last executing test programs: 10.62606205s ago: executing program 1 (id=523): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c2600f, 0x13, r0, 0x98b2f000) 8.746821295s ago: executing program 1 (id=523): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c2600f, 0x13, r0, 0x98b2f000) 6.765746171s ago: executing program 1 (id=523): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c2600f, 0x13, r0, 0x98b2f000) 4.813562115s ago: executing program 2 (id=618): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0xd25, 0x800, 0x100002, 0xef}, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, 0xfffffffffffffffe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000064d564b"]) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x2, 0x1, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffd, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0xcd, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x9, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x1, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x18, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x218000, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x3, r1, &(0x7f0000000880)="f4b386699e34f6db9ca12b4e82cc1671aa0ca427549b1a266e98fad863f2c197251a3a5bd4c6ec24d15a2c527308aec0fe72d492900db8c1bb26afd6243c0610cea074ba0aeceb4d3e607541b601ad9869924196aaaac9499caab08a8c480766b60fef201bf470a0e960c030fdd2380e4a8b1edd82bab06190703fcf405d56b16ecdc5", 0x83, 0xd23b4cf, 0x0, 0x2, r7}]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) 4.681855657s ago: executing program 0 (id=621): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001000000cb292b2a71e460a65b4e5a530976c7a2516967ca66a4aee14cb34da26aa07c24a77f5fae1b2c52d4e8b31b796e6c84378fb8fc024b657879cfe678db3912a0dda4419ff3f0b1ed8fc8769da4c3e72bf8ea6c9ee142226d69069d320d1635b74a083751ff8a404527dcb2bee75f16a6a434d99f68384113fd5895f305582cf00b4bf1b50f53610966692815af8fab1540d72a8b094b1231b638ad843304cdb4fd39a8c0fe"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x100a, 0x0, 0x13}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/123, 0x7b}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/253, 0xfd, 0x2, 0x33}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 4.630549993s ago: executing program 3 (id=622): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f00000000c0)={0x100008, 0x0, 0x80000}, 0x20) r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x2, 0xfffffffa]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3fc) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000000)=0xfffffff8) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wffno=', @ANYRESHEX=r3, @ANYBLOB="2c756e616d653d696770fecb3a7176359102a8a9212c6e6f78617474722c76657273696f6e3d3970323030302e4c2c6b"]) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd/4\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 4.560933379s ago: executing program 1 (id=523): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c2600f, 0x13, r0, 0x98b2f000) 2.553652918s ago: executing program 0 (id=623): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x80002, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000000)="c9453900000000000000000028", 0xd}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0x1a, r1, 0xc, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x2000}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 2.552463858s ago: executing program 2 (id=624): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.548568838s ago: executing program 3 (id=625): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000e00)=[@acquire, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$9p(r5, &(0x7f0000000040)="9daa3de1b1c00bceab43eaba112d8410b9f4ad13ec1904c71b71f4de", 0x1c) read$FUSE(r4, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r6, 0x0, 0x2, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [""]}, 0x1c}}, 0x80) 2.470513796s ago: executing program 2 (id=626): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) socket$netlink(0x10, 0x3, 0x1) 2.470174096s ago: executing program 0 (id=627): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000500), 0xa, 0x1a1803) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000540)=""/108) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) dup(r2) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x80, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) dup(r1) 2.469586316s ago: executing program 3 (id=628): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xc8, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x68}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f000074f000/0x3000)=nil, 0x3000}, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 2.415903372s ago: executing program 3 (id=629): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) read(r0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) 2.350501898s ago: executing program 3 (id=630): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc001001f, 0x0, 0xfff}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6}, 0x1c) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 2.250377228s ago: executing program 0 (id=631): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) ioprio_set$pid(0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000040)=0xffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) 2.250010358s ago: executing program 1 (id=523): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c2600f, 0x13, r0, 0x98b2f000) 176.566213ms ago: executing program 0 (id=632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2d00, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0xf) (async, rerun: 64) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) (rerun: 64) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004091}, 0x20000080) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x305541, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000001c0)={0x1, r3}) 172.883553ms ago: executing program 2 (id=633): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) read$FUSE(r2, &(0x7f00000017c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, r3}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 164.934194ms ago: executing program 3 (id=634): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000032a9000070100f3ff83"], 0x0}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) 76.162452ms ago: executing program 0 (id=635): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r5) r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000400)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001410"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, &(0x7f0000000a40)={0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="200a7f0000007f210e3cae2f1f5af178a42ca93d4093983976492c02e5f01299eb742b1d074f298136b7e944b72e5b777c448dc87cbb698dfb2394811e0f0564a9fb8e06a692717eb2513938bb22f1924e87a62a253733f6305f98404880de9bacd7b4b59cdffad0e3ae7f0a71e02178b3f984047d5d0488a4246fb41698c760625d3fc91e"], 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='./file0\x00', 0x1) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000000c0)=0x1) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) 65.082333ms ago: executing program 2 (id=636): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x177342, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x32, 0x11, 0x1, {0xa, @udp_ip4_spec={@multicast1, @multicast1, 0x4e21, 0x4e22, 0x5d}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x5, 0xfb44, [0x5, 0x9]}, @esp_ip4_spec={@local, @private=0xa010100, 0x9}, {0x0, @broadcast, 0x46, 0x3ff, [0x2]}, 0x4, 0x2}}}) r2 = userfaultfd(0x1801) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) 33.953137ms ago: executing program 2 (id=637): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xf}]}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}]}}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 0s ago: executing program 1 (id=523): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c2600f, 0x13, r0, 0x98b2f000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 20.082465][ T36] audit: type=1400 audit(1760498936.270:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.084207][ T282] cgroup: Unknown subsys name 'net' [ 20.085782][ T36] audit: type=1400 audit(1760498936.270:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.089441][ T36] audit: type=1400 audit(1760498936.270:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.089594][ T282] cgroup: Unknown subsys name 'devices' [ 20.273107][ T282] cgroup: Unknown subsys name 'hugetlb' [ 20.278716][ T282] cgroup: Unknown subsys name 'rlimit' [ 20.392599][ T36] audit: type=1400 audit(1760498936.580:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.415779][ T36] audit: type=1400 audit(1760498936.580:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.440590][ T36] audit: type=1400 audit(1760498936.580:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.441850][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.472962][ T36] audit: type=1400 audit(1760498936.660:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.498450][ T36] audit: type=1400 audit(1760498936.660:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.527523][ T36] audit: type=1400 audit(1760498936.710:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.553107][ T36] audit: type=1400 audit(1760498936.710:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.554196][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.799977][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.814272][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.821522][ T289] bridge_slave_0: entered allmulticast mode [ 21.827843][ T289] bridge_slave_0: entered promiscuous mode [ 21.834250][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.841294][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.848329][ T289] bridge_slave_1: entered allmulticast mode [ 21.854617][ T289] bridge_slave_1: entered promiscuous mode [ 21.959948][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.967016][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.974248][ T293] bridge_slave_0: entered allmulticast mode [ 21.980406][ T293] bridge_slave_0: entered promiscuous mode [ 21.990186][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.997250][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.004405][ T293] bridge_slave_1: entered allmulticast mode [ 22.010530][ T293] bridge_slave_1: entered promiscuous mode [ 22.055350][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.062409][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.069447][ T295] bridge_slave_0: entered allmulticast mode [ 22.075763][ T295] bridge_slave_0: entered promiscuous mode [ 22.088269][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.095327][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.102377][ T294] bridge_slave_0: entered allmulticast mode [ 22.108499][ T294] bridge_slave_0: entered promiscuous mode [ 22.114635][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.121687][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.128743][ T295] bridge_slave_1: entered allmulticast mode [ 22.134998][ T295] bridge_slave_1: entered promiscuous mode [ 22.144758][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.151802][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.158836][ T294] bridge_slave_1: entered allmulticast mode [ 22.165074][ T294] bridge_slave_1: entered promiscuous mode [ 