2975] ? __cfi_ksys_read+0x10/0x10 [ 85.526645][ T2975] ? __kasan_check_read+0x15/0x20 [ 85.526677][ T2975] __x64_sys_read+0x7f/0x90 [ 85.526697][ T2975] x64_sys_call+0x2638/0x2ee0 [ 85.526718][ T2975] do_syscall_64+0x58/0xf0 [ 85.526740][ T2975] ? clear_bhb_loop+0x35/0x90 [ 85.526764][ T2975] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.526787][ T2975] RIP: 0033:0x7fdf8758d33c [ 85.526802][ T2975] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 85.526817][ T2975] RSP: 002b:00007fdf883a3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.526837][ T2975] RAX: ffffffffffffffda RBX: 00007fdf877b5fa0 RCX: 00007fdf8758d33c [ 85.526851][ T2975] RDX: 000000000000000f RSI: 00007fdf883a30a0 RDI: 0000000000000003 [ 85.526863][ T2975] RBP: 00007fdf883a3090 R08: 0000000000000000 R09: 0000000000000000 [ 85.526876][ T2975] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 85.526887][ T2975] R13: 0000000000000000 R14: 00007fdf877b5fa0 R15: 00007fff9258ab18 [ 85.526903][ T2975] [ 85.592782][ T36] audit: type=1400 audit(1750424996.010:341): avc: denied { sqpoll } for pid=2976 comm="syz.0.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 85.606281][ T31] hid-generic C98F:0003:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 85.639339][ T2980] fido_id[2980]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.816866][ T31] usb 2-1: USB disconnect, device number 6 [ 85.881230][ T2984] FAULT_INJECTION: forcing a failure. [ 85.881230][ T2984] name failslab, interval 1, probability 0, space 0, times 0 [ 85.894551][ T2984] CPU: 0 UID: 0 PID: 2984 Comm: syz.2.1056 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 85.894576][ T2984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.894585][ T2984] Call Trace: [ 85.894590][ T2984] [ 85.894598][ T2984] __dump_stack+0x21/0x30 [ 85.894625][ T2984] dump_stack_lvl+0x10c/0x190 [ 85.894646][ T2984] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.894668][ T2984] dump_stack+0x19/0x20 [ 85.894688][ T2984] should_fail_ex+0x3d9/0x530 [ 85.894709][ T2984] should_failslab+0xac/0x100 [ 85.894733][ T2984] kmem_cache_alloc_noprof+0x42/0x3a0 [ 85.894754][ T2984] ? __anon_vma_prepare+0xac/0x570 [ 85.894774][ T2984] __anon_vma_prepare+0xac/0x570 [ 85.894793][ T2984] ? __kasan_check_write+0x18/0x20 [ 85.894814][ T2984] ? _raw_spin_lock+0x8c/0x120 [ 85.894837][ T2984] do_pte_missing+0x2cd5/0x3e50 [ 85.894864][ T2984] ? _raw_spin_unlock+0x45/0x60 [ 85.894897][ T2984] ? __cfi___pmd_alloc+0x10/0x10 [ 85.894918][ T2984] ? pte_marker_clear+0x1b0/0x1b0 [ 85.894941][ T2984] ? is_bpf_text_address+0x17b/0x1a0 [ 85.894969][ T2984] handle_mm_fault+0x1166/0x1b90 [ 85.894994][ T2984] ? __cfi_handle_mm_fault+0x10/0x10 [ 85.895021][ T2984] ? mmput+0x5c/0x170 [ 85.895046][ T2984] ? ns_to_kernel_old_timeval+0x71/0xc0 [ 85.895070][ T2984] ? lock_mm_and_find_vma+0xb8/0x3a0 [ 85.895093][ T2984] do_user_addr_fault+0x4ca/0x1200 [ 85.895117][ T2984] exc_page_fault+0x59/0xc0 [ 85.895136][ T2984] asm_exc_page_fault+0x2b/0x30 [ 85.895161][ T2984] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 85.895184][ T2984] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 85.895200][ T2984] RSP: 0018:ffffc90003d87d80 EFLAGS: 00050206 [ 85.895220][ T2984] RAX: ffffffff82a47201 RBX: 0000000000000090 RCX: 0000000000000090 [ 85.895236][ T2984] RDX: 0000000000000000 RSI: ffffc90003d87de0 RDI: 0000200000000880 [ 85.895250][ T2984] RBP: ffffc90003d87db0 R08: ffffc90003d87e6f R09: 1ffff920007b0fcd [ 85.895264][ T2984] R10: dffffc0000000000 R11: fffff520007b0fce R12: 0000200000000910 [ 85.895278][ T2984] R13: 00007ffffffff000 R14: 0000200000000880 R15: ffffc90003d87de0 [ 85.895294][ T2984] ? _copy_from_user+0x71/0xb0 [ 85.895319][ T2984] ? _copy_to_user+0x7d/0xa0 [ 85.895343][ T2984] __x64_sys_getrusage+0x11e/0x1a0 [ 85.895366][ T2984] ? __cfi___x64_sys_getrusage+0x10/0x10 [ 85.895390][ T2984] ? __kasan_check_read+0x15/0x20 [ 85.895410][ T2984] x64_sys_call+0xb5c/0x2ee0 [ 85.895433][ T2984] do_syscall_64+0x58/0xf0 [ 85.895455][ T2984] ? clear_bhb_loop+0x35/0x90 [ 85.895481][ T2984] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.895505][ T2984] RIP: 0033:0x7f6a3618e929 [ 85.895521][ T2984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.895537][ T2984] RSP: 002b:00007f6a36f5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000062 [ 85.895556][ T2984] RAX: ffffffffffffffda RBX: 00007f6a363b5fa0 RCX: 00007f6a3618e929 [ 85.895569][ T2984] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000001 [ 85.895581][ T2984] RBP: 00007f6a36f5d090 R08: 0000000000000000 R09: 0000000000000000 [ 85.895593][ T2984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.895606][ T2984] R13: 0000000000000000 R14: 00007f6a363b5fa0 R15: 00007fff1a457778 [ 85.895621][ T2984] [ 86.281137][ T2995] FAULT_INJECTION: forcing a failure. [ 86.281137][ T2995] name fail_futex, interval 1, probability 0, space 0, times 0 [ 86.289658][ T2999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.303718][ T2995] CPU: 0 UID: 0 PID: 2995 Comm: syz.3.1060 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 86.303755][ T2995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.303768][ T2995] Call Trace: [ 86.303775][ T2995] [ 86.303784][ T2995] __dump_stack+0x21/0x30 [ 86.303812][ T2995] dump_stack_lvl+0x10c/0x190 [ 86.303834][ T2995] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.303858][ T2995] dump_stack+0x19/0x20 [ 86.303887][ T2995] should_fail_ex+0x3d9/0x530 [ 86.303910][ T2995] should_fail+0xf/0x20 [ 86.303929][ T2995] get_futex_key+0x215/0x930 [ 86.303954][ T2995] ? __cfi_get_futex_key+0x10/0x10 [ 86.303978][ T2995] futex_wake_op+0x146/0xd80 [ 86.303999][ T2995] ? __cfi_futex_wake_op+0x10/0x10 [ 86.304016][ T2995] ? __kasan_check_write+0x18/0x20 [ 86.304039][ T2995] ? proc_fail_nth_write+0x17e/0x210 [ 86.304059][ T2995] ? bpf_lsm_file_permission+0xd/0x20 [ 86.304081][ T2995] ? vfs_write+0x8ba/0xe80 [ 86.304111][ T2995] do_futex+0x37b/0x500 [ 86.304136][ T2995] ? __cfi_do_futex+0x10/0x10 [ 86.304160][ T2995] ? mutex_unlock+0x8b/0x240 [ 86.304179][ T2995] ? __fget_files+0x2c5/0x340 [ 86.304204][ T2995] __se_sys_futex+0x28f/0x300 [ 86.304229][ T2995] ? fput+0x1a5/0x240 [ 86.304256][ T2995] ? __x64_sys_futex+0x110/0x110 [ 86.304281][ T2995] ? __cfi_ksys_write+0x10/0x10 [ 86.304304][ T2995] __x64_sys_futex+0xe9/0x110 [ 86.304329][ T2995] x64_sys_call+0x227f/0x2ee0 [ 86.304353][ T2995] do_syscall_64+0x58/0xf0 [ 86.304377][ T2995] ? clear_bhb_loop+0x35/0x90 [ 86.304404][ T2995] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.304431][ T2995] RIP: 0033:0x7f250f38e929 [ 86.304448][ T2995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.304465][ T2995] RSP: 002b:00007f2510277038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 86.304488][ T2995] RAX: ffffffffffffffda RBX: 00007f250f5b5fa0 RCX: 00007f250f38e929 [ 86.304503][ T2995] RDX: 00000000fffefffe RSI: 0000000000000005 RDI: 0000000000000000 [ 86.304516][ T2995] RBP: 00007f2510277090 R08: 0000000000000000 R09: 0000000000000001 [ 86.304530][ T2995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.304542][ T2995] R13: 0000000000000001 R14: 00007f250f5b5fa0 R15: 00007fff06a5b378 [ 86.304559][ T2995] [ 86.316979][ T3003] FAULT_INJECTION: forcing a failure. [ 86.316979][ T3003] name failslab, interval 1, probability 0, space 0, times 0 [ 86.562436][ T3003] CPU: 0 UID: 0 PID: 3003 Comm: syz.3.1063 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 86.562462][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.562469][ T3003] Call Trace: [ 86.562473][ T3003] [ 86.562479][ T3003] __dump_stack+0x21/0x30 [ 86.562497][ T3003] dump_stack_lvl+0x10c/0x190 [ 86.562510][ T3003] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.562525][ T3003] dump_stack+0x19/0x20 [ 86.562537][ T3003] should_fail_ex+0x3d9/0x530 [ 86.562556][ T3003] should_failslab+0xac/0x100 [ 86.562572][ T3003] kmem_cache_alloc_noprof+0x42/0x3a0 [ 86.562586][ T3003] ? __anon_vma_prepare+0xac/0x570 [ 86.562600][ T3003] __anon_vma_prepare+0xac/0x570 [ 86.562612][ T3003] ? __kasan_check_write+0x18/0x20 [ 86.562628][ T3003] ? _raw_spin_lock+0x8c/0x120 [ 86.562648][ T3003] do_pte_missing+0x2cd5/0x3e50 [ 86.562671][ T3003] ? _raw_spin_unlock+0x45/0x60 [ 86.562691][ T3003] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 86.562709][ T3003] ? __cfi___pmd_alloc+0x10/0x10 [ 86.562728][ T3003] ? pte_marker_clear+0x1b0/0x1b0 [ 86.562750][ T3003] handle_mm_fault+0x1166/0x1b90 [ 86.562772][ T3003] ? __cfi_handle_mm_fault+0x10/0x10 [ 86.562791][ T3003] ? find_vma+0xcd/0x110 [ 86.562809][ T3003] ? lock_mm_and_find_vma+0xb8/0x3a0 [ 86.562829][ T3003] do_user_addr_fault+0x4ca/0x1200 [ 86.562848][ T3003] exc_page_fault+0x59/0xc0 [ 86.562865][ T3003] asm_exc_page_fault+0x2b/0x30 [ 86.562905][ T3003] RIP: 0010:__put_user_4+0x11/0x30 [ 86.562926][ T3003] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 86.562940][ T3003] RSP: 0018:ffffc90003c77e70 EFLAGS: 00050206 [ 86.562956][ T3003] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000000 [ 86.562968][ T3003] RDX: ffff88810e3edf00 RSI: 0000000000000005 RDI: 0000000000000000 [ 86.562979][ T3003] RBP: ffffc90003c77ed8 R08: ffff888107778927 R09: 1ffff11020eef124 [ 86.562991][ T3003] R10: dffffc0000000000 R11: ffffed1020eef125 R12: 0000000000000007 [ 86.563002][ T3003] R13: 0000200000000000 R14: 0000000000000004 R15: 0000000000000000 [ 86.563015][ T3003] ? __sys_socketpair+0xb0/0x5c0 [ 86.563035][ T3003] __x64_sys_socketpair+0x9f/0xc0 [ 86.563054][ T3003] x64_sys_call+0x2081/0x2ee0 [ 86.563073][ T3003] do_syscall_64+0x58/0xf0 [ 86.563091][ T3003] ? clear_bhb_loop+0x35/0x90 [ 86.563119][ T3003] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.563139][ T3003] RIP: 0033:0x7f250f38e929 [ 86.563152][ T3003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.563165][ T3003] RSP: 002b:00007f2510277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 86.563180][ T3003] RAX: ffffffffffffffda RBX: 00007f250f5b5fa0 RCX: 00007f250f38e929 [ 86.563192][ T3003] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000001 [ 86.563202][ T3003] RBP: 00007f2510277090 R08: 0000000000000000 R09: 0000000000000000 [ 86.563212][ T3003] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.563222][ T3003] R13: 0000000000000001 R14: 00007f250f5b5fa0 R15: 00007fff06a5b378 [ 86.563235][ T3003] [ 86.604841][ T3016] rust_binder: Error while translating object. [ 86.617316][ T3018] FAULT_INJECTION: forcing a failure. [ 86.617316][ T3018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.625001][ T3016] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.629516][ T3018] CPU: 1 UID: 0 PID: 3018 Comm: syz.3.1068 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 86.629543][ T3018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.629554][ T3018] Call Trace: [ 86.629560][ T3018] [ 86.629567][ T3018] __dump_stack+0x21/0x30 [ 86.629594][ T3018] dump_stack_lvl+0x10c/0x190 [ 86.629613][ T3018] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.629634][ T3018] dump_stack+0x19/0x20 [ 86.629661][ T3018] should_fail_ex+0x3d9/0x530 [ 86.629681][ T3018] should_fail+0xf/0x20 [ 86.629698][ T3018] should_fail_usercopy+0x1e/0x30 [ 86.629717][ T3018] _copy_to_user+0x24/0xa0 [ 86.629739][ T3018] simple_read_from_buffer+0xed/0x160 [ 86.629765][ T3018] proc_fail_nth_read+0x19e/0x210 [ 86.629783][ T3018] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 86.629800][ T3018] ? bpf_lsm_file_permission+0xd/0x20 [ 86.629819][ T3018] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 86.629835][ T3018] vfs_read+0x278/0xb60 [ 86.629856][ T3018] ? __cfi_vfs_read+0x10/0x10 [ 86.629874][ T3018] ? __kasan_check_write+0x18/0x20 [ 86.629893][ T3018] ? mutex_lock+0x92/0x1c0 [ 86.629911][ T3018] ? __cfi_mutex_lock+0x10/0x10 [ 86.629927][ T3018] ? __fget_files+0x2c5/0x340 [ 86.629951][ T3018] ksys_read+0x141/0x250 [ 86.629970][ T3018] ? __cfi_ksys_read+0x10/0x10 [ 86.629990][ T3018] ? __kasan_check_read+0x15/0x20 [ 86.630009][ T3018] __x64_sys_read+0x7f/0x90 [ 86.630028][ T3018] x64_sys_call+0x2638/0x2ee0 [ 86.630050][ T3018] do_syscall_64+0x58/0xf0 [ 86.630071][ T3018] ? clear_bhb_loop+0x35/0x90 [ 86.630095][ T3018] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.630118][ T3018] RIP: 0033:0x7f250f38d33c [ 86.630133][ T3018] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 86.630148][ T3018] RSP: 002b:00007f2510277030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.630168][ T3018] RAX: ffffffffffffffda RBX: 00007f250f5b5fa0 RCX: 00007f250f38d33c [ 86.630183][ T3018] RDX: 000000000000000f RSI: 00007f25102770a0 RDI: 0000000000000004 [ 86.630195][ T3018] RBP: 00007f2510277090 R08: 0000000000000000 R09: 0000000000000000 [ 86.630207][ T3018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.630218][ T3018] R13: 0000000000000000 R14: 00007f250f5b5fa0 R15: 00007fff06a5b378 [ 86.630232][ T3018] [ 86.653749][ T3020] binder: Unknown parameter 'non à' [ 86.660082][ T3016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:734 [ 87.242314][ T36] audit: type=1400 audit(1750424997.660:342): avc: denied { append } for pid=3023 comm="syz.2.1070" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.288560][ T36] audit: type=1400 audit(1750424997.670:343): avc: denied { associate } for pid=3029 comm="syz.1.1073" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 87.309982][ T36] audit: type=1326 audit(1750424997.700:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3029 comm="syz.1.1073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd19e18e929 code=0x0 [ 87.342069][ T36] audit: type=1400 audit(1750424997.750:345): avc: denied { remount } for pid=3036 comm="syz.2.1075" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 87.399928][ T3045] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 87.424815][ T3045] rust_binder: Write failure EINVAL in pid:669 [ 87.426070][ T36] audit: type=1326 audit(1750424997.840:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3044 comm="syz.2.1078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a3618e929 code=0x0 [ 87.437706][ T3052] FAULT_INJECTION: forcing a failure. [ 87.437706][ T3052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.468286][ T3052] CPU: 1 UID: 0 PID: 3052 Comm: syz.3.1081 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 87.468308][ T3052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.468314][ T3052] Call Trace: [ 87.468317][ T3052] [ 87.468322][ T3052] __dump_stack+0x21/0x30 [ 87.468337][ T3052] dump_stack_lvl+0x10c/0x190 [ 87.468348][ T3052] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.468358][ T3052] dump_stack+0x19/0x20 [ 87.468368][ T3052] should_fail_ex+0x3d9/0x530 [ 87.468378][ T3052] should_fail+0xf/0x20 [ 87.468387][ T3052] should_fail_usercopy+0x1e/0x30 [ 87.468396][ T3052] _copy_to_user+0x24/0xa0 [ 87.468408][ T3052] simple_read_from_buffer+0xed/0x160 [ 87.468421][ T3052] proc_fail_nth_read+0x19e/0x210 [ 87.468430][ T3052] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 87.468438][ T3052] ? bpf_lsm_file_permission+0xd/0x20 [ 87.468448][ T3052] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 87.468456][ T3052] vfs_read+0x278/0xb60 [ 87.468466][ T3052] ? __cfi_vfs_read+0x10/0x10 [ 87.468476][ T3052] ? __kasan_check_write+0x18/0x20 [ 87.468485][ T3052] ? mutex_lock+0x92/0x1c0 [ 87.468494][ T3052] ? __cfi_mutex_lock+0x10/0x10 [ 87.468502][ T3052] ? __fget_files+0x2c5/0x340 [ 87.468514][ T3052] ksys_read+0x141/0x250 [ 87.468523][ T3052] ? __cfi_ksys_read+0x10/0x10 [ 87.468532][ T3052] ? __kasan_check_write+0x18/0x20 [ 87.468542][ T3052] ? __kasan_check_read+0x15/0x20 [ 87.468551][ T3052] __x64_sys_read+0x7f/0x90 [ 87.468561][ T3052] x64_sys_call+0x2638/0x2ee0 [ 87.468572][ T3052] do_syscall_64+0x58/0xf0 [ 87.468583][ T3052] ? clear_bhb_loop+0x35/0x90 [ 87.468596][ T3052] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.468608][ T3052] RIP: 0033:0x7f250f38d33c [ 87.468616][ T3052] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.468624][ T3052] RSP: 002b:00007f2510277030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.468635][ T3052] RAX: ffffffffffffffda RBX: 00007f250f5b5fa0 RCX: 00007f250f38d33c [ 87.468642][ T3052] RDX: 000000000000000f RSI: 00007f25102770a0 RDI: 0000000000000004 [ 87.468648][ T3052] RBP: 00007f2510277090 R08: 0000000000000000 R09: 0000000000000000 [ 87.468654][ T3052] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 87.468660][ T3052] R13: 0000000000000000 R14: 00007f250f5b5fa0 R15: 00007fff06a5b378 [ 87.468667][ T3052] [ 87.839458][ T489] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 87.868420][ T36] audit: type=1400 audit(1750424998.280:347): avc: denied { block_suspend } for pid=3060 comm="syz.3.1084" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.889958][ T36] audit: type=1400 audit(1750424998.310:348): avc: denied { read } for pid=3060 comm="syz.3.1084" path="socket:[37969]" dev="sockfs" ino=37969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.927193][ T3068] FAULT_INJECTION: forcing a failure. [ 87.927193][ T3068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.940490][ T3068] CPU: 0 UID: 0 PID: 3068 Comm: syz.3.1087 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 87.940519][ T3068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.940529][ T3068] Call Trace: [ 87.940534][ T3068] [ 87.940541][ T3068] __dump_stack+0x21/0x30 [ 87.940557][ T3068] dump_stack_lvl+0x10c/0x190 [ 87.940568][ T3068] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.940578][ T3068] dump_stack+0x19/0x20 [ 87.940588][ T3068] should_fail_ex+0x3d9/0x530 [ 87.940598][ T3068] should_fail+0xf/0x20 [ 87.940606][ T3068] should_fail_usercopy+0x1e/0x30 [ 87.940623][ T3068] _copy_to_user+0x24/0xa0 [ 87.940636][ T3068] simple_read_from_buffer+0xed/0x160 [ 87.940649][ T3068] proc_fail_nth_read+0x19e/0x210 [ 87.940658][ T3068] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 87.940666][ T3068] ? bpf_lsm_file_permission+0xd/0x20 [ 87.940676][ T3068] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 87.940685][ T3068] vfs_read+0x278/0xb60 [ 87.940695][ T3068] ? __cfi_vfs_read+0x10/0x10 [ 87.940704][ T3068] ? __kasan_check_write+0x18/0x20 [ 87.940714][ T3068] ? mutex_lock+0x92/0x1c0 [ 87.940723][ T3068] ? __cfi_mutex_lock+0x10/0x10 [ 87.940730][ T3068] ? __fget_files+0x2c5/0x340 [ 87.940742][ T3068] ksys_read+0x141/0x250 [ 87.940752][ T3068] ? __cfi_ksys_read+0x10/0x10 [ 87.940762][ T3068] ? __kasan_check_read+0x15/0x20 [ 87.940771][ T3068] __x64_sys_read+0x7f/0x90 [ 87.940781][ T3068] x64_sys_call+0x2638/0x2ee0 [ 87.940793][ T3068] do_syscall_64+0x58/0xf0 [ 87.940804][ T3068] ? clear_bhb_loop+0x35/0x90 [ 87.940816][ T3068] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.940828][ T3068] RIP: 0033:0x7f250f38d33c [ 87.940838][ T3068] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.940846][ T3068] RSP: 002b:00007f2510277030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.940858][ T3068] RAX: ffffffffffffffda RBX: 00007f250f5b5fa0 RCX: 00007f250f38d33c [ 87.940865][ T3068] RDX: 000000000000000f RSI: 00007f25102770a0 RDI: 0000000000000004 [ 87.940873][ T3068] RBP: 00007f2510277090 R08: 0000000000000000 R09: 0000000000000000 [ 87.940879][ T3068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.940885][ T3068] R13: 0000000000000000 R14: 00007f250f5b5fa0 R15: 00007fff06a5b378 [ 87.940892][ T3068] [ 88.205191][ T489] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.214228][ T489] usb 1-1: config index 0 descriptor too short (expected 61467, got 27) [ 88.224434][ T489] usb 1-1: config 136 has an invalid descriptor of length 251, skipping remainder of the config [ 88.229616][ T3074] FAULT_INJECTION: forcing a failure. [ 88.229616][ T3074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.235882][ T489] usb 1-1: config 136 has 0 interfaces, different from the descriptor's value: 16 [ 88.248115][ T3074] CPU: 1 UID: 0 PID: 3074 Comm: syz.1.1090 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 88.248145][ T3074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.248156][ T3074] Call Trace: [ 88.248162][ T3074] [ 88.248169][ T3074] __dump_stack+0x21/0x30 [ 88.248195][ T3074] dump_stack_lvl+0x10c/0x190 [ 88.248215][ T3074] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.248236][ T3074] dump_stack+0x19/0x20 [ 88.248254][ T3074] should_fail_ex+0x3d9/0x530 [ 88.248274][ T3074] should_fail+0xf/0x20 [ 88.248291][ T3074] should_fail_usercopy+0x1e/0x30 [ 88.248310][ T3074] _copy_to_user+0x24/0xa0 [ 88.248332][ T3074] simple_read_from_buffer+0xed/0x160 [ 88.248358][ T3074] proc_fail_nth_read+0x19e/0x210 [ 88.248376][ T3074] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 88.248392][ T3074] ? bpf_lsm_file_permission+0xd/0x20 [ 88.248410][ T3074] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 88.248427][ T3074] vfs_read+0x278/0xb60 [ 88.248448][ T3074] ? _raw_spin_unlock_bh+0x54/0x60 [ 88.248470][ T3074] ? __cfi_vfs_read+0x10/0x10 [ 88.248489][ T3074] ? __kasan_check_write+0x18/0x20 [ 88.248507][ T3074] ? mutex_lock+0x92/0x1c0 [ 88.248523][ T3074] ? __cfi_mutex_lock+0x10/0x10 [ 88.248539][ T3074] ? __fget_files+0x2c5/0x340 [ 88.248561][ T3074] ksys_read+0x141/0x250 [ 88.248580][ T3074] ? __cfi_ksys_read+0x10/0x10 [ 88.248600][ T3074] ? __kasan_check_read+0x15/0x20 [ 88.248619][ T3074] __x64_sys_read+0x7f/0x90 [ 88.248639][ T3074] x64_sys_call+0x2638/0x2ee0 [ 88.248661][ T3074] do_syscall_64+0x58/0xf0 [ 88.248682][ T3074] ? clear_bhb_loop+0x35/0x90 [ 88.248706][ T3074] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.248729][ T3074] RIP: 0033:0x7fd19e18d33c [ 88.248745][ T3074] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 88.248761][ T3074] RSP: 002b:00007fd19c7f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.248781][ T3074] RAX: ffffffffffffffda RBX: 00007fd19e3b5fa0 RCX: 00007fd19e18d33c [ 88.248795][ T3074] RDX: 000000000000000f RSI: 00007fd19c7f70a0 RDI: 0000000000000003 [ 88.248808][ T3074] RBP: 00007fd19c7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.248820][ T3074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.248832][ T3074] R13: 0000000000000000 R14: 00007fd19e3b5fa0 R15: 00007fff4d7838d8 [ 88.248847][ T3074] [ 88.503552][ T489] usb 1-1: string descriptor 0 read error: -22 [ 88.509894][ T489] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 88.519007][ T489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.553511][ T3078] FAULT_INJECTION: forcing a failure. [ 88.553511][ T3078] name failslab, interval 1, probability 0, space 0, times 0 [ 88.566451][ T3078] CPU: 1 UID: 0 PID: 3078 Comm: syz.3.1092 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 88.566487][ T3078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.566499][ T3078] Call Trace: [ 88.566505][ T3078] [ 88.566513][ T3078] __dump_stack+0x21/0x30 [ 88.566541][ T3078] dump_stack_lvl+0x10c/0x190 [ 88.566563][ T3078] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.566585][ T3078] dump_stack+0x19/0x20 [ 88.566606][ T3078] should_fail_ex+0x3d9/0x530 [ 88.566626][ T3078] should_failslab+0xac/0x100 [ 88.566649][ T3078] __kmalloc_cache_noprof+0x41/0x3c0 [ 88.566669][ T3078] ? __se_sys_mount+0x15f/0x480 [ 88.566691][ T3078] __se_sys_mount+0x15f/0x480 [ 88.566712][ T3078] ? ksys_write+0x1ef/0x250 [ 88.566733][ T3078] ? __x64_sys_mount+0xf0/0xf0 [ 88.566755][ T3078] __x64_sys_mount+0xc3/0xf0 [ 88.566776][ T3078] x64_sys_call+0x2021/0x2ee0 [ 88.566798][ T3078] do_syscall_64+0x58/0xf0 [ 88.566822][ T3078] ? clear_bhb_loop+0x35/0x90 [ 88.566851][ T3078] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.566878][ T3078] RIP: 0033:0x7f250f38e929 [ 88.566895][ T3078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.566912][ T3078] RSP: 002b:00007f2510277038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.566947][ T3078] RAX: ffffffffffffffda RBX: 00007f250f5b5fa0 RCX: 00007f250f38e929 [ 88.566962][ T3078] RDX: 0000200000001880 RSI: 0000200000001840 RDI: 0000000000000000 [ 88.566976][ T3078] RBP: 00007f2510277090 R08: 00002000000018c0 R09: 0000000000000000 [ 88.566990][ T3078] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 88.567003][ T3078] R13: 0000000000000000 R14: 00007f250f5b5fa0 R15: 00007fff06a5b378 [ 88.567020][ T3078] [ 88.767399][ T306] usb 1-1: USB disconnect, device number 12 [ 88.772665][ T3084] FAULT_INJECTION: forcing a failure. [ 88.772665][ T3084] name failslab, interval 1, probability 0, space 0, times 0 [ 88.790659][ T3084] CPU: 1 UID: 0 PID: 3084 Comm: syz.3.1095 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 88.790691][ T3084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.790703][ T3084] Call Trace: [ 88.790710][ T3084] [ 88.790718][ T3084] __dump_stack+0x21/0x30 [ 88.790746][ T3084] dump_stack_lvl+0x10c/0x190 [ 88.790768][ T3084] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.790792][ T3084] dump_stack+0x19/0x20 [ 88.790812][ T3084] should_fail_ex+0x3d9/0x530 [ 88.790833][ T3084] should_failslab+0xac/0x100 [ 88.790858][ T3084] kmem_cache_alloc_noprof+0x42/0x3a0 [ 88.790879][ T3084] ? fcntl_setlk+0xba/0x1110 [ 88.790903][ T3084] fcntl_setlk+0xba/0x1110 [ 88.790925][ T3084] ? __asan_memcpy+0x11/0x80 [ 88.790947][ T3084] ? irqentry_exit+0x4a/0x60 [ 88.790966][ T3084] ? exc_page_fault+0x66/0xc0 [ 88.790986][ T3084] ? asm_exc_page_fault+0x2b/0x30 [ 88.791011][ T3084] ? __cfi_fcntl_setlk+0x10/0x10 [ 88.791034][ T3084] ? rep_movs_alternative+0x30/0xa0 [ 88.791055][ T3084] do_fcntl+0x880/0x1500 [ 88.791077][ T3084] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 88.791104][ T3084] ? check_fcntl_cmd+0xb0/0xb0 [ 88.791125][ T3084] ? __cfi_mutex_unlock+0x10/0x10 [ 88.791143][ T3084] ? __fget_files+0x2c5/0x340 [ 88.791169][ T3084] ? bpf_lsm_file_fcntl+0xd/0x20 [ 88.791189][ T3084] ? security_file_fcntl+0x34/0xd0 [ 88.791212][ T3084] __se_sys_fcntl+0xe4/0x180 [ 88.791235][ T3084] __x64_sys_fcntl+0x7f/0xa0 [ 88.791256][ T3084] x64_sys_call+0x1cb3/0x2ee0 [ 88.791281][ T3084] do_syscall_64+0x58/0xf0 [ 88.791305][ T3084] ? clear_bhb_loop+0x35/0x90 [ 88.791332][ T3084] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.791359][ T3084] RIP: 0033:0x7f250f38e929 [ 88.791375][ T3084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.791392][ T3084] RSP: 002b:00007f2510277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 88.791412][ T3084] RAX: ffffffffffffffda RBX: 00007f250f5b5fa0 RCX: 00007f250f38e929 [ 88.791425][ T3084] RDX: 0000200000000080 RSI: 0000000000000006 RDI: 0000000000000003 [ 88.791439][ T3084] RBP: 00007f2510277090 R08: 0000000000000000 R09: 0000000000000000 [ 88.791450][ T3084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.791463][ T3084] R13: 0000000000000000 R14: 00007f250f5b5fa0 R15: 00007fff06a5b378 [ 88.791479][ T3084] [ 89.175911][ T3106] FAULT_INJECTION: forcing a failure. [ 89.175911][ T3106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.189437][ T3106] CPU: 0 UID: 0 PID: 3106 Comm: syz.3.1104 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 89.189465][ T3106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.189474][ T3106] Call Trace: [ 89.189480][ T3106] [ 89.189486][ T3106] __dump_stack+0x21/0x30 [ 89.189510][ T3106] dump_stack_lvl+0x10c/0x190 [ 89.189526][ T3106] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.189543][ T3106] dump_stack+0x19/0x20 [ 89.189558][ T3106] should_fail_ex+0x3d9/0x530 [ 89.189575][ T3106] should_fail+0xf/0x20 [ 89.189588][ T3106] should_fail_usercopy+0x1e/0x30 [ 89.189604][ T3106] _copy_from_user+0x22/0xb0 [ 89.189627][ T3106] memdup_user+0x81/0x180 [ 89.189647][ T3106] ? strndup_user+0x40/0xd0 [ 89.189667][ T3106] strndup_user+0x6c/0xd0 [ 89.189687][ T3106] __se_sys_fsopen+0x43/0x390 [ 89.189727][ T3106] ? __kasan_check_read+0x15/0x20 [ 89.189749][ T3106] __x64_sys_fsopen+0x5f/0x80 [ 89.189768][ T3106] x64_sys_call+0x2d40/0x2ee0 [ 89.189790][ T3106] do_syscall_64+0x58/0xf0 [ 89.189814][ T3106] ? clear_bhb_loop+0x35/0x90 [ 89.189840][ T3106] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.189865][ T3106] RIP: 0033:0x7f250f38e929 [ 89.189882][ T3106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.189897][ T3106] RSP: 002b:00007f2510277038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 89.189920][ T3106] RAX: ffffffffffffffda RBX: 00007f250f5b5fa0 RCX: 00007f250f38e929 [ 89.189935][ T3106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 89.189948][ T3106] RBP: 00007f2510277090 R08: 0000000000000000 R09: 0000000000000000 [ 89.189961][ T3106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.189974][ T3106] R13: 0000000000000001 R14: 00007f250f5b5fa0 R15: 00007fff06a5b378 [ 89.189990][ T3106] [ 89.409808][ T3114] input: syz1 as /devices/virtual/input/input22 [ 89.418473][ T3114] rust_binder: Failed to allocate buffer. len:232, is_oneway:false [ 89.418515][ T3114] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 