last executing test programs: 2.524472715s ago: executing program 2 (id=1439): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000240)={0x200, 0x0, 0x80000000, 0x10001, 0x3}) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0xa, 0x1, 0x3, 0x6, 0xf}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x40}}, 0x90) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x100000001]}, &(0x7f00000000c0), 0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x20000000000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x7, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0xb, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x3, 0x4004, 0x3, 0x4, 0xefffffffffffffff, 0x0, 0xffffffffffffff19, 0x400002004000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x4208, r4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 2.523988565s ago: executing program 2 (id=1440): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0xffff1000, 0x10000}) openat$kvm(0xffffffffffffff9c, 0x0, 0x20102, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d7f64653d30303030303030303030303030303034303030302c757365725f69643d000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lgetxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00', 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.523803415s ago: executing program 2 (id=1441): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_pwait(r3, 0x0, 0x0, 0x5b88, 0x0, 0xffffffffffffffd8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r5, 0x147a5000) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000040), 0x4) fadvise64(r5, 0xa, 0x400, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.588662431s ago: executing program 2 (id=1462): r0 = syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00') close_range(r0, r0, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, 0x0) 1.587933421s ago: executing program 2 (id=1463): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x280, 0x0) socket$key(0xf, 0x3, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 1.557689244s ago: executing program 2 (id=1465): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) r2 = getpgrp(0x0) r3 = gettid() r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000050001c0"]) kcmp(r2, r3, 0x7ffffffe, 0xffffffffffffffff, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) openat$cgroup_ro(r7, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$hiddev(r7, &(0x7f0000000a80)=""/4096, 0x1000) 1.428860464s ago: executing program 3 (id=1466): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) 880.118649ms ago: executing program 3 (id=1472): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x4, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00000003c0)=[@enter_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x9, 0x0, 0x14}, @flat=@weak_handle={0x77682a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}, 0x1040}, @request_death={0x400c630e, 0x2}], 0xbb, 0x0, &(0x7f0000000240)="05de66730879c09a3dad5fda5a11568bd6922cdb8a6c55bad3ce0e7d04883d574b211f9860b41a93ac458aca9afb423d03bb15483d60c14ac6fee5f3fae5d384e42707be029a067801fd291926efc34abc3049c3e2a53a6b88d05b53f9e0e598d164bd80d7dc3a2b92cafd605e38d9d62ed71495a0a11f2b2df6f33e9482ae85adda08eee500da7654f7ab9d754db694b9b9bbad95115f25efc6dd563e708784f81ca79e966bc1608167fa9eb815a3b09bd4042fd962392f1bd82e"}) 852.736041ms ago: executing program 3 (id=1473): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) 776.773577ms ago: executing program 3 (id=1474): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) socket(0x29, 0x3, 0x2) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0xffffffff, 0x0, {{{@in=@broadcast, @in6=@mcast1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {0x0, 0x748, 0x0, 0x3}, {}, {}, 0x0, 0x34ff, 0xa}, 0x0, 0xfffffffc}}, 0xf8}, 0x1, 0x0, 0x0, 0x20040144}, 0x0) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) 760.463678ms ago: executing program 3 (id=1476): ftruncate(0xffffffffffffffff, 0x398a0bdb) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x1800, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 654.344657ms ago: executing program 0 (id=1482): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) (rerun: 64) ioctl$EVIOCGABS0(r1, 0x80184520, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX]) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000002bc0), 0x1, 0x0) write$selinux_validatetrans(r5, 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) setuid(0xee01) r7 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) (async) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x4a) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/4096, 0x1000, 0x1, 0x28}, @flat=@handle={0x73682a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/51, 0x33, 0x2, 0x2b}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 604.813501ms ago: executing program 0 (id=1484): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000001c40), 0x2, 0x0) read(r2, &(0x7f0000000c40)=""/4055, 0xfd7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@delsa={0x28, 0x11, 0x1, 0x74bd25, 0x25dfdbfe, {@in=@local, 0x4d2, 0xa, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000080)={{}, "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"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket(0x29, 0x3, 0x2) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x5a) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r5, &(0x7f00000023c0)={0x2020}, 0x1e8a) 600.131462ms ago: executing program 1 (id=1485): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x26, 0x3, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2, 0x3, 0xff) (async) r3 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0x190c, 0x4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0x190c, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) write$input_event(r2, &(0x7f0000000080)={{0x0, 0x2710}, 0x16, 0x8000, 0x665b}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000000)={@desc={0x1, 0x0, @desc1}}) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000000)={@desc={0x1, 0x0, @desc1}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x14, 0x0, &(0x7f0000000300)) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x14, 0x0, &(0x7f0000000300)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000001000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x700, 0x20, 0xffff45ec, 0xd, {{0x1c, 0x4, 0x1, 0x23, 0x70, 0x65, 0x0, 0x7, 0x4, 0x0, @loopback, @remote, {[@timestamp={0x44, 0x14, 0x2e, 0x0, 0x0, [0x1, 0x3ff, 0x1000, 0x9]}, @ssrr={0x89, 0x13, 0x2b, [@remote, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x17, 0xe, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, @multicast2, @empty, @remote]}, @timestamp_addr={0x44, 0x1c, 0xe2, 0x1, 0x4, [{@empty, 0x3}, {@private=0xa010100, 0x6}, {@rand_addr=0x64010101, 0x10}]}]}}}}}) 598.568521ms ago: executing program 0 (id=1486): ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) (async) r0 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006) (async) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000500)='-', 0x1}], 0x1) (async) ioperm(0x0, 0x12e, 0x8000000000008) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000000403"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), r1) (async) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8001, &(0x7f00000000c0)=[{0x4, 0x7ff, 0x19fa}], 0x1, 0x7f, 0x10, 0x4, 0x60, 0x8}) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x1, 0x0, &(0x7f0000000000)) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x200000, 0x0) 577.895253ms ago: executing program 1 (id=1487): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000840)="9676", 0x2}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}}], 0x1, 0x58124be230d39b05) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x57789000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mknod$loop(0x0, 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) clock_nanosleep(0xa, 0x1, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 535.193307ms ago: executing program 0 (id=1488): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = socket(0x29, 0x3, 0x2) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x51}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) setxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)={0x0, 0xfb, 0x15, 0x0, 0x7f, "b7a0818000d26921074059e8c0f2e969"}, 0x15, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r3, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4, 0x0, {0x5, 0x0, 0x10007, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x4000, 0x10000, 0x0, r7, 0x734, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r9, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0xd}}, {@uid={'uid', 0x3d, r2}}, {@mode={'mode', 0x3d, 0x25}}, {@uid={'uid', 0x3d, r4}}, {@gid={'gid', 0x3d, r7}}], [{@hash}, {@fowner_eq={'fowner', 0x3d, r9}}]}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r10, &(0x7f0000004180)={0x2020}, 0x2020) 534.896357ms ago: executing program 1 (id=1489): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x22e7c000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x440000, 0x13b) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000100)) r2 = fsmount(r0, 0x0, 0x74) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f00000000c0)) 534.237327ms ago: executing program 0 (id=1490): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) syz_usb_connect(0x2, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c2010203010902"], 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000002400)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x14}, @fda={0x66646185, 0x0, 0x1, 0x1}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x20}], 0x0, 0x1000000, 0x0}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @pic={0xd8, 0xff, 0x4, 0x40, 0x7f, 0xff, 0x7, 0x7f, 0x2, 0x4, 0x4, 0x3, 0xf, 0x7f, 0x2, 0xe2}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000340)={[0xa, 0x800000000000000, 0x10, 0x1, 0xf4, 0x1, 0x0, 0x3, 0x7f, 0x4000000000000004, 0x7ffd, 0x7ff, 0x8396, 0x200, 0x9, 0xf], 0x80a9000, 0xd7c6}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES8=r8, @ANYRES16, @ANYRES64=r10], 0x14}}, 0x48085) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r10) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b00), r10) sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002cbd700000000000030000000800012003000000"], 0x1c}}, 0x0) 534.024427ms ago: executing program 1 (id=1491): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) unshare(0x62040200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x62301, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x1) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x11) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 464.652002ms ago: executing program 1 (id=1492): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f0000000200)=0x1e) r1 = getpid() sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008800}, 0x20000881) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x1ffffff}, 0x1c) r3 = syz_pidfd_open(r1, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x1}}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) close_range(r3, r4, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000480)=0xffffffffffffff95) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2ac800, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r8, @ANYRESHEX=r2, @ANYRES32=r0]) setresuid(r6, r7, r10) syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x88143) open(&(0x7f0000000180)='./bus\x00', 0x814abd, 0x108) socket$inet_icmp(0x2, 0x2, 0x1) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x40049409, 0x0) socket$key(0xf, 0x3, 0x2) 464.008763ms ago: executing program 1 (id=1493): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1600) ioctl$HIDIOCSREPORT(r2, 0x81044804, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000380)={@desc={0x1, 0x0, @desc4}}) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000010000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x4040004) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r5) write$FUSE_BMAP(r8, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x28, r10, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) creat(&(0x7f0000000300)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) 55.907986ms ago: executing program 3 (id=1494): r0 = geteuid() r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)}], 0x1) r4 = openat$binfmt_register(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x6, 0x3a, ')%\\&\\}:', 0x3a, 'exfat\x00', 0x3a, './file0/file0'}, 0x3a) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x6000) setresuid(r0, 0x0, r0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'veth0_vlan\x00', 0x3e}) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000666000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00009b0000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000084e000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x38000, 0x1800, 0x8, 0x1}, 0x20) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002000), r5) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002280)={0x3f, r7, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) keyctl$session_to_parent(0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x6040000) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000001c40)=0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 0s ago: executing program 0 (id=1495): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) (rerun: 32) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x2) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000006c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16, @ANYRES16=r1, @ANYBLOB="d6ef"], 0x0) r3 = socket(0x10, 0x2, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="240000001e000503"], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r3) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffc0) (rerun: 32) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c777aaa3d0000", @ANYRESHEX=r7, @ANYBLOB=',directio,k']) read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): { write } for pid=443 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.775149][ T36] audit: type=1400 audit(1754645748.970:164): avc: denied { setopt } for pid=445 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.813883][ C0] kye 0003:0458:5011.0001: usb_submit_urb(ctrl) failed: -1 [ 32.961630][ T474] rust_binder: validate_parent_fixup: new_min_offset=549755813906, sg_entry.length=0 [ 32.961654][ T474] rust_binder: Error while translating object. [ 32.971331][ T474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.977838][ T474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 33.036851][ T484] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 33.069853][ T486] input: syz1 as /devices/virtual/input/input6 [ 33.079019][ T486] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 33.086698][ T486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:50 [ 33.362428][ T495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 33.371588][ T495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:33 [ 33.398101][ T497] ======================================================= [ 33.398101][ T497] WARNING: The mand mount option has been deprecated and [ 33.398101][ T497] and is ignored by this kernel. Remove the mand [ 33.398101][ T497] option from the mount to silence this warning. [ 33.398101][ T497] ======================================================= [ 33.443950][ T497] rust_binder: validate_parent_fixup: new_min_offset=55, sg_entry.length=0 [ 33.443976][ T497] rust_binder: Error while translating object. [ 33.452618][ T497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.458867][ T497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 33.493748][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.633924][ T10] usb 2-1: device descriptor read/64, error -71 [ 33.863674][ T328] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 33.883894][ T10] usb 2-1: device descriptor read/64, error -71 [ 33.921607][ T525] Zero length message leads to an empty skb [ 33.989947][ T533] incfs: Can't find or create .incomplete dir in ./file0 [ 33.997462][ T533] incfs: mount failed -17 [ 34.014676][ T328] usb 4-1: device firmware changed [ 34.020030][ T378] usb 4-1: USB disconnect, device number 3 [ 34.123758][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.163721][ T378] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.253737][ T10] usb 2-1: device descriptor read/64, error -71 [ 34.313734][ T378] usb 4-1: Using ep0 maxpacket: 32 [ 34.320409][ T378] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 34.329030][ T378] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 34.337691][ T378] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.347982][ T378] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 34.357710][ T378] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 34.370737][ T378] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 34.379912][ T378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.388553][ T378] usb 4-1: config 0 descriptor?? [ 34.496757][ T10] usb 2-1: device descriptor read/64, error -71 [ 34.500629][ T544] overlayfs: failed to clone upperpath [ 34.596923][ T499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 34.609815][ T10] usb usb2-port1: attempt power cycle [ 34.617088][ T499] process 'syz.3.49' launched '/dev/fd/14' with NULL argv: empty string added [ 34.626607][ T499] rust_binder: 37: no such ref 0 [ 34.631635][ T499] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 34.643474][ T9] usb 4-1: USB disconnect, device number 4 [ 34.679289][ T570] 9pnet_fd: Insufficient options for proto=fd [ 34.983712][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.004766][ T10] usb 2-1: device descriptor read/8, error -71 [ 35.134840][ T10] usb 2-1: device descriptor read/8, error -71 [ 35.287927][ T579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=579 comm=syz.3.77 [ 35.317469][ T581] can0: slcan on ttyS3. [ 35.366965][ T580] can0 (unregistered): slcan off ttyS3. [ 35.383756][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.414906][ T10] usb 2-1: device descriptor read/8, error -71 [ 35.565388][ T10] usb 2-1: device descriptor read/8, error -71 [ 35.673855][ T10] usb usb2-port1: unable to enumerate USB device [ 35.715439][ T632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 35.724225][ T632] erspan0: default FDB implementation only supports local addresses [ 35.823692][ T378] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 35.974635][ T630] rust_binder: validate_parent_fixup: new_min_offset=549755813906, sg_entry.length=0 [ 35.974664][ T630] rust_binder: Error while translating object. [ 35.984484][ T630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.990687][ T630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 36.002186][ T378] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.019935][ T378] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 36.027694][ T378] usb 4-1: can't read configurations, error -71 [ 36.069445][ T639] overlayfs: failed to clone upperpath [ 36.298648][ T648] capability: warning: `syz.2.93' uses deprecated v2 capabilities in a way that may be insecure [ 36.524872][ T664] can0: slcan on ptm0. [ 36.590263][ T664] can0 (unregistered): slcan off ptm0. [ 36.662197][ T685] rust_binder: 679 RLIMIT_NICE not set [ 36.662350][ T685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 36.675105][ T10] rust_binder: 677: removing orphan mapping 0:4120 [ 36.810847][ T706] rust_binder: Error while translating object. [ 36.810892][ T706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.817733][ T706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 36.830533][ T709] rust_binder: Write failure EINVAL in pid:63 [ 36.843101][ T710] rust_binder: Error while translating object. [ 36.850493][ T710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 36.859540][ T710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:68 [ 37.284851][ T734] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.332110][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 37.332130][ T36] audit: type=1400 audit(1754645753.520:235): avc: denied { bind } for pid=733 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.728894][ T36] audit: type=1400 audit(1754645753.920:236): avc: denied { write } for pid=753 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 37.834419][ T36] audit: type=1400 audit(1754645754.030:237): avc: denied { getopt } for pid=757 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.906071][ T36] audit: type=1400 audit(1754645754.100:238): avc: denied { read } for pid=759 comm="syz.3.124" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.928903][ T36] audit: type=1400 audit(1754645754.100:239): avc: denied { open } for pid=759 comm="syz.3.124" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.952196][ T36] audit: type=1400 audit(1754645754.100:240): avc: denied { write } for pid=759 comm="syz.3.124" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.001669][ T764] 9pnet_fd: Insufficient options for proto=fd [ 38.459155][ T36] audit: type=1400 audit(1754645754.650:241): avc: denied { block_suspend } for pid=782 comm="syz.2.130" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.068385][ T36] audit: type=1400 audit(1754645755.260:242): avc: denied { bind } for pid=796 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.103221][ T36] audit: type=1400 audit(1754645755.260:243): avc: denied { connect } for pid=796 comm="syz.2.134" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.126813][ T36] audit: type=1400 audit(1754645755.260:244): avc: denied { mount } for pid=796 comm="syz.2.134" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 39.163464][ T807] overlayfs: failed to clone upperpath [ 39.170181][ T807] netlink: 'syz.0.137': attribute type 12 has an invalid length. [ 39.723693][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 39.884922][ T9] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 39.888184][ T842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.151'. [ 39.902737][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 39.919261][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 39.930937][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 39.940779][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.950735][ T816] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 40.051977][ T868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 40.166428][ T816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.177474][ T816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.427090][ T912] 9pnet_fd: Insufficient options for proto=fd [ 41.113545][ T935] netlink: 208 bytes leftover after parsing attributes in process `syz.2.181'. [ 41.166852][ T937] netlink: 'syz.1.182': attribute type 27 has an invalid length. [ 41.510107][ T945] overlayfs: failed to clone lowerpath [ 41.601368][ T955] fuse: Unknown parameter '00000000000000000000006' [ 42.188458][ T979] 9pnet_fd: Insufficient options for proto=fd [ 42.498275][ T9] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 42.516160][ T9] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input7 [ 42.527772][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 42.527791][ T36] audit: type=1400 audit(1754645758.720:267): avc: denied { write } for pid=1006 comm="syz.3.209" name="file0" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.556835][ T378] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 42.559143][ T9] usb 4-1: USB disconnect, device number 7 [ 42.564569][ T36] audit: type=1400 audit(1754645758.750:268): avc: denied { open } for pid=1006 comm="syz.3.209" path="/28/file0" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.599728][ T36] audit: type=1400 audit(1754645758.750:269): avc: denied { ioctl } for pid=1006 comm="syz.3.209" path="/28/file0" dev="tmpfs" ino=169 ioctlcmd=0x4c05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.674684][ T1014] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 42.703879][ T1014] kvm: Disabled LAPIC found during irq injection [ 42.741513][ T1019] fuse: Bad value for 'rootmode' [ 42.746611][ T378] usb 2-1: Using ep0 maxpacket: 32 [ 42.757740][ T378] usb 2-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 42.776588][ T378] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 42.786247][ T378] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 42.796816][ T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.810718][ T378] usb 2-1: config 0 descriptor?? [ 42.894757][ T1040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=1040 comm=syz.0.219 [ 42.909105][ T36] audit: type=1400 audit(1754645759.100:270): avc: denied { setopt } for pid=1039 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.939437][ T1043] netlink: 'syz.0.220': attribute type 13 has an invalid length. [ 43.251015][ T36] audit: type=1400 audit(1754645759.440:271): avc: denied { accept } for pid=1049 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.510465][ T1062] fuse: Bad value for 'rootmode' [ 43.571906][ T36] audit: type=1400 audit(1754645759.760:272): avc: denied { create } for pid=1076 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 43.605211][ T36] audit: type=1400 audit(1754645759.800:273): avc: denied { create } for pid=1078 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 43.861347][ T36] audit: type=1400 audit(1754645760.050:274): avc: denied { append } for pid=1083 comm="syz.3.234" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.884354][ T36] audit: type=1400 audit(1754645760.060:275): avc: denied { read } for pid=1083 comm="syz.3.234" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.907732][ T36] audit: type=1400 audit(1754645760.060:276): avc: denied { open } for pid=1083 comm="syz.3.234" path="/dev/usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.757934][ T1104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 44.766858][ T1104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 44.789263][ T1104] SELinux: failed to load policy [ 44.820822][ T1108] /dev/md0: Can't lookup blockdev [ 44.826335][ T1108] /dev/md0: Can't lookup blockdev [ 44.848920][ T1113] rust_binder: Write failure EFAULT in pid:115 [ 44.918768][ T1130] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 45.070789][ T1180] veth0_to_hsr: entered promiscuous mode [ 45.077021][ T1179] veth0_to_hsr: left promiscuous mode [ 45.325044][ T9] usb 2-1: USB disconnect, device number 7 [ 45.475644][ T1190] rust_binder: Write failure EINVAL in pid:112 [ 45.475891][ T1190] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 45.489938][ T1191] rust_binder: Write failure EINVAL in pid:112 [ 45.516983][ T1197] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 45.530575][ T1197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 45.556551][ T1201] overlayfs: failed to resolve './file1': -2 [ 45.737025][ T1239] x_tables: duplicate underflow at hook 2 [ 46.066235][ T1253] overlayfs: missing 'lowerdir' [ 46.072461][ T1253] rust_binder: Error while translating object. [ 46.072485][ T1253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 46.078844][ T1253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:143 [ 46.120434][ T1257] can0: slcan on ptm0. [ 46.373733][ T378] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 46.523684][ T378] usb 2-1: Using ep0 maxpacket: 8 [ 46.530740][ T378] usb 2-1: unable to get BOS descriptor or descriptor too short [ 46.539235][ T378] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 46.546982][ T378] usb 2-1: can't read configurations, error -71 [ 46.569457][ T1256] can0 (unregistered): slcan off ptm0. [ 46.762196][ T1328] capability: warning: `syz.0.301' uses 32-bit capabilities (legacy support in use) [ 47.105503][ T1335] binder: Unknown parameter '' [ 47.182630][ T1339] overlayfs: failed to resolve './file0': -2 [ 47.205059][ T1345] tipc: Enabling of bearer rejected, failed to enable media [ 47.703078][ T1361] 9pnet_fd: Insufficient options for proto=fd [ 47.773663][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 47.773681][ T36] audit: type=1400 audit(1754645763.960:295): avc: denied { listen } for pid=1368 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.799350][ T36] audit: type=1400 audit(1754645763.970:296): avc: denied { accept } for pid=1368 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.858270][ T1379] netlink: 'syz.0.317': attribute type 16 has an invalid length. [ 47.866250][ T1379] netlink: 'syz.0.317': attribute type 4 has an invalid length. [ 47.874102][ T1379] netlink: 64126 bytes leftover after parsing attributes in process `syz.0.317'. [ 47.884358][ T1380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1380 comm=syz.2.314 [ 47.898727][ T36] audit: type=1400 audit(1754645764.090:297): avc: denied { create } for pid=1368 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 47.937679][ T36] audit: type=1400 audit(1754645764.130:298): avc: denied { mount } for pid=1383 comm="syz.0.319" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 47.962365][ T36] audit: type=1400 audit(1754645764.150:299): avc: denied { read } for pid=1383 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.991417][ T36] audit: type=1400 audit(1754645764.180:300): avc: denied { setopt } for pid=1385 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 48.012431][ T36] audit: type=1400 audit(1754645764.200:301): avc: denied { bind } for pid=1383 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.014774][ T1384] tipc: Enabling of bearer rejected, failed to enable media [ 48.031835][ T36] audit: type=1400 audit(1754645764.200:302): avc: denied { search } for pid=1383 comm="syz.0.319" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 48.062505][ T36] audit: type=1400 audit(1754645764.200:303): avc: denied { read } for pid=1383 