last executing test programs: 10.919091718s ago: executing program 3 (id=1637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x2, 0x4, 0x4, 0x8}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e23, @broadcast}, 0x4c, 0x0, 0x0, 0x0, 0x14, 0x0, 0xd303, 0xff, 0xda}) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r2 = socket$inet(0x2, 0x1, 0x5) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x20000400) connect$802154_dgram(r3, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) getsockopt$inet_buf(r2, 0x0, 0x28, &(0x7f00000002c0)=""/183, &(0x7f00000000c0)=0xb7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') write$P9_RFLUSH(r4, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x20ab) 8.95664173s ago: executing program 3 (id=1637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x2, 0x4, 0x4, 0x8}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e23, @broadcast}, 0x4c, 0x0, 0x0, 0x0, 0x14, 0x0, 0xd303, 0xff, 0xda}) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r2 = socket$inet(0x2, 0x1, 0x5) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x20000400) connect$802154_dgram(r3, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) getsockopt$inet_buf(r2, 0x0, 0x28, &(0x7f00000002c0)=""/183, &(0x7f00000000c0)=0xb7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') write$P9_RFLUSH(r4, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x20ab) 6.928472789s ago: executing program 3 (id=1637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x2, 0x4, 0x4, 0x8}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e23, @broadcast}, 0x4c, 0x0, 0x0, 0x0, 0x14, 0x0, 0xd303, 0xff, 0xda}) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r2 = socket$inet(0x2, 0x1, 0x5) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x20000400) connect$802154_dgram(r3, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) getsockopt$inet_buf(r2, 0x0, 0x28, &(0x7f00000002c0)=""/183, &(0x7f00000000c0)=0xb7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') write$P9_RFLUSH(r4, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x20ab) 5.011809498s ago: executing program 2 (id=1755): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0xfffffffffffffff5, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @loopback}, &(0x7f0000000400)=0x10) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) mount$binderfs(&(0x7f00000000c0), &(0x7f0000000140)='./binderfs2\x00', 0xfffffffffffffffc, 0x10000c, &(0x7f0000000740)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62612c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303232342c73746174733d676c6f62616c2c73746174733d676c6f62216c2c6d61783d30303030303030303030303030303030303030303030372c657569643ccc94cb6297d133787b95413db8f46f3c49cccadba50b4348eea0", @ANYRESDEC=r2, @ANYBLOB=',fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) prctl$PR_SET_SECUREBITS(0x1c, 0x15) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$packet(r4, 0x0, &(0x7f0000000640)) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2b000000060001000000000000000000030000000000000003000000000000000200000000000000242100"], 0x2b) setuid(0xee01) r5 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa2W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00'/704, 0x0) ftruncate(r5, 0x80079a0) readv(r5, &(0x7f0000000480)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) sendfile(r5, r5, 0x0, 0x200001) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x2204c850, &(0x7f0000000040)={0xa, 0xfefc, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) mlock2(&(0x7f00005d1000/0x1000)=nil, 0x1000, 0x1) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000000), 0x4) read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2074) 4.864596282s ago: executing program 1 (id=1757): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x3, 0x89, 0xd615, 0x800009, 0x3, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) 4.778867671s ago: executing program 0 (id=1758): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x2, 0x36, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.773635451s ago: executing program 2 (id=1759): r0 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1, 0x80000}, {0x5c, 0x0, 0x0, 0xdce8}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'bridge_slave_1\x00', {0x2, 0x4e24, @broadcast}}) write(r0, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001d00000000000100", 0x1c) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f000001ab40)={'ip6_vti0\x00', &(0x7f000001aac0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x36, 0xffffffff, 0x10, @empty, @loopback, 0x1, 0x40, 0x65, 0xaa}}) fsopen(0x0, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 4.657194833s ago: executing program 1 (id=1760): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x20000000, 0x202200) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x2}, 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) (async) ioctl$EVIOCSCLOCKID(r1, 0x40084504, 0x0) 4.642765004s ago: executing program 2 (id=1761): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sched_rr_get_interval(r1, &(0x7f0000000040)) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.599671148s ago: executing program 3 (id=1637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x2, 0x4, 0x4, 0x8}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e23, @broadcast}, 0x4c, 0x0, 0x0, 0x0, 0x14, 0x0, 0xd303, 0xff, 0xda}) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r2 = socket$inet(0x2, 0x1, 0x5) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x20000400) connect$802154_dgram(r3, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) getsockopt$inet_buf(r2, 0x0, 0x28, &(0x7f00000002c0)=""/183, &(0x7f00000000c0)=0xb7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') write$P9_RFLUSH(r4, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x20ab) 2.624057782s ago: executing program 0 (id=1762): setresgid(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='noinode32']) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000b40)=0x100c, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.577202597s ago: executing program 1 (id=1763): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x5, 