89.426559][ T3114] rust_binder: Read failure Err(EFAULT) in pid:760 [ 89.498941][ T3121] kvm: user requested TSC rate below hardware speed [ 89.517699][ T36] audit: type=1400 audit(1750424999.930:349): avc: denied { map } for pid=3120 comm="syz.3.1111" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.518401][ T3121] SELinux: policydb version -899393680 does not match my version range 15-33 [ 89.550144][ T3121] SELinux: failed to load policy [ 89.607195][ T3123] binder: Unknown parameter 'statsÐzlobal' [ 89.690232][ T3133] binder: Unknown parameter 'qtatsZglobál' [ 89.812787][ T3139] random: crng reseeded on system resumption [ 90.049453][ T306] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 90.076891][ T3161] FAULT_INJECTION: forcing a failure. [ 90.076891][ T3161] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 90.090192][ T3161] CPU: 0 UID: 0 PID: 3161 Comm: syz.0.1126 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 90.090221][ T3161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.090230][ T3161] Call Trace: [ 90.090235][ T3161] [ 90.090241][ T3161] __dump_stack+0x21/0x30 [ 90.090262][ T3161] dump_stack_lvl+0x10c/0x190 [ 90.090277][ T3161] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.090292][ T3161] ? kasan_save_track+0x4f/0x80 [ 90.090308][ T3161] ? kasan_save_alloc_info+0x40/0x50 [ 90.090327][ T3161] ? __kasan_slab_alloc+0x73/0x90 [ 90.090343][ T3161] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 90.090358][ T3161] ? alloc_bprm+0x2af/0xb50 [ 90.090372][ T3161] dump_stack+0x19/0x20 [ 90.090386][ T3161] should_fail_ex+0x3d9/0x530 [ 90.090400][ T3161] should_fail_alloc_page+0xeb/0x110 [ 90.090417][ T3161] __alloc_pages_noprof+0x19d/0x6c0 [ 90.090430][ T3161] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 90.090445][ T3161] get_free_pages_noprof+0x14/0x40 [ 90.090458][ T3161] pgd_alloc+0x3d/0x350 [ 90.090476][ T3161] mm_init+0x546/0xa10 [ 90.090493][ T3161] mm_alloc+0xaf/0x140 [ 90.090509][ T3161] alloc_bprm+0x2af/0xb50 [ 90.090522][ T3161] ? __check_object_size+0x455/0x620 [ 90.090538][ T3161] do_execveat_common+0x198/0xa80 [ 90.090552][ T3161] ? __kasan_check_write+0x18/0x20 [ 90.090565][ T3161] ? getname_flags+0x209/0x710 [ 90.090582][ T3161] __x64_sys_execveat+0xd2/0xf0 [ 90.090595][ T3161] x64_sys_call+0x906/0x2ee0 [ 90.090611][ T3161] do_syscall_64+0x58/0xf0 [ 90.090628][ T3161] ? clear_bhb_loop+0x35/0x90 [ 90.090647][ T3161] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.090664][ T3161] RIP: 0033:0x7fdf8758e929 [ 90.090676][ T3161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.090688][ T3161] RSP: 002b:00007fdf883a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 90.090704][ T3161] RAX: ffffffffffffffda RBX: 00007fdf877b5fa0 RCX: 00007fdf8758e929 [ 90.090714][ T3161] RDX: 0000200000000400 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 90.090724][ T3161] RBP: 00007fdf883a3090 R08: 0000000000000000 R09: 0000000000000000 [ 90.090736][ T3161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.090748][ T3161] R13: 0000000000000000 R14: 00007fdf877b5fa0 R15: 00007fff9258ab18 [ 90.090762][ T3161] [ 90.382860][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 90.382875][ T36] audit: type=1400 audit(2000000000.000:353): avc: denied { setopt } for pid=3168 comm="syz.1.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.408378][ T489] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 90.422056][ T306] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 62975, setting to 1024 [ 90.431160][ T3169] binder: Unknown parameter 's_atral' [ 90.433526][ T306] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 90.448628][ T306] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.462786][ T306] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.465567][ T3171] FAULT_INJECTION: forcing a failure. [ 90.465567][ T3171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.471897][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 90.485438][ T3171] CPU: 0 UID: 0 PID: 3171 Comm: syz.1.1131 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 90.485467][ T3171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.485479][ T3171] Call Trace: [ 90.485485][ T3171] [ 90.485492][ T3171] __dump_stack+0x21/0x30 [ 90.485517][ T3171] dump_stack_lvl+0x10c/0x190 [ 90.485537][ T3171] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.485558][ T3171] dump_stack+0x19/0x20 [ 90.485577][ T3171] should_fail_ex+0x3d9/0x530 [ 90.485597][ T3171] should_fail+0xf/0x20 [ 90.485614][ T3171] should_fail_usercopy+0x1e/0x30 [ 90.485634][ T3171] _copy_to_user+0x24/0xa0 [ 90.485656][ T3171] simple_read_from_buffer+0xed/0x160 [ 90.485681][ T3171] proc_fail_nth_read+0x19e/0x210 [ 90.485698][ T3171] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 90.485714][ T3171] ? add_device_randomness+0xc0/0x100 [ 90.485736][ T3171] ? __cfi_add_device_randomness+0x10/0x10 [ 90.485758][ T3171] ? bpf_lsm_file_permission+0xd/0x20 [ 90.485777][ T3171] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 90.485793][ T3171] vfs_read+0x278/0xb60 [ 90.485813][ T3171] ? __cfi_vfs_read+0x10/0x10 [ 90.485831][ T3171] ? __kasan_check_write+0x18/0x20 [ 90.485850][ T3171] ? mutex_lock+0x92/0x1c0 [ 90.485866][ T3171] ? __cfi_mutex_lock+0x10/0x10 [ 90.485882][ T3171] ? __fget_files+0x2c5/0x340 [ 90.485914][ T3171] ksys_read+0x141/0x250 [ 90.485933][ T3171] ? xfd_validate_state+0x68/0x150 [ 90.485952][ T3171] ? __cfi_ksys_read+0x10/0x10 [ 90.485972][ T3171] ? __kasan_check_write+0x18/0x20 [ 90.485990][ T3171] ? fpregs_restore_userregs+0x11d/0x260 [ 90.486016][ T3171] __x64_sys_read+0x7f/0x90 [ 90.486035][ T3171] x64_sys_call+0x2638/0x2ee0 [ 90.486056][ T3171] do_syscall_64+0x58/0xf0 [ 90.486077][ T3171] ? clear_bhb_loop+0x35/0x90 [ 90.486101][ T3171] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.486124][ T3171] RIP: 0033:0x7fd19e18d33c [ 90.486140][ T3171] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 90.486154][ T3171] RSP: 002b:00007fd19c7f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.486175][ T3171] RAX: ffffffffffffffda RBX: 00007fd19e3b5fa0 RCX: 00007fd19e18d33c [ 90.486189][ T3171] RDX: 000000000000000f RSI: 00007fd19c7f70a0 RDI: 0000000000000003 [ 90.486202][ T3171] RBP: 00007fd19c7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 90.486213][ T3171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.486224][ T3171] R13: 0000000000000001 R14: 00007fd19e3b5fa0 R15: 00007fff4d7838d8 [ 90.486239][ T3171] [ 90.500996][ T3173] rust_binder: inc_ref_done called when no active inc_refs [ 90.509389][ T306] usb 3-1: SerialNumber: syz [ 90.542474][ T36] audit: type=1400 audit(2000000000.050:354): avc: denied { create } for pid=3172 comm="syz.1.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.577720][ T489] usb 4-1: config 0 has no interfaces? [ 90.583140][ T3141] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.596542][ T489] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.628833][ T3177] FAULT_INJECTION: forcing a failure. [ 90.628833][ T3177] name failslab, interval 1, probability 0, space 0, times 0 [ 90.637968][ T489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 90.644092][ T3177] CPU: 1 UID: 0 PID: 3177 Comm: syz.0.1134 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 90.644127][ T3177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.644138][ T3177] Call Trace: [ 90.644144][ T3177] [ 90.644151][ T3177] __dump_stack+0x21/0x30 [ 90.644178][ T3177] dump_stack_lvl+0x10c/0x190 [ 90.644198][ T3177] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.644218][ T3177] ? avc_has_perm_noaudit+0x286/0x360 [ 90.644237][ T3177] dump_stack+0x19/0x20 [ 90.644255][ T3177] should_fail_ex+0x3d9/0x530 [ 90.644275][ T3177] should_failslab+0xac/0x100 [ 90.644298][ T3177] __kmalloc_cache_noprof+0x41/0x3c0 [ 90.644318][ T3177] ? xdp_umem_create+0x65/0x9d0 [ 90.644342][ T3177] xdp_umem_create+0x65/0x9d0 [ 90.644366][ T3177] ? __kasan_check_write+0x18/0x20 [ 90.644386][ T3177] xsk_setsockopt+0x626/0x6f0 [ 90.644408][ T3177] ? __cfi_xsk_setsockopt+0x10/0x10 [ 90.644432][ T3177] ? __kasan_check_write+0x18/0x20 [ 90.644450][ T3177] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 90.644467][ T3177] ? security_socket_setsockopt+0x33/0xd0 [ 90.644488][ T3177] ? __cfi_xsk_setsockopt+0x10/0x10 [ 90.644511][ T3177] do_sock_setsockopt+0x26a/0x400 [ 90.644535][ T3177] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 90.644560][ T3177] __x64_sys_setsockopt+0x1b8/0x250 [ 90.644584][ T3177] x64_sys_call+0x2adc/0x2ee0 [ 90.644605][ T3177] do_syscall_64+0x58/0xf0 [ 90.644626][ T3177] ? clear_bhb_loop+0x35/0x90 [ 90.644650][ T3177] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.644673][ T3177] RIP: 0033:0x7fdf8758e929 [ 90.644688][ T3177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.644703][ T3177] RSP: 002b:00007fdf883a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.644724][ T3177] RAX: ffffffffffffffda RBX: 00007fdf877b5fa0 RCX: 00007fdf8758e929 [ 90.644738][ T3177] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 90.644750][ T3177] RBP: 00007fdf883a3090 R08: 0000000000000020 R09: 0000000000000000 [ 90.644763][ T3177] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 90.644775][ T3177] R13: 0000000000000000 R14: 00007fdf877b5fa0 R15: 00007fff9258ab18 [ 90.644790][ T3177] [ 90.716913][ T36] audit: type=1400 audit(2000000000.230:355): avc: denied { ioctl } for pid=3185 comm="syz.0.1138" path="socket:[38526]" dev="sockfs" ino=38526 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.727689][ T489] usb 4-1: SerialNumber: syz [ 90.881694][ T306] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 90.883486][ T489] usb 4-1: config 0 descriptor?? [ 90.900232][ T306] usb 3-1: USB disconnect, device number 11 [ 91.118486][ T489] usb 4-1: USB disconnect, device number 10 [ 91.165776][ T3200] FAULT_INJECTION: forcing a failure. [ 91.165776][ T3200] name failslab, interval 1, probability 0, space 0, times 0 [ 91.178589][ T3200] CPU: 1 UID: 0 PID: 3200 Comm: syz.0.1143 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 91.178627][ T3200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.178639][ T3200] Call Trace: [ 91.178645][ T3200] [ 91.178653][ T3200] __dump_stack+0x21/0x30 [ 91.178688][ T3200] dump_stack_lvl+0x10c/0x190 [ 91.178709][ T3200] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.178731][ T3200] ? kernel_text_address+0xa9/0xe0 [ 91.178750][ T3200] ? string+0x2c0/0x2c0 [ 91.178774][ T3200] dump_stack+0x19/0x20 [ 91.178794][ T3200] should_fail_ex+0x3d9/0x530 [ 91.178815][ T3200] should_failslab+0xac/0x100 [ 91.178840][ T3200] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 91.178863][ T3200] ? kasprintf+0xd5/0x120 [ 91.178880][ T3200] kvasprintf+0xdf/0x240 [ 91.178897][ T3200] ? __cfi_kvasprintf+0x10/0x10 [ 91.178913][ T3200] ? kasan_save_alloc_info+0x40/0x50 [ 91.178930][ T3200] ? __kasan_slab_alloc+0x73/0x90 [ 91.178952][ T3200] ? __kmalloc_node_track_caller_noprof+0x154/0x440 [ 91.178972][ T3200] ? memdup_user+0x44/0x180 [ 91.178993][ T3200] ? strndup_user+0x6c/0xd0 [ 91.179012][ T3200] kasprintf+0xd5/0x120 [ 91.179028][ T3200] ? __cfi_kasprintf+0x10/0x10 [ 91.179046][ T3200] logfc+0x143/0x4d0 [ 91.179072][ T3200] ? __cfi_logfc+0x10/0x10 [ 91.179095][ T3200] ? kasan_poison+0x44/0x60 [ 91.179115][ T3200] ? __kasan_check_read+0x15/0x20 [ 91.179133][ T3200] ? static_key_count+0x45/0x70 [ 91.179151][ T3200] ? security_fs_context_parse_param+0x1dc/0x200 [ 91.179174][ T3200] vfs_parse_fs_param+0x2dd/0x470 [ 91.179200][ T3200] vfs_fsconfig_locked+0x241/0x350 [ 91.179218][ T3200] __se_sys_fsconfig+0x772/0x8d0 [ 91.179236][ T3200] ? __x64_sys_fsconfig+0xf0/0xf0 [ 91.179255][ T3200] ? ksys_write+0x1ef/0x250 [ 91.179277][ T3200] ? __cfi_ksys_write+0x10/0x10 [ 91.179300][ T3200] __x64_sys_fsconfig+0xc3/0xf0 [ 91.179320][ T3200] x64_sys_call+0x11bb/0x2ee0 [ 91.179351][ T3200] do_syscall_64+0x58/0xf0 [ 91.179374][ T3200] ? clear_bhb_loop+0x35/0x90 [ 91.179403][ T3200] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.179429][ T3200] RIP: 0033:0x7fdf8758e929 [ 91.179447][ T3200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.179465][ T3200] RSP: 002b:00007fdf883a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 91.179488][ T3200] RAX: ffffffffffffffda RBX: 00007fdf877b5fa0 RCX: 00007fdf8758e929 [ 91.179503][ T3200] RDX: 0000200000001d40 RSI: 0000000000000005 RDI: 0000000000000003 [ 91.179517][ T3200] RBP: 00007fdf883a3090 R08: 0000000000000005 R09: 0000000000000000 [ 91.179528][ T3200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.179539][ T3200] R13: 0000000000000000 R14: 00007fdf877b5fa0 R15: 00007fff9258ab18 [ 91.179553][ T3200] [ 91.195732][ T3204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.232686][ T3208] FAULT_INJECTION: forcing a failure. [ 91.232686][ T3208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.479331][ T3208] CPU: 0 UID: 0 PID: 3208 Comm: syz.0.1147 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 91.479363][ T3208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.479372][ T3208] Call Trace: [ 91.479378][ T3208] [ 91.479384][ T3208] __dump_stack+0x21/0x30 [ 91.479405][ T3208] dump_stack_lvl+0x10c/0x190 [ 91.479419][ T3208] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.479434][ T3208] ? vsnprintf+0x7b4/0x1aa0 [ 91.479451][ T3208] ? __asan_memcpy+0x5a/0x80 [ 91.479467][ T3208] dump_stack+0x19/0x20 [ 91.479481][ T3208] should_fail_ex+0x3d9/0x530 [ 91.479497][ T3208] should_fail+0xf/0x20 [ 91.479512][ T3208] should_fail_usercopy+0x1e/0x30 [ 91.479529][ T3208] _copy_from_user+0x22/0xb0 [ 91.479547][ T3208] kstrtouint_from_user+0xc2/0x150 [ 91.479564][ T3208] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 91.479580][ T3208] ? selinux_file_permission+0x309/0xb30 [ 91.479602][ T3208] ? __cfi_selinux_file_permission+0x10/0x10 [ 91.479623][ T3208] proc_fail_nth_write+0x89/0x210 [ 91.479638][ T3208] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 91.479653][ T3208] ? bpf_lsm_file_permission+0xd/0x20 [ 91.479669][ T3208] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 91.479682][ T3208] vfs_write+0x3c0/0xe80 [ 91.479699][ T3208] ? __cfi_vfs_write+0x10/0x10 [ 91.479714][ T3208] ? __kasan_check_write+0x18/0x20 [ 91.479730][ T3208] ? mutex_lock+0x92/0x1c0 [ 91.479743][ T3208] ? __cfi_mutex_lock+0x10/0x10 [ 91.479757][ T3208] ? __fget_files+0x2c5/0x340 [ 