comm="syz.0.319" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 48.093823][ T36] audit: type=1400 audit(1754645764.200:304): avc: denied { open } for pid=1383 comm="syz.0.319" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 48.129678][ T1399] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.130056][ T1399] rust_binder: Fixups oob 164 170 366 196 [ 48.136892][ T1399] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 48.142732][ T1399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.151269][ T1399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 48.421359][ T1412] loop6: detected capacity change from 0 to 8388608 [ 48.513739][ T378] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 48.664888][ T378] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.676603][ T378] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.687773][ T378] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 48.699611][ T378] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 48.709003][ T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.715781][ T1420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.718401][ T1410] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 48.729923][ T1420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.881816][ T1430] overlayfs: failed to resolve './file0': -2 [ 48.953696][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 49.105456][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 241, changing to 11 [ 49.116722][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 49.132466][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 49.143929][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.153128][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.163240][ T10] usb 4-1: Product: syz [ 49.171179][ T10] usb 4-1: Manufacturer: ࠐ [ 49.175896][ T10] usb 4-1: SerialNumber: syz [ 49.402408][ T10] cdc_ncm 4-1:1.0: bind() failure [ 49.409888][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 49.421373][ T10] cdc_ncm 4-1:1.1: bind() failure [ 49.428770][ T10] usb 4-1: USB disconnect, device number 8 [ 49.434850][ T1475] sit0: entered promiscuous mode [ 49.441623][ T1475] netlink: 1 bytes leftover after parsing attributes in process `syz.3.337'. [ 49.466277][ T1478] futex_wake_op: syz.3.338 tries to shift op by 144; fix this program [ 49.803405][ T1506] netlink: 'syz.0.348': attribute type 5 has an invalid length. [ 49.803893][ T10] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 49.811195][ T1506] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.348'. [ 49.829251][ T1506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1506 comm=syz.0.348 [ 49.964825][ T10] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 49.980866][ T10] usb 4-1: config 0 has no interface number 0 [ 49.987562][ T10] usb 4-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 49.998906][ T10] usb 4-1: config 0 interface 214 has no altsetting 0 [ 50.007361][ T10] usb 4-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 50.017874][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.026388][ T10] usb 4-1: Product: syz [ 50.031057][ T10] usb 4-1: Manufacturer: syz [ 50.038289][ T10] usb 4-1: SerialNumber: syz [ 50.045715][ T10] usb 4-1: config 0 descriptor?? [ 50.053235][ T1480] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 50.237569][ T1494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.246983][ T1494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.264649][ T378] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 50.296520][ T378] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input8 [ 50.320616][ T378] usb 2-1: USB disconnect, device number 10 [ 50.320750][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 50.350708][ T1548] tipc: Started in network mode [ 50.363696][ T1548] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711 [ 50.372610][ T1548] tipc: Enabling of bearer rejected, failed to enable media [ 50.571953][ T10] ax88179_178a 4-1:0.214: probe with driver ax88179_178a failed with error -71 [ 50.595479][ T10] usb 4-1: USB disconnect, device number 9 [ 50.967373][ T1586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 50.990106][ T1590] /dev/rnullb0: Can't open blockdev [ 51.032352][ T1595] rust_binder: 164: no such ref 0 [ 51.139492][ T10] rust_binder: 1547: removing orphan mapping 0:24 [ 51.155340][ T1602] rust_binder: Write failure EFAULT in pid:190 [ 51.159477][ T1599] tipc: Started in network mode [ 51.170609][ T1599] tipc: Node identity c664a4c1ca8d, cluster identity 4711 [ 51.178617][ T1599] tipc: Enabled bearer , priority 0 [ 51.245655][ T1599] tipc: Disabling bearer [ 51.261519][ T1605] binder: Unknown parameter 'defcontext2' [ 51.299860][ T1609] 9pnet_fd: Insufficient options for proto=fd [ 51.349734][ T1612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 51.575450][ T1628] veth1_macvtap: left promiscuous mode [ 51.591816][ T1628] veth1_macvtap: entered promiscuous mode [ 51.681719][ T1634] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.913677][ T365] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 52.074705][ T365] usb 2-1: config 0 has no interfaces? [ 52.081645][ T365] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 52.091030][ T365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.099254][ T365] usb 2-1: Product: syz [ 52.103504][ T365] usb 2-1: Manufacturer: syz [ 52.108353][ T365] usb 2-1: SerialNumber: syz [ 52.114096][ T365] usb 2-1: config 0 descriptor?? [ 52.320554][ T1633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 52.320579][ T1633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:210 [ 52.330549][ T10] usb 2-1: USB disconnect, device number 11 [ 52.493343][ T1664] netlink: 168 bytes leftover after parsing attributes in process `syz.3.402'. [ 52.512980][ T1663] syzkaller0: entered promiscuous mode [ 52.518643][ T1663] syzkaller0: entered allmulticast mode [ 52.587151][ T1667] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 52.587186][ T1667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 52.595245][ T1667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:187 [ 52.856055][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 52.921975][ T1679] rust_binder: 1671 RLIMIT_NICE not set [ 52.922125][ T1679] rust_binder: Write failure EINVAL in pid:213 [ 52.928525][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 52.928543][ T36] audit: type=1400 audit(1754645769.120:324): avc: denied { accept } for pid=1670 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.966523][ T9] rust_binder: 0: removing orphan mapping 0:40 [ 52.981399][ T36] audit: type=1400 audit(1754645769.130:325): avc: denied { ioctl } for pid=1670 comm="syz.1.405" path="socket:[9582]" dev="sockfs" ino=9582 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.018785][ T1693] tipc: Enabling of bearer rejected, failed to enable media [ 53.043678][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 53.050035][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.064794][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.074935][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 53.088041][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 53.097347][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.111996][ T10] usb 4-1: config 0 descriptor?? [ 53.365628][ T36] audit: type=1400 audit(1754645769.560:326): avc: denied { sqpoll } for pid=1709 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.515969][ T1718] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 53.551951][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0002/input/input10 [ 53.590251][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0002/input/input11 [ 53.605932][ T10] kye 0003:0458:5011.0002: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 53.696668][ T1733] mmap: syz.2.426 (1733) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.781339][ T1741] netlink: 'syz.2.430': attribute type 4 has an invalid length. [ 53.791364][ T1742] netlink: 'syz.2.430': attribute type 4 has an invalid length. [ 54.123035][ T36] audit: type=1400 audit(1754646026.309:327): avc: denied { create } for pid=1758 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.150865][ T1761] x_tables: unsorted underflow at hook 2 [ 54.158536][ T1761] overlayfs: failed to clone upperpath [ 54.261820][ T1769] rust_binder: Fixups oob 164 170 358 196 [ 54.261852][ T1769] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 54.279618][ T1769] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.300160][ T1769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:239 [ 54.563589][ T378] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 54.663696][ C0] kye 0003:0458:5011.0002: usb_submit_urb(ctrl) failed: -1 [ 54.724646][ T378] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.743197][ T378] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.753658][ T378] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 54.762788][ T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.772112][ T1779] x_tables: duplicate underflow at hook 1 [ 54.778450][ T378] usb 2-1: config 0 descriptor?? [ 54.787850][ T36] audit: type=1400 audit(1754646026.979:328): avc: denied { create } for pid=1782 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 54.811289][ T36] audit: type=1400 audit(1754646026.979:329): avc: denied { write } for pid=1782 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 54.887299][ T36] audit: type=1400 audit(1754646027.079:330): avc: denied { read } for pid=1782 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 54.925905][ T1785] binder: Unknown parameter 'fscontext?}' [ 54.975583][ T36] audit: type=1400 audit(1754646027.169:331): avc: denied { accept } for pid=1788 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.034109][ T36] audit: type=1400 audit(1754646027.229:332): avc: denied { read write } for pid=1791 comm="syz.3.446" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.053098][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 55.073539][ T36] audit: type=1400 audit(1754646027.229:333): avc: denied { open } for pid=1791 comm="syz.3.446" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.080359][ T10] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 55.106835][ T1796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.448'. [ 55.203389][ T378] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 55.212870][ T378] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 55.233508][ T378] steelseries 0003:1038:12B6.0004: item fetching failed at offset 5/7 [ 55.252091][ T378] steelseries 0003:1038:12B6.0004: probe with driver steelseries failed with error -22 [ 55.688682][ T1848] netlink: 'syz.2.464': attribute type 27 has an invalid length. [ 55.723505][ T328] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 55.731781][ T328] usb 4-1: device reset changed ep0 maxpacket size! [ 55.738820][ T329] usb 4-1: USB disconnect, device number 10 [ 55.873479][ T329] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 56.024632][ T329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.034878][ T329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.044503][ T329] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 56.053620][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 56.061622][ T329] usb 4-1: SerialNumber: syz [ 56.273500][ T1830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.289908][ T1830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.303961][ T1830] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 56.315307][ T329] usb 4-1: 0:2 : does not exist [ 56.327214][ T329] usb 4-1: USB disconnect, device number 11 [ 56.346229][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.454171][ T1882] fuse: Unknown parameter 'fd rejected, failed to enable media [ 58.212425][ T1996] overlayfs: failed to clone upperpath [ 58.291683][ T378] usb 4-1: USB disconnect, device number 12 [ 58.712148][ T2010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=542 sclass=netlink_route_socket pid=2010 comm=syz.1.513 [ 58.764774][ T2016] netlink: 104 bytes leftover after parsing attributes in process `syz.2.516'. [ 58.764789][ T36] audit: type=1400 audit(1754646030.959:349): avc: denied { nlmsg_read } for pid=2015 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.837068][ T2024] netlink: 4548 bytes leftover after parsing attributes in process `syz.2.520'. [ 58.907843][ T36] audit: type=1400 audit(1754646031.099:350): avc: denied { mount } for pid=2035 comm="syz.2.523" name="/" dev="ramfs" ino=10237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 58.931324][ T36] audit: type=1400 audit(1754646031.120:351): avc: denied { mounton } for pid=2035 comm="syz.2.523" path="/file0" dev="ramfs" ino=10238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 58.931388][ T2036] fuse: blksize only supported for fuseblk [ 59.083057][ T2043] fuse: Unknown parameter '|' [ 59.197043][ T2071] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 59.207110][ T36] audit: type=1400 audit(1754646031.400:352): avc: denied { relabelto } for pid=2070 comm="syz.2.534" name="196" dev="tmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 59.233780][ T36] audit: type=1400 audit(1754646031.400:353): avc: denied { associate } for pid=2070 comm="syz.2.534" name="196" dev="tmpfs" ino=1074 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 59.235486][ T2072] rust_binder: Write failure EINVAL in pid:230 [ 59.509914][ T2074] rust_binder: Failed copying remainder into alloc: EFAULT [ 59.509919][ T36] audit: type=1400 audit(1754646031.700:354): avc: denied { transfer } for pid=2073 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 59.542474][ T2074] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 59.542537][ T2074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 59.550846][ T2074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:294 [ 59.561036][ T2078] overlayfs: failed to clone upperpath [ 59.585509][ T2080] /dev/rnullb0: Can't open blockdev [ 59.598941][ T2082] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 59.721409][ T36] audit: type=1400 audit(1754646031.910:355): avc: denied { write } for pid=293 comm="syz-executor" name="196" dev="tmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 59.747646][ T36] audit: type=1400 audit(1754646031.910:356): avc: denied { remove_name } for pid=293 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 59.747863][ T2095] netlink: 'syz.2.543': attribute type 13 has an invalid length. [ 59.775313][ T36] audit: type=1400 audit(1754646031.910:357): avc: denied { rmdir } for pid=293 comm="syz-executor" name="196" dev="tmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 59.911143][ T2103] 9pnet_fd: Insufficient options for proto=fd [ 60.087394][ T2139] tmpfs: Bad value for 'nr_inodes' [ 60.103909][ T2142] netlink: 100 bytes leftover after parsing attributes in process `syz.2.558'. [ 60.149613][ T2152] 9pnet_fd: Insufficient options