22.209765][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.216813][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.224107][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.231166][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.308263][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.315717][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.335135][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.342175][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.352733][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.359761][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.407527][ T289] veth0_vlan: entered promiscuous mode [ 22.428198][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.435241][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.443576][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.450613][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.465701][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.472748][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.480601][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.487651][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.501712][ T289] veth1_macvtap: entered promiscuous mode [ 22.528057][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.535096][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.544905][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.551958][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.587064][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.602984][ T293] veth0_vlan: entered promiscuous mode [ 22.614060][ T294] veth0_vlan: entered promiscuous mode [ 22.636130][ T293] veth1_macvtap: entered promiscuous mode [ 22.652996][ T295] veth0_vlan: entered promiscuous mode [ 22.678331][ T294] veth1_macvtap: entered promiscuous mode [ 22.681090][ T336] raw_sendmsg: syz.3.5 forgot to set AF_INET. Fix it! [ 22.698713][ T295] veth1_macvtap: entered promiscuous mode [ 22.734790][ T340] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 22.814779][ T350] rust_binder: Error while translating object. [ 22.814827][ T350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 22.826223][ T350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:2 [ 22.841869][ T356] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 22.853642][ T356] rust_binder: Read failure Err(EFAULT) in pid:10 [ 22.887810][ T364] binder: Bad value for 'max' [ 22.896675][ T365] rust_binder: Error while translating object. [ 22.899051][ T365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 22.917350][ T365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4 [ 22.941659][ T369] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 22.967590][ T369] rust_binder: Error while translating object. [ 22.967627][ T369] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 22.974122][ T369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 22.997148][ T371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:8 [ 23.024344][ T376] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.119228][ T382] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 23.126185][ T330] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 23.161018][ T361] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.270908][ T330] usb 3-1: device descriptor read/64, error -71 [ 23.310906][ T361] usb 4-1: Using ep0 maxpacket: 16 [ 23.317023][ T361] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 23.325344][ T361] usb 4-1: config 0 has no interface number 0 [ 23.332919][ T361] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 23.346776][ T361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.359386][ T361] usb 4-1: Product: syz [ 23.363694][ T361] usb 4-1: Manufacturer: syz [ 23.368369][ T361] usb 4-1: SerialNumber: syz [ 23.385313][ T361] usb 4-1: config 0 descriptor?? [ 23.428189][ T404] rust_binder: Write failure EFAULT in pid:23 [ 23.446527][ T411] random: crng reseeded on system resumption [ 23.468845][ T13] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 23.476892][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 23.520886][ T330] usb 3-1: device descriptor read/64, error -71 [ 23.548658][ T412] Zero length message leads to an empty skb [ 23.594344][ T361] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 23.600753][ T361] usb 4-1: No valid video chain found. [ 23.608246][ T361] usb 4-1: USB disconnect, device number 2 [ 23.626097][ T422] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.626181][ T422] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 23.760914][ T330] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 23.881011][ T65] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.900921][ T330] usb 3-1: device descriptor read/64, error -71 [ 24.032026][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.042574][ T65] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 24.051649][ T65] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 24.059656][ T65] usb 1-1: Manufacturer: syz [ 24.064935][ T65] usb 1-1: config 0 descriptor?? [ 24.070659][ T65] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 24.140917][ T330] usb 3-1: device descriptor read/64, error -71 [ 24.213325][ T427] rust_binder: Failed to allocate buffer. len:4248, is_oneway:true [ 24.213348][ T427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 24.221318][ T427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:17 [ 24.231100][ T427] ======================================================= [ 24.231100][ T427] WARNING: The mand mount option has been deprecated and [ 24.231100][ T427] and is ignored by this kernel. Remove the mand [ 24.231100][ T427] option from the mount to silence this warning. [ 24.231100][ T427] ======================================================= [ 24.251068][ T330] usb usb3-port1: attempt power cycle [ 24.610920][ T330] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 24.632144][ T330] usb 3-1: device descriptor read/8, error -71 [ 24.761922][ T330] usb 3-1: device descriptor read/8, error -71 [ 24.940539][ T429] overlayfs: statfs failed on './file0' [ 24.974773][ T434] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 24.974797][ T434] rust_binder: Error in use_page_slow: EBUSY [ 24.985153][ T434] rust_binder: use_range failure EBUSY [ 24.991183][ T434] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 24.996647][ T434] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 25.004571][ T330] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 25.004619][ T434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:23 [ 25.031918][ T330] usb 3-1: device descriptor read/8, error -71 [ 25.171964][ T330] usb 3-1: device descriptor read/8, error -71 [ 25.280958][ T330] usb usb3-port1: unable to enumerate USB device [ 25.530925][ T415] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 25.530935][ T416] Bluetooth: hci0: command 0x1003 tx timeout [ 25.565545][ T36] kauditd_printk_skb: 100 callbacks suppressed [ 25.565560][ T36] audit: type=1400 audit(1760498941.750:174): avc: denied { create } for pid=438 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 25.603940][ T36] audit: type=1400 audit(1760498941.790:175): avc: denied { nlmsg_write } for pid=440 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 25.624589][ T36] audit: type=1400 audit(1760498941.790:176): avc: denied { create } for pid=440 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 25.697588][ T36] audit: type=1400 audit(1760498941.880:177): avc: denied { write } for pid=444 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 25.717266][ T36] audit: type=1400 audit(1760498941.880:178): avc: denied { create } for pid=444 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.736384][ T36] audit: type=1400 audit(1760498941.880:179): avc: denied { getopt } for pid=444 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.755541][ T36] audit: type=1400 audit(1760498941.880:180): avc: denied { ioctl } for pid=444 comm="syz.1.32" path="socket:[3052]" dev="sockfs" ino=3052 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.853891][ T36] audit: type=1400 audit(1760498942.040:181): avc: denied { getopt } for pid=447 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 25.873219][ T36] audit: type=1400 audit(1760498942.040:182): avc: denied { connect } for pid=447 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 25.892755][ T36] audit: type=1400 audit(1760498942.060:183): avc: denied { write } for pid=447 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 25.912259][ T448] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 25.919301][ T448] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 25.995703][ T451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 26.656310][ T330] usb 1-1: USB disconnect, device number 2 [ 26.856038][ T456] kvm: kvm [454]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 26.871108][ T461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.871140][ T461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 26.890789][ T463] binder: Unknown parameter '0x0000000000000000' [ 26.909458][ T463] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.39' sets config #-1 [ 27.024307][ T468] /dev/rnullb0: Can't open blockdev [ 27.690998][ T416] Bluetooth: hci0: command 0x1003 tx timeout [ 27.697102][ T415] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 27.701964][ T488] 9pnet_fd: Insufficient options for proto=fd [ 27.721634][ T488] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 27.743952][ T490] netlink: 'syz.2.46': attribute type 64 has an invalid length. [ 27.939456][ T495] binfmt_misc: register: failed to install interpreter file ./cgroup [ 28.004394][ T496] syz.1.49 (496): attempted to duplicate a private mapping with mremap. This is not supported. [ 28.042781][ T496] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.132543][ T498] netlink: 'syz.0.50': attribute type 12 has an invalid length. [ 28.155419][ T498] rust_binder: Write failure EFAULT in pid:57 [ 28.347601][ T515] rust_binder: 64: no such ref 3 [ 28.358774][ T515] rust_binder: 64: no such ref 1 [ 28.363859][ T515] rust_binder: Write failure EFAULT in pid:64 [ 28.458216][ T524] bridge0: entered allmulticast mode [ 28.469939][ T524] bridge0: left allmulticast mode [ 28.569791][ T528] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 28.850898][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.011761][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 29.012203][ T544] SELinux: ebitmap: truncated map [ 29.032361][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.032969][ T544] SELinux: failed to load policy [ 29.053189][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.080896][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.090026][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.113465][ T45] usb 1-1: config 0 descriptor?? [ 29.348250][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 29.354607][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 29.371736][ T45] usb 1-1: USB disconnect, device number 3 [ 29.431000][ T417] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.497480][ T584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 29.517934][ T590] rust_binder: Error while translating object. [ 29.517958][ T590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 29.524291][ T590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:84 [ 29.601865][ T417] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.621208][ T417] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 29.635509][ T417] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 29.644776][ T417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.652933][ T417] usb 4-1: Product: syz [ 29.657090][ T417] usb 4-1: Manufacturer: syz [ 29.661705][ T417] usb 4-1: SerialNumber: syz [ 29.666865][ T417] usb 4-1: config 0 descriptor?? [ 