91.479777][ T3208] ksys_write+0x141/0x250 [ 91.479793][ T3208] ? __cfi_ksys_write+0x10/0x10 [ 91.479810][ T3208] ? __kasan_check_read+0x15/0x20 [ 91.479826][ T3208] __x64_sys_write+0x7f/0x90 [ 91.479843][ T3208] x64_sys_call+0x271c/0x2ee0 [ 91.479862][ T3208] do_syscall_64+0x58/0xf0 [ 91.479881][ T3208] ? clear_bhb_loop+0x35/0x90 [ 91.479903][ T3208] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.479931][ T3208] RIP: 0033:0x7fdf8758d3df [ 91.479945][ T3208] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 91.479959][ T3208] RSP: 002b:00007fdf883a3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 91.479978][ T3208] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdf8758d3df [ 91.479992][ T3208] RDX: 0000000000000001 RSI: 00007fdf883a30a0 RDI: 0000000000000003 [ 91.480006][ T3208] RBP: 00007fdf883a3090 R08: 0000000000000000 R09: 0072736d2f232f75 [ 91.480020][ T3208] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 91.480033][ T3208] R13: 0000000000000001 R14: 00007fdf877b5fa0 R15: 00007fff9258ab18 [ 91.480049][ T3208] [ 91.756530][ T3210] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.756809][ T3210] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.857972][ T36] audit: type=1400 audit(2000000001.380:356): avc: denied { map } for pid=3218 comm="syz.1.1151" path="socket:[41005]" dev="sockfs" ino=41005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 91.876187][ T3226] FAULT_INJECTION: forcing a failure. [ 91.876187][ T3226] name failslab, interval 1, probability 0, space 0, times 0 [ 91.901397][ T3226] CPU: 0 UID: 0 PID: 3226 Comm: syz.3.1153 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 91.901430][ T3226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.901441][ T3226] Call Trace: [ 91.901448][ T3226] [ 91.901455][ T3226] __dump_stack+0x21/0x30 [ 91.901483][ T3226] dump_stack_lvl+0x10c/0x190 [ 91.901505][ T3226] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.901527][ T3226] ? avc_has_perm_noaudit+0x286/0x360 [ 91.901548][ T3226] dump_stack+0x19/0x20 [ 91.901567][ T3226] should_fail_ex+0x3d9/0x530 [ 91.901589][ T3226] should_failslab+0xac/0x100 [ 91.901613][ T3226] __kmalloc_cache_noprof+0x41/0x3c0 [ 91.901633][ T3226] ? xskq_create+0x68/0x2a0 [ 91.901657][ T3226] xskq_create+0x68/0x2a0 [ 91.901678][ T3226] xsk_init_queue+0xb6/0x120 [ 91.901700][ T3226] xsk_setsockopt+0x43f/0x6f0 [ 91.901721][ T3226] ? __cfi_xsk_setsockopt+0x10/0x10 [ 91.901745][ T3226] ? __cfi_vfs_write+0x10/0x10 [ 91.901768][ T3226] ? __kasan_check_write+0x18/0x20 [ 91.901788][ T3226] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 91.901807][ T3226] ? security_socket_setsockopt+0x33/0xd0 [ 91.901829][ T3226] ? __cfi_xsk_setsockopt+0x10/0x10 [ 91.901855][ T3226] do_sock_setsockopt+0x26a/0x400 [ 91.901917][ T3226] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 91.901946][ T3226] __x64_sys_setsockopt+0x1b8/0x250 [ 91.901973][ T3226] x64_sys_call+0x2adc/0x2ee0 [ 91.901996][ T3226] do_syscall_64+0x58/0xf0 [ 91.902020][ T3226] ? clear_bhb_loop+0x35/0x90 [ 91.902047][ T3226] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.902073][ T3226] RIP: 0033:0x7f250f38e929 [ 91.902090][ T3226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.902108][ T3226] RSP: 002b:00007f2510277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 91.902131][ T3226] RAX: ffffffffffffffda RBX: 00007f250f5b5fa0 RCX: 00007f250f38e929 [ 91.902147][ T3226] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 91.902160][ T3226] RBP: 00007f2510277090 R08: 0000000000000004 R09: 0000000000000000 [ 91.902173][ T3226] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 91.902185][ T3226] R13: 0000000000000000 R14: 00007f250f5b5fa0 R15: 00007fff06a5b378 [ 91.902201][ T3226] [ 92.245200][ T3249] input: syz1 as /devices/virtual/input/input23 [ 92.281031][ T36] audit: type=1400 audit(2000000001.810:357): avc: denied { write } for pid=3252 comm="syz.0.1164" path="socket:[41116]" dev="sockfs" ino=41116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.282793][ T3253] rust_binder: Write failure EINVAL in pid:636 [ 92.321308][ T3255] FAULT_INJECTION: forcing a failure. [ 92.321308][ T3255] name failslab, interval 1, probability 0, space 0, times 0 [ 92.340290][ T3255] CPU: 1 UID: 0 PID: 3255 Comm: syz.3.1165 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 92.340307][ T3255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.340313][ T3255] Call Trace: [ 92.340317][ T3255] [ 92.340322][ T3255] __dump_stack+0x21/0x30 [ 92.340338][ T3255] dump_stack_lvl+0x10c/0x190 [ 92.340348][ T3255] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.340362][ T3255] dump_stack+0x19/0x20 [ 92.340372][ T3255] should_fail_ex+0x3d9/0x530 [ 92.340387][ T3255] should_failslab+0xac/0x100 [ 92.340400][ T3255] kmem_cache_alloc_noprof+0x42/0x3a0 [ 92.340410][ T3255] ? getname_flags+0xc6/0x710 [ 92.340421][ T3255] getname_flags+0xc6/0x710 [ 92.340431][ T3255] ? build_open_flags+0x487/0x600 [ 92.340440][ T3255] getname+0x1b/0x30 [ 92.340450][ T3255] do_sys_openat2+0xcb/0x1c0 [ 92.340458][ T3255] ? do_sys_open+0x100/0x100 [ 92.340466][ T3255] ? __kasan_check_write+0x18/0x20 [ 92.340475][ T3255] ? do_user_addr_fault+0xbc4/0x1200 [ 92.340486][ T3255] ? __cfi_ksys_write+0x10/0x10 [ 92.340496][ T3255] __x64_sys_openat+0x13a/0x170 [ 92.340505][ T3255] x64_sys_call+0xe69/0x2ee0 [ 92.340516][ T3255] do_syscall_64+0x58/0xf0 [ 92.340528][ T3255] ? clear_bhb_loop+0x35/0x90 [ 92.340541][ T3255] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.340553][ T3255] RIP: 0033:0x7f250f38d290 [ 92.340562][ T3255] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 92.340569][ T3255] RSP: 002b:00007f2510274ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 92.340580][ T3255] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f250f38d290 [ 92.340587][ T3255] RDX: 0000000000000002 RSI: 00007f250f410814 RDI: 00000000ffffff9c [ 92.340593][ T3255] RBP: 00007f250f410814 R08: 0000000000000000 R09: 0000000000000000 [ 92.340600][ T3255] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 92.340607][ T3255] R13: 0000000000000036 R14: 0000200000000000 R15: 00007fff06a5b378 [ 92.340614][ T3255] [ 92.529674][ T63] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 92.589457][ T964] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 92.645317][ T3257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.704824][ T3258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:694 [ 92.710103][ T63] usb 2-1: not running at top speed; connect to a high speed hub [ 92.730550][ T63] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.743395][ T63] usb 2-1: config 1 interface 0 has no altsetting 0 [ 92.750781][ T964] usb 1-1: not running at top speed; connect to a high speed hub [ 92.759091][ T63] usb 2-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.40 [ 92.768237][ T964] usb 1-1: too many endpoints for config 1 interface 0 altsetting 129: 104, using maximum allowed: 30 [ 92.779237][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.787283][ T63] usb 2-1: Product: syz [ 92.791716][ T964] usb 1-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 92.804978][ T63] usb 2-1: Manufacturer: syz [ 92.809658][ T63] usb 2-1: SerialNumber: syz [ 92.814532][ T964] usb 1-1: config 1 interface 0 has no altsetting 0 [ 92.823373][ T964] usb 1-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.40 [ 92.832482][ T964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.840531][ T964] usb 1-1: Product: syz [ 92.844698][ T964] usb 1-1: Manufacturer: syz [ 92.852573][ T964] usb 1-1: SerialNumber: syz [ 92.983323][ T3264] : tun_chr_ioctl cmd 1074025675 [ 92.988392][ T3264] : persist disabled [ 93.026447][ T63] usbhid 2-1:1.0: can't add hid device: -71 [ 93.032464][ T63] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 93.041812][ T63] usb 2-1: USB disconnect, device number 7 [ 93.063483][ T964] usbhid 1-1:1.0: can't add hid device: -71 [ 93.077131][ T964] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 93.087020][ T3268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1170'. [ 93.096729][ T964] usb 1-1: USB disconnect, device number 13 [ 93.289584][ T3279] input: syz1 as /devices/virtual/input/input24 [ 93.361196][ T36] audit: type=1400 audit(2000000002.890:358): avc: denied { read } for pid=3280 comm="syz.3.1176" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 93.383329][ T36] audit: type=1400 audit(2000000002.890:359): avc: denied { open } for pid=3280 comm="syz.3.1176" path="/322/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 93.495016][ T3299] 9pnet_virtio: no channels available for device syz [ 93.607179][ T36] audit: type=1400 audit(2000000003.130:360): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 93.628892][ T36] audit: type=1400 audit(2000000003.130:361): avc: denied { read } for pid=3313 comm="syz.0.1193" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.653882][ T36] audit: type=1400 audit(2000000003.180:362): avc: denied { accept } for pid=3319 comm="syz.3.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 93.819427][ T964] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 93.980559][ T964] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.990273][ T964] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 94.000707][ T964] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.020878][ T964] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 94.030214][ T63] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 94.037866][ T964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 94.046481][ T964] usb 3-1: Product: syz [ 94.051226][ T964] usb 3-1: Manufacturer: syz [ 94.056188][ T964] usb 3-1: SerialNumber: syz [ 94.145948][ T3352] syzkaller0: entered promiscuous mode [ 94.151515][ T3352] syzkaller0: entered allmulticast mode [ 94.199402][ T63] usb 2-1: Using ep0 maxpacket: 8 [ 94.205568][ T63] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.215781][ T63] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 94.229865][ T63] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 94.241418][ T63] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 94.252964][ T63] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 94.262263][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.271905][ T964] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 94.283861][ T63] hub 2-1:1.0: bad descriptor, ignoring hub [ 94.290188][ T63] hub 2-1:1.0: probe with driver hub failed with error -5 [ 94.297806][ T63] cdc_wdm 2-1:1.0: skipping garbage [ 94.304032][ T63] cdc_wdm 2-1:1.0: skipping garbage [ 94.314814][ T63] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 94.321148][ T63] cdc_wdm 2-1:1.0: Unknown control protocol [ 94.427748][ T3366] 9pnet_virtio: no channels available for device syz [ 94.473517][ T306] usb 3-1: USB disconnect, device number 12 [ 94.479961][ T306] usblp0: removed [ 94.589507][ T31] usb 2-1: USB disconnect, device number 8 [ 94.636341][ T3374] 9pnet_virtio: no channels available for device syz [ 94.651923][ T3376] 9pnet_virtio: no channels available for device syz [ 94.669492][ T3379] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 94.893807][ T3391] rust_binder: Write failure EFAULT in pid:671 [ 94.919410][ T306] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 95.079458][ T306] usb 2-1: Using ep0 maxpacket: 8 [ 95.085805][ T306] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.096012][ T306] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 95.104949][ T306] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 95.116343][ T306] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 95.127516][ T306] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 95.137075][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.147224][ T306] hub 2-1:1.0: bad descriptor, ignoring hub [ 95.153225][ T306] hub 2-1:1.0: probe with driver hub failed with error -5 [ 95.160517][ T306] cdc_wdm 2-1:1.0: skipping garbage [ 95.165731][ T306] cdc_wdm 2-1:1.0: skipping garbage [ 95.171445][ T306] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 95.177382][ T306] cdc_wdm 2-1:1.0: Unknown control protocol [ 95.259593][ T63] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 95.389460][ T964] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 95.410672][ T63] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 95.418155][ T63] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.429246][ T63] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.441120][ T63] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.452420][ T63] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.459477][ T31] usb 2-1: USB disconnect, device number 9 [ 95.464582][ T63] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 95.477197][ T63] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.487911][ T63] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.499585][ T63] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.510816][ T63] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.522676][ T63] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 95.530293][ T63] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.541070][ T63] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.552819][ T63] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.564190][ T63] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.569395][ T306] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 95.575840][ T964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.593792][ T964] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.602860][ T964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.611496][ T964] usb 1-1: config 0 descriptor?? [ 95.617791][ T63] usb 3-1: string descriptor 0 read error: -22 [ 95.624060][ T63] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 95.633152][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.730426][ T306] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.740147][ T306] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 95.749869][ T306] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.764393][ T306] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 95.773565][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 95.781680][ T306] usb 4-1: Product: syz [ 95.785833][ T306] usb 4-1: Manufacturer: syz [ 95.790441][ T306] usb 4-1: SerialNumber: syz [ 95.818824][ T964] usbhid 1-1:0.0: can't