for proto=fd [ 60.179354][ T2156] overlayfs: failed to clone upperpath [ 60.187046][ T2156] tipc: Enabling of bearer rejected, failed to enable media [ 60.243263][ T2166] 9pnet: Could not find request transport: fd7u7!B [ 60.875817][ T2195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.574'. [ 60.944902][ T2201] 9pnet_fd: Insufficient options for proto=fd [ 60.991411][ T2210] tipc: Enabling of bearer rejected, failed to enable media [ 61.065549][ T2227] mmap: syz.0.585 (2227): VmData 29077504 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 61.179744][ T2241] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 61.186283][ T2241] rust_binder: Read failure Err(EFAULT) in pid:251 [ 61.257565][ T2254] netlink: 'syz.3.593': attribute type 13 has an invalid length. [ 61.263000][ T328] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 61.424778][ T328] usb 2-1: config 0 has no interfaces? [ 61.434363][ T328] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.443584][ T328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.448098][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.451642][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.451690][ T328] usb 2-1: Product: syz [ 61.457988][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.464529][ T328] usb 2-1: Manufacturer: syz [ 61.468375][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.474735][ T328] usb 2-1: SerialNumber: syz [ 61.479250][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.490093][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.493073][ T328] usb 2-1: config 0 descriptor?? [ 61.496307][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.507523][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.513788][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.520116][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.526326][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.532514][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.538956][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.545292][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.551486][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.557838][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.564105][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.570293][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.576591][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.582947][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.589461][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.595686][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.601968][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.608455][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.617119][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.617135][ T2278] tmpfs: Unknown parameter 'nountinfo' [ 61.623367][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.632129][ T2278] tmpfs: Unknown parameter 'nountinfo' [ 61.638389][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.646723][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.653333][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.661004][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.667905][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.674644][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.680980][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.687235][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.693510][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.699839][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.710259][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.718011][ T2214] netlink: 'syz.1.581': attribute type 32 has an invalid length. [ 61.732070][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.732099][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.738654][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.745368][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.751697][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.759440][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.765876][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.767385][ T403] usb 2-1: USB disconnect, device number 13 [ 61.772148][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.785508][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.791745][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.798240][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.804658][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.810906][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.817189][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.824410][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.830598][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.836896][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.843131][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.849633][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.855832][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.862003][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.868237][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.874529][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.880708][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.886898][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.893088][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.899251][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.905441][ T2267] rust_binder: Write failure EFAULT in pid:277 [ 61.924698][ T2287] /dev/rnullb0: Can't open blockdev [ 62.373853][ T2308] rust_binder: Got transaction with invalid offset. [ 62.373913][ T2308] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.380582][ T2308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:333 [ 62.407054][ T2312] binder: Unknown parameter 'fsname' [ 62.449674][ T2316] tmpfs: Unsupported parameter 'mpol' [ 62.496343][ T2318] random: crng reseeded on system resumption [ 62.763022][ T328] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 62.922942][ T328] usb 2-1: Using ep0 maxpacket: 16 [ 62.932561][ T328] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.950473][ T328] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.961939][ T328] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.971644][ T2335] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 62.972516][ T328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.987098][ T328] usb 2-1: Product: syz [ 62.991334][ T328] usb 2-1: Manufacturer: syz [ 62.996871][ T328] usb 2-1: SerialNumber: syz [ 63.064064][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 63.064083][ T36] audit: type=1400 audit(1754646035.251:371): avc: denied { create } for pid=2341 comm="syz.0.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 63.217865][ T328] usb 2-1: 0:2 : does not exist [ 63.227735][ T328] usb 2-1: USB disconnect, device number 14 [ 63.239301][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.477180][ T2359] No source specified [ 63.482353][ T2359] overlayfs: failed to clone upperpath [ 63.747190][ T2371] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 63.789042][ T2380] rust_binder: Error while translating object. [ 63.789143][ T2380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 63.795692][ T2380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:344 [ 63.849956][ T36] audit: type=1326 audit(1754646036.031:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.0.642" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f783698ebe9 code=0x0 [ 63.901493][ T2392] netlink: 72 bytes leftover after parsing attributes in process `syz.0.642'. [ 64.340770][ T327] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.149234][ T2416] rust_binder: Write failure EINVAL in pid:303 [ 66.149537][ T2417] rust_binder: Write failure EINVAL in pid:303 [ 66.352999][ T2412] Bluetooth: hci0: command 0x1003 tx timeout [ 66.353008][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.409128][ T2438] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 66.409147][ T2438] rust_binder: Error while translating object. [ 66.417993][ T2438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.424207][ T2438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 66.532947][ T403] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 66.694060][ T403] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 66.702470][ T403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 66.713608][ T403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 66.724901][ T403] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 66.734019][ T403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.742015][ T403] usb 4-1: Product: syz [ 66.746211][ T403] usb 4-1: Manufacturer: syz [ 66.750818][ T403] usb 4-1: SerialNumber: syz [ 66.756162][ T403] usb 4-1: config 0 descriptor?? [ 66.857496][ T2448] bridge0: entered allmulticast mode [ 66.863432][ T2448] bridge0: left allmulticast mode [ 66.893078][ T36] audit: type=1400 audit(1754646039.081:373): avc: denied { mount } for pid=2451 comm="syz.0.659" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 66.960069][ T36] audit: type=1400 audit(1754646039.141:374): avc: denied { map } for pid=2459 comm="syz.0.663" path="socket:[12993]" dev="sockfs" ino=12993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.983232][ T36] audit: type=1326 audit(1754646039.141:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2459 comm="syz.0.663" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f783698ebe9 code=0x0 [ 66.983381][ T2427] rust_binder: Write failure EINVAL in pid:314 [ 67.006687][ T2461] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.018719][ T403] usb 4-1: USB disconnect, device number 13 [ 67.039141][ T2467] rust_binder: 319: no such ref 4096 [ 67.044647][ T2468] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 67.115789][ T36] audit: type=1400 audit(1754646039.301:376): avc: denied { read } for pid=2474 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.116220][ T2475] netlink: 'syz.1.666': attribute type 12 has an invalid length. [ 67.158120][ T2481] rust_binder: validate_parent_fixup: new_min_offset=549755813906, sg_entry.length=0 [ 67.158139][ T2481] rust_binder: Error while translating object. [ 67.167898][ T2481] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.174159][ T2481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:370 [ 67.184959][ T2481] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 67.194224][ T2481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:370 [ 67.277836][ T2492] 9pnet_fd: Insufficient options for proto=fd [ 67.382912][ T36] audit: type=1400 audit(1754646039.561:377): avc: denied { bind } for pid=2504 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.447541][ T36] audit: type=1400 audit(1754646039.631:378): avc: denied { mounton } for pid=2510 comm="syz.1.679" path="/115/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 67.493109][ T36] audit: type=1400 audit(1754646039.681:379): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 67.623077][ T2529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 67.780536][ T36] audit: type=1400 audit(1754646039.961:380): avc: denied { ioctl } for pid=2537 comm="syz.1.687" path="socket:[13082]" dev="sockfs" ino=13082 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.805615][ T2538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2538 comm=syz.1.687 [ 67.903408][ T2547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 68.272820][ T2589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.275193][ T2589] input: syz1 as /devices/virtual/input/input13 [ 68.354446][ T2592] overlayfs: missing 'workdir' [ 68.613083][ T329] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 68.677651][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.683932][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.690154][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.696399][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.702568][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.708784][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.714974][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.721141][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.727341][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.733587][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.739742][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.745982][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.752158][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.758447][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.764664][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.770814][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.777034][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.783208][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.789359][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.794204][ T329] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.795574][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.806014][ T329] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 68.811754][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.822778][ T329] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 68.828689][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.847998][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.855422][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.862130][ T329] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 68.871289][ T329] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 68.889690][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.891355][ T329] usb 2-1: Manufacturer: syz [ 68.896250][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.905949][ T329] usb 2-1: config 0 descriptor?? [ 68.906762][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.914468][ T329] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 68.922173][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.932639][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.938937][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.945349][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.951568][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.955537][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 68.955556][ T36] audit: type=1400 audit(1754646041.141:382): avc: denied { write } for pid=2654 comm="syz.3.716" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 68.958119][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.992841][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 