last executing test programs: 1m10.685410865s ago: executing program 3 (id=829): mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@gid}], [{@permit_directio}]}) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)='wchan\x00') r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) sendmmsg$sock(r2, &(0x7f00000015c0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 0x1, 0x1, 0x2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="24727e336fa5f5c015e853dc08c08206243a0582a4e3d8e6b4a5e3b5ce25da8fc880afac1a7622f72c19713796e77b58cc1c539b0c239248bdbd82b439176a89ab7aedc682552d0a1bca2f032a2bd704cf2e7763674ac5bfae3a980fbd2958d83447351830226b2bc79999113970254b24d537a4d5e235aea8872b8fa8f9504aaac1170b6b6b6aa31ad998b0bac1855bbe5c2c25bdbc0f8fa5a36726a55a4791c93bf6af03f202ea10de8f043a84e572e99ab645f76a4821fd1c03f8", 0xbc}], 0x1, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0xff}}], 0x30}}, {{&(0x7f00000002c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="60711a6df8c3211f259aab7cfee1766bc41cd7fccd3fc455882af23653c3a0840869370c3397910f35712cae20e59310d3f275a9a9d690b92a3e4c4b0eecc5adc089ea567fd7b1f8cb46544c3c74a5dfa2b5cecc7c2ee4a848e51e97995bf6ca3ea9be694dac74224d9634702b24b711f135dded5adbf6435b7319b59619544d926b8b9f66f2d62a7e22a36f2e015c11068aac3c37b33f86ad87881bd5d14498e524b94be85f7de94f12f1a91d5760e0be5e2f81f6f4302df1a07e723cf16c8c6ea2118430c07d829e881c2cb429757d71da918b5b7d4fd1ea39166d9702516f3d6196d3660fd02cf7f0d60c81", 0xed}, {&(0x7f0000000440)="4284beb732c6a20a6f6a2810f96b076abb0e0f23ce3c6835423c607208a247f66c5fa921e98885f00a4f8743e177ed3a1947691cbfea26930792fb59ac824b5b13261d468548a33f7d3e09573d1693115c90234ebf0e0a88a893f56f65d2c91f2ae578eadfd3cde279fb821f1c5694da41967a6c021bdd9ebe0baab315905bd525b251012cad39843cb79f92325b3afe65ad5a4f6c8e4a9b", 0x98}, {&(0x7f0000000500)="0208732215cf9890c6a4e897ba0264d64952e3cf81eb95532cebe3cdb6a8a5b4a18c0c682c133df0d69f836ca07b98cfae2bd291784a480aa96fbd77865afbbb49a23f1c986372713ffc9328c8475e3757c4c4e69fd6490fd9c173ad713c1501af06a83bc19588856b0b0ae5b362a6995e37103350e98c2e80cf3e320e75128402a9aa26c8ef16cd6c", 0x89}, {&(0x7f00000005c0)="2545d1e103da2e47a23dfe29e418998b78f3f45f66d3e6b171208c3004d305e191db298f185ca5dde47a12e12d91b505ab46af004c41d034d544a9f92a6f48a129bb447312378cbf2a90455371ad01f3f37c2477800092c259f7189248abc67166c8b042fe77b514633e5dbf8598bebd6ef56866c077c56c0df1da560426fc4875d9866798eecd21e39ebaef0f9d56e1620056b013bef8c37237ba62d05bd08c169cc73d4dfd83d7a6d5d1a63d8214a6b936b009fbd3e2e382ae273565856500d3fa74b05263f68dae04ef11d832d3bea6eaebcd665820d5ec2a8286468c01fa5bf9c431d6814b4020e54fd46dcb88f435c6534fb6b698f0f1af", 0xfa}, {&(0x7f00000006c0)="74ff6b23aef484c0f31536946a019bfd2ccd7599ad61fe952d50acb87dcf8a8462676a75", 0x24}, {&(0x7f0000000700)="f7682456eed3b7609613a432d881b23511a2b23d1f6939c914f334c074156ec0fab8483befe453cdc767d77de4651cb77bb47f822c893a673df933f2fd42046759f8edcddba061355232d25978f9c409ee81c21127895ca345cd3cfe3aadffc0a3", 0x61}, {&(0x7f0000000780)="c89e152816123085f008cff5cd6ab8ed4cc817a4cee36b385a5d8375cc6a52d20508b12664ec396e4a21477b52dd5858fd5927d3d3ebbb99e270d6423b570de148300877a1f3cf003aef8476b9c5860b5d4694b5b6c0c98dc00bc135204a28a2c1827eae722a59b7a301ad66bee3e978545ed62573f137286fcd96027a8947103b39b9c27de2ec85c61e693d260010ae9a07dc4198915496bdf7e5b9c35a13ef82028ca94cf810d9a68bb2b968a0a3e5ec7758226ba1f958947e1a106d21d50326ac97b99852264235869a7069a4de112a06b1bf1ebb", 0xd6}, {&(0x7f0000000880)="b6462091aafc22c02ab21e7fd684abe5f2a26a3a40a95fee68d0650957136335a288dc66945ea78b3a6b8a34fbd3e744e9ad4b02740be01a729840975eb45a41357ce22d5a29e27d911b8852cfd65eb57fd504765f2cabc91d9bfad12b5d9f37fa6345f208f2bc975a18ad6b92a92a8e4bd696b900c31bd322870c9d9e3c45dac0571c6586e769aa1735a4530ca12b8e17bcd5f3180e9bd97be44e0a42b670546a3efa6441ba8f4e260514a78897f15f1fd791d55d6ccabe626f1e47e2e3bf803bcf", 0xc2}], 0x8, &(0x7f0000000a00)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x79}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x78}}, {{&(0x7f0000000a80)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)="0512c7b23fbabc2e97be49f0290b5b647fdb727c2ca2aeecec31faab24b4dc4de257b59f90b53780e740fa5def5499d35f969833a5c86779ad89ece5e7d8997f18d17e10c403807e69bb47fdb2aaa7034baffbc46e3f5fa76fdc98bf5decf797acdc556cb7f8598285c1d4a1bae72efc642d084b2a53ed2ca485d698fb0452c6b51a1a46f4fd5e7ba790e3d78d0b796ec4d78cbae84b9d1ecd232d4da9b624861d743331c2bb0487be45fc89118d893f46ea13a48ba1493a43b101919be690d8bd99b7e975f9", 0xc6}, {&(0x7f0000000c00)="217961356212e9e23fb4fbc7d9101217e21dae04b188822629eb05463fd0753df90f0742dfe5953a86f18298b3fbfd8f05956c7fd17a6c242b3522a261beb8261d05fcb4e9495a0d164d016b01379e1a1d85685a67315c742d757a586d3a3f4182eff2", 0x63}], 0x2}}, {{&(0x7f0000000cc0)=@nl=@unspec, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d40)="012f90c1e7850fa9bc3a774483108bc8340972061e6bfff745bb551cf82aa87e9bd3a4abf1ce9722134be15cd902752e5d1b096c9f4e067d7e", 0x39}, {&(0x7f0000000d80)="9d801fd6782f0631a7c74325216ea6c31c701c905c454007ba7821d86ae6255ca654b17e32594e8fd4cd84d90eee7aa4f2fe5228e3fbd3276462ca8be37eb000f1c54d4b0dd45e1dfb7b5e1503e86bf2b4313f85737498e3e8fcf5e0d999ca7931110122646ba98eafc438cc1c13adfe12d782d377ae4e5cbcdd0520170f698fd4023beb93dd16698726c318d2fea4d6606c67e7bd3eb4ff5a00ab7a35bb27b4795b28b709464f177c25d446bfa6c7d8d4b0718a491981d99dc03717074fea32dfff930ce1a58e3c0398b7dbef5b", 0xce}, {&(0x7f0000000e80)="de40ff6e4f22fc93524299e46f1b3b10be5b52b6299ea1240539d1bd4bce1dce37e465ac3391ee9c1bd9f386922654d805a4241a494c0418c303e3cb60f9486e2d3656575f6f018e971bddf881053ef7c13984090acf2deca250bb5883b8a46c6b5731fd9b14968c86772bdd599d7569603eb2cf52d76be7c14fc122905b066ca9bea7cd939533beb5628d116716733dde842db217fa6e7ce40147a78eb3e4bf250f5f9d0cfb8c653dd0b23ae1eb39b8fa231ff244d27baa66932aa735839cc196be3f72512213f299b34c5719e8b77beb0eb02101efb691f5e63b52f355de9def5401b76d67c979b287e72f", 0xec}, {&(0x7f0000000f80)="d39b8a819c60fc9f88a171bf992e78d538253e63811f9f9e4346789d712ae157e484923bfdfe55b7691324bc05099b515eb320190adc46a49dd8ef822ccb611c1e3a391c04c6511656f7820b4ffbc09cce3073df635bcc3bf6a8a17a192c32d3009a663786e82057879e40d8186fc5884e838a6e8d7c10ed98ec9996", 0x7c}], 0x4, &(0x7f0000001040)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x48}}, {{&(0x7f0000001100)=@xdp={0x2c, 0x5, r3, 0x21}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001180)="b9ec9bcf5ae917dea0b586dd380b23061bc56c36de74f276a8583574620fe2cc14d16e1d8e51aeb735c20b9de8bb718225b9e5d7b286d6c0d51c6c86f09f12b96c", 0x41}, {&(0x7f0000001200)="8eb17fa4fadca0f853556f0130ebbdb97c8dc289cf02be", 0x17}, {&(0x7f0000001240)="11d140988826c4075e4b9b150142c44c6b5079b1fdafb7148e5a772cbd14ac866a29605af4c2c9711eae29f3a336cd8fc4823686a0efd68e0e8a5a392e9f9b623d5585f298cfd4ae8491d6808e1eb2409ad587a8e4b4a9c937254833abd647aad541972c1d35f3d1bd57e145ca6de8b3799527", 0x73}, {&(0x7f00000012c0)="223e17301e9e138e7d1d02a9e51addd73abdd10a2f5effcd25bde2d69546d553d416e0d30501f622f41dde78ec42200b57385914efe77156c490a3a1dcce822856d115f4383e2aef3e76bdf359f23153f72d361506045ea21e20b6af5faa042dd3f1dec01e4b36497c6ce8249a202861bbb4ce7d4e88012babffffb0c667ed60555f64ba85e61559f3777461460266671f0fb869be529f7fe396b3832363ab7bc07853b56484cd7c2dd2fd8d5268678ea59e50e04dcd0b5b0401872196c8236d7551594e510f6f76d2571161e332252891484ea8b8d20e66c5dac6be742490dc154c4b", 0xe3}, {&(0x7f00000013c0)="d873a3457b97d3dd5f4ec8ce863d2ee384098967c4e01eddd0bb0ee354ea224362e9a821d07e5c78ade6daa549672bde3ae2bff0fc6604b155d480db38eb376132ff688cf468beb59d5df215eff843cb8a45a57e8c6cf5fd2fb9f7f0ced1c28e98406bad83a84323d4e64dff5c8cb3eeb5a3cdcd128bcc1969ec4236fb9bcb66fce52e9d568d8324e7ff2fae76da78497e1aa3eb4e5c17b9d50f00781ffd4b38e23a9c5040b89c6237474a6d3d056f0bc44d64167d8f27b2", 0xb8}], 0x5, &(0x7f0000001500)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x5e}}, @timestamping={{0x14, 0x1, 0x25, 0x2d38}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xcd21}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xc8}}], 0xc0}}], 0x5, 0x44) mount$bind(&(0x7f0000001700)='./file0/../file0\x00', &(0x7f0000001740)='./file0\x00', &(0x7f0000001780), 0x1010, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f00000017c0)) getsockname(r2, &(0x7f0000001800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000001880)=0x80) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000018c0)=[{{0x806, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x10) move_mount(0xffffffffffffffff, &(0x7f0000001900)='./file0/../file0\x00', r1, &(0x7f0000001940)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001980), 0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001a00), 0x4900, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$overlay(0x0, &(0x7f0000001a40)='./file0/../file0\x00', &(0x7f0000001a80), 0x4, &(0x7f0000001b80)={[{@uuid_auto}], [{@fowner_eq={'fowner', 0x3d, r7}}, {@obj_type={'obj_type', 0x3d, 'permit_directio'}}, {@subj_user={'subj_user', 0x3d, 'wchan\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, 'permit_directio'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) r8 = socket$packet(0x11, 0x1, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8982, &(0x7f0000001c40)={0x7, 'macvtap0\x00', {}, 0x3}) sendmmsg$sock(r8, &(0x7f0000003540)=[{{&(0x7f0000001c80)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001d00)="cc5a5965a93c22bd367ba9fb7e727fe2ff798c2bca9cae977833a170b66bd10508c64766b511f1c4ee5937cef2bc1d162b509e7cfdfa544ee836415a05d88c76ec1564f83dc8cfd6add6f1ec4548676eaef3f26106c48379d3f8e6595aef03a286a89752c85c89707cdba8197e99", 0x6e}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)="38824f3cb262e393b73ba34e891e87fe8dae11b8d1cb517ef8e41e36ce7f83374c86c7df55af61ec3e4679fdc0a26c8c8e71c6c3e1e31f9ecb75ad14d933301e714312ee0c97b8ce0f9f0ae2daa5d49510088de0cd1b2825cada4c9ee03c5f96969a185b1213b7f03e5d0b0eb607e7c1e0fa33bfb0e205e78755883eaad15612e2881fcad995f0a103fc6e985c7d2f6c", 0x90}, {&(0x7f0000001e80)="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", 0x1000}], 0x4, &(0x7f0000002ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x56d}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x90}}, {{&(0x7f0000002f80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003000)="105f574d0e47df1edeef7b1a58e18c1efdd021f2c1259b22d89c261f4d9c23df0f8c8112c55f62fcc4273f96d643ce6e413032c296b7b3c7e2fcf34202485d1603d7764f7a1e1c76cdb93b6ad555f25647152c8aaa74d37c7384fbd50596462a30492dd9370780aa9aef0ef95337943457e57a6d25f613f6f4dcca411d7d24981198e9ba542906dd74dae191aab0c51f7bdba3a097d96914196f9bb4ddb10087a7714cfa499aaea1680fe42ecfaba2845c617c0959554af187e9", 0xba}, {&(0x7f00000030c0)="158570ab99819641d63d4c6b7837df226fc4d66d0dbe6d66cda648916a7fd03dfa2ff41cf72dc695010f009be6ae6b082babbac8cd48c8be29fe47a7c8c4326ab73aaefebb13466c2d5fd07d7a3f355cd97d836271dea16701ce46d7d856c5abef201fc62fcfb110a74f3fa19f3d10fd02ab6b64aad44bcffec9dec9576216470b5907c2852d25b9972aa6", 0x8b}, {&(0x7f0000003180)="17edf3ac1c9551b32c9054e073ec5b34df3c9bffdd550fbd69f5337e60257e564eecfc298313ddd29b0783cd5774ac179a388c70951fa1be842f04a7266d3f", 0x3f}, {&(0x7f00000031c0)="8262bcaccfe9086e0b70b4e0a1fb976f436addae02ad1966aa7d41ecb28e254ce037", 0x22}, {&(0x7f0000003200)="6fb5bc5cc22e6c96d53c770f32b03d9100f29131bdd91a6e6bbf1265e1f39fd9a2b8e969ed54574f0cf19794b2070289be6215f53462a6788674235431dbbfda6aeca62af7f7971d374998818ed240afaf3f4aee98431cee983477b39cd65b86421d18bdd72168f46310a953db485a69922de778bbeed6a2079f7c4567cf5c6673afddb6534e75bc92a123d37f2116be92ab5a232639b1d5cf697e3bd33921b7b42b85a4caea", 0xa6}, {&(0x7f00000032c0)="9d83c9aebd7bec9ec1736f73bf6268758cc1c8bafdad77017e8e905556fc4c9ea3eb0fdc381094f097fb6980927eb443eede06fbb2c65164543ce2cc89226182671080986694231f64268b813d6d1c0cd1ec619ab1f3da8d578d3926f0c6e78893bb920a67e8d87fa7bc3d075d1e7b8f29730c438995b7fe26e9a427b2b6e5", 0x7f}, {&(0x7f0000003340)="37fdf38b8894f7e2f046612f39e1b6a25db32de2a529553c7e094dd1412c632524dbd94c0cd4b48654cc60067c4c06f53a05ea33bdb9089594e0202d39", 0x3d}, {&(0x7f0000003380)="fd244770dc1c83f3550942999fd486806e2a495518d6f9fa8dc04d595673459aac3983c78a2c09b1ecb7ef3424289accce8e48ee5f8751d5586bcd0275083a20b9ead1f534fd2159e475", 0x4a}], 0x8, &(0x7f0000003480)=[@timestamping={{0x14, 0x1, 0x25, 0x15c}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xfffffffd}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xc83}}], 0xa8}}], 0x2, 0x40) pipe2$watch_queue(&(0x7f00000035c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000003600)={0x8, 0x0, [{0x6, 0x5, 0x96, [0x9, 0x0, 0x10001, 0x3, 0x1, 0x2, 0x4]}, {0x1, 0x7ff, 0x3, [0x2, 0xfff, 0x6, 0x2, 0x3ff, 0xffff8001, 0x1, 0x5]}, {0xfff, 0x1, 0x9, [0x6, 0x3e17400, 0x7, 0x3, 0xe19f669, 0x7, 0x3, 0x5]}, {0x7, 0xe743, 0xfff, [0x86800000, 0x81, 0x0, 0x3, 0x7, 0x200, 0xba, 0xa803]}, {0x857f, 0xa8, 0x52d9, [0x9, 0x5, 0xfffffc00, 0x2dd1, 0xe, 0x40, 0x40, 0x4]}, {0x7, 0x1, 0x0, [0x8, 0xc, 0x6, 0xfffffffe, 0x3d12, 0x3, 0x8, 0x1]}, {0xff, 0x15e3fbac, 0xfffffff4, [0xb, 0x3ef, 0x8, 0xfffffff9, 0x3ff, 0x5, 0x4, 0x5]}, {0x9, 0xc6, 0x5, [0x0, 0x3, 0x6, 0xd5, 0x3, 0x8, 0x7, 0x8]}]}) pipe2$9p(&(0x7f0000003780), 0x80000) mount$9p_fd(0x0, &(0x7f00000037c0)='./file0/../file0\x00', &(0x7f0000003800), 0x48004, &(0x7f0000003840)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_any}, {@nodevmap}, {@nodevmap}], [{@dont_hash}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, '$.\'@-+)'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfsfloor}, {@pcr={'pcr', 0x3d, 0x2f}}, {@dont_hash}, {@flag='ro'}]}}) recvfrom(r6, &(0x7f0000003940)=""/106, 0x6a, 0x2041, &(0x7f00000039c0)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00', 0x0, 0x1}, 0x80) write$P9_RCLUNK(r6, &(0x7f0000003a40)={0x7, 0x79, 0x2}, 0x7) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, &(0x7f0000003b80)={'syztnl2\x00', &(0x7f0000003a80)={'syztnl0\x00', r3, 0x8, 0x0, 0x1, 0x279, {{0x2b, 0x4, 0x0, 0x8, 0xac, 0x64, 0x0, 0x6, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x34, 0xa8, 0x1, 0x4, [{@rand_addr=0x64010100, 0x2}, {@multicast1, 0x1}, {@remote, 0x1ff}, {@rand_addr=0x64010100, 0x7}, {@empty, 0x1}, {@local, 0x6}]}, @cipso={0x86, 0x46, 0x0, [{0x5, 0xf, "e1ad751a8c6e91ac769dcbd8a5"}, {0x2, 0x5, "4f6b1b"}, {0x1, 0xf, "b2be86efca37e3fc6a9293ddec"}, {0x1, 0xc, "0d27643483ef264a1f40"}, {0x6, 0xd, "7a44a7ec6bc34c62d1dc74"}, {0x0, 0x4, "ad9d"}]}, @timestamp={0x44, 0x1c, 0x13, 0x0, 0x7, [0x8, 0x6, 0x81, 0xc8, 0x4, 0x3]}, @noop]}}}}}) syz_clone(0x2088000, &(0x7f0000003bc0)="02586b1bf4a8a02ab34d85ad9db1f365b39df892430cde90c299d13f3d986148c45915ebc4be2661f799b1590d26f52c93176d59fcf5d41c86924ccd77e44566e4ece52578201718c044c3e3670636f5ca0fa361758a1b393e93690555c417fa1582333c035d272f31a039b4a947508b067058caf20aa94ae7158e13c667a001a076966fa5e68734e50acf688d9b653baa477d136404362d15cc03d2caec839c2757b035a273ae2a2b6cbfd61bebfadd76349d1a138f5355bef65b4ea1c850a39b431c575d55d48682", 0xc9, &(0x7f0000003cc0), &(0x7f0000003d00), &(0x7f0000003d40)="66707a12ef8f4336ba053557df02983a9a441d912ba97f4df7a29c25b6d489be609e1a3b96e6e6fea23784398a6bb1c7130021dc01942cf50e33aef6503cf87e4d6a5aeae9f88565d48ea6d45df135eb2fee894263bc8989b717908a1df0c7c97ec60acc950fcc4c93427f5954dfa12d94cb51a7cde901220b1e22cb9fcb36df8fcbd5962922ce2712bdab2af2ba6227e5cfba7655893ffc61e9b10b6b064458b4e45f5a118b43d68bff75cbb9e296d1da4783a427e2b79bf2bf8665583dfe90adcd960b6eb448f11de998e47e7eff1bec") sendmsg$sock(r2, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000003e40)="0e47a4e03debaa0375088a07c232aec78b5fc0d9fb1645c66989bf5690ae1bfc091bdcc350b945d918fe65435dba2142e397f2b5135cbb14858761e5635d4a6c20b7726f669a2275f2f665390f87b946a161434924effcd7cd82a488ffe7a797dbbf4ebcd103f879b1e37a81d8a9bac74f17808759abe98f690cfe5a", 0x7c}, {&(0x7f0000003ec0)="a84f987604041657cbdea906e425472f69f90dd98c3ddadd4606706c7fee2dc5fa5bdb8cfb039a6cdf136fa8912341b21dcb6e52c5", 0x35}], 0x2, &(0x7f0000003f40)=[@txtime={{0x18, 0x1, 0x3d, 0x4c4}}], 0x18}, 0x1000) 1m10.668038296s ago: executing program 3 (id=830): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x3, 0x0, "c5003f00"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x8000000000000001, 0x8, 0x0, 0x4, 0x9, 0x3, 0xfffffffffffffffc, 0x1000800000]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c744240200800000ff2c24f30f516797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4c}], 0x1, 0x24, 0x0, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = eventfd2(0x2, 0x80001) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000200)={r7, 0x0, 0x3, r1}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r10, 0x0, 0xfffffffffffffce2, 0x200008c0, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) r11 