add hid device: -71 [ 95.825285][ T964] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 95.834338][ T964] usb 1-1: USB disconnect, device number 14 [ 95.848090][ T31] usb 3-1: USB disconnect, device number 13 [ 95.975690][ T3425] process 'syz.1.1241' launched './file0' with NULL argv: empty string added [ 95.997590][ T306] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 96.204887][ T964] usb 4-1: USB disconnect, device number 11 [ 96.211484][ T964] usblp0: removed [ 96.459428][ T306] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 96.609428][ T306] usb 1-1: Using ep0 maxpacket: 32 [ 96.615910][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.626930][ T306] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 96.636007][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.644589][ T306] usb 1-1: config 0 descriptor?? [ 96.969414][ T964] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 97.052005][ T63] usb 1-1: USB disconnect, device number 15 [ 97.139407][ T964] usb 3-1: Using ep0 maxpacket: 8 [ 97.145916][ T964] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.156409][ T964] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.165468][ T964] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 97.177035][ T964] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 97.188676][ T964] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 97.198002][ T964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.209739][ T964] hub 3-1:1.0: bad descriptor, ignoring hub [ 97.218201][ T964] hub 3-1:1.0: probe with driver hub failed with error -5 [ 97.226084][ T964] cdc_wdm 3-1:1.0: skipping garbage [ 97.231569][ T964] cdc_wdm 3-1:1.0: skipping garbage [ 97.237730][ T964] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 97.244144][ T964] cdc_wdm 3-1:1.0: Unknown control protocol [ 97.436543][ T3441] 9pnet_virtio: no channels available for device syz [ 97.519506][ T964] usb 3-1: USB disconnect, device number 14 [ 97.849448][ T964] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 98.009399][ T964] usb 3-1: Using ep0 maxpacket: 8 [ 98.015574][ T964] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.025722][ T964] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.034626][ T964] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 98.045754][ T964] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 98.056888][ T964] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 98.066260][ T964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.075570][ T964] hub 3-1:1.0: bad descriptor, ignoring hub [ 98.081551][ T964] hub 3-1:1.0: probe with driver hub failed with error -5 [ 98.088738][ T964] cdc_wdm 3-1:1.0: skipping garbage [ 98.093946][ T964] cdc_wdm 3-1:1.0: skipping garbage [ 98.099524][ T964] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 98.105505][ T964] cdc_wdm 3-1:1.0: Unknown control protocol [ 98.409810][ T306] usb 3-1: USB disconnect, device number 15 [ 98.539432][ T305] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 98.539718][ T964] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 98.690430][ T305] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.700181][ T305] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.700481][ T964] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 98.709952][ T305] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.717601][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 98.731820][ T305] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 98.741063][ T964] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.750165][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 98.761902][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 98.769923][ T305] usb 2-1: Product: syz [ 98.781153][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 98.785435][ T305] usb 2-1: Manufacturer: syz [ 98.797174][ T964] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 98.800914][ T305] usb 2-1: SerialNumber: syz [ 98.808523][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 98.824302][ T964] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.836587][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 98.847994][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 98.860464][ T964] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 98.869258][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 98.880095][ T964] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.891888][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 98.903229][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 98.917513][ T964] usb 1-1: string descriptor 0 read error: -22 [ 98.923864][ T964] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 98.933102][ T964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.040264][ T305] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 99.198245][ T305] usb 1-1: USB disconnect, device number 16 [ 99.306533][ T3461] 9pnet_virtio: no channels available for device syz [ 99.318606][ T1044] usb 2-1: USB disconnect, device number 10 [ 99.319893][ T3461] overlayfs: overlapping lowerdir path [ 99.330439][ T1044] usblp0: removed [ 99.670814][ T3467] 9pnet_virtio: no channels available for device syz [ 99.689412][ T964] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 99.840704][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.851714][ T964] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 99.861136][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.873199][ T964] usb 4-1: config 0 descriptor?? [ 100.090278][ T964] usbhid 4-1:0.0: can't add hid device: -71 [ 100.096340][ T964] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 100.109393][ T964] usb 4-1: USB disconnect, device number 12 [ 100.589408][ T964] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 100.729455][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 100.739488][ T964] usb 1-1: Using ep0 maxpacket: 8 [ 100.745514][ T964] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.755764][ T964] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 100.764940][ T964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 100.776127][ T964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 100.787600][ T964] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 100.791983][ T3490] 9pnet_virtio: no channels available for device syz [ 100.796934][ T964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.809230][ T3490] overlayfs: overlapping lowerdir path [ 100.816383][ T964] hub 1-1:1.0: bad descriptor, ignoring hub [ 100.822887][ T964] hub 1-1:1.0: probe with driver hub failed with error -5 [ 100.830205][ T964] cdc_wdm 1-1:1.0: skipping garbage [ 100.835650][ T964] cdc_wdm 1-1:1.0: skipping garbage [ 100.842220][ T964] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 100.848151][ T964] cdc_wdm 1-1:1.0: Unknown control protocol [ 100.889418][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 100.895768][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.919398][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 100.928593][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.938954][ T9] usb 4-1: config 0 descriptor?? [ 101.159496][ T1044] usb 1-1: USB disconnect, device number 17 [ 101.358756][ T1044] usb 4-1: USB disconnect, device number 13 [ 101.479423][ T305] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 101.629442][ T305] usb 1-1: Using ep0 maxpacket: 8 [ 101.635636][ T305] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.645782][ T305] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 101.654791][ T305] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 101.666575][ T305] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 101.678039][ T305] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 101.687197][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.696917][ T305] hub 1-1:1.0: bad descriptor, ignoring hub [ 101.702889][ T305] hub 1-1:1.0: probe with driver hub failed with error -5 [ 101.710118][ T305] cdc_wdm 1-1:1.0: skipping garbage [ 101.715310][ T305] cdc_wdm 1-1:1.0: skipping garbage [ 101.720965][ T305] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 101.726951][ T305] cdc_wdm 1-1:1.0: Unknown control protocol [ 101.799428][ T1044] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 101.950470][ T1044] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 101.957880][ T1044] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 101.968781][ T1044] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.980540][ T1044] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 101.991710][ T1044] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 102.003372][ T1044] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 102.010808][ T1044] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 102.019514][ T9] usb 1-1: USB disconnect, device number 18 [ 102.021618][ T1044] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.039426][ T1044] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 102.050584][ T1044] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 102.062327][ T1044] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 102.069759][ T1044] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 102.080443][ T1044] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.092088][ T1044] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 102.103204][ T1044] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 102.116478][ T1044] usb 2-1: string descriptor 0 read error: -22 [ 102.122828][ T1044] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 102.131891][ T1044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.354861][ T1044] usb 2-1: USB disconnect, device number 11 [ 102.459929][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 102.459944][ T36] audit: type=1400 audit(2000000011.990:367): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.563178][ T3516] 9pnet_virtio: no channels available for device syz [ 102.571025][ T3516] overlayfs: overlapping lowerdir path [ 102.679397][ T306] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 102.829404][ T1044] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 102.840424][ T306] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.850195][ T306] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.859854][ T306] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.874171][ T306] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 102.883327][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 102.891441][ T306] usb 1-1: Product: syz [ 102.895625][ T306] usb 1-1: Manufacturer: syz [ 102.901905][ T306] usb 1-1: SerialNumber: syz [ 102.980358][ T1044] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 102.987933][ T1044] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 102.998634][ T1044] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.010437][ T1044] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 103.022162][ T1044] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 103.034374][ T1044] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 103.040092][ T3529] 9pnet_virtio: no channels available for device syz [ 103.045806][ T1044] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 103.059301][ T1044] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.071259][ T1044] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 103.082488][ T1044] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 103.094186][ T1044] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 103.101829][ T1044] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 103.112754][ T1044] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.124666][ T1044] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 103.136039][ T306] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 103.147782][ T1044] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 103.149389][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 103.160967][ T1044] usb 3-1: string descriptor 0 read error: -22 [ 103.172867][ T1044] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 103.182177][ T1044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.319114][ T489] usb 1-1: USB disconnect, device number 19 [ 103.325940][ T489] usblp0: removed [ 103.330539][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.341745][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 103.351349][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.360055][ T9] usb 2-1: config 0 descriptor?? [ 103.395796][ T1044] usb 3-1: USB disconnect, device number 16 [ 103.568243][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 103.574398][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 103.583322][ T9] usb 2-1: USB disconnect, device number 12 [ 103.866278][ T36] audit: type=1400 audit(2000000013.390:368): avc: denied { write } for pid=1044 comm="kworker/1:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42920 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.998727][ T3550] 9pnet_virtio: no channels available for device syz [ 104.078592][ T3555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.159466][ T9] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 104.209439][ T1044] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 104.320534][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 104.327955][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.338857][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.350554][ T964] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 104.358192][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 104.369458][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 104.381295][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 104.388686][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.389436][ T1044] usb 2-1: Using ep0 maxpacket: 32 [ 104.399412][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.405996][ T1044] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.416444][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 104.416477][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 104.427646][ T1044] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 104.439367][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 104.449559][ T1044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.450343][ T1044] usb 2-1: config 0 descriptor?? [ 