68.999080][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.005284][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.011475][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.017692][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.023878][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.030053][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.036250][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.042418][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.048753][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.054981][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.061177][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.067396][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.073646][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.079878][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.086164][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.092355][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.098593][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.103680][ T327] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.104836][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.117319][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.123548][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.129723][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.135943][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.142092][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.148275][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.154555][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.160742][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.166986][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.173195][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.179399][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.185304][ T36] audit: type=1400 audit(1754646041.361:383): avc: denied { write } for pid=2667 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.185657][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.210881][ T2624] 9pnet_fd: Insufficient options for proto=fd [ 69.253178][ T2674] overlayfs: failed to clone lowerpath [ 69.284664][ T2678] fuse: Bad value for 'user_id' [ 69.289679][ T2678] fuse: Bad value for 'user_id' [ 69.316131][ T36] audit: type=1326 audit(1754646041.501:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2681 comm="syz.2.727" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f869e38ebe9 code=0x0 [ 70.399360][ T2696] overlayfs: failed to clone upperpath [ 70.795958][ T2713] incfs_lookup_dentry err:-13 [ 70.813796][ T2713] incfs: Can't find or create .index dir in ./bus [ 70.836090][ T2713] incfs: mount failed -13 [ 71.154541][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.160756][ T2412] Bluetooth: hci0: command 0x1003 tx timeout [ 71.167022][ T2664] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 71.173220][ T2663] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 71.399602][ T365] usb 2-1: USB disconnect, device number 15 [ 71.454374][ T36] audit: type=1400 audit(1754646043.641:385): avc: denied { read } for pid=2719 comm="syz.1.739" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.499419][ T36] audit: type=1400 audit(1754646043.641:386): avc: denied { open } for pid=2719 comm="syz.1.739" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.524728][ T36] audit: type=1400 audit(1754646043.671:387): avc: denied { execute } for pid=2719 comm="syz.1.739" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.552196][ T2724] netlink: 72 bytes leftover after parsing attributes in process `syz.0.740'. [ 72.292920][ T365] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 72.474033][ T365] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.483890][ T365] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.493832][ T365] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.508536][ T365] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 72.517882][ T365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 72.531108][ T365] usb 4-1: Product: syz [ 72.538589][ T365] usb 4-1: Manufacturer: syz [ 72.546524][ T365] usb 4-1: SerialNumber: syz [ 72.595851][ T36] audit: type=1400 audit(1754646044.781:388): avc: denied { setopt } for pid=2769 comm="syz.0.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.717032][ T2777] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 72.717057][ T2777] rust_binder: Read failure Err(EFAULT) in pid:425 [ 72.835141][ T365] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 72.864255][ T2780] rust_binder: 427: no such ref 0 [ 72.876108][ T2780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:427 [ 72.997112][ T36] audit: type=1400 audit(1754646045.181:389): avc: denied { read write } for pid=2749 comm="syz.3.748" name="lp0" dev="devtmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 73.034310][ T36] audit: type=1400 audit(1754646045.211:390): avc: denied { open } for pid=2749 comm="syz.3.748" path="/dev/usb/lp0" dev="devtmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 73.075846][ T365] usb 4-1: USB disconnect, device number 14 [ 73.082567][ T365] usblp0: removed [ 73.892924][ T365] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 74.044030][ T365] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.054302][ T365] usb 4-1: config 0 has no interfaces? [ 74.060618][ T365] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 74.069810][ T365] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 74.078383][ T365] usb 4-1: Manufacturer: syz [ 74.083835][ T36] audit: type=1400 audit(1754646046.271:391): avc: denied { accept } for pid=2815 comm="syz.1.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 74.103556][ T365] usb 4-1: config 0 descriptor?? [ 74.122551][ T2829] overlayfs: failed to clone upperpath [ 74.261158][ T2816] rust_binder: Read failure Err(EFAULT) in pid:434 [ 74.407524][ T2854] overlayfs: failed to clone upperpath [ 74.523422][ T329] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 74.674162][ T329] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 74.685420][ T329] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 74.695304][ T329] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 74.704392][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.914664][ T2831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.923775][ T2831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.966120][ T329] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 74.978301][ T329] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input14 [ 74.994112][ T329] usb 2-1: USB disconnect, device number 16 [ 75.184449][ T2875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.789'. [ 75.517438][ T36] audit: type=1400 audit(1754646047.701:392): avc: denied { create } for pid=2894 comm="syz.1.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.538325][ T36] audit: type=1400 audit(1754646047.701:393): avc: denied { setcheckreqprot } for pid=2894 comm="syz.1.795" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 75.564451][ T2899] netlink: 'syz.1.797': attribute type 58 has an invalid length. [ 75.590403][ T2899] rust_binder: Error while translating object. [ 75.590464][ T2899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 75.596920][ T2905] syz.2.799 uses obsolete (PF_INET,SOCK_PACKET) [ 75.597854][ T2899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:443 [ 75.607142][ T2906] netlink: 'syz.2.799': attribute type 4 has an invalid length. [ 75.631541][ T2907] netlink: 'syz.2.799': attribute type 4 has an invalid length. [ 75.656021][ T2909] overlayfs: failed to resolve '/uõ ': -2 [ 75.701297][ T36] audit: type=1400 audit(1754646047.881:394): avc: denied { create } for pid=2912 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 76.104072][ T36] audit: type=1400 audit(1754646048.291:395): avc: denied { map } for pid=2921 comm="syz.0.805" path="socket:[15222]" dev="sockfs" ino=15222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.177371][ T2939] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 76.318154][ T36] audit: type=1400 audit(1754646048.501:396): avc: denied { bind } for pid=2948 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.552964][ T329] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 76.652049][ T365] usb 4-1: USB disconnect, device number 15 [ 76.671546][ T2953] rust_binder: Error in use_page_slow: ESRCH [ 76.671564][ T2953] rust_binder: use_range failure ESRCH [ 76.677688][ T2953] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 76.683355][ T2953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 76.691427][ T2953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:371 [ 76.710087][ T329] usb 2-1: not running at top speed; connect to a high speed hub [ 76.732443][ T329] usb 2-1: config 2 has an invalid interface number: 99 but max is 2 [ 76.740920][ T329] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 76.750041][ T329] usb 2-1: config 2 has an invalid interface number: 195 but max is 2 [ 76.758689][ T329] usb 2-1: config 2 has an invalid interface number: 93 but max is 2 [ 76.766829][ T329] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 76.775869][ T329] usb 2-1: config 2 has an invalid interface number: 85 but max is 2 [ 76.784140][ T2961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:374 [ 76.784201][ T329] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 76.802055][ T329] usb 2-1: config 2 has 4 interfaces, different from the descriptor's value: 3 [ 76.812165][ T2966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4197 sclass=netlink_route_socket pid=2966 comm=syz.2.818 [ 76.824744][ T329] usb 2-1: config 2 has no interface number 0 [ 76.830986][ T329] usb 2-1: config 2 has no interface number 1 [ 76.837268][ T329] usb 2-1: config 2 has no interface number 2 [ 76.843478][ T329] usb 2-1: config 2 has no interface number 3 [ 76.849580][ T329] usb 2-1: config 2 interface 99 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 76.860466][ T329] usb 2-1: config 2 interface 99 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 76.871372][ T329] usb 2-1: config 2 interface 99 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 76.882169][ T329] usb 2-1: config 2 interface 99 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 76.892979][ T329] usb 2-1: config 2 interface 99 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 76.903816][ T329] usb 2-1: config 2 interface 99 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 76.914766][ T329] usb 2-1: config 2 interface 195 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 76.927920][ T329] usb 2-1: too many endpoints for config 2 interface 93 altsetting 215: 97, using maximum allowed: 30 [ 76.938926][ T329] usb 2-1: config 2 interface 93 altsetting 215 has a duplicate endpoint with address 0xA, skipping [ 76.950020][ T329] usb 2-1: config 2 interface 93 altsetting 215 has a duplicate endpoint with address 0x84, skipping [ 76.960939][ T329] usb 2-1: config 2 interface 93 altsetting 215 has a duplicate endpoint with address 0xB, skipping [ 76.971742][ T329] usb 2-1: config 2 interface 93 altsetting 215 has a duplicate endpoint with address 0x8, skipping [ 76.982544][ T329] usb 2-1: config 2 interface 93 altsetting 215 has a duplicate endpoint with address 0x9, skipping [ 76.993357][ T329] usb 2-1: config 2 interface 93 altsetting 215 has a duplicate endpoint with address 0x5, skipping [ 77.004244][ T329] usb 2-1: config 2 interface 93 altsetting 215 has a duplicate endpoint with address 0x4, skipping [ 77.015073][ T329] usb 2-1: config 2 interface 93 altsetting 215 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 77.026131][ T329] usb 2-1: config 2 interface 93 altsetting 215 has a duplicate endpoint with address 0xA, skipping [ 77.036925][ T329] usb 2-1: config 2 interface 93 altsetting 215 has a duplicate endpoint with address 0x8, skipping [ 77.047711][ T329] usb 2-1: config 2 interface 93 altsetting 215 has a duplicate endpoint with address 0x9, skipping [ 77.058503][ T329] usb 2-1: config 2 interface 93 altsetting 215 has 15 endpoint descriptors, different from the interface descriptor's value: 97 [ 77.071823][ T329] usb 2-1: config 2 interface 85 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 77.082563][ T329] usb 2-1: config 2 interface 85 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 77.093214][ T329] usb 2-1: config 2 interface 85 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 77.103863][ T329] usb 2-1: config 2 interface 85 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 77.114670][ T329] usb 2-1: config 2 interface 85 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 77.125307][ T329] usb 2-1: config 2 interface 85 altsetting 6 has an endpoint descriptor with address 0x79, changing to 0x9 [ 77.136822][ T329] usb 2-1: config 2 interface 85 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 77.147536][ T329] usb 2-1: config 2 interface 85 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 77.158494][ T329] usb 2-1: config 2 interface 85 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 77.169277][ T329] usb 2-1: config 2 interface 85 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 77.179911][ T329] usb 2-1: config 2 interface 85 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 77.190538][ T329] usb 2-1: config 2 interface 85 altsetting 6 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 77.201388][ T329] usb 2-1: config 2 interface 85 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 77.212206][ T329] usb 2-1: config 2 interface 85 altsetting 6 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 77.225360][ T329] usb 2-1: config 2 interface 99 has no altsetting 0 [ 77.232144][ T329] usb 2-1: config 2 interface 195 has no altsetting 0 [ 77.239162][ T329] usb 2-1: config 2 interface 93 has no altsetting 0 [ 77.245952][ T329] usb 2-1: config 2 interface 85 has no altsetting 0 [ 77.254189][ T329] usb 2-1: New USB device found, idVendor=19d2, idProduct=1300, bcdDevice=fc.b2 [ 77.263317][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.271317][ T329] usb 2-1: Product: ࠬ [ 77.275514][ T329] usb 2-1: Manufacturer: ཨ鬒⼶쾷槑愨傗릒ꅨ튢詮閤퀀ሡ明糽霋혮횚㰣Ụ㈵퐌ꓣ蔨뜐ꤸ葴嚦奆Փ༬鑴皭ࣽ澾惼贸꾱ᙥ惶江睽뾱ꃕﭜ䵺䲧닾蒳ꚝ㖳砑蕻壑뺊킣˿ࣹ䍓蘶웇Ᾱ禍䣃┙茇亱돾䤳흋ꢘ盙湚㚦쿯ᕫ攺໓ꬵ乖䠛륲昏ꉭ鯦鄜獹ܘ嘙렪Ζ腽ᐘ塘霆鳿 [ 77.308742][ T329] usb 2-1: SerialNumber: Я [ 77.400957][ T36] audit: type=1400 audit(1754646049.581:397): avc: denied { checkpoint_restore } for pid=2983 comm="syz.0.825" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.465336][ T2992] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.665235][ T3008] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3008 comm=syz.0.832 [ 77.727745][ T36] audit: type=1400 audit(1754646049.911:398): avc: denied { read } for pid=3013 comm="syz.2.835" path="socket:[14325]" dev="sockfs" ino=14325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.783412][ T3021] fuse: Bad value for 'fd' [ 77.870167][ T3026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 77.870197][ T3026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:380 [ 77.917711][ T3028] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 77.935998][ T3028] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 77.945681][ T3028] overlayfs: missing 'lowerdir' [ 77.951748][ T36] audit: type=1400 audit(1754646050.131:399): avc: denied { create } for pid=3027 comm="syz.3.