29.672803][ T417] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 29.747574][ T608] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.748666][ T607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46 [ 29.748667][ T608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46 [ 29.774837][ T610] __vm_enough_memory: pid: 610, comm: syz.2.87, bytes: 18014402804453376 not enough memory for the allocation [ 29.780916][ T65] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 29.807469][ T612] rust_binder: Write failure EINVAL in pid:51 [ 29.820910][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.874321][ T561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 29.952233][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.960221][ T65] usb 2-1: not running at top speed; connect to a high speed hub [ 29.968668][ T65] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.978774][ T65] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.988739][ T45] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.999654][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 30.006285][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 30.015433][ T65] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.024747][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.032756][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.040878][ T65] usb 2-1: Product: syz [ 30.045033][ T65] usb 2-1: Manufacturer: syz [ 30.049606][ T65] usb 2-1: SerialNumber: syz [ 30.054781][ T45] usb 1-1: config 0 descriptor?? [ 30.263016][ T592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.271537][ T592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.399506][ T65] usb 2-1: 0:2 : does not exist [ 30.410013][ T65] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 30.421295][ T65] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 30.431098][ T65] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 30.440375][ T65] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 30.449803][ T65] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 30.459117][ T65] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 30.468789][ T65] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 30.480102][ T65] usb 2-1: 5:0: failed to get current value for ch 3 (-22) [ 30.491533][ T65] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 30.508180][ T65] usb 2-1: USB disconnect, device number 2 [ 30.525301][ T628] udevd[628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.590691][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 30.590718][ T36] audit: type=1400 audit(1760498946.770:247): avc: denied { write } for pid=632 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.616475][ T635] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.652797][ T642] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.659254][ T642] rust_binder: Read failure Err(EFAULT) in pid:103 [ 30.695886][ T646] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 30.745636][ T648] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.757968][ T36] audit: type=1400 audit(1760498946.940:248): avc: denied { setopt } for pid=647 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.775296][ T648] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 30.777167][ T648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 30.777351][ T36] audit: type=1400 audit(1760498946.940:249): avc: denied { bind } for pid=647 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.785559][ T648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:107 [ 30.941373][ T36] audit: type=1400 audit(1760498947.130:250): avc: denied { bind } for pid=657 comm="syz.2.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.949501][ T667] process 'syz.1.104' launched './file1' with NULL argv: empty string added [ 30.950612][ T36] audit: type=1400 audit(1760498947.130:251): avc: denied { execute } for pid=665 comm="syz.1.104" name="file1" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.994170][ T668] rust_binder: Write failure EFAULT in pid:73 [ 31.013182][ T36] audit: type=1400 audit(1760498947.200:252): avc: denied { listen } for pid=657 comm="syz.2.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.712004][ T671] rust_binder: 76: no such ref 2 [ 31.717014][ T671] rust_binder: 76: no such ref 18 [ 31.722155][ T671] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 31.740908][ T36] audit: type=1400 audit(1760498947.920:253): avc: denied { wake_alarm } for pid=672 comm="syz.1.106" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.794446][ T36] audit: type=1400 audit(1760498947.980:254): avc: denied { nlmsg_read } for pid=674 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.908966][ T36] audit: type=1400 audit(1760498948.090:255): avc: denied { write } for pid=678 comm="syz.1.109" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.930589][ T36] audit: type=1400 audit(1760498948.090:256): avc: denied { add_name } for pid=678 comm="syz.1.109" name="custom0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.030898][ T417] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 32.183398][ T417] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 32.191008][ T417] usb 3-1: can't read configurations, error -71 [ 32.197992][ T65] usb 4-1: USB disconnect, device number 3 [ 32.267957][ T699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 32.276822][ T699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.115'. [ 32.470892][ T330] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.570920][ T65] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.595919][ T702] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 32.614040][ T9] usb 1-1: USB disconnect, device number 4 [ 32.620302][ T330] usb 2-1: device descriptor read/64, error -71 [ 32.724376][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.739659][ T709] batadv_slave_1: entered promiscuous mode [ 32.747564][ T709] batadv_slave_1: left promiscuous mode [ 32.774563][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.788298][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.809511][ T65] usb 4-1: Product: syz [ 32.819575][ T65] usb 4-1: Manufacturer: syz [ 32.826722][ T65] usb 4-1: SerialNumber: syz [ 32.848573][ T715] binder: Bad value for 'stats' [ 32.900884][ T330] usb 2-1: device descriptor read/64, error -71 [ 32.921000][ T718] x_tables: duplicate entry at hook 1 [ 32.931692][ T718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 33.150899][ T330] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.290907][ T330] usb 2-1: device descriptor read/64, error -71 [ 33.493796][ T730] rust_binder: Error while translating object. [ 33.493834][ T730] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 33.500006][ T730] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:109 [ 33.530893][ T330] usb 2-1: device descriptor read/64, error -71 [ 33.639891][ T738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88 [ 33.651727][ T330] usb usb2-port1: attempt power cycle [ 33.674987][ T65] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 33.685443][ T65] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 33.701045][ T65] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 33.815330][ T744] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 33.875411][ T699] rust_binder: 55: no such ref 3 [ 33.875443][ T700] syz.3.115 uses obsolete (PF_INET,SOCK_PACKET) [ 33.880377][ T699] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 33.880389][ T699] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 33.895903][ T745] tipc: Started in network mode [ 33.900681][ T699] rust_binder: Write failure EFAULT in pid:55 [ 33.905831][ T65] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 33.906146][ T745] tipc: Node identity , cluster identity 4711 [ 33.925022][ T745] tipc: Failed to set node id, please configure manually [ 33.932212][ T745] tipc: Enabling of bearer rejected, failed to enable media [ 33.943203][ T65] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 33.959318][ T65] usb 4-1: USB disconnect, device number 4 [ 33.965572][ T65] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 34.030901][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.060903][ T330] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.082615][ T330] usb 2-1: device descriptor read/8, error -71 [ 34.183046][ T45] usb 1-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 34.192165][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.201633][ T45] usb 1-1: config 0 descriptor?? [ 34.208404][ T45] usb-storage 1-1:0.0: USB Mass Storage device detected [ 34.216836][ T45] usb-storage 1-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 34.216836][ T45] Please send a copy of this message to and [ 34.227828][ T330] usb 2-1: device descriptor read/8, error -71 [ 34.452492][ T749] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 34.459788][ T749] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 34.480916][ T330] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 34.503072][ T330] usb 2-1: device descriptor read/8, error -71 [ 34.638009][ T330] usb 2-1: device descriptor read/8, error -71 [ 34.761885][ T330] usb usb2-port1: unable to enumerate USB device [ 34.840898][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.874061][ T776] binder: Unknown parameter ' ' [ 34.990877][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 34.998844][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 35.011580][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 35.023561][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 35.037993][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 35.048230][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.057058][ T9] usb 4-1: Product: syz [ 35.062016][ T9] usb 4-1: Manufacturer: syz [ 35.066667][ T9] usb 4-1: SerialNumber: syz [ 35.074315][ T9] usb 4-1: config 0 descriptor?? [ 35.323071][ T9] usb 4-1: USB disconnect, device number 5 [ 35.483859][ T784] rust_binder: Error while translating object. [ 35.483925][ T784] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.493995][ T784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 35.602371][ T36] kauditd_printk_skb: 454 callbacks suppressed [ 35.602389][ T36] audit: type=1400 audit(1760498951.790:711): avc: denied { read write } for pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.703053][ T36] audit: type=1400 audit(1760498951.830:712): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.758165][ T36] audit: type=1400 audit(1760498951.830:713): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.784253][ T36] audit: type=1400 audit(1760498951.880:714): avc: denied { create } for pid=788 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.815358][ T36] audit: type=1400 audit(1760498951.930:715): avc: denied { read write } for pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.859604][ T36] audit: type=1400 audit(1760498951.930:716): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.890914][ T36] audit: type=1400 audit(1760498951.930:717): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.917971][ T36] audit: type=1400 audit(1760498951.940:718): avc: denied { read write } for pid=781 comm="syz.3.142" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.944656][ T793] rust_binder: Write failure EFAULT in pid:147 [ 35.959376][ T36] audit: type=1400 audit(1760498951.940:719): avc: denied { read write open } for pid=781 comm="syz.3.142" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 36.015252][ T36] audit: type=1400 audit(1760498951.940:720): avc: denied { map } for pid=781 comm="syz.3.142" path="/proc/71/maps" dev="proc" ino=7385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 