104.466510][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.490263][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.502018][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 104.513418][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 104.526520][ T9] usb 4-1: string descriptor 0 read error: -22 [ 104.532842][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 104.541925][ T964] usb 3-1: Using ep0 maxpacket: 8 [ 104.546975][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.556358][ T964] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 104.567040][ T964] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.576861][ T964] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.586611][ T964] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.596505][ T964] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.609638][ T964] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.618727][ T964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.783323][ T1044] usb 4-1: USB disconnect, device number 14 [ 104.898816][ T305] usb 2-1: USB disconnect, device number 13 [ 105.444933][ T3570] 9pnet_virtio: no channels available for device syz [ 105.483511][ T36] audit: type=1400 audit(2000000015.010:369): avc: denied { mounton } for pid=3573 comm="syz.3.1302" path="/proc/932/cgroup" dev="proc" ino=43611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 105.649405][ T964] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 105.800456][ T964] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 105.807867][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.818788][ T964] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.830493][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 105.841649][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 105.853403][ T964] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 105.861016][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.871741][ T964] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.883423][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 105.894645][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 105.906379][ T964] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 105.913804][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.924512][ T964] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.936179][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 105.947299][ T964] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 105.960408][ T964] usb 1-1: string descriptor 0 read error: -22 [ 105.966718][ T964] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 105.975821][ T964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.196246][ T964] usb 1-1: USB disconnect, device number 20 [ 106.285802][ T3576] 9pnet_virtio: no channels available for device syz [ 106.816046][ T3591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.816083][ T3591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:716 [ 106.831128][ T3594] 9pnet_virtio: no channels available for device syz [ 107.004555][ T3624] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 107.006662][ T3623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.013442][ T3623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:863 [ 107.050854][ T3626] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2693161846 (172362358144 ns) > initial count (27299349760 ns). Using initial count to start timer. [ 107.100938][ T964] usb 3-1: USB disconnect, device number 17 [ 107.122485][ T3633] 9pnet_virtio: no channels available for device syz [ 107.225301][ T3644] tmpfs: Unknown parameter 'usrquota' [ 107.260911][ T3653] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.262189][ T3653] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.269317][ T3653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:747 [ 107.399441][ T305] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 107.458200][ T3665] 9pnet_virtio: no channels available for device syz [ 107.478598][ T3669] tmpfs: Unknown parameter 'usrquota' [ 107.560476][ T305] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 107.568589][ T305] usb 2-1: config 0 has no interface number 0 [ 107.574825][ T305] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.585693][ T305] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 107.596318][ T305] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 107.608059][ T305] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 107.619098][ T305] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 107.628907][ T305] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.641893][ T305] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 107.651024][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.659470][ T305] usb 2-1: config 0 descriptor?? [ 107.664678][ T3640] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.798695][ T3676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.799803][ T3676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.808821][ T3676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:755 [ 107.813753][ T3677] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 107.876699][ T489] usb 2-1: USB disconnect, device number 14 [ 107.901273][ T36] audit: type=1400 audit(2000000017.430:370): avc: denied { read } for pid=3680 comm="syz.2.1348" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 107.923462][ T36] audit: type=1400 audit(2000000017.430:371): avc: denied { open } for pid=3680 comm="syz.2.1348" path="/298/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 107.949407][ T305] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 107.957032][ T36] audit: type=1400 audit(2000000017.480:372): avc: denied { write } for pid=3688 comm="syz.2.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.977102][ T36] audit: type=1400 audit(2000000017.480:373): avc: denied { nlmsg_write } for pid=3688 comm="syz.2.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.129455][ T964] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 108.140671][ T305] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 108.148910][ T305] usb 4-1: config 0 has no interface number 0 [ 108.155172][ T305] usb 4-1: config 0 interface 104 has no altsetting 0 [ 108.163523][ T305] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 108.172671][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.180681][ T305] usb 4-1: Product: syz [ 108.184842][ T305] usb 4-1: Manufacturer: syz [ 108.189635][ T305] usb 4-1: SerialNumber: syz [ 108.194664][ T305] usb 4-1: config 0 descriptor?? [ 108.289451][ T964] usb 1-1: Using ep0 maxpacket: 8 [ 108.295524][ T964] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 108.303903][ T964] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.313659][ T964] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.323486][ T964] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.333409][ T964] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.346373][ T964] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.355413][ T964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.401369][ T1044] usb 4-1: USB disconnect, device number 15 [ 108.415904][ T3692] tmpfs: Unknown parameter 'usrquota' [ 108.463806][ T3696] 9pnet_virtio: no channels available for device syz [ 108.709429][ T305] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 108.860424][ T305] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 108.870388][ T305] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 108.881554][ T305] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.890633][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.898687][ T305] usb 3-1: Product: syz [ 108.902862][ T305] usb 3-1: Manufacturer: syz [ 108.907462][ T305] usb 3-1: SerialNumber: syz [ 108.974995][ T36] audit: type=1400 audit(2000000018.500:374): avc: denied { create } for pid=3721 comm="syz.1.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 108.984930][ T3722] tmpfs: Invalid uid '0x00000000ffffffff' [ 108.995680][ T36] audit: type=1400 audit(2000000018.510:375): avc: denied { getopt } for pid=3721 comm="syz.1.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 109.149455][ T964] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 109.300510][ T964] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 109.308751][ T964] usb 4-1: config 0 has no interface number 0 [ 109.314892][ T964] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 109.318016][ T3701] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 109.325771][ T964] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 109.333289][ T3701] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 109.343634][ T964] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 109.362434][ T964] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 109.373689][ T964] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 109.384002][ T964] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 109.397003][ T964] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 109.406178][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.414971][ T964] usb 4-1: config 0 descriptor?? [ 109.420367][ T3715] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 109.643628][ T1044] usb 4-1: USB disconnect, device number 16 [ 110.158824][ T3724] 9pnet_virtio: no channels available for device syz [ 110.166956][ T3701] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 110.179524][ T3701] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 110.389512][ T305] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 110.399292][ T305] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 110.412893][ T305] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 110.442214][ T36] audit: type=1400 audit(2000000019.970:376): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 110.489388][ T36] audit: type=1400 audit(2000000019.970:377): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.529388][ T36] audit: type=1400 audit(2000000019.970:378): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=6113 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.571274][ T36] audit: type=1400 audit(2000000019.970:379): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=6113 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.615743][ T1044] usb 3-1: USB disconnect, device number 18 [ 110.622153][ T1044] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 110.754969][ T3758] 9pnet_virtio: no channels available for device syz [ 110.868488][ T3770] tmpfs: Invalid uid '0x00000000ffffffff' [ 110.909827][ T9] usb 1-1: USB disconnect, device number 21 [ 111.209455][ T9] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 111.279481][ T1044] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 111.360638][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 111.368793][ T9] usb 1-1: config 0 has no interface number 0 [ 111.374912][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 111.385700][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 111.396322][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 111.407987][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 111.419022][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 111.428884][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.441980][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 111.450571][ T1044] usb 2-1: config 0 has an invalid interface number: 104 but max is 0 [ 111.451109][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.459551][ T1044] usb 2-1: config 0 has no interface number 0 [ 111.469646][ T9] usb 1-1: config 0 descriptor?? [ 111.473546][ T1044] usb 2-1: config 0 interface 104 has no altsetting 0 [ 111.480028][ T3772] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.486837][ T1044] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 111.501663][ T1044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.509689][ T1044] usb 2-1: Product: syz [ 111.513862][ T1044] usb 2-1: Manufacturer: syz [ 111.518436][ T1044] usb 2-1: SerialNumber: syz [ 111.523643][ T1044] usb 2-1: config 0 descriptor?? [ 111.709940][ T1044] usb 1-1: USB disconnect, device number 22 [ 111.743029][ T9] usb 2-1: USB disconnect, device number 15 [ 112.230578][ T3777] tmpfs: Unknown parameter 'usrquota' [ 112.264412][ T3781] 9pnet_virtio: no channels available for device syz [ 112.268434][ T3778] 9pnet_virtio: no channels available for device syz [ 112.281184][ T3785] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.281334][ T3785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:899 [ 112.360097][ T3792] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 112.376048][ T3792] rust_binder: Read failure Err(EFAULT) in pid:901 [ 112.385337][ T3795] tmpfs: Invalid uid '0x00000000ffffffff' [ 112.714980][ T3814] 9pnet_virtio: no channels available for device syz [ 112.849444][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 112.959446][ T964] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 113.000500][ T9] usb 3-1: config 0 has an invalid interface number: 104 but max is 0 [ 113.008685][ T9] usb 3-1: config 0 has no interface number 0 [ 113.014800][ T9] usb 3-1: config 0 interface 104 has no altsetting 0 [ 113.023126][ T9] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 113.032428][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.040534][ T9] usb 3-1: Product: syz [ 113.044681][ T9] usb 3-1: Manufacturer: syz [ 113.049260][ T9] usb 3-1: SerialNumber: syz [ 113.054739][ T9] usb 3-1: config 0 descriptor?? [ 113.119461][ T964] usb 4-1: Using ep0 maxpacket: 8 [ 113.125845][ T964] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 113.134156][ T964] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 113.142686][ T964] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 113.151797][ T964] usb 4-1: config 250 has no interface number 0 [ 113.158031][ T964] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 113.169745][ T964] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 113.180189][ T964] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.190570][ T964] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 113.200820][ T964] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 113.214385][ T964] usb 4-1: config 250 interface 228 has no altsetting 0 [ 113.222667][ T964] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 113.231807][ T964] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 113.240083][ T964] usb 4-1: Product: syz [ 113.244238][ T964] usb 4-1: SerialNumber: syz [ 113.250314][ T964] hub 4-1:250.228: bad descriptor, ignoring hub [ 113.256563][ T964] hub 4-1:250.228: probe with driver hub failed with error -5 [ 113.267617][ T1044] usb 3-1: USB disconnect, device number 19 [ 113.450943][ T964] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 113.783651][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 113.783673][ T36] audit: type=1400 audit(2000000023.310:394): avc: denied { read } for pid=3826 comm="syz.1.