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 78.005267][ T3030] overlayfs: conflicting lowerdir path [ 78.348430][ T3040] syzkaller0: entered allmulticast mode [ 78.400282][ T3047] overlayfs: failed to resolve '': -2 [ 78.642941][ T365] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 78.795827][ T365] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 78.804955][ T365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.813007][ T365] usb 4-1: Product: syz [ 78.817186][ T365] usb 4-1: Manufacturer: syz [ 78.821824][ T365] usb 4-1: SerialNumber: syz [ 79.060711][ T3036] syzkaller0: left allmulticast mode [ 79.159300][ T36] audit: type=1400 audit(1754646051.341:400): avc: denied { getopt } for pid=3066 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.294068][ T329] usb 2-1: USB disconnect, device number 17 [ 79.373908][ T3076] Dead loop on virtual device ip6_vti0, fix it urgently! [ 80.132933][ T45] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 80.302924][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 80.309200][ T45] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 80.317757][ T45] usb 2-1: config 179 has no interface number 0 [ 80.324436][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 80.335782][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 80.347292][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 220, changing to 11 [ 80.358994][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 80.370677][ T45] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 80.384175][ T45] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 80.393418][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.403350][ T3092] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 80.548551][ T36] audit: type=1400 audit(1754646052.731:401): avc: denied { mount } for pid=3109 comm="syz.0.866" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.614685][ T45] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input15 [ 80.815896][ T403] usb 2-1: USB disconnect, device number 18 [ 80.815896][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 80.815934][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 80.838446][ T403] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 81.096629][ T36] audit: type=1400 audit(1754646053.281:402): avc: denied { ioctl } for pid=3143 comm="syz.0.875" path="socket:[15644]" dev="sockfs" ino=15644 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 81.392724][ T365] usb 4-1: USB disconnect, device number 16 [ 81.513406][ T3183] bridge0: entered allmulticast mode [ 81.566003][ T3191] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 81.586854][ T3193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'. [ 81.595753][ T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 81.759724][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.772271][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 81.786132][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.804950][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.814125][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.822179][ T45] usb 2-1: Product: syz [ 81.830915][ T45] usb 2-1: Manufacturer: syz [ 81.835775][ T45] usb 2-1: SerialNumber: syz [ 81.842706][ T3225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.902'. [ 81.851967][ T45] cdc_mbim 2-1:1.0: skipping garbage [ 81.857802][ T45] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 81.864746][ T45] cdc_mbim 2-1:1.0: bind() failure [ 82.129318][ T403] usb 2-1: USB disconnect, device number 19 [ 82.260398][ T3239] rust_binder: validate_parent_fixup: new_min_offset=549755813906, sg_entry.length=0 [ 82.260418][ T3239] rust_binder: Error while translating object. [ 82.269993][ T3239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.276215][ T3239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:396 [ 82.433379][ T36] audit: type=1400 audit(1754646054.611:403): avc: denied { write } for pid=3243 comm="syz.3.908" name="usbmon4" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 82.461292][ T3249] tipc: Started in network mode [ 82.470727][ T3249] tipc: Node identity 32246e9abb1f, cluster identity 4711 [ 82.477990][ T3249] tipc: Enabled bearer , priority 0 [ 82.494123][ T3245] fuse: Unknown parameter '' [ 82.777786][ T36] audit: type=1400 audit(1754646054.961:404): avc: denied { mounton } for pid=3280 comm="syz.1.922" path="/145/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 82.823032][ T36] audit: type=1400 audit(1754646054.981:405): avc: denied { create } for pid=3282 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.882931][ T45] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 83.044702][ T45] usb 4-1: config 0 has no interfaces? [ 83.057630][ T45] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 83.077218][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.086519][ T45] usb 4-1: Product: syz [ 83.090808][ T45] usb 4-1: Manufacturer: syz [ 83.095920][ T45] usb 4-1: SerialNumber: syz [ 83.101828][ T45] usb 4-1: config 0 descriptor?? [ 83.339094][ T3350] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 83.351201][ T3350] overlayfs: missing 'lowerdir' [ 83.369869][ T403] usb 4-1: USB disconnect, device number 17 [ 83.391162][ T36] audit: type=1400 audit(1754646055.571:406): avc: denied { getopt } for pid=3351 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.472953][ T45] tipc: Node number set to 2302373530 [ 83.661421][ T3367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.723107][ T3369] kvm: user requested TSC rate below hardware speed [ 83.737177][ T3369] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 83.777723][ T403] rust_binder: 3366: removing orphan mapping 0:1024 [ 83.877170][ T3375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:490 [ 84.247347][ T3405] netlink: 'syz.1.962': attribute type 63 has an invalid length. [ 84.264330][ T3405] netlink: 5 bytes leftover after parsing attributes in process `syz.1.962'. [ 84.273164][ T3405] gretap0: entered allmulticast mode [ 84.278703][ T3405] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 84.362928][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 84.522930][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 84.529700][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 84.537670][ T45] usb 4-1: can't read configurations, error -61 [ 84.672953][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 84.822914][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 84.829502][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 84.837163][ T45] usb 4-1: can't read configurations, error -61 [ 84.843608][ T45] usb usb4-port1: attempt power cycle [ 84.954846][ T3412] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.051228][ T3417] /dev/rnullb0: Can't open blockdev [ 85.056711][ T3417] /dev/rnullb0: Can't open blockdev [ 85.062082][ T3417] /dev/rnullb0: Can't open blockdev [ 85.067594][ T3417] /dev/rnullb0: Can't open blockdev [ 85.073261][ T3417] /dev/rnullb0: Can't open blockdev [ 85.078904][ T3417] /dev/rnullb0: Can't open blockdev [ 85.084342][ T3417] /dev/rnullb0: Can't open blockdev [ 85.089817][ T3417] /dev/rnullb0: Can't open blockdev [ 85.095230][ T3417] /dev/rnullb0: Can't open blockdev [ 85.100581][ T3417] /dev/rnullb0: Can't open blockdev [ 85.105988][ T3417] /dev/rnullb0: Can't open blockdev [ 85.111392][ T3417] /dev/rnullb0: Can't open blockdev [ 85.116853][ T3417] /dev/rnullb0: Can't open blockdev [ 85.122203][ T3417] /dev/rnullb0: Can't open blockdev [ 85.127604][ T3417] /dev/rnullb0: Can't open blockdev [ 85.133433][ T3417] /dev/rnullb0: Can't open blockdev [ 85.138787][ T3417] /dev/rnullb0: Can't open blockdev [ 85.144192][ T3417] /dev/rnullb0: Can't open blockdev [ 85.149639][ T3417] /dev/rnullb0: Can't open blockdev [ 85.155106][ T3417] /dev/rnullb0: Can't open blockdev [ 85.160459][ T3417] /dev/rnullb0: Can't open blockdev [ 85.165999][ T3417] /dev/rnullb0: Can't open blockdev [ 85.171473][ T3417] /dev/rnullb0: Can't open blockdev [ 85.177012][ T3417] /dev/rnullb0: Can't open blockdev [ 85.182371][ T3417] /dev/rnullb0: Can't open blockdev [ 85.187778][ T3417] /dev/rnullb0: Can't open blockdev [ 85.192941][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 85.193253][ T3417] /dev/rnullb0: Can't open blockdev [ 85.205921][ T3417] /dev/rnullb0: Can't open blockdev [ 85.211254][ T3417] /dev/rnullb0: Can't open blockdev [ 85.216688][ T3417] /dev/rnullb0: Can't open blockdev [ 85.223103][ T3417] /dev/rnullb0: Can't open blockdev [ 85.223392][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 85.228532][ T3417] /dev/rnullb0: Can't open blockdev [ 85.235569][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 85.246644][ T45] usb 4-1: can't read configurations, error -61 [ 85.253133][ T3417] /dev/rnullb0: Can't open blockdev [ 85.382966][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 85.413485][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 85.420832][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 85.428457][ T45] usb 4-1: can't read configurations, error -61 [ 85.434875][ T45] usb usb4-port1: unable to enumerate USB device [ 85.522927][ T378] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 85.672938][ T378] usb 2-1: Using ep0 maxpacket: 32 [ 85.679260][ T378] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 85.687528][ T378] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 85.696281][ T378] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.706393][ T378] usb 2-1: config 0 has no interface number 0 [ 85.712482][ T378] usb 2-1: config 0 interface 230 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 85.725550][ T378] usb 2-1: config 0 interface 230 has no altsetting 0 [ 85.733876][ T378] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 85.743071][ T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.751181][ T378] usb 2-1: Product: syz [ 85.755386][ T378] usb 2-1: Manufacturer: syz [ 85.760002][ T378] usb 2-1: SerialNumber: syz [ 85.765604][ T378] usb 2-1: config 0 descriptor?? [ 85.771352][ T378] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 85.779091][ T378] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 85.976674][ T36] audit: type=1400 audit(1754646058.161:407): avc: denied { map } for pid=3449 comm="syz.2.978" path="socket:[17061]" dev="sockfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 86.000502][ T36] audit: type=1400 audit(1754646058.161:408): avc: denied { accept } for pid=3449 comm="syz.2.978" path="socket:[17061]" dev="sockfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 86.595727][ T3523] tipc: Enabling of bearer rejected, already enabled [ 86.605186][ T3523] overlayfs: failed to clone upperpath [ 87.142717][ T36] audit: type=1400 audit(1754646059.321:409): avc: denied { load_policy } for pid=3556 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 87.168828][ T3557] SELinux: failed to load policy [ 87.206171][ T3564] netlink: 'syz.2.998': attribute type 12 has an invalid length. [ 87.309934][ T3568] netlink: 'syz.0.1000': attribute type 1 has an invalid length. [ 87.333298][ T3573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1002'. [ 87.421161][ T3584] SELinux: Context system_u:object_r:tpm_device_t:s0 is not valid (left unmapped). [ 87.430763][ T36] audit: type=1400 audit(1754646059.611:410): avc: denied { relabelto } for pid=3583 comm="syz.3.1006" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 87.457995][ T36] audit: type=1400 audit(1754646059.611:411): avc: denied { associate } for pid=3583 comm="syz.3.1006" name="udmabuf" dev="devtmpfs" ino=83 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tpm_device_t:s0" [ 87.592935][ T3590] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 87.600096][ T3590] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 87.600646][ T3590] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 87.878835][ T36] audit: type=1400 audit(1754646060.061:412): avc: denied { accept } for pid=3594 comm="syz.0.1009" path="socket:[17435]" dev="sockfs" ino=17435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.924247][ T3597] overlayfs: failed to clone upperpath [ 88.285462][ T329] usb 2-1: USB disconnect, device number 20 [ 88.348853][ T3613] overlayfs: failed to clone upperpath [ 88.527272][ T3623] rust_binder: Write failure EFAULT in pid:456 [ 88.806098][ T36] audit: type=1326 audit(1754646060.991:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.2.1024" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f869e38ebe9 code=0x0 [ 88.856197][ T3641] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1025'. [ 88.872925][ T3641] tipc: Invalid UDP bearer configuration [ 88.872950][ T3641] tipc: Enabling of bearer rejected, failed to enable media [ 88.893327][ T3641] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1025'. [ 88.913671][ T3641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1025'. [ 89.002178][ T36] audit: type=1400 audit(1754646061.181:414): avc: denied { read write } for pid=3645 comm="syz.1.1027" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 89.039690][ T36] audit: type=1400 audit(1754646061.221:415): avc: denied { open } for pid=3645 comm="syz.1.1027" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 89.073810][ T36] audit: type=1400 audit(1754646061.261:416): avc: denied { ioctl } for pid=3645 comm="syz.1.1027" path="/dev/udmabuf" dev="devtmpfs" ino=83 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 89.412945][ T9] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 89.573944][ T9] usb 2-1: No LPM exit latency info found, disabling LPM. [ 89.584903][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 89.595329][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.608410][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.617628][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.625686][ T9] usb 2-1: Product: 왎ᇩ㶰茄첸ꜷ계㭶峆齶嫣숈㷨䪈㿞䀄㯍䠛巕祝陪膓ଢ [ 89.636328][ T9] usb 2-1: Manufacturer: ㇉﷾᭿钶煶ꒂ襗ᱣ❋隊텀傉攝렻囮ﱬꑏ忋枉죢Ừ祉䁩膋띅㕷呸䙮✷ﭱ첎ꝃ䳇ႊ粅䳯幼劜텝譨闇ᔟ焬䮩眽䗥鵒픆㵶㒠롁狭倊⁩㬑偠ᠮꆆ㤓倬꜊苊嵽滬朄㰻똓쩢拟凴쮵൒鱞﫪ᨀ⡺铟 [ 89.662896][ T9] usb 2-1: SerialNumber: 쳶紙兄묓띧ꗧ뺖握䮹ۻ앶낇鵢ᬢᎳկꬬ檿⢶渄锊൴淋㽚酶醆虑염搝ᯏ圍זⷼㄆꪆ끱䱆器ꂿ뱙Ⓚ⚗ꔛ⽫ᱺᔟ즱뱁ᙁ​癞頱邾퇜㽘吀曱ܠꀡ艝꘏睉 [ 89.842958][ T45] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 89.905377][ T9] usb 2-1: 0:2 : does not exist [ 89.915298][ T9] usb 2-1: USB disconnect, device number 21 [ 89.972926][ T45] usb 4-1: device descriptor read/64, error -71 [ 89.974178][ T3677] overlayfs: missing 'lowerdir' [ 90.212953][ T45] usb 4-1: device descriptor read/64, error -71 [ 90.222934][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 90.384131][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 90.393028][ T3689] overlayfs: failed to resolve './file0': -2 [ 90.395013][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.412033][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.422555][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 