36.145891][ T802] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 36.145922][ T802] rust_binder: Error in use_page_slow: EBUSY [ 36.166482][ T802] rust_binder: use_range failure EBUSY [ 36.174283][ T802] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 36.179846][ T802] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 36.188974][ T802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:112 [ 36.450542][ T812] netlink: 'syz.3.153': attribute type 63 has an invalid length. [ 36.467552][ T812] netlink: 5 bytes leftover after parsing attributes in process `syz.3.153'. [ 36.481823][ T727] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 36.642785][ T727] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 36.654545][ T727] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 84 [ 36.664527][ T727] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 36.673603][ T727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.685141][ T805] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 36.710918][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 36.785450][ T727] usb 1-1: USB disconnect, device number 5 [ 36.878970][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 36.898891][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 36.948245][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 36.977645][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.999201][ T827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.010880][ T9] usb 4-1: Product: syz [ 37.015761][ T827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.020926][ T9] usb 4-1: Manufacturer: syz [ 37.038223][ T9] usb 4-1: SerialNumber: syz [ 37.051067][ T829] netlink: 'syz.0.158': attribute type 4 has an invalid length. [ 37.056278][ T9] usb 4-1: config 0 descriptor?? [ 37.060836][ T829] netlink: 'syz.0.158': attribute type 2 has an invalid length. [ 37.230885][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 37.287265][ T832] overlay: Bad value for 'xino' [ 37.300927][ T832] syz.0.159 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.300953][ T9] usb 4-1: USB disconnect, device number 6 [ 37.337415][ T832] rust_binder: Read failure Err(EAGAIN) in pid:127 [ 37.380723][ T628] udevd[628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 37.404662][ T45] usb 3-1: device descriptor read/64, error -71 [ 37.650891][ T45] usb 3-1: device descriptor read/64, error -71 [ 37.890876][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 38.040884][ T45] usb 3-1: device descriptor read/64, error -71 [ 38.104548][ T841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.119409][ T841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.141153][ T841] rust_binder: Write failure EFAULT in pid:84 [ 38.141430][ T842] rust_binder: Write failure EFAULT in pid:84 [ 38.280890][ T45] usb 3-1: device descriptor read/64, error -71 [ 38.330884][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 38.411341][ T45] usb usb3-port1: attempt power cycle [ 38.493230][ T9] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 38.504742][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 38.523263][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.532334][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.540329][ T9] usb 4-1: Product: syz [ 38.544517][ T9] usb 4-1: Manufacturer: syz [ 38.549114][ T9] usb 4-1: SerialNumber: syz [ 38.750902][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 38.762012][ T9] cdc_ncm 4-1:1.0: bind() failure [ 38.778008][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 38.790047][ T45] usb 3-1: device descriptor read/8, error -71 [ 38.792951][ T9] cdc_ncm 4-1:1.1: bind() failure [ 38.810947][ T9] usb 4-1: USB disconnect, device number 7 [ 38.923428][ T45] usb 3-1: device descriptor read/8, error -71 [ 39.160907][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 39.186689][ T45] usb 3-1: device descriptor read/8, error -71 [ 39.195110][ T727] usb 2-1: USB disconnect, device number 7 [ 39.252915][ T844] netlink: 'syz.1.163': attribute type 46 has an invalid length. [ 39.261575][ T844] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.261592][ T844] rust_binder: Read failure Err(EFAULT) in pid:154 [ 39.274343][ T845] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.289207][ T845] rust_binder: Read failure Err(EFAULT) in pid:154 [ 39.343279][ T45] usb 3-1: device descriptor read/8, error -71 [ 39.493026][ T45] usb usb3-port1: unable to enumerate USB device [ 39.563992][ T853] kvm_intel: kvm [852]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x20000007edd [ 40.010930][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.156670][ T871] netlink: 44 bytes leftover after parsing attributes in process `syz.1.172'. [ 40.200897][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 40.211133][ T45] usb 4-1: config 11 has an invalid interface number: 61 but max is 3 [ 40.219759][ T45] usb 4-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 40.228638][ T45] usb 4-1: config 11 has an invalid interface number: 50 but max is 3 [ 40.236912][ T45] usb 4-1: config 11 has an invalid interface number: 171 but max is 3 [ 40.245217][ T45] usb 4-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 40.254091][ T45] usb 4-1: config 11 has an invalid interface number: 121 but max is 3 [ 40.262956][ T45] usb 4-1: config 11 has no interface number 0 [ 40.269216][ T45] usb 4-1: config 11 has no interface number 1 [ 40.275954][ T45] usb 4-1: config 11 has no interface number 2 [ 40.282230][ T45] usb 4-1: config 11 has no interface number 3 [ 40.288427][ T45] usb 4-1: config 11 interface 61 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 40.299218][ T45] usb 4-1: config 11 interface 61 altsetting 7 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 40.310185][ T45] usb 4-1: config 11 interface 50 altsetting 1 endpoint 0xD has invalid maxpacket 3071, setting to 64 [ 40.321242][ T45] usb 4-1: config 11 interface 50 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 40.332780][ T45] usb 4-1: config 11 interface 50 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 40.344110][ T45] usb 4-1: config 11 interface 50 altsetting 1 endpoint 0xA has invalid maxpacket 584, setting to 64 [ 40.355083][ T45] usb 4-1: config 11 interface 50 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 40.365868][ T45] usb 4-1: config 11 interface 50 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 40.376829][ T45] usb 4-1: config 11 interface 50 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 40.387980][ T45] usb 4-1: config 11 interface 50 altsetting 1 endpoint 0xF has an invalid bInterval 180, changing to 7 [ 40.399204][ T727] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 40.406803][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.414368][ T45] usb 4-1: config 11 interface 171 altsetting 13 has an endpoint descriptor with address 0x16, changing to 0x6 [ 40.428407][ T45] usb 4-1: config 11 interface 171 altsetting 13 has a duplicate endpoint with address 0x6, skipping [ 40.439296][ T45] usb 4-1: config 11 interface 171 altsetting 13 has a duplicate endpoint with address 0xD, skipping [ 40.450183][ T45] usb 4-1: config 11 interface 171 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 40.461232][ T45] usb 4-1: config 11 interface 171 altsetting 13 endpoint 0x2 has an invalid bInterval 147, changing to 7 [ 40.472570][ T45] usb 4-1: config 11 interface 171 altsetting 13 has a duplicate endpoint with address 0xD, skipping [ 40.483430][ T45] usb 4-1: config 11 interface 171 altsetting 13 has an endpoint descriptor with address 0x51, changing to 0x1 [ 40.495430][ T45] usb 4-1: config 11 interface 171 altsetting 13 endpoint 0x1 has invalid maxpacket 45963, setting to 1024 [ 40.506841][ T45] usb 4-1: config 11 interface 171 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 1024 [ 40.517117][ T45] usb 4-1: config 11 interface 171 altsetting 13 has a duplicate endpoint with address 0x4, skipping [ 40.528027][ T45] usb 4-1: config 11 interface 171 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 40.538936][ T45] usb 4-1: config 11 interface 171 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 40.560934][ T45] usb 4-1: config 11 interface 171 altsetting 13 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 40.574321][ T45] usb 4-1: config 11 interface 121 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 40.585246][ T45] usb 4-1: config 11 interface 121 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 40.604805][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 40.616003][ T36] kauditd_printk_skb: 541 callbacks suppressed [ 40.616042][ T36] audit: type=1400 audit(1760498956.800:1262): avc: denied { ioctl } for pid=866 comm="syz.2.170" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.646925][ T727] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.654594][ T45] usb 4-1: config 11 interface 121 altsetting 15 has a duplicate endpoint with address 0x5, skipping [ 40.665524][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 40.678531][ T45] usb 4-1: config 11 interface 121 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 40.689460][ T727] usb 3-1: not running at top speed; connect to a high speed hub [ 40.697217][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 40.702577][ T36] audit: type=1400 audit(1760498956.810:1263): avc: denied { ioctl } for pid=870 comm="syz.1.172" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.706325][ T45] usb 4-1: config 11 interface 121 altsetting 15 has a duplicate endpoint with address 0x1, skipping [ 40.741899][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.741934][ T36] audit: type=1400 audit(1760498956.810:1264): avc: denied { ioctl } for pid=866 comm="syz.2.170" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.762683][ T31] usb 2-1: config 0 descriptor?? [ 40.775860][ T36] audit: type=1400 audit(1760498956.810:1265): avc: denied { read } for pid=875 comm="syz.0.174" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.781954][ T727] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.812484][ T45] usb 4-1: config 11 interface 121 altsetting 15 has a duplicate endpoint with address 0x5, skipping [ 40.825529][ T45] usb 4-1: config 11 interface 121 altsetting 15 has a duplicate endpoint with address 0x9, skipping [ 40.843745][ T727] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 40.853229][ T727] usb 3-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.873881][ T36] audit: type=1400 audit(1760498956.810:1266): avc: denied { read open } for pid=875 comm="syz.0.174" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.880876][ T45] usb 4-1: config 11 interface 121 altsetting 15 has an endpoint descriptor with address 0x65, changing to 0x5 [ 40.909925][ T878] rust_binder: Write failure EINVAL in pid:137 [ 40.918768][ T727] usb 3-1: config 1 interface 0 has no altsetting 0 [ 40.933554][ T45] usb 4-1: config 11 interface 121 altsetting 15 has a duplicate endpoint with address 0x5, skipping [ 40.937579][ T36] audit: type=1400 audit(1760498956.830:1267): avc: denied { ioctl } for pid=875 comm="syz.0.174" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.945858][ T45] usb 4-1: config 11 interface 121 altsetting 15 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 40.987684][ T45] usb 4-1: config 11 interface 61 has no altsetting 0 [ 40.996662][ T727] usb 3-1: string descriptor 0 read error: -22 [ 41.003267][ T727] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.009996][ T36] audit: type=1400 audit(1760498956.870:1268): avc: denied { ioctl } for pid=866 