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000240)="3e670f01d1b9b4020000b80022ffffbaffffffff0f300f017a8f66b839010f00d02e3e0f01ca66b894000f00d8b805000000b9267900000f01d9660fe78600000000660f21e766b8b9008ed0", 0x4c}], 0x1, 0x8, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m10.632855056s ago: executing program 3 (id=831): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x802, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x8000000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), {0x37}, &(0x7f00000001c0)=""/19, 0x13, &(0x7f00000001c0), &(0x7f0000000200), 0x0, {r3}}, 0x58) 1m10.569764797s ago: executing program 3 (id=832): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="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"}) read(r1, &(0x7f00000003c0)=""/216, 0xd8) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat(r1, &(0x7f0000000280)='./file0\x00', 0x100, 0x41) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r3, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815", 0x45, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x800004c4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x21) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000180)={0x3, 0xffffffffffffffff, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x11) read(r6, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200a82, 0x0) 1m10.569139267s ago: executing program 3 (id=833): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_OPEN(r4, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x20) write$FUSE_GETXATTR(r4, &(0x7f00000004c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x3}], 0x0, 0x1000000, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) dup(r3) (async) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_OPEN(r4, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x20) (async) write$FUSE_GETXATTR(r4, &(0x7f00000004c0)={0x18}, 0x18) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}]}}) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x3}], 0x0, 0x1000000, 0x0}) (async) 1m10.529094638s ago: executing program 3 (id=834): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68"}) (rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x3, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) prlimit64(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000001c0)) 1m10.496545518s ago: executing program 32 (id=834): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68"}) (rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x3, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) prlimit64(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000001c0)) 961.881095ms ago: executing program 4 (id=2015): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 937.994856ms ago: executing program 4 (id=2019): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x400, "c6c0e6ecae40b5dc4e305800005f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x40}, 0x3c) 845.419067ms ago: executing program 4 (id=2023): r0 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 836.633817ms ago: executing program 2 (id=2025): r0 = openat(0xffffffffffffff9c, &(0x7f0000001ec0)='./file2\x00', 0x20042, 0x81) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000280)={@private, @loopback}, 0x8) 790.964847ms ago: executing program 4 (id=2027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 712.377539ms ago: executing program 2 (id=2028): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) setreuid(0x0, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) 712.087979ms ago: executing program 2 (id=2030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x50, r1, 0x101, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}], @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x50}}, 0x200000d0) 565.623021ms ago: executing program 2 (id=2034): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962313060b0093d12f3eb82a000807020000008304"], 0x0}, 0x0) 559.737751ms ago: executing program 4 (id=2035): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x0, 0x4, 0x29, 0x4}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) 493.628312ms ago: executing program 4 (id=2037): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mkdir(0x0, 0x180) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 459.267843ms ago: executing program 0 (id=2038): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0xb0, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6a, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x1a8, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x3, 0x7, 0x7f, 0xfc}}, @void, @val={0x5, 0x3, {0x2, 0x69, 0x5}}, @val={0x25, 0x3, {0x0, 0x24, 0x4}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x0, 0x0, {0x8, 0x2, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x6, 0x0, 0xc}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x8}}, @val={0x76, 0x6, {0x9, 0x2, 0xff7f, 0xe9}}}}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0xb0}}, 0x0) 437.357313ms ago: executing program 0 (id=2039): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000180)) 373.822424ms ago: executing program 0 (id=2040): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010024bd7000fddbdfdc1c00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 373.674504ms ago: executing program 0 (id=2041): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x0) listen(r0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 366.833264ms ago: executing program 0 (id=2042): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0xc00c5512) 346.684214ms ago: executing program 0 (id=2043): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$printer(0x2af28ec42f1a1bb1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r2 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x300, 0xf6, 0x2c, 0x1f, 0x40, 0x2001, 0x3701, 0x347f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xc8, 0x80, 0x9, [{{0x9, 0x4, 0xc0, 0x8, 0x0, 0xff, 0xff, 0xff, 0xb}}]}}]}}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0xe5, 0xa4, 0x40, 0x2770, 0x9052, 0x15f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x5c, 0xa}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x40015b13, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) 177.820157ms ago: executing program 1 (id=2044): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000980)=@hci={0x1f, 0x1, 0x3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)="0a0267f0767a90b5dc8be088b845", 0xe}], 0x1}}], 0x1, 0x4040) 177.720607ms ago: executing program 1 (id=2045): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000389000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 173.934147ms ago: executing program 1 (id=2046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 151.204167ms ago: executing program 1 (id=2047): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xc0400, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x40) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 85.804048ms ago: executing program 1 (id=2048): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) pipe2$9p(0x0, 0x4880) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, 0x0, 0xc011) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 85.643999ms ago: executing program 1 (id=2049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x11, 0x0, 0x9, '\x00', 0x3}) syz_clone(0xa0000000, &(0x7f00000000c0)="8f857a6f3928cb74984e9773fad47771c6a32b133293ca69aa0f6eb93f09c8c1d474e84d1826c3de3d30e0a73f8c67c63e9ebe00d27a1f1406795317c70c7b537b1cf5f0492f5fe87a105022c492cb0767b39fc9a72a65c35f5478b27bf689e882", 0x61, 0x0, 0x0, 0x0) capset(0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.011359ms ago: executing program 2 (id=2051): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 0s ago: executing program 2 (id=2052): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000024000100000000000000000000000000060003"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): T732] input: syz0 as /devices/virtual/input/input6 [ 35.696860][ T36] audit: type=1400 audit(1750583156.350:259): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=466 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.926113][ T307] usb 4-1: device descriptor read/64, error -32 [ 36.176123][ T307] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 36.316172][ T307] usb 4-1: device descriptor read/64, error -32 [ 36.368337][ T36] audit: type=1400 audit(1750583157.020:260): avc: denied { create } for pid=746 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.416106][ T36] audit: type=1326 audit(1750583157.040:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=747 comm="syz.2.147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79f638e929 code=0x0 [ 36.616140][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.797391][ T31] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 36.805567][ T31] usb 2-1: config 0 has no interface number 0 [ 36.811782][ T31] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 36.821767][ T31] usb 2-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 36.833993][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 36.852410][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.874897][ T31] usb 2-1: config 0 descriptor?? [ 36.904978][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.954204][ T760] KVM: debugfs: duplicate directory 760-8 [ 37.082509][ T31] usb 2-1: USB disconnect, device number 4 [ 37.216369][ T45] usb 4-1: USB disconnect, device number 6 [ 37.343383][ T775] SELinux: security_context_str_to_sid (RЄ u=sg&F*bs(|QX#)u$) failed with errno=-22 [ 37.389539][ T36] audit: type=1400 audit(1750583158.040:262): avc: denied { load_policy } for pid=781 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 37.415584][ T36] audit: type=1400 audit(1750583158.070:263): avc: denied { bind } for pid=784 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.528119][ T36] audit: type=1400 audit(1750583158.180:264): avc: denied { write } for pid=795 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.591601][ T36] audit: type=1400 audit(1750583158.240:265): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 37.611504][ T36] audit: type=1326 audit(1750583158.260:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=798 comm="syz.1.162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ec78e929 code=0x0 [ 37.807646][ T814] binder: Unknown parameter 'context' [ 37.816132][ T36] audit: type=1326 audit(1750583158.460:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=813 comm="syz.3.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9c98e929 code=0x7ffc0000 [ 38.216117][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.280059][ T863] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 38.376124][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 38.383561][ T31] usb 1-1: config 130 has an invalid interface number: 230 but max is 0 [ 38.392307][ T31] usb 1-1: config 130 has no interface number 0 [ 38.399101][ T31] usb 1-1: config 130 interface 230 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 38.410242][ T31] usb 1-1: config 130 interface 230 altsetting 0 endpoint 0x8 has an invalid bInterval 70, changing to 7 [ 38.421536][ T31] usb 1-1: config 130 interface 230 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 7 [ 38.432933][ T31] usb 1-1: config 130 interface 230 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 38.445481][ T31] usb 1-1: New USB device found, idVendor=0c45, idProduct=60af, bcdDevice=aa.4f [ 38.454895][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.463268][ T31] usb 1-1: Product: ㋪㖼䈍톆뒥鍬檾ⶦ쩹즯⍯憶쒙ᑯ립쳻郮䪚쌇Ꝗ⯠싨綌ꢐﳲ냞뷷眯ⶃ迗㡉ꄩ㕧ﴏ殟廠㴫ꈀ᯴盉颲쩩㱂쑲异鈱㥣툍缷ᶴ嬀솬͙೨阘㦈鮝媒䒥솶ᱯ빽᪝끿⏆ꁎ艓볰홓둠㼉帱艗⪵＂⇲洚׿簟⭺䀮襱ि䞒䱲 [ 38.491232][ T31] usb 1-1: Manufacturer: 좎礋匹섿퐶紼웪ᾅ倬㩀졏ℸ㜸⤂蚅ⴹ꙳睱⡂솣뼈엨怣棶ꚉ鸊罌㍅蝳ꫵ᭫ [ 38.503996][ T31] usb 1-1: SerialNumber: Ђ [ 38.646126][ T383] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.827172][ T383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.856135][ T383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.865888][ T383] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.896124][ T383] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.905195][ T383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.926980][ T383] usb 3-1: config 0 descriptor?? [ 38.980508][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 38.980526][ T36] audit: type=1400 audit(1750583159.630:278): avc: denied { ioctl } for pid=882 comm="syz.3.182" path="socket:[8247]" dev="sockfs" ino=8247 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.011305][ T883] 8021q: VLANs not supported on sit0 [ 39.075416][ T36] audit: type=1400 audit(1750583159.720:279): avc: denied { setopt } for pid=888 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.133133][ T873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.143676][ T873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.153045][ T873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.162086][ T873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.374234][ T383] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 39.382034][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 39.390827][ T383] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 39.498579][ T36] audit: type=1400 audit(1750583160.150:280): avc: denied { bind } for pid=895 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.499603][ T896] binder: Unknown parameter 'context' [ 39.517911][ T36] audit: type=1326 audit(1750583160.150:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=895 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ec78e929 code=0x7ffc0000 [ 39.546128][ T9] usb 4-1: device descriptor read/64, error -71 [ 39.546467][ T36] audit: type=1326 audit(1750583160.150:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=895 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ec78e929 code=0x7ffc0000 [ 39.577956][ T36] audit: type=1326 audit(1750583160.150:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=895 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f69ec78e929 code=0x7ffc0000 [ 39.601660][ T36] audit: type=1326 audit(1750583160.170:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=895 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ec78e929 code=0x7ffc0000 [ 39.624927][ T36] audit: type=1326 audit(1750583160.180:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=895 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ec78e929 code=0x7ffc0000 [ 39.700700][ T383] usb 3-1: USB disconnect, device number 7 [ 39.736684][ T903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 39.786120][ T9] usb 4-1: device descriptor read/64, error -71 [ 39.813592][ T908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 39.888760][ T912] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.914442][ T912] rust_binder: Read failure Err(EFAULT) in pid:174 [ 39.942802][ T36] audit: type=1400 audit(1750583160.590:286): avc: denied { connect } for pid=911 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.046119][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.176099][ T9] usb 4-1: device descriptor read/64, error -71 [ 40.416123][ T9] usb 4-1: device descriptor read/64, error -71 [ 40.416142][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 40.526218][ T9] usb usb4-port1: attempt power cycle [ 40.566310][ T45] usb 3-1: device descriptor read/64, error -71 [ 40.806132][ T45] usb 3-1: device descriptor read/64, error -71 [ 40.866129][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 40.887130][ T9] usb 4-1: device descriptor read/8, error -71 [ 40.896144][ T383] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.928060][ T31] usb 1-1: USB disconnect, device number 5 [ 41.017996][ T9] usb 4-1: device descriptor read/8, error -71 [ 41.041515][ T36] audit: type=1400 audit(1750583161.690:287): avc: denied { write } for pid=924 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.046131][ T383] usb 2-1: Using ep0 maxpacket: 8 [ 41.061288][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 41.075876][ T383] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.088935][ T383] usb 2-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 41.098184][ T383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.116340][ T383] usb 2-1: config 0 descriptor?? [ 41.159196][ T927] input: syz0 as /devices/virtual/input/input8 [ 41.216117][ T45] usb 3-1: device descriptor read/64, error -71 [ 41.276140][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 41.297062][ T9] usb 4-1: device descriptor read/8, error -71 [ 41.318881][ T933] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.326209][ T933] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.335417][ T933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42288 sclass=netlink_route_socket pid=933 comm=syz.0.199 [ 41.349023][ T933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:89 [ 41.349131][ T933] rust_binder: Write failure EINVAL in pid:89 [ 41.427137][ T9] usb 4-1: device descriptor read/8, error -71 [ 41.456133][ T45] usb 3-1: device descriptor read/64, error -71 [ 41.528717][ T383] wacom 0003:056A:003F.0004: unknown main item tag 0x0 [ 41.535680][ T383] wacom 0003:056A:003F.0004: unknown main item tag 0x0 [ 41.542596][ T383] wacom 0003:056A:003F.0004: unknown main item tag 0x0 [ 41.549662][ T9] usb usb4-port1: unable to enumerate USB device [ 41.556323][ T383] wacom 0003:056A:003F.0004: unknown main item tag 0x0 [ 41.563190][ T383] wacom 0003:056A:003F.0004: unknown main item tag 0x0 [ 41.570862][ T383] wacom 0003:056A:003F.0004: hidraw0: USB HID v0.07 Device [HID 056a:003f] on usb-dummy_hcd.1-1/input0 [ 41.576219][ T45] usb usb3-port1: attempt power cycle [ 41.792732][ T921] overlayfs: missing 'lowerdir' [ 41.799457][ T921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.809245][ T921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.936325][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 41.957176][ T45] usb 3-1: device descriptor read/8, error -71 [ 42.087208][ T45] usb 3-1: device descriptor read/8, error -71 [ 42.120409][ T383] usb 2-1: USB disconnect, device number 5 [ 42.198567][ T946] rust_binder: Error while translating object. [ 42.198600][ T946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.204804][ T946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 42.306123][ T31] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 42.336445][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 42.372003][ T45] usb 3-1: device descriptor read/8, error -71 [ 42.490894][ T955] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 42.507083][ T45] usb 3-1: device descriptor read/8, error -71 [ 42.514014][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 42.523658][ T31] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 42.531017][ T964] binder: Unknown parameter 'stats\global' [ 42.532810][ T31] usb 1-1: config 1 has no interface number 1 [ 42.544650][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 42.546862][ T955] kvm: user requested TSC rate below hardware speed [ 42.559545][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.573992][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.582299][ T31] usb 1-1: Product:   [ 42.588101][ T31] usb 1-1: SerialNumber: ࠾ [ 42.594584][ T31] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 42.604759][ T31] usb 1-1: no configuration chosen from 1 choice [ 42.616181][ T45] usb usb3-port1: unable to enumerate USB device [ 42.658667][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.708393][ T970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:185 [ 43.195064][ T975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 43.352355][ T982] cgroup: fork rejected by pids controller in /syz2 [ 43.772894][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 44.716147][ T972] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.716191][ T1219] Bluetooth: hci0: command 0x1003 tx timeout [ 44.742251][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 44.742267][ T36] audit: type=1400 audit(1750583165.390:294): avc: denied { accept } for pid=1220 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.879951][ T36] audit: type=1400 audit(1750583165.530:295): avc: denied { create } for pid=1235 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.982956][ T1237] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 45.077032][ T31] usb 1-1: USB disconnect, device number 6 [ 45.094544][ T36] audit: type=1326 audit(1750583165.750:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1238 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a918e929 code=0x7ffc0000 [ 45.120016][ T36] audit: type=1326 audit(1750583165.750:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1238 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a918e929 code=0x7ffc0000 [ 45.143746][ T36] audit: type=1326 audit(1750583165.770:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1238 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51a918e929 code=0x7ffc0000 [ 45.167097][ T36] audit: type=1326 audit(1750583165.770:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1238 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a918e929 code=0x7ffc0000 [ 45.190499][ T36] audit: type=1326 audit(1750583165.770:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1238 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a918e929 code=0x7ffc0000 [ 45.214599][ T36] audit: type=1326 audit(1750583165.770:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1238 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51a918e929 code=0x7ffc0000 [ 45.237770][ T36] audit: type=1326 audit(1750583165.770:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1238 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a918e929 code=0x7ffc0000 [ 45.261047][ T36] audit: type=1326 audit(1750583165.770:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1238 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a918e929 code=0x7ffc0000 [ 45.626132][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 45.738324][ T1253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.746846][ T1253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.777142][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.787278][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.796897][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 45.805935][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 45.813950][ T31] usb 1-1: SerialNumber: syz [ 45.836116][ T1219] Bluetooth: hci1: command 0x1003 tx timeout [ 45.836386][ T973] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 46.111881][ T31] usb 1-1: 0:2 : does not exist [ 46.121136][ T31] usb 1-1: USB disconnect, device number 7 [ 46.286517][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.262767][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 51.262787][ T36] audit: type=1400 audit(1750583171.910:310): avc: denied { watch watch_reads } for pid=1257 comm="syz.0.231" path="/file0" dev="tmpfs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.316121][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.353249][ T36] audit: type=1400 audit(1750583172.000:311): avc: denied { mounton } for pid=1277 comm="syz.3.237" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 51.396148][ T1287] netlink: 100 bytes leftover after parsing attributes in process `syz.0.240'. [ 51.556110][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 51.706095][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 51.712477][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.723567][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.733458][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 51.742628][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.751320][ T9] usb 3-1: config 0 descriptor?? [ 51.757249][ T9] hub 3-1:0.0: USB hub found [ 51.957174][ T36] audit: type=1400 audit(1750583172.610:312): avc: denied { ioctl } for pid=1270 comm="syz.2.235" path="socket:[8935]" dev="sockfs" ino=8935 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.982393][ T9] hub 3-1:0.0: 1 port detected [ 52.451005][ T36] audit: type=1400 audit(1750583173.100:313): avc: denied { bind } for pid=1307 comm="syz.0.247" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.471268][ T36] audit: type=1400 audit(1750583173.100:314): avc: denied { name_bind } for pid=1307 comm="syz.0.247" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 52.492280][ T36] audit: type=1400 audit(1750583173.100:315): avc: denied { node_bind } for pid=1307 comm="syz.0.247" saddr=fe80::aa src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 52.516883][ T1309] netlink: 36 bytes leftover after parsing attributes in process `syz.0.247'. [ 52.546120][ T1298] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 52.592155][ T9] hub 3-1:0.0: activate --> -90 [ 52.644987][ T36] audit: type=1400 audit(1750583173.290:316): avc: denied { append } for pid=1312 comm="syz.1.248" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.697148][ T1298] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 52.706306][ T1298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.714953][ T1298] usb 4-1: config 0 descriptor?? [ 53.122243][ T1298] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 53.132483][ T1298] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 53.142764][ T1298] asix 4-1:0.0: probe with driver asix failed with error -71 [ 53.151134][ T1298] usb 4-1: USB disconnect, device number 11 [ 53.276138][ T973] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.419281][ T36] audit: type=1400 audit(1750583174.070:317): avc: denied { setattr } for pid=1327 comm="syz.0.252" name="PINGv6" dev="sockfs" ino=9328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.443523][ T31] usb 3-1: USB disconnect, device number 12 [ 53.446120][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 53.457698][ T9] usb 3-1-port1: attempt power cycle [ 53.574649][ T36] audit: type=1400 audit(1750583174.220:318): avc: denied { mount } for pid=1331 comm="syz.0.254" name="/" dev="configfs" ino=2518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 53.597379][ T36] audit: type=1400 audit(1750583174.230:319): avc: denied { search } for pid=1331 comm="syz.0.254" name="/" dev="configfs" ino=2518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.916103][ T307] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 53.977301][ T1349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:350 [ 53.977883][ T1349] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.007942][ T1354] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 54.028312][ T1357] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 54.043898][ T1357] rust_binder: Write failure EINVAL in pid:358 [ 54.046250][ T307] usb 4-1: device descriptor read/64, error -71 [ 54.098873][ T1361] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.098894][ T1361] rust_binder: Read failure Err(EFAULT) in pid:362 [ 54.306146][ T307] usb 4-1: device descriptor read/64, error -71 [ 54.356096][ T45] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 54.531164][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.553684][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.573790][ T45] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 54.596128][ T307] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 54.603770][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.618008][ T45] usb 3-1: config 0 descriptor?? [ 54.736116][ T307] usb 4-1: device descriptor read/64, error -71 [ 54.976129][ T307] usb 4-1: device descriptor read/64, error -71 [ 55.027028][ T45] chicony 0003:04F2:1236.0005: item fetching failed at offset 0/1 [ 55.035067][ T45] chicony 0003:04F2:1236.0005: Chicony hid parse failed: -22 [ 55.042719][ T45] chicony 0003:04F2:1236.0005: probe with driver chicony failed with error -22 [ 55.086159][ T307] usb usb4-port1: attempt power cycle [ 55.426119][ T307] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 55.447256][ T307] usb 4-1: device descriptor read/8, error -71 [ 55.577156][ T307] usb 4-1: device descriptor read/8, error -71 [ 55.637102][ T1445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:213 [ 55.637225][ T1445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:213 [ 55.707437][ T1457] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.826430][ T307] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 55.857898][ T307] usb 4-1: device descriptor read/8, error -71 [ 55.997196][ T307] usb 4-1: device descriptor read/8, error -71 [ 56.006098][ T350] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 56.106241][ T307] usb usb4-port1: unable to enumerate USB device [ 56.166085][ T350] usb 2-1: Invalid ep0 maxpacket: 64 [ 56.306121][ T350] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 56.334126][ T1498] netlink: 'syz.0.303': attribute type 11 has an invalid length. [ 56.456217][ T350] usb 2-1: Invalid ep0 maxpacket: 64 [ 56.461674][ T350] usb usb2-port1: attempt power cycle [ 56.707885][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 56.707899][ T36] audit: type=1400 audit(1750583177.360:336): avc: denied { setopt } for pid=1503 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.804497][ T36] audit: type=1400 audit(1750583177.450:337): avc: denied { append } for pid=1505 comm="syz.3.306" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.827382][ T350] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 56.846438][ T350] usb 2-1: Invalid ep0 maxpacket: 64 [ 56.857688][ T36] audit: type=1400 audit(1750583177.510:338): avc: denied { read } for pid=1505 comm="syz.3.306" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 56.881818][ T36] audit: type=1400 audit(1750583177.510:339): avc: denied { open } for pid=1505 comm="syz.3.306" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 56.906434][ T36] audit: type=1326 audit(1750583177.510:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1505 comm="syz.3.306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d9c98e929 code=0x0 [ 56.996108][ T350] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 57.016455][ T350] usb 2-1: Invalid ep0 maxpacket: 64 [ 57.021891][ T350] usb usb2-port1: unable to enumerate USB device [ 57.108137][ T350] usb 3-1: USB disconnect, device number 17 [ 57.142670][ T36] audit: type=1400 audit(1750583177.790:341): avc: granted { setsecparam } for pid=1521 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 57.688944][ T1531] rust_binder: Error while translating object. [ 57.688971][ T1531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.695174][ T1531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:303 [ 57.725033][ T1532] overlayfs: failed to resolve './file0': -2 [ 57.743385][ T36] audit: type=1400 audit(1750583178.390:342): avc: denied { connect } for pid=1537 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.817633][ T36] audit: type=1400 audit(1750583178.470:343): avc: denied { bind } for pid=1540 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.817762][ T1541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 57.837592][ T1541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:311 [ 57.864471][ T1544] lo: entered promiscuous mode [ 57.883098][ T1544] lo: left promiscuous mode [ 58.000733][ T36] audit: type=1400 audit(1750583178.650:344): avc: denied { create } for pid=1550 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 58.020419][ T36] audit: type=1400 audit(1750583178.650:345): avc: denied { sys_admin } for pid=1550 comm="syz.3.320" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 58.752464][ T1605] SELinux: security_context_str_to_sid () failed with errno=-22 [ 58.798016][ T1607] netlink: 'syz.3.338': attribute type 8 has an invalid length. [ 59.074619][ T1621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:232 [ 59.266102][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 59.416114][ T45] usb 3-1: device descriptor read/64, error -71 [ 59.465859][ T1644] netlink: 3 bytes leftover after parsing attributes in process `syz.0.354'. [ 59.656128][ T45] usb 3-1: device descriptor read/64, error -71 [ 59.896143][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 60.036131][ T45] usb 3-1: device descriptor read/64, error -71 [ 60.154367][ T1690] tmpfs: Bad value for 'nr_inodes' [ 60.276111][ T45] usb 3-1: device descriptor read/64, error -71 [ 60.386274][ T45] usb usb3-port1: attempt power cycle [ 60.726107][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 60.748087][ T45] usb 3-1: device descriptor read/8, error -71 [ 60.878290][ T45] usb 3-1: device descriptor read/8, error -71 [ 61.030393][ T1700] fuse: Bad value for 'fd' [ 61.116152][ T45] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 61.138855][ T45] usb 3-1: device descriptor read/8, error -71 [ 61.267993][ T45] usb 3-1: device descriptor read/8, error -71 [ 61.376222][ T45] usb usb3-port1: unable to enumerate USB device [ 62.020113][ T36] kauditd_printk_skb: 529 callbacks suppressed [ 62.020129][ T36] audit: type=1400 audit(1750583182.670:875): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.065132][ T36] audit: type=1400 audit(1750583182.700:876): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.116096][ T36] audit: type=1400 audit(1750583182.700:877): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.142318][ T36] audit: type=1400 audit(1750583182.750:878): avc: denied { execmem } for pid=1722 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.164971][ T36] audit: type=1400 audit(1750583182.820:879): avc: denied { create } for pid=1722 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.184380][ T36] audit: type=1400 audit(1750583182.820:880): avc: denied { listen } for pid=1722 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.203802][ T36] audit: type=1400 audit(1750583182.820:881): avc: denied { accept } for pid=1722 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.223431][ T36] audit: type=1400 audit(1750583182.820:882): avc: denied { create } for pid=1722 comm="syz.2.381" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.245533][ T36] audit: type=1400 audit(1750583182.820:883): avc: denied { ioctl } for pid=1722 comm="syz.2.381" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11570 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.246382][ T1723] binder: Unknown parameter '' [ 62.284864][ T36] audit: type=1400 audit(1750583182.820:884): avc: denied { create } for pid=1722 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.346649][ T1728] 9pnet_fd: Insufficient options for proto=fd [ 62.407598][ T1735] af_packet: tpacket_rcv: packet too big, clamped from 14 to 4294967286. macoff=82 [ 62.535879][ T1751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.390'. [ 62.560190][ T305] tipc: Subscription rejected, illegal request [ 62.942432][ T1791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=1791 comm=syz.1.404 [ 62.962406][ T1783] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 62.962432][ T1783] rust_binder: Error in use_page_slow: EBUSY [ 62.972861][ T1783] rust_binder: use_range failure EBUSY [ 62.978905][ T1783] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 62.984393][ T1783] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 62.992073][ T1783] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 63.001430][ T1783] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:398 [ 63.307033][ T1797] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.331904][ T1797] rust_binder: Error in use_page_slow: ESRCH [ 63.339425][ T1797] rust_binder: use_range failure ESRCH [ 63.345445][ T1797] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 63.352033][ T1797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 63.360782][ T1797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:404 [ 64.297753][ T1851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 64.356754][ T1851] tipc: Enabling of bearer rejected, failed to enable media [ 64.941597][ T1877] fuse: Unknown parameter 'opUus:R*wĴ;˲d>h'ɹ0# }`9q0x0000000000000004' [ 65.360805][ T1879] binder: Unknown parameter 'statZglob:' [ 65.413804][ T1881] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 65.532006][ T1890] overlayfs: failed to clone upperpath [ 65.635403][ T1899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.444'. [ 65.650519][ T1899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.444'. [ 65.701915][ T1899] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 65.714672][ T1899] overlayfs: missing 'lowerdir' [ 65.918752][ T1926] wg2: entered promiscuous mode [ 65.924108][ T1926] wg2: entered allmulticast mode [ 66.200636][ T1961] netlink: 116 bytes leftover after parsing attributes in process `syz.1.462'. [ 66.911309][ T1981] netlink: 796 bytes leftover after parsing attributes in process `syz.0.472'. [ 66.920828][ T1981] netlink: 116 bytes leftover after parsing attributes in process `syz.0.472'. [ 66.953077][ T1983] 9pnet_fd: Insufficient options for proto=fd [ 67.150007][ T36] kauditd_printk_skb: 1855 callbacks suppressed [ 67.150026][ T36] audit: type=1400 audit(1750583187.720:2740): avc: denied { create } for pid=1995 comm="syz.1.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.178102][ T36] audit: type=1400 audit(1750583187.738:2741): avc: denied { write } for pid=1995 comm="syz.1.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.224661][ T36] audit: type=1400 audit(1750583187.795:2742): avc: denied { create } for pid=1997 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.247448][ T36] audit: type=1400 audit(1750583187.813:2743): avc: denied { create } for pid=1997 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.269136][ T36] audit: type=1400 audit(1750583187.813:2744): avc: denied { write } for pid=1997 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.290478][ T36] audit: type=1400 audit(1750583187.813:2745): avc: denied { read } for pid=1997 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.292588][ T1998] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 67.310771][ T36] audit: type=1400 audit(1750583187.813:2746): avc: denied { read } for pid=1997 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.338941][ T36] audit: type=1400 audit(1750583187.832:2747): avc: denied { create } for pid=1997 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.360206][ T36] audit: type=1400 audit(1750583187.851:2748): avc: denied { write } for pid=1997 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.393692][ T36] audit: type=1400 audit(1750583187.954:2749): avc: denied { create } for pid=2001 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.241286][ T2039] fuse: Bad value for 'user_id' [ 68.248018][ T2039] fuse: Bad value for 'user_id' [ 68.649468][ T2088] overlayfs: failed to clone upperpath [ 68.931587][ T2100] netlink: 'syz.1.516': attribute type 4 has an invalid length. [ 68.939325][ T2100] netlink: 17 bytes leftover after parsing attributes in process `syz.1.516'. [ 69.476607][ T2117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.522'. [ 69.611378][ T2124] rust_binder: Write failure EFAULT in pid:443 [ 69.801848][ T2138] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 70.024292][ T2156] tmpfs: Unknown parameter ' [ 70.024292][ T2156] ' [ 70.363595][ T2188] overlay: Unknown parameter 'euid<00000000000000000000' [ 70.850063][ T2220] fuse: Bad value for 'fd' [ 71.071191][ T2233] process 'syz.2.562' launched '/dev/fd/7' with NULL argv: empty string added [ 71.188294][ T2236] netlink: 1 bytes leftover after parsing attributes in process `syz.1.561'. [ 71.233383][ T2237] netlink: 'syz.1.561': attribute type 4 has an invalid length. [ 71.253564][ T2236] netlink: 'syz.1.561': attribute type 4 has an invalid length. [ 71.278186][ T2237] netlink: 'syz.1.561': attribute type 4 has an invalid length. [ 71.347843][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 71.426135][ T2249] 9pnet_fd: Insufficient options for proto=fd [ 71.489603][ T2250] netlink: 312 bytes leftover after parsing attributes in process `syz.1.566'. [ 71.497473][ T9] usb 3-1: device descriptor read/64, error -71 [ 71.754049][ T9] usb 3-1: device descriptor read/64, error -71 [ 72.000876][ T2257] vlan0: mtu greater than device maximum [ 72.011097][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 72.163252][ T2268] overlayfs: failed to clone upperpath [ 72.171506][ T9] usb 3-1: device descriptor read/64, error -71 [ 72.427526][ T9] usb 3-1: device descriptor read/64, error -71 [ 72.545650][ T9] usb usb3-port1: attempt power cycle [ 72.551116][ T36] kauditd_printk_skb: 514 callbacks suppressed [ 72.551133][ T36] audit: type=1400 audit(1750615960.776:3264): avc: denied { ioctl } for pid=2232 comm="syz.2.562" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.572104][ T2284] netlink: 'syz.1.580': attribute type 30 has an invalid length. [ 72.583526][ T36] audit: type=1400 audit(1750615960.804:3265): avc: denied { ioctl } for pid=2232 comm="syz.2.562" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.614858][ T36] audit: type=1400 audit(1750615960.804:3266): avc: denied { ioctl } for pid=2232 comm="syz.2.562" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.634650][ T2286] netlink: 22 bytes leftover after parsing attributes in process `syz.1.581'. [ 72.639803][ T36] audit: type=1400 audit(1750615960.841:3267): avc: denied { create } for pid=2285 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.669719][ T36] audit: type=1400 audit(1750615960.841:3268): avc: denied { write } for pid=2285 comm="syz.1.581" path="socket:[13120]" dev="sockfs" ino=13120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.693818][ T36] audit: type=1400 audit(1750615960.841:3269): avc: denied { write } for pid=2285 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.713935][ T36] audit: type=1400 audit(1750615960.841:3270): avc: denied { nlmsg_read } for pid=2285 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.734592][ T36] audit: type=1400 audit(1750615960.869:3271): avc: denied { create } for pid=2285 comm="syz.1.581" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.755287][ T36] audit: type=1400 audit(1750615960.869:3272): avc: denied { link } for pid=2285 comm="syz.1.581" name="file1" dev="tmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.777598][ T36] audit: type=1400 audit(1750615960.888:3273): avc: denied { ioctl } for pid=2232 comm="syz.2.562" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.951382][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 72.976321][ T9] usb 3-1: device descriptor read/8, error -71 [ 73.114604][ T9] usb 3-1: device descriptor read/8, error -71 [ 73.276436][ T2297] overlayfs: failed to clone upperpath [ 73.346025][ T2302] overlayfs: failed to clone upperpath [ 73.368303][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 73.392237][ T9] usb 3-1: device descriptor read/8, error -71 [ 73.531459][ T9] usb 3-1: device descriptor read/8, error -71 [ 73.571990][ T2325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 73.657954][ T9] usb usb3-port1: unable to enumerate USB device [ 73.879712][ T2340] bpf: Bad value for 'uid' [ 73.929444][ T2342] tipc: Started in network mode [ 73.934387][ T2342] tipc: Node identity 7f000001, cluster identity 4711 [ 73.941432][ T2342] tipc: Enabled bearer , priority 10 [ 73.986657][ T2344] overlayfs: failed to clone upperpath [ 74.552948][ T2396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2396 comm=syz.1.622 [ 74.704640][ T307] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 74.868425][ T307] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.879956][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 74.890828][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 74.900590][ T307] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.913468][ T307] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.922527][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.932264][ T307] usb 3-1: config 0 descriptor?? [ 74.976833][ T2399] fuse: Bad value for 'fd' [ 74.983588][ T2399] fuse: Bad value for 'group_id' [ 74.988562][ T2399] fuse: Bad value for 'group_id' [ 74.996061][ T2399] overlayfs: failed to clone upperpath [ 75.132245][ T31] tipc: Node number set to 2130706433 [ 75.166665][ T307] usbhid 3-1:0.0: can't add hid device: -71 [ 75.186684][ T307] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 75.208886][ T307] usb 3-1: USB disconnect, device number 26 [ 75.324620][ T2414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:486 [ 75.844991][ T2448] netlink: 104 bytes leftover after parsing attributes in process `syz.3.641'. [ 76.645869][ T2493] rust_binder: Failed to allocate buffer. len:4208, is_oneway:true [ 76.765368][ T2506] SELinux: Context system_u:object_r:dmesg_exec_t:s0 is not valid (left unmapped). [ 76.792722][ T2502] netlink: 128 bytes leftover after parsing attributes in process `syz.3.662'. [ 77.162536][ T2524] rust_binder: Error in use_page_slow: ESRCH [ 77.162559][ T2524] rust_binder: use_range failure ESRCH [ 77.195948][ T2514] rust_binder: Error in use_page_slow: ESRCH [ 77.201469][ T2514] rust_binder: use_range failure ESRCH [ 77.229132][ T2524] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 77.234670][ T2524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 77.240011][ T2514] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 77.267475][ T2524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:512 [ 77.317015][ T2514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 77.366590][ T2514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:512 [ 77.948705][ T36] kauditd_printk_skb: 888 callbacks suppressed [ 77.948723][ T36] audit: type=1400 audit(1750615965.827:4162): avc: denied { map } for pid=2558 comm="syz.2.682" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.028943][ T36] audit: type=1400 audit(1750615965.827:4163): avc: denied { read } for pid=2558 comm="syz.2.682" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.072167][ T36] audit: type=1400 audit(1750615965.874:4164): avc: denied { read } for pid=2558 comm="syz.2.682" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.135183][ T36] audit: type=1400 audit(1750615965.874:4165): avc: denied { read open } for pid=2558 comm="syz.2.682" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.168457][ T36] audit: type=1400 audit(1750615965.874:4166): avc: denied { ioctl } for pid=2558 comm="syz.2.682" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.212303][ T36] audit: type=1400 audit(1750615965.874:4167): avc: denied { call } for pid=2558 comm="syz.2.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 78.239344][ T36] audit: type=1400 audit(1750615965.874:4168): avc: denied { ioctl } for pid=2558 comm="syz.2.682" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.296246][ T36] audit: type=1400 audit(1750615965.892:4169): avc: denied { create } for pid=2512 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.351447][ T36] audit: type=1400 audit(1750615965.902:4170): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.409198][ T36] audit: type=1400 audit(1750615965.902:4171): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.580862][ T350] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 78.747154][ T2587] netlink: 'syz.1.691': attribute type 32 has an invalid length. [ 78.770033][ T350] usb 3-1: unable to get BOS descriptor or descriptor too short [ 78.779122][ T350] usb 3-1: not running at top speed; connect to a high speed hub [ 78.797271][ T350] usb 3-1: config 1 has an invalid interface number: 138 but max is 0 [ 78.805555][ T350] usb 3-1: config 1 has no interface number 0 [ 78.816287][ T350] usb 3-1: config 1 interface 138 has no altsetting 0 [ 78.838299][ T350] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 78.849042][ T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.859560][ T350] usb 3-1: Product: syz [ 78.864483][ T350] usb 3-1: Manufacturer: syz [ 78.869109][ T350] usb 3-1: SerialNumber: syz [ 79.096278][ T2564] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2564 comm=syz.2.684 [ 79.111261][ T2564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.113735][ T2564] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 79.126538][ T2564] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 79.143213][ T2564] rust_binder: Write failure EINVAL in pid:523 [ 79.153181][ T350] usb 3-1: USB disconnect, device number 27 [ 79.366642][ T1275] udevd[1275]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.138/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.442685][ T2607] overlayfs: failed to clone upperpath [ 80.179547][ T2676] overlayfs: failed to resolve './file1': -2 [ 80.208489][ T2680] overlayfs: failed to resolve './file1': -2 [ 80.420677][ T2690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=2690 comm=syz.0.723 [ 80.433510][ T2690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=2690 comm=syz.0.723 [ 80.446276][ T2690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=2690 comm=syz.0.723 [ 80.459568][ T2690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=2690 comm=syz.0.723 [ 80.971185][ T2698] overlayfs: missing 'workdir' [ 82.153987][ T2792] overlayfs: failed to clone upperpath [ 82.839491][ T2848] overlayfs: failed to clone lowerpath [ 83.409499][ T36] kauditd_printk_skb: 471 callbacks suppressed [ 83.409544][ T36] audit: type=1400 audit(1750615970.934:4643): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 83.441664][ T36] audit: type=1400 audit(1750615970.962:4644): avc: denied { create } for pid=2893 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.469505][ T36] audit: type=1400 audit(1750615970.962:4645): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.503842][ T36] audit: type=1400 audit(1750615970.962:4646): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.552176][ T36] audit: type=1400 audit(1750615970.962:4647): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.603841][ T36] audit: type=1400 audit(1750615970.981:4648): avc: denied { setopt } for pid=2893 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.625066][ T36] audit: type=1400 audit(1750615970.981:4649): avc: denied { create } for pid=2893 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.644705][ T36] audit: type=1400 audit(1750615970.981:4650): avc: denied { write } for pid=2893 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.664086][ T36] audit: type=1400 audit(1750615970.981:4651): avc: denied { mount } for pid=2893 comm="syz.3.797" name="/" dev="ramfs" ino=15894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 83.688235][ T36] audit: type=1400 audit(1750615971.056:4652): avc: denied { read } for pid=2895 comm="syz.2.798" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.715091][ T2902] rust_binder: Error while translating object. [ 83.715121][ T2902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 83.721422][ T2902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:530 [ 83.772048][ T2908] fuse: Unknown parameter 'f' [ 83.799713][ T2908] xfrm0: mtu less than device minimum [ 83.813617][ T2910] rust_binder: Write failure EFAULT in pid:534 [ 84.385802][ T2966] binder: Bad value for 'max' [ 85.053136][ T307] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 85.099872][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.107022][ T3000] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.114099][ T3000] bridge_slave_0: entered allmulticast mode [ 85.121490][ T3000] bridge_slave_0: entered promiscuous mode [ 85.129258][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.136341][ T3000] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.143722][ T3000] bridge_slave_1: entered allmulticast mode [ 85.150014][ T3000] bridge_slave_1: entered promiscuous mode [ 85.156206][ T292] bridge_slave_1: left allmulticast mode [ 85.162088][ T292] bridge_slave_1: left promiscuous mode [ 85.167727][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.175599][ T292] bridge_slave_0: left allmulticast mode [ 85.181257][ T292] bridge_slave_0: left promiscuous mode [ 85.186989][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.224184][ T307] usb 3-1: Using ep0 maxpacket: 32 [ 85.231694][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.242683][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.252475][ T307] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 85.261618][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.272315][ T307] usb 3-1: config 0 descriptor?? [ 85.281184][ T307] hub 3-1:0.0: USB hub found [ 85.303315][ T292] tipc: Disabling bearer [ 85.308720][ T292] tipc: Left network mode [ 85.315583][ T292] veth1_macvtap: left promiscuous mode [ 85.321201][ T292] veth0_vlan: left promiscuous mode [ 85.434427][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.441545][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.448929][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.455971][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.496572][ T307] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 85.515291][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.522658][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.537525][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.544684][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.559215][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.566321][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.678310][ T3000] veth0_vlan: entered promiscuous mode [ 85.727585][ T3000] veth1_macvtap: entered promiscuous mode [ 86.598921][ T3038] rust_binder: Write failure EINVAL in pid:13 [ 87.650956][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.862663][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.873214][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.892099][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.907522][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.919361][ T9] usb 5-1: Product: В [ 87.923477][ T9] usb 5-1: Manufacturer: ࠊ [ 87.939624][ T9] usb 5-1: SerialNumber: syz [ 88.123731][ T307] usbhid 3-1:0.0: can't add hid device: -71 [ 88.146665][ T307] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 88.187706][ T307] usb 3-1: USB disconnect, device number 28 [ 88.313704][ T3085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.860'. [ 88.597973][ T3058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.611129][ T3058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.634571][ T9] usb 5-1: 0:2 : does not exist [ 88.762221][ T3107] SELinux: security_context_str_to_sid () failed with errno=-22 [ 88.777175][ T36] kauditd_printk_skb: 755 callbacks suppressed [ 88.777193][ T36] audit: type=1400 audit(1750615975.948:5408): avc: denied { setopt } for pid=3104 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.825177][ T36] audit: type=1400 audit(1750615975.995:5409): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.853148][ T3058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.880398][ T36] audit: type=1400 audit(1750615975.995:5410): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.882826][ T3058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.951401][ T36] audit: type=1400 audit(1750615975.995:5411): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.964215][ T3058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.005790][ T3058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.015514][ T36] audit: type=1400 audit(1750615975.995:5412): avc: denied { create } for pid=3057 comm="syz.4.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.060008][ T36] audit: type=1400 audit(1750615976.023:5413): avc: denied { read write } for pid=3057 comm="syz.4.852" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.083662][ T3110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.102216][ T3110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.110576][ T36] audit: type=1400 audit(1750615976.023:5414): avc: denied { read write open } for pid=3057 comm="syz.4.852" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.139109][ T36] audit: type=1400 audit(1750615976.023:5415): avc: denied { ioctl } for pid=3057 comm="syz.4.852" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.165245][ T36] audit: type=1400 audit(1750615976.023:5416): avc: denied { ioctl } for pid=3057 comm="syz.4.852" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.190238][ T36] audit: type=1400 audit(1750615976.116:5417): avc: denied { read write } for pid=3057 comm="syz.4.852" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.344327][ T3117] rust_binder: Got transaction with invalid offset. [ 89.344369][ T3117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.351215][ T3117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:582 [ 89.558926][ T3138] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 89.775947][ T3145] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 90.593510][ T9] usb 5-1: USB disconnect, device number 2 [ 90.676411][ T31] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 90.849461][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.861047][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 90.871959][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 90.881737][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.894634][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.903721][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.913388][ T31] usb 3-1: config 0 descriptor?? [ 91.050588][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.221625][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 91.231240][ T9] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.253886][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 91.265231][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.40 [ 91.277784][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.285841][ T9] usb 5-1: Product: ᠁ [ 91.290270][ T9] usb 5-1: Manufacturer: ␉ [ 91.294910][ T9] usb 5-1: SerialNumber: 㑵滲釧䭆뉔ヿᦄ㈗Ԏ㗿蚩౪龫䓙䓼숰톥馏喋횯○U詳荨넯໳工㛻殞拨嵃娪깚㒸㼕㱀먜봧ᚷ夓抾䤥騽飮䋲䵦懓䌬焌ᕛ災ᚯ㦯呆Ҿ聧銺巄쬳ଌ䖦䑍 [ 91.352443][ T31] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 91.365235][ T31] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 91.394226][ T31] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 91.557750][ T3172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.580993][ T3172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.605042][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 91.611115][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 91.642610][ T9] usb 5-1: USB disconnect, device number 3 [ 91.917485][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.933681][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.976163][ T9] usb 3-1: USB disconnect, device number 29 [ 92.276479][ T3239] binder: Bad value for 'max' [ 92.305794][ T3240] 9pnet_fd: Insufficient options for proto=fd [ 92.659980][ T3262] rust_binder: Error while translating object. [ 92.660008][ T3262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.671525][ T3262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:609 [ 92.806860][ T3272] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 92.816925][ T3272] rust_binder: Error while translating object. [ 92.833602][ T3272] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.840477][ T3272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:613 [ 92.964104][ T3285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.973597][ T3285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:617 [ 93.080908][ T3291] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 93.165571][ T3295] 9pnet_fd: Insufficient options for proto=fd [ 93.414411][ T3307] rust_binder: Error in use_page_slow: ESRCH [ 93.414435][ T3307] rust_binder: use_range failure ESRCH [ 93.420566][ T3307] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 93.426085][ T3307] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 93.434190][ T3307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:623 [ 94.133841][ T36] kauditd_printk_skb: 504 callbacks suppressed [ 94.133861][ T36] audit: type=1400 audit(1750615980.962:5922): avc: denied { create } for pid=3369 comm="syz.1.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.175296][ T36] audit: type=1400 audit(1750615980.962:5923): avc: denied { bind } for pid=3369 comm="syz.1.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.196037][ T36] audit: type=1400 audit(1750615980.962:5924): avc: denied { create } for pid=3369 comm="syz.1.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.216051][ T36] audit: type=1400 audit(1750615980.971:5925): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.242766][ T3375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.243070][ T3375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.246379][ T36] audit: type=1400 audit(1750615980.971:5926): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.285202][ T36] audit: type=1400 audit(1750615980.980:5927): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.312951][ T36] audit: type=1400 audit(1750615981.046:5928): avc: denied { create } for pid=3374 comm="syz.2.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.333833][ T36] audit: type=1400 audit(1750615981.055:5929): avc: denied { write } for pid=3374 comm="syz.2.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.366625][ T36] audit: type=1400 audit(1750615981.065:5930): avc: denied { read } for pid=3374 comm="syz.2.954" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.390664][ T36] audit: type=1400 audit(1750615981.065:5931): avc: denied { read open } for pid=3374 comm="syz.2.954" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.433856][ T3384] tipc: Enabling of bearer rejected, failed to enable media [ 94.631938][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 94.754745][ T3409] netlink: 'syz.1.968': attribute type 4 has an invalid length. [ 94.772027][ T3409] netlink: 'syz.1.968': attribute type 4 has an invalid length. [ 94.790932][ T3409] netlink: 168 bytes leftover after parsing attributes in process `syz.1.968'. [ 94.819853][ T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 94.833514][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.842588][ T10] usb 3-1: Product: syz [ 94.846815][ T10] usb 3-1: Manufacturer: syz [ 94.851443][ T10] usb 3-1: SerialNumber: syz [ 94.872996][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 94.879344][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 95.550915][ T3447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 95.925963][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.096547][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 96.104495][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.115968][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.125788][ T10] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 96.134997][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.144963][ T10] usb 5-1: config 0 descriptor?? [ 96.307157][ T3473] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 96.382738][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 96.395906][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 96.418256][ T10] usb 5-1: USB disconnect, device number 4 [ 97.061537][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.141881][ T3492] overlayfs: failed to clone upperpath [ 97.229746][ T45] usb 5-1: device descriptor read/64, error -71 [ 97.486316][ T45] usb 5-1: device descriptor read/64, error -71 [ 97.574497][ T9] r8152-cfgselector 3-1: USB disconnect, device number 30 [ 97.742923][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 97.892588][ T45] usb 5-1: device descriptor read/64, error -71 [ 97.936151][ T3516] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 97.946223][ T3516] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 97.978547][ T3519] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1005'. [ 98.160261][ T45] usb 5-1: device descriptor read/64, error -71 [ 98.277561][ T45] usb usb5-port1: attempt power cycle [ 98.640937][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 98.672905][ T45] usb 5-1: device descriptor read/8, error -71 [ 98.746003][ T3531] 9pnet_fd: Insufficient options for proto=fd [ 98.816394][ T45] usb 5-1: device descriptor read/8, error -71 [ 99.089928][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 99.113553][ T45] usb 5-1: device descriptor read/8, error -71 [ 99.252256][ T45] usb 5-1: device descriptor read/8, error -71 [ 99.367939][ T45] usb usb5-port1: unable to enumerate USB device [ 99.637175][ T36] kauditd_printk_skb: 413 callbacks suppressed [ 99.637194][ T36] audit: type=1400 audit(1750615986.116:6345): avc: denied { create } for pid=3555 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.664691][ T36] audit: type=1400 audit(1750615986.116:6346): avc: denied { write } for pid=3555 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.701054][ T36] audit: type=1400 audit(1750615986.172:6347): avc: denied { mount } for pid=3557 comm="syz.0.1019" name="/" dev="ramfs" ino=18601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 99.723462][ T36] audit: type=1400 audit(1750615986.172:6348): avc: denied { execute } for pid=3557 comm="syz.0.1019" name="file0" dev="ramfs" ino=18602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 99.748019][ T36] audit: type=1400 audit(1750615986.172:6349): avc: denied { execute_no_trans } for pid=3557 comm="syz.0.1019" path="/file0" dev="ramfs" ino=18602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 99.796749][ T36] audit: type=1400 audit(1750615986.265:6350): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.820896][ T36] audit: type=1400 audit(1750615986.265:6351): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.861129][ T36] audit: type=1400 audit(1750615986.265:6352): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.895422][ T36] audit: type=1400 audit(1750615986.312:6353): avc: denied { read } for pid=3561 comm="syz.2.1021" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.932865][ T36] audit: type=1400 audit(1750615986.312:6354): avc: denied { read open } for pid=3561 comm="syz.2.1021" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.179262][ T3582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.179567][ T3582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.210785][ T3582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.387800][ T3596] tipc: Can't bind to reserved service type 1 [ 100.702764][ T3610] @: renamed from vlan0 (while UP) [ 101.111506][ T3612] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1039'. [ 101.947626][ T3656] fuse: Unknown parameter 'f' [ 102.189958][ T3669] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 102.319110][ T3676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 102.729683][ T3701] binder: Bad value for 'stats' [ 103.367230][ T3714] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1075'. [ 103.379115][ T3714] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3714 comm=syz.0.1075 [ 103.926234][ T3748] overlayfs: failed to clone upperpath [ 105.009027][ T36] kauditd_printk_skb: 479 callbacks suppressed [ 105.009046][ T36] audit: type=1400 audit(1750615991.130:6834): avc: denied { mount } for pid=3779 comm="syz.0.1098" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 105.076633][ T36] audit: type=1400 audit(1750615991.195:6835): avc: denied { create } for pid=3782 comm="syz.0.