90.436722][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 90.452167][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 90.460499][ T9] usb 2-1: Manufacturer: syz [ 90.462943][ T45] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 90.466257][ T9] usb 2-1: config 0 descriptor?? [ 90.592946][ T45] usb 4-1: device descriptor read/64, error -71 [ 90.832949][ T45] usb 4-1: device descriptor read/64, error -71 [ 90.891577][ T9] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 90.898870][ T9] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 90.907380][ T9] appleir 0003:05AC:8243.0005: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 90.943052][ T45] usb usb4-port1: attempt power cycle [ 91.021786][ T3734] futex_wake_op: syz.2.1054 tries to shift op by 144; fix this program [ 91.041133][ T3736] overlayfs: failed to clone upperpath [ 91.077243][ T3744] /dev/loop0: Can't lookup blockdev [ 91.122452][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 91.122471][ T36] audit: type=1400 audit(1754646063.301:419): avc: denied { lock } for pid=3758 comm="syz.0.1063" path="socket:[17655]" dev="sockfs" ino=17655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.123556][ T3759] tipc: Enabling of bearer rejected, already enabled [ 91.161643][ T3674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.171124][ T3674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.183675][ T403] usb 2-1: USB disconnect, device number 22 [ 91.283008][ T45] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 91.303942][ T45] usb 4-1: device descriptor read/8, error -71 [ 91.433937][ T45] usb 4-1: device descriptor read/8, error -71 [ 91.672956][ T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 91.693945][ T45] usb 4-1: device descriptor read/8, error -71 [ 91.804945][ T3767] overlayfs: failed to clone upperpath [ 91.825428][ T45] usb 4-1: device descriptor read/8, error -71 [ 91.933032][ T45] usb usb4-port1: unable to enumerate USB device [ 92.328411][ T3784] fuse: Unknown parameter 'al' [ 92.433034][ T3789] overlayfs: failed to clone upperpath [ 92.463627][ T3784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 92.594114][ T3811] rust_binder: Write failure EFAULT in pid:545 [ 92.610284][ T3818] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1084'. [ 92.626868][ T3818] overlayfs: failed to clone upperpath [ 92.629429][ T3821] overlay: ./file0 is not a directory [ 92.658183][ T3830] binder: Bad value for 'max' [ 92.664047][ T3830] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 92.692651][ T3837] overlayfs: failed to clone upperpath [ 93.002942][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 93.154078][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.164284][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.174170][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 93.183366][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 93.191349][ T9] usb 4-1: SerialNumber: syz [ 93.399529][ T9] usb 4-1: 0:2 : does not exist [ 93.407430][ T9] usb 4-1: USB disconnect, device number 26 [ 93.418352][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.666399][ T3872] /dev/loop0: Can't lookup blockdev [ 93.697653][ T36] audit: type=1400 audit(1754646065.881:420): avc: denied { ioctl } for pid=3875 comm="syz.0.1104" path="socket:[17915]" dev="sockfs" ino=17915 ioctlcmd=0x89f6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.892957][ T328] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 94.045188][ T328] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 94.060520][ T328] usb 2-1: config 1 interface 0 has no altsetting 0 [ 94.068607][ T328] usb 2-1: New USB device found, idVendor=05ac, idProduct=0304, bcdDevice= 0.40 [ 94.077728][ T328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.085756][ T328] usb 2-1: Product: а [ 94.089877][ T328] usb 2-1: Manufacturer: 呑氠围ೀ놂뵵ꫩ⎰ꨅꈞ裡ᡯ龡鱣ٔ롖䛿迠迗씬翘欆蝨勷଒纙淾澰း퟇譐ᒼ伿 [ 94.102798][ T328] usb 2-1: SerialNumber: 뻀獎飌ꥩ⹝챴ᯧ䓁涎匫喟㫔暃蝎탼洱绦섖鏘帡솎졵㫐淢⛋奼၎䣓䴗权ᣇ䧷觥줪⯡끓⪿晶萔瞯Θᦉژ᳇튳춧㑺谄쮶嗜합覵칦㝸秅뵈쁵⭻զ㒎郍蛾遪햹⑶䲨䷺긿ｴ꿋渗큜ﴯﾼᄭ봊쁤李띙򋼲靕ꤴꋂ簚䅓⌬㝒፡褪䔁 [ 94.138279][ T3870] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 94.147745][ T3907] 9pnet_fd: Insufficient options for proto=fd [ 94.181525][ T3913] fuse: Unknown parameter '' [ 94.190429][ T3917] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1118'. [ 94.200153][ T36] audit: type=1400 audit(1754646066.381:421): avc: denied { mounton } for pid=3915 comm="syz.0.1118" path="/398/file2" dev="tmpfs" ino=2231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.217178][ T3917] 9pnet_fd: Insufficient options for proto=fd [ 94.229657][ T3919] tipc: Enabling of bearer rejected, media not registered [ 94.355183][ T328] usbhid 2-1:1.0: can't add hid device: -71 [ 94.368777][ T328] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 94.383029][ T328] usb 2-1: USB disconnect, device number 23 [ 94.498229][ T3947] __vm_enough_memory: pid: 3947, comm: syz.3.1130, bytes: 18014402804453376 not enough memory for the allocation [ 94.594451][ T3957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1134'. [ 94.866282][ T36] audit: type=1400 audit(1754646067.051:422): avc: denied { map } for pid=3970 comm="syz.1.1138" path="socket:[18306]" dev="sockfs" ino=18306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 94.928465][ T3978] overlayfs: failed to clone upperpath [ 95.005111][ T3990] overlayfs: failed to clone upperpath [ 95.110318][ T36] audit: type=1400 audit(1754646067.291:423): avc: denied { nlmsg_write } for pid=3997 comm="syz.2.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 95.162913][ T36] audit: type=1400 audit(1754646067.291:424): avc: denied { audit_write } for pid=3997 comm="syz.2.1147" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.212903][ T36] audit: type=1107 audit(1754646067.291:425): pid=3997 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 95.252925][ T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 95.477684][ T4020] netlink: 'syz.0.1154': attribute type 27 has an invalid length. [ 95.497000][ T4021] netlink: 'syz.0.1154': attribute type 27 has an invalid length. [ 95.553950][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.585567][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.612913][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 95.622009][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.653699][ T9] usb 2-1: config 0 descriptor?? [ 95.697010][ T36] audit: type=1326 audit(1754646067.881:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.1160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f783698ebe9 code=0x0 [ 95.822924][ T328] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 95.861176][ T3985] netlink: 'syz.1.1141': attribute type 1 has an invalid length. [ 95.900163][ T36] audit: type=1400 audit(1754646068.081:427): avc: denied { read } for pid=4045 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.973983][ T328] usb 4-1: config 1 has an invalid interface number: 146 but max is 0 [ 95.982341][ T328] usb 4-1: config 1 has no interface number 0 [ 95.988481][ T328] usb 4-1: config 1 interface 146 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 96.000739][ T328] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 96.009811][ T328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.017844][ T328] usb 4-1: Product: syz [ 96.022031][ T328] usb 4-1: Manufacturer: syz [ 96.026667][ T328] usb 4-1: SerialNumber: syz [ 96.033480][ T328] usbserial_generic 4-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 96.044941][ T328] usbserial_generic 4-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 96.055877][ T328] usbserial_generic 4-1:1.146: generic converter detected [ 96.064378][ T328] usb 4-1: generic converter now attached to ttyUSB0 [ 96.075808][ T9] konepure 0003:1E7D:2DBE.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 96.234842][ T4025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.243388][ T4025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.251547][ T4025] rust_binder: Got transaction with invalid offset. [ 96.251586][ T4025] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.258215][ T4025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:518 [ 96.268073][ T9] usb 4-1: USB disconnect, device number 27 [ 96.280475][ T328] usb 2-1: USB disconnect, device number 24 [ 96.284542][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 96.297295][ T9] usbserial_generic 4-1:1.146: device disconnected [ 96.435745][ T4051] tipc: Enabling of bearer rejected, failed to enable media [ 96.804875][ T4070] netlink: 'syz.1.1172': attribute type 11 has an invalid length. [ 96.813245][ T4070] /dev/rnullb0: Can't open blockdev [ 96.820043][ T4072] binder: Unknown parameter 'defcontext01777777777777777777777' [ 96.828321][ T4073] binder: Unknown parameter 'defcontext01777777777777777777777' [ 97.072920][ T328] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 97.091750][ T4103] fuse: Unknown parameter '' [ 97.135323][ T4103] kvm: pic: non byte write [ 97.185312][ T4103] kvm: pic: non byte write [ 97.234014][ T328] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 97.242209][ T328] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.253940][ T328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.264989][ T328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 97.276265][ T328] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.289270][ T328] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.298444][ T328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.307153][ T328] usb 4-1: config 0 descriptor?? [ 97.314895][ T4072] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.725042][ T328] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 97.732571][ T328] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 97.740241][ T328] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 97.747870][ T328] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 97.755422][ T328] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 97.763038][ T328] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 97.770517][ T328] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 97.778112][ T328] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 97.785651][ T328] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 97.794677][ T328] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 97.802161][ T328] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 97.809750][ T328] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 97.817321][ T328] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 97.824880][ T328] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 97.832412][ T328] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 97.840119][ T328] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 97.852981][ T328] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 97.983985][ T328] usb 4-1: USB disconnect, device number 28 [ 98.550065][ T4131] 9pnet_fd: Insufficient options for proto=fd [ 98.690891][ T4129] overlay: ./bus is not a directory [ 98.825897][ T36] audit: type=1400 audit(1754646071.011:428): avc: denied { append } for pid=4143 comm="syz.1.1197" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 98.827944][ T4146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.848756][ T4146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:600 [ 99.321104][ T4160] 9pnet_fd: Insufficient options for proto=fd [ 99.395547][ T4170] futex_wake_op: syz.2.1205 tries to shift op by 144; fix this program [ 99.695148][ T4191] rust_binder: Fixups oob 164 170 358 196 [ 99.695178][ T4191] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 99.701168][ T4191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.709764][ T4191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:539 [ 99.952241][ T4195] rust_binder: Write failure EFAULT in pid:615 [ 99.961604][ T403] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 100.020765][ T36] audit: type=1400 audit(1754646072.201:429): avc: denied { append } for pid=4206 comm="syz.1.1218" name="event2" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.021226][ T4207] /dev/rnullb0: Can't open blockdev [ 100.125728][ T403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.136731][ T403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.146926][ T403] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 100.156161][ T403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.165128][ T403] usb 4-1: config 0 descriptor?? [ 100.472942][ T328] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 100.574960][ T403] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 100.582539][ T403] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 100.590323][ T403] steelseries 0003:1038:12B6.0008: item fetching failed at offset 5/7 [ 100.599335][ T403] steelseries 0003:1038:12B6.0008: probe with driver steelseries failed with error -22 [ 100.612955][ T328] usb 2-1: device descriptor read/64, error -71 [ 100.738186][ T4249] overlayfs: failed to clone upperpath [ 100.745201][ T4249] /dev/loop0: Can't lookup blockdev [ 100.781917][ T4251] netlink: 'syz.0.1234': attribute type 15 has an invalid length. [ 100.789903][ T4251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1234'. [ 100.852911][ T328] usb 2-1: device descriptor read/64, error -71 [ 100.884342][ T4251] netlink: 'syz.0.1234': attribute type 10 has an invalid length. [ 100.935748][ T36] audit: type=1400 audit(1754646073.121:430): avc: denied { lock } for pid=4258 comm="syz.0.1236" path="socket:[19357]" dev="sockfs" ino=19357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 101.112910][ T328] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 101.201595][ T4290] netlink: 'syz.0.1246': attribute type 28 has an invalid length. [ 101.210210][ T36] audit: type=1400 audit(1754646073.401:431): avc: denied { accept } for pid=4289 comm="syz.0.