comm="syz.2.170" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.015123][ T727] usb 3-1: New USB device strings: Mfr=15, Product=2, SerialNumber=11 [ 41.048076][ T45] usb 4-1: config 11 interface 50 has no altsetting 0 [ 41.056146][ T45] usb 4-1: config 11 interface 171 has no altsetting 0 [ 41.062773][ T36] audit: type=1400 audit(1760498956.880:1269): avc: denied { ioctl } for pid=866 comm="syz.2.170" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.070898][ T45] usb 4-1: config 11 interface 121 has no altsetting 0 [ 41.087689][ T36] audit: type=1400 audit(1760498956.880:1270): avc: denied { read write } for pid=875 comm="syz.0.174" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.139900][ T45] usb 4-1: New USB device found, idVendor=0bda, idProduct=817f, bcdDevice=ff.ea [ 41.147865][ T36] audit: type=1400 audit(1760498956.880:1271): avc: denied { read write open } for pid=875 comm="syz.0.174" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.159096][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.187747][ T45] usb 4-1: Product: ញᵇ뫼䪝⣵菳斻抬㲓澠㟣뤑果뭥㚿鴷ꂊ䝏颱٢㘰硸ᮙ빴陱詩圷땝踟櫛蝯㔛⵿ꮫ⃣䘼鴟愐ᢲ팞惲ᾬ绸藼㱔물ཾ㺼 [ 41.214217][ T45] usb 4-1: Manufacturer: 㐉 [ 41.231195][ T45] usb 4-1: SerialNumber: syz [ 41.250825][ T31] wacom 0003:056A:0315.0001: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 41.262595][ T31] wacom 0003:056A:0315.0001: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.1-1/input0 [ 41.281984][ T31] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0315.0001/input/input6 [ 41.335019][ T31] usb 3-1: USB disconnect, device number 12 [ 41.430891][ T330] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.467328][ T871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.487353][ T871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.507601][ T871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.516101][ T871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.527733][ T871] /dev/rnullb0: Can't open blockdev [ 41.535568][ T31] usb 2-1: USB disconnect, device number 8 [ 41.580900][ T330] usb 1-1: Using ep0 maxpacket: 32 [ 41.592271][ T330] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 41.606310][ T330] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 41.615719][ T330] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 41.625282][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.635446][ T330] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 41.645614][ T330] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 41.658696][ T330] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 41.667744][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.677274][ T330] usb 1-1: config 0 descriptor?? [ 41.711560][ T45] usb 4-1: USB disconnect, device number 8 [ 41.895687][ T885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.916114][ T885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.938587][ T330] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 41.950329][ T330] usb 1-1: USB disconnect, device number 6 [ 41.959956][ T330] usblp0: removed [ 42.131000][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 42.280879][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 42.293275][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.311648][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.340885][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 42.360055][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.381135][ T45] usb 3-1: config 0 descriptor?? [ 42.388248][ T45] hub 3-1:0.0: USB hub found [ 42.521884][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 42.589354][ T45] hub 3-1:0.0: 1 port detected [ 42.670869][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 42.678104][ T31] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 42.687002][ T31] usb 4-1: config 0 has no interface number 0 [ 42.693130][ T31] usb 4-1: config 0 interface 214 has no altsetting 0 [ 42.703159][ T31] usb 4-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 42.713766][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.721819][ T31] usb 4-1: Product: syz [ 42.726000][ T31] usb 4-1: Manufacturer: syz [ 42.730613][ T31] usb 4-1: SerialNumber: syz [ 42.737222][ T31] usb 4-1: config 0 descriptor?? [ 42.744151][ T31] ax88179_178a 4-1:0.214: probe with driver ax88179_178a failed with error -22 [ 42.823192][ T912] batadv_slave_1: entered promiscuous mode [ 42.950698][ T895] netlink: 5308 bytes leftover after parsing attributes in process `syz.3.181'. [ 42.984391][ T895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:94 [ 43.006619][ T330] usb 4-1: USB disconnect, device number 9 [ 43.070912][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.193767][ T45] hub 3-1:0.0: activate --> -90 [ 43.220872][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 43.227955][ T31] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 43.236350][ T31] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 43.245091][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 43.254202][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 43.263862][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 43.273516][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 43.286493][ T31] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 43.295542][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.305068][ T31] usb 1-1: config 0 descriptor?? [ 43.378363][ T914] netlink: 72 bytes leftover after parsing attributes in process `syz.1.188'. [ 43.433166][ T919] fuseblk: Bad value for 'source' [ 43.439636][ T919] rust_binder: 195: no such ref 3 [ 43.445506][ T919] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 43.453290][ T919] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 43.460335][ T919] rust_binder: Write failure EFAULT in pid:195 [ 43.501503][ T921] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 43.518466][ T921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 43.523040][ T921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.532496][ T31] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 43.564781][ T31] usb 1-1: USB disconnect, device number 7 [ 43.566604][ T921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:197 [ 43.574216][ T31] usblp0: removed [ 43.597872][ T727] usb 3-1: USB disconnect, device number 13 [ 44.020912][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 44.173326][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 44.192352][ T31] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 44.216531][ T31] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 44.232547][ T951] rust_binder: Error while translating object. [ 44.232570][ T951] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 44.238811][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 44.258274][ T951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:128 [ 44.260773][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.282095][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 44.299326][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.312439][ T31] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 44.321556][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.332160][ T31] usb 1-1: config 0 descriptor?? [ 44.434722][ T958] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.450887][ T330] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 44.500491][ T961] rust_binder: 99: no such ref 1 [ 44.505549][ T961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:99 [ 44.546933][ T912] /dev/rnullb0: Can't open blockdev [ 44.564984][ T912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.580683][ T912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.590548][ T912] batadv_slave_1: left promiscuous mode [ 44.598481][ T31] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 44.617022][ T31] usb 1-1: USB disconnect, device number 8 [ 44.629745][ T31] usblp0: removed [ 44.631503][ T330] usb 2-1: config 2 has an invalid interface number: 253 but max is 0 [ 44.650887][ T330] usb 2-1: config 2 has no interface number 0 [ 44.660892][ T330] usb 2-1: config 2 interface 253 altsetting 5 has an endpoint descriptor with address 0x11, changing to 0x1 [ 44.687747][ T330] usb 2-1: config 2 interface 253 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 44.709472][ T330] usb 2-1: config 2 interface 253 has no altsetting 0 [ 44.733012][ T330] usb 2-1: New USB device found, idVendor=0424, idProduct=9505, bcdDevice=4e.de [ 44.750067][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.766963][ T330] usb 2-1: Product: syz [ 44.781324][ T330] usb 2-1: Manufacturer: syz [ 44.794134][ T330] usb 2-1: SerialNumber: syz [ 45.010890][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 45.078209][ T330] smsc95xx v2.0.0 [ 45.082377][ T330] smsc95xx 2-1:2.253 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 45.110514][ T330] smsc95xx 2-1:2.253: probe with driver smsc95xx failed with error -22 [ 45.138337][ T330] usb 2-1: USB disconnect, device number 9 [ 45.180902][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 45.205129][ T45] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 45.233960][ T45] usb 3-1: config 0 has no interface number 0 [ 45.258958][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 45.279137][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.294844][ T45] usb 3-1: Product: syz [ 45.299075][ T45] usb 3-1: Manufacturer: syz [ 45.303714][ T45] usb 3-1: SerialNumber: syz [ 45.309932][ T45] usb 3-1: config 0 descriptor?? [ 45.632529][ T36] kauditd_printk_skb: 710 callbacks suppressed [ 45.632547][ T36] audit: type=1400 audit(1760498961.820:1964): avc: denied { read write } for pid=989 comm="syz.3.210" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.707606][ T36] audit: type=1400 audit(1760498961.870:1965): avc: denied { read write open } for pid=989 comm="syz.3.210" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.746851][ T36] audit: type=1400 audit(1760498961.870:1966): avc: denied { ioctl } for pid=989 comm="syz.3.210" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.773583][ T986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:163 [ 45.781818][ T45] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 45.807823][ T36] audit: type=1400 audit(1760498961.870:1967): avc: denied { ioctl } for pid=989 comm="syz.3.210" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.840978][ T45] usb 3-1: No valid video chain found. [ 45.853260][ T36] audit: type=1400 audit(1760498961.870:1968): avc: denied { ioctl } for pid=989 comm="syz.3.210" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.858905][ T45] usb 3-1: USB disconnect, device number 14 [ 45.886580][ T36] audit: type=1400 audit(1760498961.870:1969): avc: denied { ioctl } for pid=989 comm="syz.3.210" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.911958][ T36] audit: type=1400 audit(1760498961.910:1970): avc: denied { read write } for pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.940919][ T727] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 46.011711][ T36] audit: type=1400 audit(1760498961.910:1971): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.048217][ T36] audit: type=1400 audit(1760498961.910:1972): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.101446][ T999] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 46.103491][ T727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 46.129482][ T36] audit: type=1400 audit(1760498961.960:1973): avc: denied { ioctl } for pid=985 comm="syz.0.209" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 46.132745][ T1000] rust_binder: 238: no such ref 1 [ 46.160795][ T727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 46.181565][ T727] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 46.197820][ T727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.200926][ T1000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 46.215260][ T727] usb 4-1: SerialNumber: syz [ 46.245795][ T727] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 46.261928][ T727] usb-storage 4-1:1.0: USB Mass Storage device detected [ 46.275129][ T727] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 46.287115][ T727] scsi host1: usb-storage 4-1:1.0 [ 46.349027][ T1012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:138 [ 46.402499][ T1006] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 200, size: 226) [ 46.423578][ T1006] rust_binder: Error while translating object. [ 46.434169][ T1006] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.440330][ T1006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 46.456369][ T1013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.550881][ T417] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 46.712690][ T417] usb 2-1: not running at top speed; connect to a high speed hub [ 46.722475][ T417] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 46.737556][ T417] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.747114][ T417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.755136][ T417] usb 2-1: Product: syz [ 46.759297][ T417] usb 2-1: Manufacturer: syz [ 46.763909][ T417] usb 2-1: SerialNumber: syz [ 46.772581][ T1009] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 46.985129][ T329] tipc: Subscription rejected, illegal request [ 46.993962][ T417] cdc_ncm 2-1:1.0: bind() failure [ 47.000120][ T417] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 47.007065][ T417] cdc_ncm 2-1:1.1: bind() failure [ 47.013284][ T417] usb 2-1: USB disconnect, device number 10 [ 47.427163][ T1036] rust_binder: Write failure EFAULT in pid:188 [ 47.467093][ T1038] 9pnet_fd: Insufficient options for proto=fd [ 47.540884][ T727] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 47.724190][ T1048] rust_binder: validate_parent_fixup: new_min_offset=52, sg_entry.length=0 [ 47.724214][ T1048] rust_binder: Error while translating object. [ 47.728111][ T727] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.744173][ T1048] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.774096][ T1048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 47.780879][ T727] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 47.817051][ T727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.829015][ T727] usb 3-1: config 0 descriptor?? [ 47.866790][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.244228][ T727] sony 0003:054C:0268.0002: unbalanced delimiter at end of report description [ 48.267614][ T727] sony 0003:054C:0268.0002: parse failed [ 48.274042][ T727] sony 0003:054C:0268.0002: probe with driver sony failed with error -22 [ 48.488676][ T1027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.497173][ T1027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.506702][ T417] usb 3-1: USB disconnect, device number 15 [ 48.639412][ T10] usb 4-1: USB disconnect, device number 10 [ 48.785104][ T1064] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 48.792209][ T1064] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 49.004066][ T1072] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.077572][ T1071] rust_binder: Error while translating object. [ 49.087335][ T1071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 49.093543][ T1071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:120 [ 49.160859][ T727] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 49.168883][ T1079] rust_binder: Write failure EFAULT in pid:147 [ 49.192091][ T727] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.369297][ T1083] rust_binder: Write failure EINVAL in pid:149 [ 49.930894][ T416] Bluetooth: hci0: command 0x1003 tx timeout [ 49.937230][ T415] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.120902][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 50.271762][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 50.279319][ T10] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.293655][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 50.300345][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 50.310237][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.319889][ T10] usb 4-1: config 0 descriptor?? [ 50.514847][ T1116] kvm: user requested TSC rate below hardware speed [ 50.646550][ T36] kauditd_printk_skb: 648 callbacks suppressed [ 50.646567][ T36] audit: type=1326 audit(1760498966.830:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1120 comm="syz.1.252" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cf198eec9 code=0x0 [ 50.733001][ T36] audit: type=1400 audit(1760498966.920:2623): avc: denied { create } for pid=1098 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.753436][ T36] audit: type=1400 audit(1760498966.920:2624): avc: denied { write } for pid=1098 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.755449][ T10] wacom 0003:056A:009F.0004: unknown main item tag 0x0 [ 50.782494][ T10] wacom 0003:056A:009F.0004: unknown main item tag 0x0 [ 50.788416][ T36] audit: type=1400 audit(1760498966.920:2625): avc: denied { ioctl } for pid=1098 comm="syz.3.244" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.789411][ T10] wacom 0003:056A:009F.0004: unknown main item tag 0x0 [ 50.814515][ T36] audit: type=1400 audit(1760498966.920:2626): avc: denied { ioctl } for pid=1098 comm="syz.3.244" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.826141][ T10] wacom 0003:056A:009F.0004: unknown main item tag 0x0 [ 50.852668][ T10] wacom 0003:056A:009F.0004: unknown main item tag 0x0 [ 50.859538][ T10] wacom 0003:056A:009F.0004: unknown main item tag 0x0 [ 50.868201][ T10] wacom 0003:056A:009F.0004: hidraw0: USB HID v2b.27 Device [HID 056a:009f] on usb-dummy_hcd.3-1/input0 [ 50.961146][ T36] audit: type=1400 audit(1760498967.150:2627): avc: denied { read } for pid=1098 comm="syz.3.244" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.964715][ T1099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.987453][ T36] audit: type=1400 audit(1760498967.150:2628): avc: denied { read open } for pid=1098 comm="syz.3.244" path="/dev/binderfs/binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.003900][ T1099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.018229][ T36] audit: type=1400 audit(1760498967.150:2629): avc: denied { ioctl } for pid=1098 comm="syz.3.244" path="/dev/binderfs/binder1" dev="binder" ino=23 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.033019][ T45] usb 4-1: USB disconnect, device number 11 [ 51.050308][ T36] audit: type=1400 audit(1760498967.150:2630): avc: denied { set_context_mgr } for pid=1098 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 51.076746][ T36] audit: type=1400 audit(1760498967.150:2631): avc: denied { read write } for pid=1098 comm="syz.3.244" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.199600][ T1132] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 52.684373][ T1183] SELinux: security_context_str_to_sid (sym_uGй) failed with errno=-22 [ 52.785645][ T1186] netlink: 'syz.3.272': attribute type 28 has an invalid length. [ 53.051128][ T425] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 53.205517][ T425] usb 4-1: config 192 has an invalid interface number: 162 but max is 0 [ 53.213942][ T425] usb 4-1: config 192 has no interface number 0 [ 53.220216][ T425] usb 4-1: config 192 interface 162 has no altsetting 0 [ 53.230053][ T425] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 53.239117][ T425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.247157][ T425] usb 4-1: Product: syz [ 53.251343][ T425] usb 4-1: Manufacturer: syz [ 53.255929][ T425] usb 4-1: SerialNumber: syz [ 53.359481][ T1200] binder: Unknown parameter 'ma' [ 53.827488][ T1186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 53.827524][ T1186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:133 [ 53.911632][ T1226] tipc: Enabling of bearer rejected, failed to enable media [ 54.150991][ T1243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1243 comm=syz.0.288 [ 54.259811][ T1240] 9pnet_fd: Insufficient options for proto=fd [ 54.393415][ T425] usb-storage 4-1:192.162: USB Mass Storage device detected [ 54.421233][ T425] usb-storage 4-1:192.162: device ignored [ 54.501798][ T425] usb 4-1: USB disconnect, device number 12 [ 55.399328][ T1280] 9pnet_fd: Insufficient options for proto=fd [ 55.542735][ T1306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.309'. [ 55.585124][ T1308] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 55.593345][ T1308] @0: renamed from bond_slave_1 [ 55.689557][ T36] kauditd_printk_skb: 384 callbacks suppressed [ 55.689575][ T36] audit: type=1400 audit(1760498971.780:3016): avc: denied { mounton } for pid=1309 comm="syz.0.311" path="/99/file0" dev="tmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.718779][ T36] audit: type=1400 audit(1760498971.780:3017): avc: denied { mount } for pid=1309 comm="syz.0.311" name="/" dev="incremental-fs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 55.750895][ T36] audit: type=1400 audit(1760498971.840:3018): avc: denied { create } for pid=1314 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.800584][ T1320] rust_binder: Write failure EFAULT in pid:288 [ 55.801520][ T36] audit: type=1400 audit(1760498971.840:3019): avc: denied { create } for pid=1314 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.829345][ T36] audit: type=1400 audit(1760498971.840:3020): avc: denied { write } for pid=1314 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.903174][ T36] audit: type=1400 audit(1760498971.840:3021): avc: denied { read } for pid=1314 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.927745][ T36] audit: type=1400 audit(1760498971.840:3022): avc: denied { read } for pid=1314 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.969742][ T1330] overlayfs: failed to clone upperpath [ 55.971905][ T1331] overlayfs: failed to clone upperpath [ 55.988137][ T36] audit: type=1400 audit(1760498971.840:3023): avc: denied { write } for pid=1314 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.010584][ T36] audit: type=1400 audit(1760498971.840:3024): avc: denied { create } for pid=1314 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.026709][ T1335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.030052][ T1335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:293 [ 56.033357][ T36] audit: type=1400 audit(1760498971.840:3025): avc: denied { write } for pid=1314 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.267554][ T1351] rust_binder: Write failure EINVAL in pid:300 [ 56.339097][ T1356] rust_binder: Error while translating object. [ 56.345381][ T1356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.352423][ T1356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:302 [ 56.381366][ T1361] 9pnet_fd: Insufficient options for proto=fd [ 56.531164][ T1374] binder: Bad value for 'stats' [ 56.691337][ T1380] loop6: detected capacity change from 0 to 9 [ 57.521843][ T1432] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.615269][ T1440] batadv_slave_1: entered promiscuous mode [ 57.704644][ T1442] batadv_slave_1: left promiscuous mode [ 57.878663][ T1473] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 57.897121][ T1474] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 57.910295][ T1473] 9pnet_fd: Insufficient options for proto=fd [ 57.933010][ T1477] netlink: 'syz.3.354': attribute type 27 has an invalid length. [ 57.988570][ T1477] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 58.642433][ T1510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'. [ 58.844258][ T1519] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 58.844291][ T1519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:173 [ 59.152224][ T1534] /dev/rnullb0: Can't open blockdev [ 59.294888][ T1551] /dev/rnullb0: Can't open blockdev [ 59.354676][ T1551] /dev/rnullb0: Can't open blockdev [ 59.790927][ T727] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 59.970875][ T727] usb 4-1: Using ep0 maxpacket: 32 [ 59.984597][ T727] usb 4-1: config 1 interface 0 altsetting 217 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 60.021061][ T727] usb 4-1: config 1 interface 0 altsetting 217 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.047363][ T727] usb 4-1: config 1 interface 0 has no altsetting 0 [ 60.059211][ T727] usb 4-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice= 0.40 [ 60.069796][ T727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.091672][ T727] usb 4-1: Product: э [ 60.095797][ T727] usb 4-1: Manufacturer: 㐁 [ 60.100408][ T727] usb 4-1: SerialNumber: syz [ 60.372858][ T1565] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.378324][ T1565] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 60.404488][ T727] usbhid 4-1:1.0: can't add hid device: -71 [ 60.422504][ T727] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 60.451826][ T727] usb 4-1: USB disconnect, device number 13 [ 60.458457][ T1613] rust_binder: Error while translating object. [ 60.458490][ T1613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 60.474897][ T1613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:400 [ 60.912949][ T36] kauditd_printk_skb: 1541 callbacks suppressed [ 60.912970][ T36] audit: type=1400 audit(1760498977.100:4567): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.976272][ T36] audit: type=1400 audit(1760498977.100:4568): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.010113][ T36] audit: type=1400 audit(1760498977.100:4569): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.065068][ T1633] overlayfs: failed to clone upperpath [ 61.083155][ T36] audit: type=1400 audit(1760498977.120:4570): avc: denied { create } for pid=1623 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.109073][ T36] audit: type=1400 audit(1760498977.120:4571): avc: denied { setopt } for pid=1623 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.160950][ T36] audit: type=1400 audit(1760498977.120:4572): avc: denied { write } for pid=1623 comm="syz.3.408" path="socket:[11195]" dev="sockfs" ino=11195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.186957][ T36] audit: type=1400 audit(1760498977.130:4573): avc: denied { write } for pid=1623 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.207425][ T36] audit: type=1400 audit(1760498977.130:4574): avc: denied { getopt } for pid=1623 comm="syz.3.408" lport=56020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.228024][ T36] audit: type=1400 audit(1760498977.130:4575): avc: denied { create } for pid=1623 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.247678][ T36] audit: type=1400 audit(1760498977.130:4576): avc: denied { setopt } for pid=1623 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.440860][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 81.440877][ T36] audit: type=1400 audit(1760498997.620:4607): avc: denied { create } for pid=1637 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.497474][ T1641] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.497732][ T1650] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.504065][ T36] audit: type=1400 audit(1760498997.620:4608): avc: denied { create } for pid=1637 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.513531][ T1650] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 81.529984][ T1641] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 81.539848][ T1650] audit: backlog limit exceeded [ 81.547134][ T1641] audit: backlog limit exceeded [ 81.553053][ T1653] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.562291][ T1653] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 81.773675][ T1665] overlayfs: failed to clone upperpath [ 81.779386][ T1666] netlink: 124 bytes leftover after parsing attributes in process `syz.1.417'. [ 81.790674][ T1666] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 81.790698][ T1666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 81.798744][ T1666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:409 [ 81.853976][ T1673] capability: warning: `syz.0.421' uses 32-bit capabilities (legacy support in use) [ 82.560716][ T1695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.567998][ T1695] IPv6: NLM_F_CREATE should be set when creating new route [ 82.575230][ T1695] IPv6: NLM_F_CREATE should be set when creating new route [ 82.669908][ T1697] overlayfs: failed to resolve 'fowner<00000000000000000000': -2 [ 82.801140][ T1706] tipc: Enabling of bearer rejected, failed to enable media [ 82.952594][ T1715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:420 [ 83.224436][ T1733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.440'. [ 83.272115][ T1735] x_tables: duplicate underflow at hook 1 [ 83.497576][ T1738] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.498479][ T1738] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.512742][ T1738] rust_binder: Read failure Err(EAGAIN) in pid:218 [ 83.980902][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 84.010158][ T1756] rust_binder: inc_ref_done called when no active inc_refs [ 84.140892][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 84.155833][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.166749][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.180844][ T45] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.209244][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.234181][ T45] usb 4-1: config 0 descriptor?? [ 84.330288][ T1766] rust_binder: Write failure EINVAL in pid:443 [ 84.423935][ T1773] loop7: detected capacity change from 0 to 7 [ 84.479487][ T51] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.488678][ T51] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.499285][ T1773] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.518917][ T1773] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.534157][ T1773] loop7: unable to read partition table [ 84.546523][ T1773] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 84.616276][ T1786] netlink: 'syz.1.457': attribute type 13 has an invalid length. [ 84.641501][ T1786] erspan0: refused to change device tx_queue_len [ 84.650401][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 84.670621][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 84.711790][ T45] usb 4-1: USB disconnect, device number 14 [ 85.237091][ T1826] devpts: called with bogus options [ 85.357372][ T1832] __vm_enough_memory: pid: 1832, comm: syz.3.470, bytes: 72057594021150720 not enough memory for the allocation [ 85.993661][ T1847] 9pnet_fd: Insufficient options for proto=fd [ 86.024130][ T1849] netlink: 'syz.3.476': attribute type 4 has an invalid length. [ 86.050865][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 86.071955][ T1853] devpts: called with bogus options [ 86.123520][ T1861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.123678][ T1859] rust_binder: Error while translating object. [ 86.130191][ T1859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 86.136815][ T1859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:244 [ 86.215712][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.236625][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.246436][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 86.258779][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.274638][ T9] usb 2-1: config 0 descriptor?? [ 86.324337][ T1874] binder: Unknown parameter 'context[7' [ 86.452395][ T36] kauditd_printk_skb: 599 callbacks suppressed [ 86.452414][ T36] audit: type=1400 audit(1760499002.640:5201): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.506257][ T36] audit: type=1400 audit(1760499002.640:5202): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.554505][ T36] audit: type=1400 audit(1760499002.640:5203): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.581192][ T36] audit: type=1400 audit(1760499002.720:5204): avc: denied { ioctl } for pid=1837 comm="syz.1.472" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.616387][ T36] audit: type=1400 audit(1760499002.720:5205): avc: denied { ioctl } for pid=1837 comm="syz.1.472" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.646741][ T36] audit: type=1400 audit(1760499002.750:5206): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.672454][ T36] audit: type=1400 audit(1760499002.750:5207): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.714236][ T36] audit: type=1400 audit(1760499002.750:5208): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.738644][ T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 86.741839][ T36] audit: type=1400 audit(1760499002.830:5209): avc: denied { read } for pid=1891 comm="syz.3.489" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.771036][ T36] audit: type=1400 audit(1760499002.830:5210): avc: denied { read open } for pid=1891 comm="syz.3.489" path="/dev/binderfs/binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.777236][ T9] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 86.846155][ T1896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1896 comm=syz.3.491 [ 86.947779][ T9] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 87.220990][ T1901] netlink: 'syz.3.493': attribute type 10 has an invalid length. [ 87.532192][ T1909] netlink: 'syz.2.496': attribute type 4 has an invalid length. [ 87.541978][ T1909] netlink: 'syz.2.496': attribute type 4 has an invalid length. [ 87.554350][ T9] cp2112 0003:10C4:EA90.0005: error reading lock byte: -32 [ 87.831198][ T1929] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 87.912469][ T1937] /dev/rnullb0: Can't open blockdev [ 88.297416][ T1969] 9pnet_fd: Insufficient options for proto=fd [ 88.512028][ T1977] cgroup: fork rejected by pids controller in /syz1 [ 88.683231][ T329] bridge_slave_1: left allmulticast mode [ 88.688987][ T329] bridge_slave_1: left promiscuous mode [ 88.691353][ T417] usb 2-1: USB disconnect, device number 11 [ 88.696028][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.731052][ T329] bridge_slave_0: left allmulticast mode [ 88.736736][ T329] bridge_slave_0: left promiscuous mode [ 88.751756][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.872621][ T2088] netlink: 'syz.2.524': attribute type 4 has an invalid length. [ 88.891316][ T329] veth1_macvtap: left promiscuous mode [ 88.901405][ T329] veth0_vlan: left promiscuous mode [ 89.921161][ T2119] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.922261][ T2119] netlink: 328 bytes leftover after parsing attributes in process `syz.3.532'. [ 91.501300][ T36] kauditd_printk_skb: 307 callbacks suppressed [ 91.501315][ T36] audit: type=1400 audit(1760499007.690:5518): avc: denied { ioctl } for pid=2147 comm="syz.3.542" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.540432][ T36] audit: type=1400 audit(1760499007.690:5519): avc: denied { create } for pid=2159 comm="syz.2.545" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.561879][ T36] audit: type=1400 audit(1760499007.690:5520): avc: denied { ioctl } for pid=2159 comm="syz.2.545" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13003 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.587795][ T36] audit: type=1400 audit(1760499007.690:5521): avc: denied { ioctl } for pid=2159 comm="syz.2.545" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13003 ioctlcmd=0xaa07 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.614277][ T36] audit: type=1400 audit(1760499007.720:5522): avc: denied { name_bind } for pid=2161 comm="syz.0.546" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 91.635837][ T36] audit: type=1400 audit(1760499007.800:5523): avc: denied { ioctl } for pid=2147 comm="syz.3.542" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.670888][ T417] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 91.678969][ T36] audit: type=1400 audit(1760499007.860:5524): avc: denied { ioctl } for pid=2147 comm="syz.3.542" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.703931][ T36] audit: type=1400 audit(1760499007.860:5525): avc: denied { ioctl } for pid=2147 comm="syz.3.542" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.728739][ T36] audit: type=1400 audit(1760499007.860:5526): avc: denied { ioctl } for pid=2147 comm="syz.3.542" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.761514][ T36] audit: type=1400 audit(1760499007.950:5527): avc: denied { ioctl } for pid=2147 comm="syz.3.542" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.843105][ T417] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.853199][ T417] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.864512][ T417] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 91.873586][ T417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.881585][ T417] usb 4-1: SerialNumber: syz [ 92.247470][ T417] usb 4-1: 0:2 : does not exist [ 92.255108][ T417] usb 4-1: USB disconnect, device number 15 [ 92.422688][ T1662] udevd[1662]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.211259][ T36] kauditd_printk_skb: 257 callbacks suppressed [ 97.211278][ T36] audit: type=1400 audit(1760499013.400:5785): avc: denied { execmem } for pid=2260 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 97.280298][ T36] audit: type=1400 audit(1760499013.460:5786): avc: denied { execmem } for pid=2261 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 97.332823][ T36] audit: type=1400 audit(1760499013.460:5787): avc: denied { sys_module } for pid=2261 comm="syz.2.573" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 97.356923][ T36] audit: type=1400 audit(1760499013.500:5788): avc: denied { mounton } for pid=2266 comm="syz.0.574" path="/176/file0" dev="tmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 97.380368][ T36] audit: type=1400 audit(1760499013.510:5789): avc: denied { read } for pid=2268 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.410855][ T36] audit: type=1400 audit(1760499013.510:5790): avc: denied { read open } for pid=2268 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.434721][ T36] audit: type=1400 audit(1760499013.510:5791): avc: denied { mounton } for pid=2268 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 97.456311][ T36] audit: type=1400 audit(1760499013.510:5792): avc: denied { sys_module } for pid=2268 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 97.477612][ T36] audit: type=1400 audit(1760499013.520:5793): avc: denied { sys_module } for pid=2268 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 97.498876][ T36] audit: type=1400 audit(1760499013.520:5794): avc: denied { create } for pid=2266 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.697126][ T2282] rust_binder: Error while translating object. [ 98.697168][ T2282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 98.706117][ T2281] tipc: Started in network mode [ 98.720360][ T2282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:314 [ 98.730454][ T2281] tipc: Node identity e61d09d7c2c7, cluster identity 4711 [ 98.760931][ T2281] tipc: Enabled bearer , priority 10 [ 99.049769][ T2302] binder: Unknown parameter 'max ' [ 99.880914][ T727] tipc: Node number set to 618269143 [ 100.600966][ T417] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 100.750892][ T417] usb 4-1: Using ep0 maxpacket: 16 [ 100.760493][ T417] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 100.769577][ T417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.777595][ T417] usb 4-1: Product: syz [ 100.782558][ T417] usb 4-1: Manufacturer: syz [ 100.787165][ T417] usb 4-1: SerialNumber: syz [ 100.795786][ T417] r8152-cfgselector 4-1: Unknown version 0x0000 [ 100.802435][ T417] r8152-cfgselector 4-1: config 0 descriptor?? [ 101.013776][ T2321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.022284][ T2321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.354181][ T417] r8152-cfgselector 4-1: USB disconnect, device number 16 [ 103.366630][ T36] kauditd_printk_skb: 352 callbacks suppressed [ 103.366645][ T36] audit: type=1400 audit(1760499019.550:6147): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.412042][ T36] audit: type=1400 audit(1760499019.580:6148): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.437591][ T36] audit: type=1400 audit(1760499019.580:6149): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.658614][ T36] audit: type=1400 audit(1760499019.840:6150): avc: denied { execmem } for pid=2351 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 103.687005][ T36] audit: type=1400 audit(1760499019.840:6151): avc: denied { create } for pid=2352 comm="syz.0.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.708287][ T36] audit: type=1400 audit(1760499019.840:6152): avc: denied { ioctl } for pid=2352 comm="syz.0.599" path="socket:[15382]" dev="sockfs" ino=15382 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.742500][ T36] audit: type=1400 audit(1760499019.840:6153): avc: denied { write } for pid=2352 comm="syz.0.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.765870][ T36] audit: type=1400 audit(1760499019.870:6154): avc: denied { read } for pid=2353 comm="syz.3.601" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.797410][ T36] audit: type=1400 audit(1760499019.870:6155): avc: denied { read open } for pid=2353 comm="syz.3.601" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.834096][ T36] audit: type=1400 audit(1760499019.870:6156): avc: denied { create } for pid=2353 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.970855][ T417] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 104.122622][ T417] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.133624][ T417] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.143368][ T417] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.149964][ T417] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 104.158996][ T417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.168293][ T417] usb 4-1: config 0 descriptor?? [ 104.579914][ T417] lenovo 0003:17EF:60A4.0006: hidraw0: USB HID v0.00 Device [HID 17ef:60a4] on usb-dummy_hcd.3-1/input0 [ 104.791561][ T2356] rust_binder: Error in use_page_slow: ESRCH [ 104.791579][ T2356] rust_binder: use_range failure ESRCH [ 104.797583][ T2356] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 104.803077][ T2356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 104.810999][ T2356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:328 [ 104.939337][ T727] usb 4-1: USB disconnect, device number 17 [ 105.533605][ T2375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.534430][ T2375] rust_binder: Error while translating object. [ 105.543623][ T2375] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 105.550490][ T2375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:333 [ 105.564309][ T2376] 9pnet_fd: Insufficient options for proto=fd [ 105.564486][ T2374] overlayfs: failed to clone upperpath [ 105.621010][ T2377] devpts: called with bogus options [ 106.030867][ T727] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 106.182874][ T727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 106.195109][ T727] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.204214][ T727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.212242][ T727] usb 4-1: Product: syz [ 106.216384][ T727] usb 4-1: Manufacturer: syz [ 106.220977][ T727] usb 4-1: SerialNumber: syz [ 106.226835][ T727] usb 4-1: config 0 descriptor?? [ 106.448387][ T727] usb 4-1: USB disconnect, device number 18 [ 106.498540][ T2362] udevd[2362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.532904][ T2394] EXT4-fs: dax option not supported [ 107.747097][ T2410] netlink: 'syz.3.614': attribute type 2 has an invalid length. [ 107.783428][ T2410] rust_binder: Write failure EFAULT in pid:345 [ 109.637604][ T36] kauditd_printk_skb: 177 callbacks suppressed [ 109.637624][ T36] audit: type=1400 audit(1760499025.820:6334): avc: denied { execmem } for pid=2418 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 109.672997][ T36] audit: type=1400 audit(1760499025.860:6335): avc: denied { create } for pid=2419 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.718814][ T36] audit: type=1400 audit(1760499025.860:6336): avc: denied { create } for pid=2420 comm="syz.2.618" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.769121][ T2433] netlink: 72 bytes leftover after parsing attributes in process `syz.3.620'. [ 109.780845][ T36] audit: type=1400 audit(1760499025.860:6337): avc: denied { map } for pid=2420 comm="syz.2.618" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.830851][ T36] audit: type=1400 audit(1760499025.860:6338): avc: denied { read write } for pid=2420 comm="syz.2.618" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.880844][ T36] audit: type=1400 audit(1760499025.860:6339): avc: denied { write } for pid=2419 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.927430][ T2439] 9pnet_fd: Insufficient options for proto=fd [ 109.938090][ T36] audit: type=1400 audit(1760499025.860:6340): avc: denied { nlmsg_write } for pid=2419 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.974820][ T36] audit: type=1400 audit(1760499025.860:6341): avc: denied { read } for pid=2421 comm="syz.3.619" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.030334][ T36] audit: type=1400 audit(1760499025.860:6342): avc: denied { read open } for pid=2421 comm="syz.3.619" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.055141][ T36] audit: type=1400 audit(1760499025.860:6343): avc: denied { ioctl } for pid=2421 comm="syz.3.619" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=1 req=523 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 114.483576][ T2485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 114.577180][ T727] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 114.719675][ T329] bridge_slave_1: left allmulticast mode [ 114.730865][ T329] bridge_slave_1: left promiscuous mode [ 114.736480][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.751586][ T329] bridge_slave_0: left allmulticast mode [ 114.757258][ T329] bridge_slave_0: left promiscuous mode [ 114.770892][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.993917][ T329] veth1_macvtap: left promiscuous mode [ 114.999428][ T329] veth0_vlan: left promiscuous mode [ 115.271806][ T329] bridge_slave_1: left allmulticast mode [ 115.277454][ T329] bridge_slave_1: left promiscuous mode [ 115.283176][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.290592][ T329] bridge_slave_0: left allmulticast mode [ 115.296309][ T329] bridge_slave_0: left promiscuous mode [ 115.302029][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.309661][ T329] tipc: Resetting bearer [ 115.323821][ T329] tipc: Disabling bearer [ 115.462420][ T329] tipc: Left network mode [ 115.467724][ T329] veth1_macvtap: left promiscuous mode [ 115.473302][ T329] veth0_vlan: left promiscuous mode