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.119404][ T36] audit: type=1400 audit(1750615991.195:6836): avc: denied { write } for pid=3782 comm="syz.0.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.152689][ T36] audit: type=1400 audit(1750615991.270:6837): avc: denied { mounton } for pid=3786 comm="syz.0.1101" path="/326/file0" dev="tmpfs" ino=1775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.197320][ T36] audit: type=1400 audit(1750615991.270:6838): avc: denied { mount } for pid=3786 comm="syz.0.1101" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 105.246993][ T36] audit: type=1400 audit(1750615991.270:6839): avc: denied { mounton } for pid=3786 comm="syz.0.1101" path="/326/file0" dev="tmpfs" ino=1775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.271097][ T36] audit: type=1400 audit(1750615991.270:6840): avc: denied { remount } for pid=3786 comm="syz.0.1101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.296971][ T36] audit: type=1400 audit(1750615991.270:6841): avc: denied { mounton } for pid=3786 comm="syz.0.1101" path="/326/file0" dev="tmpfs" ino=1775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.323264][ T3794] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.338371][ T3794] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 105.470529][ T3810] overlayfs: failed to clone upperpath [ 105.593099][ T3818] binder: Bad value for 'stats' [ 105.820290][ T3835] overlayfs: failed to clone upperpath [ 105.883102][ T3841] rust_binder: Error while translating object. [ 105.883144][ T3841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 105.896582][ T3841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 106.160685][ T3858] raw_sendmsg: syz.0.1125 forgot to set AF_INET. Fix it! [ 106.414145][ T292] tipc: Subscription rejected, illegal request [ 106.762009][ T3897] binder: Unknown parameter '01777777777777777777777' [ 106.971917][ T3909] overlayfs: failed to resolve './file1': -2 [ 107.139939][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 107.206789][ T3921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 107.206823][ T3921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:730 [ 107.322846][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 107.355862][ T31] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 107.365146][ T31] usb 5-1: config 0 has no interface number 0 [ 107.372394][ T31] usb 5-1: config 0 interface 184 has no altsetting 0 [ 107.384786][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 107.403570][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.425197][ T31] usb 5-1: Product: syz [ 107.432144][ T31] usb 5-1: Manufacturer: syz [ 107.440408][ T31] usb 5-1: SerialNumber: syz [ 107.454894][ T31] usb 5-1: config 0 descriptor?? [ 107.470566][ T31] smsc75xx v1.0.0 [ 107.986994][ T3943] kvm: kvm [3942]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 108.000000][ T3943] rust_binder: Error while translating object. [ 108.000059][ T3943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 108.016632][ T3943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:736 [ 108.111285][ T3945] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.121624][ T3945] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 108.445676][ T3960] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1161'. [ 108.472585][ T3961] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1161'. [ 108.898128][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 108.926951][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 108.946252][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 108.965454][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 108.975661][ T3969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:758 [ 108.976380][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 109.003602][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 109.014094][ T31] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 109.042855][ T31] usb 5-1: USB disconnect, device number 9 [ 109.226535][ T3987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:763 [ 109.676856][ T4002] binder: Unknown parameter 'fscontext?}' [ 110.380794][ T36] kauditd_printk_skb: 1119 callbacks suppressed [ 110.380810][ T36] audit: type=1400 audit(1750615996.162:7954): avc: denied { create } for pid=4042 comm="syz.2.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.424293][ T36] audit: type=1400 audit(1750615996.190:7955): avc: denied { read } for pid=4042 comm="syz.2.1191" path="socket:[19426]" dev="sockfs" ino=19426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.473792][ T36] audit: type=1400 audit(1750615996.190:7956): avc: denied { read } for pid=4042 comm="syz.2.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.497886][ T36] audit: type=1400 audit(1750615996.274:7957): avc: denied { create } for pid=4025 comm="syz.4.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.532158][ T36] audit: type=1400 audit(1750615996.302:7958): avc: denied { read write } for pid=3000 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.593046][ T36] audit: type=1400 audit(1750615996.321:7959): avc: denied { read write open } for pid=3000 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.635066][ T4053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:778 [ 110.635100][ T4053] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 110.668878][ T36] audit: type=1400 audit(1750615996.321:7960): avc: denied { ioctl } for pid=3000 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.703124][ T4053] rust_binder: Read failure Err(EFAULT) in pid:778 [ 110.774511][ T36] audit: type=1400 audit(1750615996.340:7961): avc: denied { create } for pid=4047 comm="syz.0.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.831532][ T36] audit: type=1400 audit(1750615996.340:7962): avc: denied { connect } for pid=4047 comm="syz.0.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.851490][ T36] audit: type=1400 audit(1750615996.340:7963): avc: denied { create } for pid=4047 comm="syz.0.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.881686][ T350] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 111.042031][ T350] usb 5-1: Using ep0 maxpacket: 16 [ 111.049322][ T350] usb 5-1: config 0 has an invalid interface number: 27 but max is 0 [ 111.057502][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 111.065109][ T350] usb 5-1: config 0 has no interface number 0 [ 111.071189][ T350] usb 5-1: config 0 interface 27 has no altsetting 0 [ 111.081262][ T350] usb 5-1: New USB device found, idVendor=04a5, idProduct=4027, bcdDevice=f2.12 [ 111.090330][ T350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.098387][ T350] usb 5-1: Product: syz [ 111.102564][ T350] usb 5-1: Manufacturer: syz [ 111.107195][ T350] usb 5-1: SerialNumber: syz [ 111.114923][ T350] usb 5-1: config 0 descriptor?? [ 111.236791][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.246870][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.257570][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.273440][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 111.282540][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 111.290642][ T10] usb 3-1: Product: syz [ 111.294824][ T10] usb 3-1: Manufacturer: syz [ 111.299447][ T10] usb 3-1: SerialNumber: syz [ 111.339111][ T350] pl2303 5-1:0.27: required endpoints missing [ 111.352142][ T350] usb 5-1: USB disconnect, device number 10 [ 111.528100][ T4082] netlink: 'syz.2.1197': attribute type 4 has an invalid length. [ 111.528260][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 111.541366][ T4083] batadv_slave_0: entered promiscuous mode [ 111.555275][ T10] usb 3-1: USB disconnect, device number 31 [ 111.571104][ T10] usblp0: removed [ 111.585534][ T4083] batadv_slave_0: left promiscuous mode [ 111.939796][ T4104] ip6_vti0: entered promiscuous mode [ 111.945236][ T4106] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.996847][ T4106] rust_binder: Error while translating object. [ 112.009090][ T4106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 112.025550][ T4106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:108 [ 112.194763][ T4104] binder: Unknown parameter 'rootontext' [ 112.258026][ T4126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:115 [ 112.554952][ T4136] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 112.564163][ T4136] rust_binder: Read failure Err(EFAULT) in pid:802 [ 112.688367][ T31] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 112.713040][ T4163] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1230'. [ 112.848719][ T31] usb 5-1: device descriptor read/64, error -71 [ 113.105327][ T31] usb 5-1: device descriptor read/64, error -71 [ 113.372767][ T31] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 113.434371][ T4196] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 113.532950][ T31] usb 5-1: device descriptor read/64, error -71 [ 113.580076][ T4200] rust_binder: Error while translating object. [ 113.580109][ T4200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 113.586317][ T4200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:809 [ 113.800195][ T31] usb 5-1: device descriptor read/64, error -71 [ 113.928545][ T31] usb usb5-port1: attempt power cycle [ 114.251402][ T4211] overlayfs: missing 'workdir' [ 114.302700][ T31] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 114.326021][ T31] usb 5-1: device descriptor read/8, error -71 [ 114.465146][ T31] usb 5-1: device descriptor read/8, error -71 [ 114.667983][ T4218] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 114.719577][ T31] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 114.744664][ T4224] fuse: Unknown parameter 'f钍bT;LR' [ 114.766779][ T31] usb 5-1: device descriptor read/8, error -71 [ 114.914333][ T31] usb 5-1: device descriptor read/8, error -71 [ 115.029682][ T31] usb usb5-port1: unable to enumerate USB device [ 115.735541][ T36] kauditd_printk_skb: 592 callbacks suppressed [ 115.735561][ T36] audit: type=1400 audit(1750616001.176:8556): avc: denied { map } for pid=4243 comm="syz.2.1258" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.782344][ T36] audit: type=1400 audit(1750616001.176:8557): avc: denied { read } for pid=4243 comm="syz.2.1258" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.807431][ T36] audit: type=1400 audit(1750616001.194:8558): avc: denied { create } for pid=4244 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.829570][ T36] audit: type=1400 audit(1750616001.194:8559): avc: denied { create } for pid=4244 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.875557][ T36] audit: type=1400 audit(1750616001.194:8560): avc: denied { create } for pid=4244 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.899469][ T36] audit: type=1400 audit(1750616001.194:8561): avc: denied { create } for pid=4244 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.912141][ T4251] rust_binder: Error while translating object. [ 115.919771][ T36] audit: type=1400 audit(1750616001.194:8562): avc: denied { create } for pid=4244 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.943182][ T4251] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 115.946195][ T36] audit: type=1400 audit(1750616001.194:8563): avc: denied { create } for pid=4244 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.954326][ T4251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 115.955678][ T36] audit: type=1400 audit(1750616001.194:8564): avc: denied { create } for pid=4244 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.037708][ T36] audit: type=1400 audit(1750616001.194:8565): avc: denied { create } for pid=4244 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.309789][ T4267] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1265'. [ 116.364182][ T4270] devpts: called with bogus options [ 116.622535][ T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 116.795596][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.806716][ T31] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 116.817012][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.826688][ T31] usb 3-1: config 0 descriptor?? [ 117.018427][ T666] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 117.053136][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 117.059221][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 117.067926][ T31] usb 3-1: USB disconnect, device number 32 [ 117.178423][ T666] usb 5-1: Using ep0 maxpacket: 16 [ 117.185613][ T666] usb 5-1: config 129 has an invalid interface number: 5 but max is 2 [ 117.193845][ T666] usb 5-1: config 129 has an invalid interface number: 244 but max is 2 [ 117.202217][ T666] usb 5-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 117.211170][ T666] usb 5-1: config 129 has an invalid interface number: 8 but max is 2 [ 117.219344][ T666] usb 5-1: config 129 has an invalid interface number: 38 but max is 2 [ 117.227698][ T666] usb 5-1: config 129 has 4 interfaces, different from the descriptor's value: 3 [ 117.236855][ T666] usb 5-1: config 129 has no interface number 0 [ 117.243134][ T666] usb 5-1: config 129 has no interface number 1 [ 117.249395][ T666] usb 5-1: config 129 has no interface number 2 [ 117.255656][ T666] usb 5-1: config 129 has no interface number 3 [ 117.261921][ T666] usb 5-1: config 129 interface 5 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 117.273061][ T666] usb 5-1: config 129 interface 5 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 117.283987][ T666] usb 5-1: config 129 interface 5 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 117.293841][ T666] usb 5-1: config 129 interface 5 altsetting 9 bulk endpoint 0x5 has invalid maxpacket 1023 [ 117.303952][ T666] usb 5-1: config 129 interface 244 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 117.314894][ T666] usb 5-1: config 129 interface 244 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 117.325789][ T666] usb 5-1: config 129 interface 244 altsetting 4 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 117.337135][ T666] usb 5-1: config 129 interface 244 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 117.348053][ T666] usb 5-1: config 129 interface 244 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 117.361283][ T666] usb 5-1: too many endpoints for config 129 interface 8 altsetting 214: 101, using maximum allowed: 30 [ 117.372516][ T666] usb 5-1: config 129 interface 8 altsetting 214 has a duplicate endpoint with address 0x4, skipping [ 117.383384][ T666] usb 5-1: config 129 interface 8 altsetting 214 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 117.396781][ T666] usb 5-1: config 129 interface 5 has no altsetting 0 [ 117.403756][ T666] usb 5-1: config 129 interface 244 has no altsetting 0 [ 117.410724][ T666] usb 5-1: config 129 interface 8 has no altsetting 0 [ 117.417534][ T666] usb 5-1: config 129 interface 38 has no altsetting 0 [ 117.428217][ T666] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=71.1a [ 117.437338][ T666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.445341][ T666] usb 5-1: Product: 讑﵁쒄잊頧懈ꡠ㯪⫡⩤೸硇 [ 117.453185][ T666] usb 5-1: Manufacturer: ဉ [ 117.457801][ T666] usb 5-1: SerialNumber: 墷余㊠兌盧₀ᯛ퟾ἣꄮꁁ嚸㨝꺳ꎑ忀橭徤邔۸圍╱镆哟礪퐠 [ 117.473808][ T4288] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 117.703791][ T666] usbhid 5-1:129.5: couldn't find an input interrupt endpoint [ 117.720114][ T666] hub 5-1:129.38: Invalid hub with more than one config or interface [ 117.728396][ T666] hub 5-1:129.38: probe with driver hub failed with error -22 [ 117.737286][ T666] usb 5-1: USB disconnect, device number 15 [ 117.901994][ T4296] rust_binder: validate_parent_fixup: new_min_offset=79, sg_entry.length=75 [ 117.902020][ T4296] rust_binder: Error while translating object. [ 117.911547][ T4296] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 117.919355][ T4296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:841 [ 118.027696][ T4298] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 118.060197][ T4298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:843 [ 118.792697][ T31] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 118.851590][ T4344] overlay: Unknown parameter 'subj_type' [ 118.860520][ T4344] syz.1.1295 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 118.904934][ T4346] incfs: Error accessing: ./file2. [ 118.910700][ T4346] incfs: mount failed -2 [ 118.985121][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 118.996760][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.009327][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.020329][ T31] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 119.029998][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.051683][ T31] usb 3-1: config 0 descriptor?? [ 119.190647][ T4354] overlayfs: failed to resolve './file1': -2 [ 119.553363][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 119.562511][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 119.582970][ T31] usb 3-1: USB disconnect, device number 33 [ 120.011452][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 120.091489][ T4419] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1321'. [ 120.182521][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 120.203581][ T9] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 120.212717][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.227125][ T9] usb 5-1: config 0 descriptor?? [ 120.836992][ T4446] 9pnet_fd: Insufficient options for proto=fd [ 121.099995][ T36] kauditd_printk_skb: 625 callbacks suppressed [ 121.100014][ T36] audit: type=1400 audit(1750616006.180:9191): avc: denied { ioctl } for pid=4399 comm="syz.4.1313" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.132793][ T36] audit: type=1400 audit(1750616006.180:9192): avc: denied { ioctl } for pid=4399 comm="syz.4.1313" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.323159][ T36] audit: type=1400 audit(1750616006.395:9193): avc: denied { ioctl } for pid=4399 comm="syz.4.1313" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.348565][ T36] audit: type=1400 audit(1750616006.395:9194): avc: denied { ioctl } for pid=4399 comm="syz.4.1313" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.530479][ T36] audit: type=1400 audit(1750616006.592:9195): avc: denied { create } for pid=4457 comm="syz.1.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.559442][ T36] audit: type=1400 audit(1750616006.592:9196): avc: denied { create } for pid=4457 comm="syz.1.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.581146][ T36] audit: type=1400 audit(1750616006.610:9197): avc: denied { create } for pid=4457 comm="syz.1.1333" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.604209][ T36] audit: type=1400 audit(1750616006.638:9198): avc: denied { ioctl } for pid=4399 comm="syz.4.1313" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.629236][ T36] audit: type=1400 audit(1750616006.638:9199): avc: denied { ioctl } for pid=4399 comm="syz.4.1313" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.689593][ T36] audit: type=1400 audit(1750616006.732:9200): avc: denied { create } for pid=4459 comm="syz.1.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.966253][ T4476] overlayfs: failed to clone upperpath [ 122.228423][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 122.238660][ T9] asix 5-1:0.0: probe with driver asix failed with error -71 [ 122.248761][ T9] usb 5-1: USB disconnect, device number 16 [ 122.363362][ T1219] Bluetooth: hci0: command 0x1003 tx timeout [ 122.364218][ T973] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.694846][ T31] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 122.868515][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.892808][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 122.907704][ T4546] 9pnet_fd: Insufficient options for proto=fd [ 122.929963][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 122.950000][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.984643][ T31] usb 3-1: config 0 descriptor?? [ 122.992056][ T4505] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.016067][ T31] hub 3-1:0.0: USB hub found [ 123.240836][ T31] hub 3-1:0.0: 2 ports detected [ 123.707285][ T4605] 8021q: VLANs not supported on lo [ 124.244909][ T590] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 124.419844][ T590] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.430005][ T590] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.442462][ T590] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.451574][ T590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.459626][ T590] usb 5-1: Product: syz [ 124.463823][ T590] usb 5-1: Manufacturer: syz [ 124.468485][ T590] usb 5-1: SerialNumber: syz [ 124.695716][ T590] usb 5-1: 0:2 : does not exist [ 124.707367][ T590] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 124.719525][ T590] usb 5-1: USB disconnect, device number 17 [ 124.897910][ T3059] udevd[3059]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.078607][ T4627] fuse: Unknown parameter 'HR%:Oa' [ 125.190170][ T590] usb 3-1: USB disconnect, device number 34 [ 125.269647][ T4631] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1391'. [ 125.331379][ T4634] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 125.331403][ T4634] rust_binder: Read failure Err(EFAULT) in pid:188 [ 125.401239][ T4635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 125.408328][ T4635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 125.756411][ T4637] fuse: Bad value for 'fd' [ 126.329445][ T4677] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1405'. [ 126.364200][ T4677] 0{X: renamed from gretap0 (while UP) [ 126.371570][ T4677] 0{X: entered allmulticast mode [ 126.377270][ T4677] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 126.449573][ T36] kauditd_printk_skb: 1089 callbacks suppressed [ 126.449590][ T36] audit: type=1400 audit(1750616011.194:10290): avc: denied { create } for pid=4686 comm="syz.0.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.522327][ T36] audit: type=1400 audit(1750616011.194:10291): avc: denied { create } for pid=4686 comm="syz.0.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.571579][ T36] audit: type=1400 audit(1750616011.194:10292): avc: denied { write } for pid=4686 comm="syz.0.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.642604][ T36] audit: type=1400 audit(1750616011.194:10293): avc: denied { write } for pid=4686 comm="syz.0.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.672688][ T36] audit: type=1400 audit(1750616011.194:10294): avc: denied { create } for pid=4686 comm="syz.0.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.694869][ T36] audit: type=1400 audit(1750616011.203:10295): avc: denied { create } for pid=4686 comm="syz.0.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 126.718129][ T36] audit: type=1400 audit(1750616011.213:10296): avc: denied { read write open } for pid=3000 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.753475][ T36] audit: type=1400 audit(1750616011.213:10297): avc: denied { ioctl } for pid=3000 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.782736][ T36] audit: type=1400 audit(1750616011.250:10298): avc: denied { create } for pid=4688 comm="syz.2.1409" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 126.826858][ T36] audit: type=1400 audit(1750616011.259:10299): avc: denied { read write } for pid=4689 comm="syz.4.1410" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dmesg_exec_t:s0" [ 126.903146][ T4719] rust_binder: Error while translating object. [ 126.903184][ T4719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 126.927697][ T4719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:199 [ 127.621487][ T4774] bridge0: entered allmulticast mode [ 127.636575][ T4774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'. [ 127.646224][ T4774] bridge_slave_1: left allmulticast mode [ 127.651895][ T4774] bridge_slave_1: left promiscuous mode [ 127.657586][ T4774] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.665414][ T4774] bridge_slave_0: left allmulticast mode [ 127.671257][ T4774] bridge_slave_0: left promiscuous mode [ 127.677019][ T4774] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.698232][ T4774] bridge0 (unregistering): left allmulticast mode [ 128.639729][ T4818] overlayfs: failed to clone upperpath [ 128.701050][ T4820] netlink: 'syz.1.1454': attribute type 8 has an invalid length. [ 128.989903][ T4847] overlay: Bad value for 'nfs_export' [ 129.033035][ T4855] kvm: kvm [4854]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 129.670213][ T4883] netlink: 'syz.2.1474': attribute type 4 has an invalid length. [ 129.687919][ T4883] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1474'. [ 129.900970][ T4883] netlink: 'syz.2.1474': attribute type 4 has an invalid length. [ 129.950062][ T4883] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1474'. [ 130.049002][ T4883] netlink: 'syz.2.1474': attribute type 4 has an invalid length. [ 130.064781][ T4883] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1474'. [ 130.086278][ T4883] netlink: 'syz.2.1474': attribute type 4 has an invalid length. [ 130.103377][ T4883] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1474'. [ 130.124118][ T4883] netlink: 'syz.2.1474': attribute type 4 has an invalid length. [ 130.141019][ T4883] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1474'. [ 130.851717][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 131.012105][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 131.020391][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.034394][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 131.055460][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.067390][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 131.077104][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.087661][ T9] usb 5-1: config 0 descriptor?? [ 131.093949][ T4923] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 131.102704][ T9] hub 5-1:0.0: USB hub found [ 131.291113][ T4928] bridge0: port 3(ip6gretap0) entered blocking state [ 131.297917][ T4928] bridge0: port 3(ip6gretap0) entered disabled state [ 131.305750][ T4928] ip6gretap0: entered allmulticast mode [ 131.312080][ T4928] ip6gretap0: entered promiscuous mode [ 131.317826][ T4928] bridge0: port 3(ip6gretap0) entered blocking state [ 131.324569][ T4928] bridge0: port 3(ip6gretap0) entered forwarding state [ 131.331594][ T9] hub 5-1:0.0: 2 ports detected [ 131.617394][ T9] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 131.626388][ T9] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 131.644264][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 131.650304][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 131.675253][ T9] usb 5-1: USB disconnect, device number 18 [ 131.972634][ T36] kauditd_printk_skb: 420 callbacks suppressed [ 131.972652][ T36] audit: type=1400 audit(1750616016.348:10720): avc: denied { create } for pid=4938 comm="syz.2.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.021568][ T36] audit: type=1400 audit(1750616016.367:10721): avc: denied { write } for pid=4938 comm="syz.2.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.088417][ T36] audit: type=1400 audit(1750616016.460:10722): avc: denied { create } for pid=4951 comm="syz.1.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.122315][ T36] audit: type=1400 audit(1750616016.488:10723): avc: denied { remount } for pid=4953 comm="syz.2.1498" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.147308][ T36] audit: type=1400 audit(1750616016.488:10724): avc: denied { name_bind } for pid=4953 comm="syz.2.1498" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 132.177680][ T4958] cgroup: Unknown subsys name 'io' [ 132.183035][ T36] audit: type=1400 audit(1750616016.554:10725): avc: denied { mounton } for pid=4957 comm="syz.1.1499" path="/482/file0" dev="tmpfs" ino=2661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 132.207058][ T36] audit: type=1400 audit(1750616016.554:10726): avc: denied { unmount } for pid=3000 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 132.227761][ T36] audit: type=1400 audit(1750616016.582:10727): avc: denied { unlink } for pid=3000 comm="syz-executor" name="file0" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 132.251641][ T36] audit: type=1400 audit(1750616016.600:10728): avc: denied { read write } for pid=3000 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.319460][ T36] audit: type=1400 audit(1750616016.600:10729): avc: denied { read write open } for pid=3000 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.473897][ T4971] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 132.604963][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 132.765322][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 132.772914][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.796766][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 132.806044][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.815948][ T9] usb 5-1: config 0 descriptor?? [ 133.043565][ T9] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 133.053058][ T9] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 133.060878][ T9] arvo 0003:1E7D:30D4.0007: item fetching failed at offset 2/5 [ 133.069401][ T9] arvo 0003:1E7D:30D4.0007: parse failed [ 133.075130][ T9] arvo 0003:1E7D:30D4.0007: probe with driver arvo failed with error -22 [ 133.096425][ T9] usb 5-1: USB disconnect, device number 19 [ 133.366161][ T5008] tc_dump_action: action bad kind [ 133.635603][ T5018] overlayfs: failed to resolve './file1': -2 [ 133.835825][ T5026] exfat: Unknown parameter 'workdir' [ 134.320393][ T5055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1536'. [ 134.340545][ T5055] 9pnet_fd: Insufficient options for proto=fd [ 134.346958][ T5051] overlayfs: failed to clone upperpath [ 134.357552][ T5055] incfs: Error accessing: ./file0. [ 134.365345][ T5055] incfs: mount failed -20 [ 135.764500][ T5123] binder: Bad value for 'max' [ 136.701254][ T5185] netlink: 'syz.2.1583': attribute type 11 has an invalid length. [ 136.720068][ T5185] netlink: 'syz.2.1583': attribute type 1 has an invalid length. [ 136.739524][ T5185] netlink: 3593 bytes leftover after parsing attributes in process `syz.2.1583'. [ 136.866282][ T5201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1587'. [ 137.105301][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1592'. [ 137.319914][ T36] kauditd_printk_skb: 494 callbacks suppressed [ 137.319932][ T36] audit: type=1400 audit(1750616021.362:11224): avc: denied { write } for pid=5217 comm="syz.1.1593" laddr=172.20.20.170 lport=250 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.382925][ T36] audit: type=1400 audit(1750616021.390:11225): avc: denied { write } for pid=5217 comm="syz.1.1593" laddr=172.20.20.170 lport=250 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.411222][ T5225] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.417897][ T5225] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 137.425629][ T5225] audit: backlog limit exceeded [ 137.430568][ T36] audit: type=1400 audit(1750616021.390:11226): avc: denied { write } for pid=5217 comm="syz.1.1593" laddr=172.20.20.170 lport=250 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.456608][ T5225] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.466396][ T5225] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 137.477168][ T5225] audit: backlog limit exceeded [ 137.482603][ T5225] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.570702][ T5233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=375 sclass=netlink_route_socket pid=5233 comm=syz.0.1598 [ 137.600812][ T5233] tc_dump_action: action bad kind [ 137.820976][ T5242] overlayfs: failed to clone upperpath [ 137.863470][ T5246] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1601'. [ 137.882762][ T5242] overlayfs: failed to resolve './file1/file0': -2 [ 137.975269][ T5247] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1601'. [ 138.017439][ T5247] overlayfs: failed to clone lowerpath [ 140.946094][ T5283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1620'. [ 141.160792][ T5292] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1624'. [ 141.203174][ T5298] 9pnet_fd: Insufficient options for proto=fd [ 141.599733][ T5332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1643'. [ 141.667890][ T5336] 9pnet_fd: Insufficient options for proto=fd [ 142.739899][ T36] kauditd_printk_skb: 1025 callbacks suppressed [ 142.739923][ T36] audit: type=1400 audit(1750616026.432:12250): avc: denied { create } for pid=5381 comm="syz.0.