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 101.262902][ T328] usb 2-1: device descriptor read/64, error -71 [ 101.282304][ T4301] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1250'. [ 101.291701][ T4301] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1250'. [ 101.301791][ T36] audit: type=1400 audit(1754646073.491:432): avc: denied { mount } for pid=4300 comm="syz.0.1250" name="/" dev="configfs" ino=2541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 101.324899][ T36] audit: type=1400 audit(1754646073.491:433): avc: denied { search } for pid=4300 comm="syz.0.1250" name="/" dev="configfs" ino=2541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.347458][ T36] audit: type=1400 audit(1754646073.491:434): avc: denied { write } for pid=4300 comm="syz.0.1250" name="/" dev="configfs" ino=2541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.389308][ T4308] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 101.502913][ T328] usb 2-1: device descriptor read/64, error -71 [ 101.613042][ T328] usb usb2-port1: attempt power cycle [ 101.767945][ T4335] tipc: Enabling of bearer rejected, already enabled [ 101.886126][ T4352] netlink: 'syz.0.1267': attribute type 13 has an invalid length. [ 101.940825][ T4361] 9pnet_fd: Insufficient options for proto=fd [ 101.962939][ T328] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 101.973854][ T4367] overlayfs: failed to resolve './file0': -2 [ 101.984071][ T328] usb 2-1: device descriptor read/8, error -71 [ 102.052945][ T4389] fuse: Unknown parameter 'rootm`de' [ 102.108921][ T4401] overlayfs: failed to clone upperpath [ 102.115569][ T328] usb 2-1: device descriptor read/8, error -71 [ 102.266240][ T36] audit: type=1107 audit(1754646074.451:435): pid=4413 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 102.276982][ T4419] 9pnet_fd: Insufficient options for proto=fd [ 102.432937][ T328] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 102.454008][ T328] usb 2-1: device descriptor read/8, error -71 [ 102.584014][ T328] usb 2-1: device descriptor read/8, error -71 [ 102.617350][ T403] usb 4-1: USB disconnect, device number 29 [ 102.693036][ T328] usb usb2-port1: unable to enumerate USB device [ 102.708533][ T4447] rust_binder: Failed copying into alloc: EFAULT [ 102.708553][ T4447] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 102.715210][ T4447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 102.723662][ T4447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:548 [ 102.746649][ T4449] rust_binder: Error while translating object. [ 102.755924][ T4449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 102.762112][ T4449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:550 [ 102.785242][ T4451] rust_binder: Error while translating object. [ 102.794538][ T4451] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 102.800748][ T4451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:552 [ 102.839685][ T4455] 9pnet_fd: Insufficient options for proto=fd [ 103.099227][ T4468] rust_binder: Fixups oob 164 170 358 196 [ 103.099250][ T4468] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 103.105167][ T4468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.113479][ T4468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:568 [ 103.363229][ T328] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 103.524686][ T328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.535752][ T328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.545558][ T328] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 103.554718][ T328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.563551][ T328] usb 4-1: config 0 descriptor?? [ 103.722923][ T45] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 103.875395][ T45] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.884693][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.892733][ T45] usb 2-1: Product: syz [ 103.897276][ T45] usb 2-1: Manufacturer: syz [ 103.901913][ T45] usb 2-1: SerialNumber: syz [ 103.971500][ T328] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 103.979069][ T328] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 103.986670][ T328] steelseries 0003:1038:12B6.0009: item fetching failed at offset 5/7 [ 103.995232][ T328] steelseries 0003:1038:12B6.0009: probe with driver steelseries failed with error -22 [ 104.074798][ T4492] 9pnet_fd: Insufficient options for proto=fd [ 104.614905][ T4499] tipc: Enabling of bearer rejected, failed to enable media [ 104.827916][ T4519] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 105.414894][ T4530] fuse: Unknown parameter '184467440737095516150x0000000000000003' [ 105.425008][ T4530] fuse: Unknown parameter '00000000000000000010' [ 105.431917][ T4530] fuse: Unknown parameter 'roomode' [ 106.053768][ T378] usb 4-1: USB disconnect, device number 30 [ 106.197006][ T4547] usb usb9: usbfs: process 4547 (syz.3.1329) did not claim interface 0 before use [ 106.502633][ T403] usb 2-1: USB disconnect, device number 29 [ 106.577497][ T4563] tipc: Enabled bearer , priority 0 [ 106.599315][ T4564] tipc: Disabling bearer [ 106.882918][ T378] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 107.038068][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.049257][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.059366][ T378] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 107.068659][ T378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.077746][ T378] usb 4-1: config 0 descriptor?? [ 107.078966][ T4590] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1343'. [ 107.127282][ T36] audit: type=1326 audit(1754646079.311:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="syz.0.1345" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f783698ebe9 code=0x0 [ 107.299100][ T378] savu 0003:1E7D:2D5A.000A: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 107.311805][ T4609] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 107.311835][ T4609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 107.320651][ T4609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:589 [ 107.322168][ T378] usb 4-1: USB disconnect, device number 31 [ 107.357506][ T4611] fido_id[4611]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 107.994385][ T4637] overlayfs: failed to clone lowerpath [ 108.543073][ T4647] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.543108][ T4647] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:656 [ 108.626100][ T4650] rust_binder: Error while translating object. [ 108.636200][ T4650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 108.642473][ T4650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:659 [ 108.762949][ T4666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.772775][ T4662] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 108.786552][ T4662] rust_binder: Write failure EINVAL in pid:663 [ 108.786642][ T4662] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 108.802143][ T4662] rust_binder: Write failure EINVAL in pid:663 [ 108.907788][ T4675] random: crng reseeded on system resumption [ 109.005400][ T4684] overlayfs: failed to clone upperpath [ 109.027049][ T4686] raw_sendmsg: syz.0.1375 forgot to set AF_INET. Fix it! [ 109.052903][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 109.199279][ T4700] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1379'. [ 109.208508][ T403] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 109.217680][ T10] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 109.228373][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 109.237643][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.247736][ T10] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 109.362908][ T403] usb 4-1: Using ep0 maxpacket: 16 [ 109.369320][ T403] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.379616][ T403] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.390276][ T403] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.399579][ T403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.407871][ T403] usb 4-1: Product: syz [ 109.412052][ T403] usb 4-1: Manufacturer: syz [ 109.417117][ T403] usb 4-1: SerialNumber: syz [ 109.438393][ T4723] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1388'. [ 109.460322][ T378] usb 2-1: USB disconnect, device number 30 [ 109.483706][ T4729] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1390'. [ 109.493299][ T4729] fuse: Unknown parameter 'rootmode' [ 109.553406][ T4743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1394'. [ 109.612426][ T4750] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1397'. [ 109.661862][ T4754] overlayfs: failed to clone upperpath [ 109.752686][ T4768] netlink: 'syz.0.1404': attribute type 4 has an invalid length. [ 109.781139][ T4773] tipc: Enabling of bearer rejected, already enabled [ 109.820292][ T4777] overlayfs: failed to resolve './file0': -2 [ 109.883213][ T4783] /dev/loop0: Can't lookup blockdev [ 110.161366][ T4787] SELinux: failed to load policy [ 110.176457][ T4788] SELinux: failed to load policy [ 110.239056][ T4795] tipc: Enabling of bearer rejected, failed to enable media [ 110.438346][ T4803] 9pnet_fd: Insufficient options for proto=fd [ 110.456032][ T36] audit: type=1326 audit(1754646082.641:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.1.1418" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfa6b8ebe9 code=0x0 [ 110.626250][ T4836] overlayfs: failed to clone upperpath [ 110.714529][ T4849] bridge0: port 3(syz_tun) entered blocking state [ 110.721063][ T4849] bridge0: port 3(syz_tun) entered disabled state [ 110.727647][ T4849] syz_tun: entered allmulticast mode [ 110.733428][ T4849] syz_tun: entered promiscuous mode [ 110.738825][ T4849] bridge0: port 3(syz_tun) entered blocking state [ 110.745310][ T4849] bridge0: port 3(syz_tun) entered forwarding state [ 110.808772][ T4866] overlayfs: failed to clone upperpath [ 110.981154][ T4889] netlink: 'syz.0.1443': attribute type 2 has an invalid length. [ 111.020738][ T4895] overlayfs: failed to clone upperpath [ 111.174189][ T4908] 9pnet_fd: Insufficient options for proto=fd [ 111.276995][ T4910] overlayfs: conflicting options: userxattr,verity=require [ 111.703730][ T36] audit: type=1400 audit(1754646083.891:438): avc: denied { create } for pid=4913 comm="syz.0.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 111.942961][ T403] usb 4-1: 0:2 : does not exist [ 111.954809][ T403] usb 4-1: USB disconnect, device number 32 [ 111.960791][ T36] audit: type=1326 audit(1754646084.131:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.2.1465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f869e38ebe9 code=0x0 [ 112.616649][ T4966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:615 [ 112.682055][ T4970] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 112.829689][ T4997] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4997 comm=syz.1.1483 [ 112.843166][ T4997] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4997 comm=syz.1.1483 [ 112.844167][ T4999] overlayfs: failed to clone upperpath [ 112.856433][ T4997] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=260 sclass=netlink_audit_socket pid=4997 comm=syz.1.1483 [ 112.888643][ T5001] netlink: 'syz.1.1485': attribute type 13 has an invalid length. [ 112.925072][ T5010] overlayfs: failed to clone upperpath [ 113.000722][ T5020] tipc: Enabling of bearer rejected, failed to enable media [ 113.438831][ T5023] ------------[ cut here ]------------ [ 113.444359][ T5023] WARNING: CPU: 0 PID: 5023 at mm/page_alloc.c:5225 __alloc_pages_noprof+0xe8/0x7b0 [ 113.453997][ T5023] Modules linked in: [ 113.457948][ T5023] CPU: 0 UID: 0 PID: 5023 Comm: syz.3.1494 Not tainted 6.12.38-syzkaller-g209015b548fb #0 c4bb26c31dabe4a25adff9e3720090d1cd174d38 [ 113.471588][ T5023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.481896][ T5023] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 113.488017][ T5023] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 61 03 ee 05 00 0f 85 be 00 00 00 c6 05 54 03 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 113.507771][ T5023] RSP: 0018:ffffc9000f8075a0 EFLAGS: 00010246 [ 113.514160][ T5023] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 113.522181][ T5023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000f807658 [ 113.530228][ T5023] RBP: ffffc9000f8076c8 R08: ffffc9000f807657 R09: 0000000000000000 [ 113.538269][ T5023] R10: ffffc9000f807640 R11: fffff52001f00ecb R12: ffffc9000f8075e0 [ 113.546299][ T5023] R13: dffffc0000000000 R14: 1ffff92001f00eb8 R15: 0000000000000000 [ 113.554403][ T5023] FS: 00007f90761356c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 113.563391][ T5023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.570023][ T5023] CR2: 0000200000005000 CR3: 0000000114844000 CR4: 00000000003526b0 [ 113.578031][ T5023] Call Trace: [ 113.581325][ T5023] [ 113.584321][ T5023] ? do_syscall_64+0x58/0xf0 [ 113.588948][ T5023] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.595092][ T5023] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 113.600852][ T5023] ? hashtab_init+0xdb/0x1f0 [ 113.605483][ T5023] ___kmalloc_large_node+0x9c/0x1d0 [ 113.610722][ T5023] ? hashtab_init+0xdb/0x1f0 [ 113.615389][ T5023] __kmalloc_large_node_noprof+0x1e/0xe0 [ 113.621054][ T5023] ? hashtab_init+0xdb/0x1f0 [ 113.625709][ T5023] __kmalloc_noprof+0x26d/0x450 [ 113.630619][ T5023] hashtab_init+0xdb/0x1f0 [ 113.635109][ T5023] ? common_read+0x16d/0x480 [ 113.639730][ T5023] symtab_init+0x44/0x70 [ 113.644012][ T5023] common_read+0x1de/0x480 [ 113.648470][ T5023] ? __cfi_common_read+0x10/0x10 [ 113.653474][ T5023] ? hashtab_init+0x105/0x1f0 [ 113.658196][ T5023] policydb_read+0xaab/0x28c0 [ 113.662946][ T5023] ? kasan_save_alloc_info+0x40/0x50 [ 113.668258][ T5023] ? __cfi_policydb_read+0x10/0x10 [ 113.673409][ T5023] ? security_load_policy+0x128/0x12f0 [ 113.678906][ T5023] security_load_policy+0x162/0x12f0 [ 113.684238][ T5023] ? irqentry_exit+0x4a/0x60 [ 113.688882][ T5023] ? exc_page_fault+0x66/0xc0 [ 113.693594][ T5023] ? asm_exc_page_fault+0x2b/0x30 [ 113.698738][ T5023] ? __cfi_security_load_policy+0x10/0x10 [ 113.704538][ T5023] ? rep_movs_alternative+0x4a/0xa0 [ 113.709765][ T5023] sel_write_load+0x298/0x5e0 [ 113.714497][ T5023] ? futex_wait+0x29a/0x7a0 [ 113.719087][ T5023] ? __cfi_sel_write_load+0x10/0x10 [ 113.724319][ T5023] ? __cfi_futex_wait+0x10/0x10 [ 113.729205][ T5023] ? bpf_lsm_file_permission+0xd/0x20 [ 113.734675][ T5023] ? __cfi_sel_write_load+0x10/0x10 [ 113.739898][ T5023] vfs_write+0x3c0/0xe80 [ 113.744182][ T5023] ? __cfi_vfs_write+0x10/0x10 [ 113.748982][ T5023] ? __kasan_check_write+0x18/0x20 [ 113.754125][ T5023] ? mutex_lock+0x92/0x1c0 [ 113.758576][ T5023] ? __cfi_mutex_lock+0x10/0x10 [ 113.763463][ T5023] ? __fget_files+0x2c5/0x340 [ 113.768168][ T5023] ksys_write+0x141/0x250 [ 113.772512][ T5023] ? __cfi_ksys_write+0x10/0x10 [ 113.777465][ T5023] ? __kasan_check_write+0x18/0x20 [ 113.782609][ T5023] ? fpregs_restore_userregs+0x11d/0x260 [ 113.788274][ T5023] __x64_sys_write+0x7f/0x90 [ 113.792931][ T5023] x64_sys_call+0x271c/0x2ee0 [ 113.797670][ T5023] do_syscall_64+0x58/0xf0 [ 113.802100][ T5023] ? clear_bhb_loop+0x50/0xa0 [ 113.806815][ T5023] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.812738][ T5023] RIP: 0033:0x7f907538ebe9 [ 113.817278][ T5023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.836956][ T5023] RSP: 002b:00007f9076135038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.845411][ T5023] RAX: ffffffffffffffda RBX: 00007f90755b5fa0 RCX: 00007f907538ebe9 [ 113.853447][ T5023] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000003 [ 113.861437][ T5023] RBP: 00007f9075411e19 R08: 0000000000000000 R09: 0000000000000000 [ 113.869445][ T5023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.877471][ T5023] R13: 00007f90755b6038 R14: 00007f90755b5fa0 R15: 00007ffd56745138 [ 113.885492][ T5023] [ 113.888525][ T5023] ---[ end trace 0000000000000000 ]--- [ 113.894217][ T5023] SELinux: failed to load policy