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.069969][ T3840] 9pnet_virtio: no channels available for device syz [ 114.359584][ T3816] usb 4-1: reset high-speed USB device number 17 using dummy_hcd [ 114.367839][ T3816] usb 4-1: device reset changed ep0 maxpacket size! [ 114.374765][ T1044] usb 4-1: USB disconnect, device number 17 [ 114.381680][ T1044] usblp0: removed [ 114.509418][ T1044] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 114.659446][ T1044] usb 4-1: Using ep0 maxpacket: 32 [ 114.665578][ T1044] usb 4-1: config 0 has no interfaces? [ 114.672355][ T1044] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 114.681443][ T1044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.689724][ T1044] usb 4-1: Product: syz [ 114.693979][ T1044] usb 4-1: Manufacturer: syz [ 114.698550][ T1044] usb 4-1: SerialNumber: syz [ 114.703702][ T1044] usb 4-1: config 0 descriptor?? [ 114.910464][ T1044] usb 4-1: USB disconnect, device number 18 [ 115.494436][ T3867] 9pnet_virtio: no channels available for device syz [ 115.532924][ T3871] 9pnet_virtio: no channels available for device syz [ 115.646651][ T3878] rust_binder: Write failure EFAULT in pid:927 [ 115.790741][ T3883] 9pnet_virtio: no channels available for device syz [ 115.879450][ T3888] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 115.889360][ T36] audit: type=1400 audit(2000000025.410:395): avc: denied { relabelto } for pid=3887 comm="syz.3.1423" name="414" dev="tmpfs" ino=2240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 115.920707][ T36] audit: type=1400 audit(2000000025.420:396): avc: denied { associate } for pid=3887 comm="syz.3.1423" name="414" dev="tmpfs" ino=2240 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 115.948382][ T36] audit: type=1400 audit(2000000025.450:397): avc: denied { write } for pid=294 comm="syz-executor" name="414" dev="tmpfs" ino=2240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 115.975075][ T36] audit: type=1400 audit(2000000025.450:398): avc: denied { remove_name } for pid=294 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 116.002367][ T36] audit: type=1400 audit(2000000025.450:399): avc: denied { rmdir } for pid=294 comm="syz-executor" name="414" dev="tmpfs" ino=2240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 116.028682][ T36] audit: type=1400 audit(2000000025.450:400): avc: denied { ioctl } for pid=3892 comm="syz.2.1424" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45518 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 116.067887][ T36] audit: type=1400 audit(2000000025.590:401): avc: denied { bind } for pid=3897 comm="syz.3.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.131488][ T3902] 9pnet_virtio: no channels available for device syz [ 116.149440][ T1044] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 116.319429][ T1044] usb 1-1: Using ep0 maxpacket: 8 [ 116.325624][ T1044] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 116.334057][ T1044] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 116.342607][ T1044] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 116.351660][ T1044] usb 1-1: config 250 has no interface number 0 [ 116.357924][ T1044] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 116.369511][ T1044] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 116.379948][ T1044] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.390195][ T1044] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 116.400454][ T1044] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 116.413910][ T1044] usb 1-1: config 250 interface 228 has no altsetting 0 [ 116.421917][ T1044] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 116.430989][ T1044] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 116.439227][ T1044] usb 1-1: Product: syz [ 116.443417][ T1044] usb 1-1: SerialNumber: syz [ 116.449493][ T1044] hub 1-1:250.228: bad descriptor, ignoring hub [ 116.455757][ T1044] hub 1-1:250.228: probe with driver hub failed with error -5 [ 116.498817][ T3908] 9pnet_virtio: no channels available for device syz [ 116.538190][ T3916] 9pnet_virtio: no channels available for device syz [ 116.654583][ T1044] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 23 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 117.559616][ T3890] usb 1-1: reset high-speed USB device number 23 using dummy_hcd [ 117.567960][ T3890] usb 1-1: device reset changed ep0 maxpacket size! [ 117.574806][ T1044] usb 1-1: USB disconnect, device number 23 [ 117.581727][ T1044] usblp0: removed [ 117.709436][ T1044] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 117.859392][ T1044] usb 1-1: Using ep0 maxpacket: 32 [ 117.865645][ T1044] usb 1-1: config 0 has no interfaces? [ 117.872600][ T1044] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 117.882023][ T1044] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.890012][ T1044] usb 1-1: Product: syz [ 117.894160][ T1044] usb 1-1: Manufacturer: syz [ 117.898809][ T1044] usb 1-1: SerialNumber: syz [ 117.904105][ T1044] usb 1-1: config 0 descriptor?? [ 118.116326][ T1044] usb 1-1: USB disconnect, device number 24 [ 118.636669][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.640285][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.659547][ T3934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:829 [ 118.701267][ T3942] 9pnet_virtio: no channels available for device syz [ 118.759736][ T3950] 9pnet_virtio: no channels available for device syz [ 118.949397][ T1044] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 119.031248][ T3966] 9pnet_virtio: no channels available for device syz [ 119.050739][ T3968] 9pnet_virtio: no channels available for device syz [ 119.089431][ T31] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 119.099480][ T1044] usb 1-1: Using ep0 maxpacket: 8 [ 119.105684][ T1044] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 119.113939][ T1044] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.123783][ T1044] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.133523][ T1044] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.143450][ T1044] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.156454][ T1044] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.165573][ T1044] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.249416][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 119.255660][ T31] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 119.264041][ T31] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 119.272554][ T31] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 119.281614][ T31] usb 3-1: config 250 has no interface number 0 [ 119.287876][ T31] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 119.299725][ T31] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 119.310186][ T31] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.320456][ T31] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 119.330732][ T31] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 119.344236][ T31] usb 3-1: config 250 interface 228 has no altsetting 0 [ 119.352218][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 119.361296][ T31] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 119.369576][ T31] usb 3-1: Product: syz [ 119.373727][ T31] usb 3-1: SerialNumber: syz [ 119.381256][ T31] hub 3-1:250.228: bad descriptor, ignoring hub [ 119.387706][ T31] hub 3-1:250.228: probe with driver hub failed with error -5 [ 119.582649][ T31] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 20 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 119.640375][ T3972] 9pnet_virtio: no channels available for device syz [ 119.672954][ T3977] 9pnet_virtio: no channels available for device syz [ 119.871519][ T36] audit: type=1400 audit(2000000029.400:402): avc: denied { create } for pid=3997 comm="syz.1.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 119.892203][ T36] audit: type=1400 audit(2000000029.420:403): avc: denied { sys_admin } for pid=3997 comm="syz.1.1465" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 119.917593][ T4001] 9pnet_virtio: no channels available for device syz [ 119.939532][ T4006] 9pnet_virtio: no channels available for device syz [ 120.000953][ T36] audit: type=1400 audit(2000000029.530:404): avc: denied { mount } for pid=4010 comm="syz.1.1470" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 120.024544][ T4011] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 120.040458][ T36] audit: type=1400 audit(2000000029.570:405): avc: denied { unmount } for pid=394 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 120.093566][ T4016] input: syz0 as /devices/virtual/input/input26 [ 120.112470][ T36] audit: type=1400 audit(2000000029.640:406): avc: denied { name_bind } for pid=4017 comm="syz.3.1473" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 120.134536][ T36] audit: type=1400 audit(2000000029.640:407): avc: denied { node_bind } for pid=4017 comm="syz.3.1473" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 120.176436][ T4027] 9pnet_virtio: no channels available for device syz [ 120.199614][ T3958] usb 3-1: reset high-speed USB device number 20 using dummy_hcd [ 120.207828][ T3958] usb 3-1: device reset changed ep0 maxpacket size! [ 120.217589][ T489] usb 3-1: USB disconnect, device number 20 [ 120.229737][ T489] usblp0: removed [ 120.301277][ T4034] 9pnet_virtio: no channels available for device syz [ 120.359386][ T489] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 120.519380][ T489] usb 3-1: Using ep0 maxpacket: 32 [ 120.530129][ T489] usb 3-1: config 0 has no interfaces? [ 120.540611][ T489] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 120.559367][ T489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.567377][ T489] usb 3-1: Product: syz [ 120.577789][ T489] usb 3-1: Manufacturer: syz [ 120.582443][ T489] usb 3-1: SerialNumber: syz [ 120.587517][ T489] usb 3-1: config 0 descriptor?? [ 120.798963][ T489] usb 3-1: USB disconnect, device number 21 [ 121.264754][ T4048] 9pnet_virtio: no channels available for device syz [ 121.282562][ T4050] 9pnet_virtio: no channels available for device syz [ 121.331338][ T4057] 9pnet_virtio: no channels available for device syz [ 121.554758][ T4081] 9pnet_virtio: no channels available for device syz [ 121.708635][ T31] usb 1-1: USB disconnect, device number 25 [ 121.831822][ T4104] 9pnet_virtio: no channels available for device syz [ 121.922188][ T4109] 9pnet_virtio: no channels available for device syz [ 122.147071][ T4126] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 122.213499][ T36] audit: type=1400 audit(2000000031.740:408): avc: denied { bind } for pid=4134 comm="syz.2.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.233548][ T36] audit: type=1400 audit(2000000031.750:409): avc: denied { listen } for pid=4134 comm="syz.2.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.253152][ T36] audit: type=1400 audit(2000000031.750:410): avc: denied { write } for pid=4134 comm="syz.2.1519" path="socket:[46792]" dev="sockfs" ino=46792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.284383][ T4137] 9pnet_virtio: no channels available for device syz [ 122.403219][ T4148] tipc: Started in network mode [ 122.408215][ T4148] tipc: Node identity , cluster identity 4711 [ 122.414669][ T4148] tipc: Failed to set node id, please configure manually [ 122.421946][ T4148] tipc: Enabling of bearer rejected, failed to enable media [ 122.493151][ T36] audit: type=1400 audit(2000000032.020:411): avc: denied { append } for pid=4156 comm="syz.3.1535" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 122.563343][ T4170] 9pnet_virtio: no channels available for device syz [ 122.581268][ T4175] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1534'. [ 122.624487][ T4182] /dev/nullb0: Can't lookup blockdev [ 122.678664][ T4184] kvm: pic: non byte write [ 122.819715][ T4198] 9pnet_virtio: no channels available for device syz [ 123.028486][ T4220] 9pnet_virtio: no channels available for device syz [ 123.066191][ T4226] 9pnet_virtio: no channels available for device syz [ 123.103761][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 123.106530][ T4232] input: syz1 as /devices/virtual/input/input27 [ 123.119086][ T4232] input: failed to attach handler leds to device input27, error: -6 [ 123.217149][ T4245] loop2: detected capacity change from 0 to 7 [ 123.223841][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.233066][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 123.241370][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.250662][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 123.258591][ T4245] loop2: unable to read partition table [ 123.264463][ T4245] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 123.279383][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 123.288357][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.299890][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 123.309726][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 123.316408][ T4250] 9pnet_virtio: no channels available for device syz [ 123.321147][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 123.344494][ T31] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 123.357922][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.374837][ T31] hub 1-1:1.0: bad descriptor, ignoring hub [ 123.381821][ T31] hub 1-1:1.0: probe with driver hub failed with error -5 [ 123.389108][ T31] cdc_wdm 1-1:1.0: skipping garbage [ 123.394607][ T31] cdc_wdm 1-1:1.0: skipping garbage [ 123.401027][ T31] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 123.407019][ T31] cdc_wdm 1-1:1.0: Unknown control protocol [ 123.679573][ T9] usb 1-1: USB disconnect, device number 26 [ 123.689396][ T489] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 123.840440][ T489] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 123.848799][ T489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.859900][ T489] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 123.868919][ T489] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 123.877071][ T489] usb 4-1: Manufacturer: syz [ 123.882392][ T489] usb 4-1: config 0 descriptor?? [ 123.909408][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 124.009410][ T9] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 124.059426][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 124.065741][ T31] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 124.073980][ T31] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.083918][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.090642][ T489] usb 4-1: USB disconnect, device number 19 [ 124.093755][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.109647][ T31] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.122611][ T31] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.131659][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.170475][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.181004][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.189970][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 124.201071][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 124.210241][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.220029][ T4202] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 124.228581][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 124.235079][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 124.242475][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 124.247702][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 124.249303][ T4281] 9pnet_virtio: no channels available for device syz [ 124.253518][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 124.265636][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 124.375474][ T4289] capability: warning: `syz.1.1581' uses 32-bit capabilities (legacy support in use) [ 124.385452][ T4289] tmpfs: Unknown parameter 'usrquota' [ 124.480474][ T4300] syzkaller0: entered promiscuous mode [ 124.485981][ T4300] syzkaller0: entered allmulticast mode [ 124.539445][ T31] usb 1-1: USB disconnect, device number 27 [ 124.946410][ T4320] /dev/nullb0: Can't lookup blockdev [ 125.021461][ T4325] kvm: pic: non byte write [ 125.518969][ T4348] tmpfs: Unknown parameter 'usrquota' [ 125.567666][ T4357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1608'. [ 125.589381][ T489] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 125.605047][ T4362] tmpfs: Unknown parameter 'usrquota' [ 125.647240][ T4372] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 125.647240][ T4372] attempt to subtract with overflow [ 125.660436][ T4372] ------------[ cut here ]------------ [ 125.666006][ T4372] kernel BUG at rust/helpers/bug.c:7! [ 125.672792][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 125.672809][ T36] audit: type=1400 audit(2000000035.200:419): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 125.673709][ T4372] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 125.683810][ T36] audit: type=1400 audit(2000000035.200:420): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.700958][ T4372] CPU: 0 UID: 0 PID: 4372 Comm: syz.1.1614 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 125.700991][ T4372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.701004][ T4372] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 125.713707][ T36] audit: type=1400 audit(2000000035.200:421): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.729447][ T4372] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 d3 87 2e 07 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 99 43 67 8b 90 90 90 90 90 90 90 90 90 [ 125.729472][ T4372] RSP: 0018:ffffc90003b8da90 EFLAGS: 00010246 [ 125.751807][ T36] audit: type=1400 audit(2000000035.200:422): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.753070][ T4372] RAX: 0000000000000061 RBX: 1ffff92000771b54 RCX: 57a31bf55a7db800 [ 125.753093][ T4372] RDX: ffffc9000c2a5000 RSI: 0000000000002725 RDI: 0000000000002726 [ 125.758424][ T36] audit: type=1400 audit(2000000035.200:423): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.779530][ T4372] RBP: ffffc90003b8da90 R08: ffffc90003b8d787 R09: 1ffff92000771af0 [ 125.779549][ T4372] R10: dffffc0000000000 R11: fffff52000771af1 R12: 0000000000000000 [ 125.779563][ T4372] R13: dffffc0000000000 R14: ffffc90003b8dac0 R15: ffffc90003b8daf0 [ 125.779579][ T4372] FS: 00007fd19c7f76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 125.799472][ T36] audit: type=1400 audit(2000000035.200:424): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.805324][ T4372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.805343][ T4372] CR2: 0000001b2c31fffc CR3: 000000011fa92000 CR4: 00000000003526b0 [ 125.833449][ T36] audit: type=1400 audit(2000000035.200:425): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.833949][ T4372] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff [ 125.833968][ T4372] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 125.970921][ T4372] Call Trace: [ 125.974183][ T4372] [ 125.977115][ T4372] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 125.984563][ T4372] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 125.992564][ T4372] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 126.002799][ T4372] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 126.016631][ T4372] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 126.027212][ T4372] ? __kasan_check_write+0x18/0x20 [ 126.032327][ T4372] ? _raw_spin_lock+0x8c/0x120 [ 126.037072][ T4372] ? __cfi__raw_spin_lock+0x10/0x10 [ 126.042253][ T4372] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 126.049426][ T4372] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 126.057314][ T4372] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 126.067183][ T4372] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 126.077748][ T4372] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 126.087441][ T4372] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 126.097485][ T4372] ? __kasan_check_write+0x18/0x20 [ 126.102575][ T4372] ? _raw_spin_lock+0x8c/0x120 [ 126.107404][ T4372] ? __cfi__raw_spin_lock+0x10/0x10 [ 126.112624][ T4372] ? __kasan_check_write+0x18/0x20 [ 126.117744][ T4372] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 126.127303][ T4372] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 126.137273][ T4372] ? unwind_next_frame+0x3c2/0x750 [ 126.142364][ T4372] ? path_openat+0x2b6c/0x34b0 [ 126.147113][ T4372] ? path_openat+0x2b6c/0x34b0 [ 126.151905][ T4372] ? __kernel_text_address+0x11/0x40 [ 126.157278][ T4372] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 126.163435][ T4372] ? arch_stack_walk+0x12a/0x170 [ 126.168671][ T4372] ? path_openat+0x2b6c/0x34b0 [ 126.173448][ T4372] ? stack_depot_save_flags+0x38/0x800 [ 126.178896][ T4372] ? stack_depot_save+0x12/0x20 [ 126.183729][ T4372] ? save_stack+0x11c/0x1f0 [ 126.188229][ T4372] ? __kasan_check_read+0x15/0x20 [ 126.193231][ T4372] ? read_word_at_a_time+0x12/0x20 [ 126.198318][ T4372] ? sized_strscpy+0x9f/0x2a0 [ 126.202973][ T4372] ? is_bpf_text_address+0x17b/0x1a0 [ 126.208258][ T4372] ? kernel_text_address+0xa9/0xe0 [ 126.213369][ T4372] ? unwind_get_return_address+0x51/0x90 [ 126.218979][ T4372] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 126.225113][ T4372] ? arch_stack_walk+0x10b/0x170 [ 126.230031][ T4372] ? stack_depot_save_flags+0x38/0x800 [ 126.235471][ T4372] ? kasan_save_alloc_info+0x40/0x50 [ 126.240743][ T4372] ? kasan_save_track+0x4f/0x80 [ 126.245583][ T4372] ? kasan_save_track+0x3e/0x80 [ 126.250413][ T4372] ? kasan_save_alloc_info+0x40/0x50 [ 126.255676][ T4372] ? __kasan_kmalloc+0x96/0xb0 [ 126.260419][ T4372] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 126.267156][ T4372] ? krealloc_noprof+0x8d/0x130 [ 126.272086][ T4372] ? rust_helper_krealloc+0x33/0xd0 [ 126.277266][ T4372] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 126.286811][ T4372] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 126.297309][ T4372] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 126.306604][ T4372] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 126.315393][ T4372] ? __se_sys_ioctl+0x132/0x1b0 [ 126.320243][ T4372] ? __x64_sys_ioctl+0x7f/0xa0 [ 126.325114][ T4372] ? do_syscall_64+0x58/0xf0 [ 126.329720][ T4372] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.335886][ T4372] ? cgroup_rstat_updated+0x132/0x7f0 [ 126.341258][ T4372] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 126.347053][ T4372] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 126.352503][ T4372] ? update_curr_dl_se+0x10c/0xb20 [ 126.357703][ T4372] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 126.363752][ T4372] ? update_curr+0x60d/0xc60 [ 126.368505][ T4372] ? __kasan_check_write+0x18/0x20 [ 126.373614][ T4372] ? _raw_spin_lock+0x8c/0x120 [ 126.378367][ T4372] ? __cfi__raw_spin_lock+0x10/0x10 [ 126.383558][ T4372] ? _raw_spin_unlock+0x45/0x60 [ 126.388390][ T4372] ? rust_helper_spin_unlock+0x19/0x30 [ 126.393838][ T4372] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 126.404314][ T4372] ? update_load_avg+0x506/0x19a0 [ 126.409341][ T4372] ? update_cfs_group+0x260/0x260 [ 126.414353][ T4372] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 126.425281][ T4372] ? kvm_sched_clock_read+0x15/0x30 [ 126.430461][ T4372] ? sched_clock_noinstr+0xd/0x30 [ 126.435463][ T4372] ? sched_clock+0x44/0x60 [ 126.439884][ T4372] ? sched_clock_cpu+0x75/0x400 [ 126.444713][ T4372] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 126.450761][ T4372] ? xfd_validate_state+0x68/0x150 [ 126.455851][ T4372] ? save_fpregs_to_fpstate+0x196/0x230 [ 126.461380][ T4372] ? __cfi___switch_to+0x10/0x10 [ 126.466733][ T4372] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 126.475822][ T4372] ? finish_task_switch+0x13a/0x780 [ 126.480999][ T4372] ? __switch_to_asm+0x3d/0x70 [ 126.485742][ T4372] ? avc_has_extended_perms+0x7c7/0xdd0 [ 126.491261][ T4372] ? __asan_memcpy+0x5a/0x80 [ 126.495827][ T4372] ? avc_has_extended_perms+0x921/0xdd0 [ 126.501353][ T4372] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 126.510874][ T4372] ? do_vfs_ioctl+0xeda/0x1e30 [ 126.515617][ T4372] ? __futex_queue+0x19a/0x340 [ 126.520359][ T4372] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 126.525969][ T4372] ? __cfi___futex_queue+0x10/0x10 [ 126.531057][ T4372] ? futex_wait_setup+0x1bc/0x260 [ 126.536058][ T4372] ? __futex_wait+0x218/0x2a0 [ 126.540711][ T4372] ? ioctl_has_perm+0x384/0x4d0 [ 126.545542][ T4372] ? has_cap_mac_admin+0xd0/0xd0 [ 126.550466][ T4372] ? futex_wake+0x5fb/0x900 [ 126.554945][ T4372] ? futex_setup_timer+0xb4/0xd0 [ 126.559861][ T4372] ? futex_wait+0x288/0x540 [ 126.564339][ T4372] ? __cfi_futex_wait+0x10/0x10 [ 126.569253][ T4372] ? selinux_file_ioctl+0x6e0/0x1360 [ 126.574523][ T4372] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 126.580054][ T4372] ? do_futex+0x309/0x500 [ 126.584384][ T4372] ? __cfi_do_futex+0x10/0x10 [ 126.589066][ T4372] ? __fget_files+0x2c5/0x340 [ 126.593751][ T4372] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 126.602233][ T4372] ? __se_sys_ioctl+0x114/0x1b0 [ 126.607077][ T4372] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 126.616162][ T4372] __se_sys_ioctl+0x132/0x1b0 [ 126.620825][ T4372] __x64_sys_ioctl+0x7f/0xa0 [ 126.625419][ T4372] x64_sys_call+0x1878/0x2ee0 [ 126.630093][ T4372] do_syscall_64+0x58/0xf0 [ 126.634506][ T4372] ? clear_bhb_loop+0x35/0x90 [ 126.639169][ T4372] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.645053][ T4372] RIP: 0033:0x7fd19e18e929 [ 126.649451][ T4372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.669054][ T4372] RSP: 002b:00007fd19c7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.677467][ T4372] RAX: ffffffffffffffda RBX: 00007fd19e3b5fa0 RCX: 00007fd19e18e929 [ 126.685435][ T4372] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 126.693384][ T4372] RBP: 00007fd19e210b39 R08: 0000000000000000 R09: 0000000000000000 [ 126.701336][ T4372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.709286][ T4372] R13: 0000000000000000 R14: 00007fd19e3b5fa0 R15: 00007fff4d7838d8 [ 126.717243][ T4372] [ 126.720241][ T4372] Modules linked in: [ 126.724328][ T4372] ---[ end trace 0000000000000000 ]--- [ 126.731098][ T4372] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 126.740088][ T4372] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 d3 87 2e 07 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 99 43 67 8b 90 90 90 90 90 90 90 90 90 [ 126.740481][ T1044] usb 3-1: USB disconnect, device number 22 [ 126.759976][ T4372] RSP: 0018:ffffc90003b8da90 EFLAGS: 00010246 [ 126.772175][ T4372] RAX: 0000000000000061 RBX: 1ffff92000771b54 RCX: 57a31bf55a7db800 [ 126.799433][ T489] usb 1-1: config 0 has an invalid interface number: 104 but max is 0 [ 126.807769][ T489] usb 1-1: config 0 has no interface number 0 [ 126.813965][ T489] usb 1-1: config 0 interface 104 has no altsetting 0 [ 126.814119][ T4372] RDX: ffffc9000c2a5000 RSI: 0000000000002725 RDI: 0000000000002726 [ 126.823096][ T489] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 126.828793][ T4372] RBP: ffffc90003b8da90 R08: ffffc90003b8d787 R09: 1ffff92000771af0 [ 126.828823][ T4372] R10: dffffc0000000000 R11: fffff52000771af1 R12: 0000000000000000 [ 126.844309][ T489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.845943][ T4372] R13: dffffc0000000000 R14: ffffc90003b8dac0 R15: ffffc90003b8daf0 [ 126.853908][ T489] usb 1-1: Product: syz [ 126.863108][ T4372] FS: 00007fd19c7f76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 126.869969][ T489] usb 1-1: Manufacturer: syz [ 126.874298][ T4372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.883071][ T489] usb 1-1: SerialNumber: syz [ 126.887950][ T4372] CR2: 00007f250f581178 CR3: 000000011fa92000 CR4: 00000000003526b0 [ 126.895168][ T489] usb 1-1: config 0 descriptor?? [ 126.909033][ T4372] DR0: 0000000000000002 DR1: 000000000000004a DR2: 0000000000000000 [ 126.920019][ T4372] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 126.928020][ T4372] Kernel panic - not syncing: Fatal exception [ 126.934288][ T4372] Kernel Offset: disabled [ 126.938609][ T4372] Rebooting in 86400 seconds..