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.766848][ T36] audit: type=1400 audit(1750616026.432:12251): avc: denied { create } for pid=5381 comm="syz.0.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.985068][ T36] audit: type=1400 audit(1750616026.656:12252): avc: denied { create } for pid=5387 comm="syz.2.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.005924][ T36] audit: type=1400 audit(1750616026.675:12253): avc: denied { execmem } for pid=5387 comm="syz.2.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 143.383970][ T36] audit: type=1400 audit(1750616026.852:12254): avc: denied { name_bind } for pid=5387 comm="syz.2.1668" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 143.454144][ T36] audit: type=1400 audit(1750616027.096:12255): avc: denied { create } for pid=5395 comm="syz.0.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.476618][ T36] audit: type=1400 audit(1750616027.114:12256): avc: denied { block_suspend } for pid=5395 comm="syz.0.1671" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.622111][ T36] audit: type=1400 audit(1750616027.255:12257): avc: denied { create } for pid=5412 comm="syz.1.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.655508][ T36] audit: type=1400 audit(1750616027.273:12258): avc: denied { setopt } for pid=5412 comm="syz.1.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.675452][ T36] audit: type=1400 audit(1750616027.273:12259): avc: denied { sys_module } for pid=5412 comm="syz.1.1679" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 144.808175][ T5475] netlink: 'syz.0.1707': attribute type 29 has an invalid length. [ 144.816712][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'. [ 145.205678][ T5507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1722'. [ 145.269896][ T5510] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1723'. [ 145.287603][ T5510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1723'. [ 145.996172][ T5553] SELinux: Context system_u:object_r:traceroute_exec_t:s0 is not valid (left unmapped). [ 146.677450][ T5611] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaa [ 147.389136][ T5689] veth0: entered promiscuous mode [ 147.395430][ T5688] veth0: left promiscuous mode [ 147.981508][ T5747] overlayfs: failed to resolve './file1': -2 [ 148.484552][ T36] kauditd_printk_skb: 246 callbacks suppressed [ 148.484569][ T36] audit: type=1400 audit(1750616031.801:12506): avc: denied { execmem } for pid=5760 comm="syz.2.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 148.659321][ T36] audit: type=1400 audit(1750616031.960:12507): avc: denied { create } for pid=5760 comm="syz.2.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.699182][ T36] audit: type=1400 audit(1750616031.960:12508): avc: denied { setopt } for pid=5760 comm="syz.2.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.734526][ T36] audit: type=1400 audit(1750616031.960:12509): avc: denied { shutdown } for pid=5760 comm="syz.2.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.754492][ T36] audit: type=1400 audit(1750616031.960:12510): avc: denied { read } for pid=5760 comm="syz.2.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.773901][ T36] audit: type=1400 audit(1750616032.007:12511): avc: denied { name_bind } for pid=5769 comm="syz.1.1851" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 148.795725][ T36] audit: type=1400 audit(1750616032.025:12512): avc: denied { name_bind } for pid=5769 comm="syz.1.1851" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 148.869209][ T5780] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1855'. [ 148.878462][ T5780] gretap0: entered promiscuous mode [ 148.887307][ T5780] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1855'. [ 148.896267][ T5780] 0{X: renamed from gretap0 [ 148.902192][ T5780] 0{X: left promiscuous mode [ 148.907271][ T5780] 0{X: entered allmulticast mode [ 148.913602][ T5780] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 149.009761][ T36] audit: type=1400 audit(1750616032.297:12513): avc: denied { create } for pid=5787 comm="syz.1.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.029585][ T36] audit: type=1400 audit(1750616032.297:12514): avc: denied { connect } for pid=5787 comm="syz.1.1859" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.050246][ T36] audit: type=1400 audit(1750616032.297:12515): avc: denied { write } for pid=5787 comm="syz.1.1859" path="socket:[27051]" dev="sockfs" ino=27051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.038160][ T5818] 9pnet_fd: Insufficient options for proto=fd [ 151.608911][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1932'. [ 151.657238][ T5943] binder: Unknown parameter 'fowner>00000000000000000000' [ 153.849426][ T36] kauditd_printk_skb: 129 callbacks suppressed [ 153.849445][ T36] audit: type=1400 audit(1750616036.820:12645): avc: denied { create } for pid=6045 comm="syz.0.1984" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 153.878154][ T36] audit: type=1400 audit(1750616036.838:12646): avc: denied { ioctl } for pid=6045 comm="syz.0.1984" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27299 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 153.925485][ T36] audit: type=1400 audit(1750616036.838:12647): avc: denied { ioctl } for pid=6045 comm="syz.0.1984" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27299 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 153.953236][ T36] audit: type=1400 audit(1750616036.876:12648): avc: denied { ioctl } for pid=6045 comm="syz.0.1984" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27299 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 153.980226][ T36] audit: type=1400 audit(1750616036.876:12649): avc: denied { ioctl } for pid=6045 comm="syz.0.1984" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27299 ioctlcmd=0xaa07 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 154.011941][ T36] audit: type=1400 audit(1750616036.895:12650): avc: denied { create } for pid=6049 comm="syz.0.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.033692][ T36] audit: type=1400 audit(1750616036.895:12651): avc: denied { write } for pid=6049 comm="syz.0.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.055426][ T36] audit: type=1400 audit(1750616036.895:12652): avc: denied { read } for pid=6049 comm="syz.0.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.081352][ T36] audit: type=1400 audit(1750616036.895:12653): avc: denied { read } for pid=6049 comm="syz.0.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.102646][ T36] audit: type=1400 audit(1750616036.895:12654): avc: denied { create } for pid=6049 comm="syz.0.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.627917][ T6124] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6124 comm=syz.4.2023 [ 155.348373][ T6176] SELinux: Context : is not valid (left unmapped). [ 155.462548][ T350] ================================================================== [ 155.470801][ T350] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 155.477578][ T350] Write of size 8 at addr 0000000000000098 by task kworker/0:3/350 [ 155.485471][ T350] [ 155.487810][ T350] CPU: 0 UID: 0 PID: 350 Comm: kworker/0:3 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 155.487859][ T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 155.487873][ T350] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 155.487923][ T350] Call Trace: [ 155.487931][ T350] [ 155.487939][ T350] __dump_stack+0x21/0x30 [ 155.487980][ T350] dump_stack_lvl+0x10c/0x190 [ 155.488004][ T350] ? __cfi_dump_stack_lvl+0x10/0x10 [ 155.488027][ T350] ? __smp_call_single_queue+0xd5/0x390 [ 155.488051][ T350] print_report+0x3d/0x70 [ 155.488069][ T350] kasan_report+0x163/0x1a0 [ 155.488097][ T350] ? down_write+0x83/0x2a0 [ 155.488119][ T350] ? down_write+0x83/0x2a0 [ 155.488140][ T350] kasan_check_range+0x299/0x2a0 [ 155.488169][ T350] __kasan_check_write+0x18/0x20 [ 155.488199][ T350] down_write+0x83/0x2a0 [ 155.488220][ T350] ? __cfi_down_write+0x10/0x10 [ 155.488241][ T350] ? _raw_spin_lock+0x8c/0x120 [ 155.488275][ T350] ? __cfi__raw_spin_lock+0x10/0x10 [ 155.488300][ T350] ? mutex_unlock+0x8b/0x240 [ 155.488318][ T350] ? __cfi_mutex_unlock+0x10/0x10 [ 155.488337][ T350] rust_binderfs_remove_file+0x6c/0x110 [ 155.488358][ T350] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 155.488393][ T350] ? update_curr_dl_se+0x10c/0xb20 [ 155.488419][ T350] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 155.488438][ T350] ? update_curr+0x60d/0xc60 [ 155.488464][ T350] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 155.488495][ T350] ? update_load_avg+0x506/0x19a0 [ 155.488515][ T350] ? detach_entity_load_avg+0x7b0/0x7b0 [ 155.488543][ T350] ? dequeue_entity+0xa9c/0x1750 [ 155.488566][ T350] ? tg_unthrottle_up+0x980/0x980 [ 155.488585][ T350] ? kasan_save_track+0x4f/0x80 [ 155.488611][ T350] ? __cfi_kasan_set_track+0x1/0x10 [ 155.488636][ T350] ? kasan_save_free_info+0x4a/0x60 [ 155.488656][ T350] ? __kasan_slab_free+0x5f/0x80 [ 155.488683][ T350] ? kfree+0x156/0x400 [ 155.488703][ T350] ? process_scheduled_works+0x7d2/0x1020 [ 155.488729][ T350] ? worker_thread+0xc30/0x1250 [ 155.488754][ T350] ? kthread+0x2c7/0x370 [ 155.488782][ T350] ? ret_from_fork_asm+0x1a/0x30 [ 155.488809][ T350] ? kvm_sched_clock_read+0x15/0x30 [ 155.488830][ T350] ? sched_clock_noinstr+0xd/0x30 [ 155.488849][ T350] ? sched_clock+0x44/0x60 [ 155.488869][ T350] ? sched_clock_cpu+0x75/0x400 [ 155.488906][ T350] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 155.488929][ T350] ? sched_clock+0x44/0x60 [ 155.488967][ T350] ? __cfi_sched_clock_cpu+0x10/0x10 [ 155.488991][ T350] ? __kasan_check_write+0x18/0x20 [ 155.489015][ T350] ? __switch_to+0xc7b/0x1310 [ 155.489039][ T350] ? psi_group_change+0xb44/0x1130 [ 155.489062][ T350] ? __cfi___switch_to+0x10/0x10 [ 155.489088][ T350] ? _raw_spin_unlock+0x45/0x60 [ 155.489115][ T350] ? __switch_to_asm+0x3d/0x70 [ 155.489142][ T350] ? __schedule+0x1463/0x1f10 [ 155.489173][ T350] ? kick_pool+0xb9/0x550 [ 155.489210][ T350] process_scheduled_works+0x7d2/0x1020 [ 155.489242][ T350] worker_thread+0xc58/0x1250 [ 155.489273][ T350] kthread+0x2c7/0x370 [ 155.489301][ T350] ? __cfi_worker_thread+0x10/0x10 [ 155.489328][ T350] ? __cfi_kthread+0x10/0x10 [ 155.489358][ T350] ret_from_fork+0x64/0xa0 [ 155.489381][ T350] ? __cfi_kthread+0x10/0x10 [ 155.489411][ T350] ret_from_fork_asm+0x1a/0x30 [ 155.489441][ T350] [ 155.489449][ T350] ================================================================== [ 155.846126][ T350] Disabling lock debugging due to kernel taint [ 155.853032][ T350] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 155.860855][ T350] #PF: supervisor write access in kernel mode [ 155.866929][ T350] #PF: error_code(0x0002) - not-present page [ 155.872924][ T350] PGD 0 P4D 0 [ 155.876312][ T350] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 155.882395][ T350] CPU: 0 UID: 0 PID: 350 Comm: kworker/0:3 Tainted: G B 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 155.897346][ T350] Tainted: [B]=BAD_PAGE [ 155.901694][ T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.911763][ T350] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 155.928557][ T350] RIP: 0010:down_write+0x9a/0x2a0 [ 155.933606][ T350] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 2d 34 55 fc 4c 89 f7 be 08 00 00 00 e8 20 34 55 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 155.953213][ T350] RSP: 0018:ffffc9000b8af500 EFLAGS: 00010256 [ 155.959277][ T350] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 155.967244][ T350] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000b8af520 [ 155.975231][ T350] RBP: ffffc9000b8af598 R08: ffffc9000b8af527 R09: 1ffff92001715ea4 [ 155.983203][ T350] R10: dffffc0000000000 R11: fffff52001715ea5 R12: dffffc0000000000 [ 155.991168][ T350] R13: 1ffff92001715ea0 R14: ffffc9000b8af520 R15: 0000000000000000 [ 155.999148][ T350] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 156.008069][ T350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.014646][ T350] CR2: 0000000000000098 CR3: 000000010ea50000 CR4: 00000000003526b0 [ 156.022618][ T350] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.030589][ T350] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 156.038639][ T350] Call Trace: [ 156.041916][ T350] [ 156.044845][ T350] ? __cfi_down_write+0x10/0x10 [ 156.049720][ T350] ? _raw_spin_lock+0x8c/0x120 [ 156.054489][ T350] ? __cfi__raw_spin_lock+0x10/0x10 [ 156.059682][ T350] ? mutex_unlock+0x8b/0x240 [ 156.064306][ T350] ? __cfi_mutex_unlock+0x10/0x10 [ 156.069327][ T350] rust_binderfs_remove_file+0x6c/0x110 [ 156.074880][ T350] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 156.087637][ T350] ? update_curr_dl_se+0x10c/0xb20 [ 156.092749][ T350] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 156.098918][ T350] ? update_curr+0x60d/0xc60 [ 156.103505][ T350] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 156.116780][ T350] ? update_load_avg+0x506/0x19a0 [ 156.121891][ T350] ? detach_entity_load_avg+0x7b0/0x7b0 [ 156.127529][ T350] ? dequeue_entity+0xa9c/0x1750 [ 156.132478][ T350] ? tg_unthrottle_up+0x980/0x980 [ 156.137499][ T350] ? kasan_save_track+0x4f/0x80 [ 156.142350][ T350] ? __cfi_kasan_set_track+0x1/0x10 [ 156.147642][ T350] ? kasan_save_free_info+0x4a/0x60 [ 156.152841][ T350] ? __kasan_slab_free+0x5f/0x80 [ 156.157813][ T350] ? kfree+0x156/0x400 [ 156.161890][ T350] ? process_scheduled_works+0x7d2/0x1020 [ 156.167727][ T350] ? worker_thread+0xc30/0x1250 [ 156.172578][ T350] ? kthread+0x2c7/0x370 [ 156.176824][ T350] ? ret_from_fork_asm+0x1a/0x30 [ 156.181832][ T350] ? kvm_sched_clock_read+0x15/0x30 [ 156.187037][ T350] ? sched_clock_noinstr+0xd/0x30 [ 156.192058][ T350] ? sched_clock+0x44/0x60 [ 156.196473][ T350] ? sched_clock_cpu+0x75/0x400 [ 156.201320][ T350] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 156.207381][ T350] ? sched_clock+0x44/0x60 [ 156.211886][ T350] ? __cfi_sched_clock_cpu+0x10/0x10 [ 156.217181][ T350] ? __kasan_check_write+0x18/0x20 [ 156.222297][ T350] ? __switch_to+0xc7b/0x1310 [ 156.227065][ T350] ? psi_group_change+0xb44/0x1130 [ 156.232178][ T350] ? __cfi___switch_to+0x10/0x10 [ 156.237206][ T350] ? _raw_spin_unlock+0x45/0x60 [ 156.242063][ T350] ? __switch_to_asm+0x3d/0x70 [ 156.246838][ T350] ? __schedule+0x1463/0x1f10 [ 156.251531][ T350] ? kick_pool+0xb9/0x550 [ 156.255886][ T350] process_scheduled_works+0x7d2/0x1020 [ 156.261440][ T350] worker_thread+0xc58/0x1250 [ 156.266123][ T350] kthread+0x2c7/0x370 [ 156.270199][ T350] ? __cfi_worker_thread+0x10/0x10 [ 156.275345][ T350] ? __cfi_kthread+0x10/0x10 [ 156.279950][ T350] ret_from_fork+0x64/0xa0 [ 156.284371][ T350] ? __cfi_kthread+0x10/0x10 [ 156.288967][ T350] ret_from_fork_asm+0x1a/0x30 [ 156.293736][ T350] [ 156.296776][ T350] Modules linked in: [ 156.300679][ T350] CR2: 0000000000000098 [ 156.304827][ T350] ---[ end trace 0000000000000000 ]--- [ 156.310377][ T350] RIP: 0010:down_write+0x9a/0x2a0 [ 156.315417][ T350] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 2d 34 55 fc 4c 89 f7 be 08 00 00 00 e8 20 34 55 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 156.335017][ T350] RSP: 0018:ffffc9000b8af500 EFLAGS: 00010256 [ 156.341080][ T350] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 156.349048][ T350] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000b8af520 [ 156.357015][ T350] RBP: ffffc9000b8af598 R08: ffffc9000b8af527 R09: 1ffff92001715ea4 [ 156.364983][ T350] R10: dffffc0000000000 R11: fffff52001715ea5 R12: dffffc0000000000 [ 156.372946][ T350] R13: 1ffff92001715ea0 R14: ffffc9000b8af520 R15: 0000000000000000 [ 156.380938][ T350] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 156.389867][ T350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.396446][ T350] CR2: 0000000000000098 CR3: 000000010ea50000 CR4: 00000000003526b0 [ 156.404409][ T350] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.412402][ T350] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 156.420374][ T350] Kernel panic - not syncing: Fatal exception [ 156.426727][ T350] Kernel Offset: disabled [ 156.431066][ T350] Rebooting in 86400 seconds..