0x1}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x8, 0x0, 0x14, 0x0, 0x2, 0x25dfdbfe, [@sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e20, 0xe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x9}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xe28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}]}, 0xa0}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x381, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x3}) 2.576284327s ago: executing program 2 (id=1764): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x9, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{r0}, {}], 0x2, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f00000000c0)=0x2, 0x4) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000004500)=""/4101, 0x1005}, {&(0x7f00000003c0)=""/151, 0x97}, {&(0x7f0000000780)=""/138, 0x8a}, {&(0x7f0000001400)=""/161, 0xa1}, {&(0x7f0000000840)=""/132, 0x84}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0x1000000d}], 0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r4) sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14, r7, 0x101, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4810) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r8, 0x1800000}, 0x15) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.574863627s ago: executing program 0 (id=1765): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchmodat(r0, &(0x7f00000002c0)='./file0/../file0\x00', 0x160) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0xf, 0xf, 0x9, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x0, 0x8, 0x4}}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x3, r1, 0x1, 0x3, 0x6, @remote}, 0x14) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (rerun: 32) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x4000000, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 2.534793011s ago: executing program 1 (id=1766): getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000140)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000018c0)) lseek(r1, 0x1000, 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='zonefs\x00', 0x226840, 0x0) 2.429279451s ago: executing program 0 (id=1767): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0xa03c0000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 2.361252648s ago: executing program 1 (id=1768): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x3, 0x89, 0xd615, 0x800009, 0x3, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) 2.360700148s ago: executing program 3 (id=1637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x2, 0x4, 0x4, 0x8}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e23, @broadcast}, 0x4c, 0x0, 0x0, 0x0, 0x14, 0x0, 0xd303, 0xff, 0xda}) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r2 = socket$inet(0x2, 0x1, 0x5) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x20000400) connect$802154_dgram(r3, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) getsockopt$inet_buf(r2, 0x0, 0x28, &(0x7f00000002c0)=""/183, &(0x7f00000000c0)=0xb7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') write$P9_RFLUSH(r4, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x20ab) 316.112019ms ago: executing program 0 (id=1769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000200)=0x1c, 0x4) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGICOUNT(r4, 0x545d, 0xff4f370c567f0000) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000080), 0x4) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000240)="6667af2e670f011f65260f015edb66b80e0000000f23c80f21f86635000040000f23f8ff64a067805fbbb2a5f3ad660f3acf64f204b847008ee0", 0x3a}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="0f8e00002ef30fc774000f06f266d2f0f20f2186f52ef30f1eceb815000f00d8b88d008ec00fc7b0745d", 0x2a}], 0x1, 0x60, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000200)=0x1c, 0x4) (async) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) accept(r1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCGICOUNT(r4, 0x545d, 0xff4f370c567f0000) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000080), 0x4) (async) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000240)="6667af2e670f011f65260f015edb66b80e0000000f23c80f21f86635000040000f23f8ff64a067805fbbb2a5f3ad660f3acf64f204b847008ee0", 0x3a}], 0x1, 0x41, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="0f8e00002ef30fc774000f06f266d2f0f20f2186f52ef30f1eceb815000f00d8b88d008ec00fc7b0745d", 0x2a}], 0x1, 0x60, 0x0, 0x0) (async) 311.300209ms ago: executing program 1 (id=1770): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x2, 0x36, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 261.211464ms ago: executing program 2 (id=1771): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000180)="86"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x633, 0x200, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x2e}, {@in6=@remote, 0x4d5, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd, 0x8, 0x0, 0x400000, 0x8000}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048040) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000080)={0x6, 0x7ff, 0x7fff, 0x8f}, 0x10) 183.028202ms ago: executing program 2 (id=1772): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x218, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3ed, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r2 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x22, 0x4, @tid=r2}, &(0x7f0000044000)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2, 0x10000, 0xe, 0xf0, 0x44, 0xfd, 0xd4, 0xd4, 0x67, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0xa3, 0x6, 0x8, 0xc, 0x2, 0x3, 0xca}, {0x3000, 0xe6e50002, 0x3, 0x2, 0x2, 0x5, 0x8, 0x5, 0xd, 0xb, 0xff, 0x5}, {0x80a0000, 0x6000, 0xb, 0x7, 0x1, 0x44, 0x2, 0x6, 0x6, 0x3, 0x0, 0x1}, {0x4, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0x10, 0xc}, {0x2, 0xf000, 0x0, 0x7, 0x3, 0xe1, 0x1, 0xff, 0x4, 0x80, 0x1, 0xa}, {0xeeee8000, 0x1000, 0x6, 0x5, 0xf, 0x38, 0xfd, 0xb, 0x0, 0x80, 0x4, 0x58}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x43, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x2, 0x0, 0xdddf1000, 0x436d, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff45, 0x4, 0x9000000004000, 0x3]}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r5 = gettid() r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) sendmsg$unix(r6, &(0x7f00000007c0)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000002c0)="fa474f93811af43b", 0x8}], 0x1, 0x0, 0x0, 0x4}, 0x40001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r7, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r8}], 0x2c, 0xffffffffffbffff8) ioctl$AUTOFS_IOC_SETTIMEOUT(r8, 0x80049367, &(0x7f00000001c0)=0x9) dup2(r7, r8) fcntl$setown(r7, 0x8, r5) tkill(r5, 0x13) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000180)=0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000200)={0x100020, 0x1000f3, 0x40000}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 93.232051ms ago: executing program 0 (id=1773): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee81") write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, 0x0) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 0s ago: executing program 3 (id=1637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x2, 0x4, 0x4, 0x8}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e23, @broadcast}, 0x4c, 0x0, 0x0, 0x0, 0x14, 0x0, 0xd303, 0xff, 0xda}) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r2 = socket$inet(0x2, 0x1, 0x5) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x20000400) connect$802154_dgram(r3, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) getsockopt$inet_buf(r2, 0x0, 0x28, &(0x7f00000002c0)=""/183, &(0x7f00000000c0)=0xb7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') write$P9_RFLUSH(r4, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x20ab) kernel console output (not intermixed with test programs): id ref 1 [ 68.329634][ T2460] rust_binder: Write failure EFAULT in pid:290 [ 68.435806][ T2321] veth1: left allmulticast mode [ 68.554100][ T2482] 9pnet_fd: Insufficient options for proto=fd [ 68.569041][ T66] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 68.721463][ T66] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 68.730711][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.738716][ T66] usb 1-1: Product: syz [ 68.742961][ T66] usb 1-1: Manufacturer: syz [ 68.747684][ T66] usb 1-1: SerialNumber: syz [ 68.963540][ T36] audit: type=1400 audit(1760031942.841:367): avc: denied { execute } for pid=2492 comm="syz.2.748" path="/memory.events.local" dev="ramfs" ino=13007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 69.005859][ T66] rtl8150 1-1:1.0: couldn't reset the device [ 69.012149][ T66] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 69.022363][ T66] usb 1-1: USB disconnect, device number 10 [ 69.214926][ T2528] overlayfs: failed to clone upperpath [ 69.280980][ T2542] rust_binder: Got transaction with invalid offset. [ 69.281012][ T2542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.287667][ T2542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:304 [ 69.374028][ T2556] batadv_slave_0: entered promiscuous mode [ 69.396732][ T2556] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 69.406083][ T2555] batadv_slave_0: left promiscuous mode [ 69.478952][ T66] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 69.552280][ T2559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:319 [ 69.552741][ T36] audit: type=1400 audit(1760031943.431:368): avc: denied { write } for pid=2557 comm="syz.1.772" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.631622][ T66] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 69.641334][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.649805][ T66] usb 1-1: Product: syz [ 69.654596][ T66] usb 1-1: Manufacturer: syz [ 69.659475][ T66] usb 1-1: SerialNumber: syz [ 70.273151][ T66] (unnamed net_device) (uninitialized): Assigned a random MAC address: 66:b7:84:5f:44:77 [ 70.295780][ T66] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 70.306391][ T66] usb 1-1: USB disconnect, device number 11 [ 70.331000][ T36] audit: type=1400 audit(1760031944.211:369): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.357051][ T36] audit: type=1400 audit(1760031944.211:370): avc: denied { read } for pid=150 comm="dhcpcd" name="n16" dev="tmpfs" ino=2184 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.379108][ T36] audit: type=1400 audit(1760031944.211:371): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=2184 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.423738][ T36] audit: type=1400 audit(1760031944.211:372): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=2184 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.554756][ T2591] 9pnet_fd: Insufficient options for proto=fd [ 70.579009][ T366] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 70.730815][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 70.741971][ T366] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 70.755056][ T366] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 70.764317][ T366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.773492][ T366] usb 2-1: config 0 descriptor?? [ 70.778737][ T2589] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.786963][ T366] usbhid 2-1:0.0: can't add hid device: -22 [ 70.793097][ T366] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 71.146368][ T2613] rust_binder: 2613 RLIMIT_NICE not set [ 71.228161][ T2619] fuse: Unknown parameter 'group+d' [ 71.255756][ T2623] 9p: Unknown Cache mode or invalid value reBdahead [ 71.277968][ T2625] netlink: 'syz.2.795': attribute type 4 has an invalid length. [ 71.290297][ T2625] netlink: 'syz.2.795': attribute type 4 has an invalid length. [ 71.303830][ T2628] rust_binder: Write failure EFAULT in pid:449 [ 71.333379][ T2636] netlink: 72 bytes leftover after parsing attributes in process `syz.3.799'. [ 71.414282][ T2651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.804'. [ 72.659077][ T66] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 72.809945][ T66] usb 1-1: not running at top speed; connect to a high speed hub [ 72.819402][ T66] usb 1-1: config 9 has an invalid interface number: 174 but max is 2 [ 72.827844][ T66] usb 1-1: config 9 has an invalid interface number: 178 but max is 2 [ 72.827866][ T2747] veth1_macvtap: left promiscuous mode [ 72.827885][ T2747] macsec0: entered promiscuous mode [ 72.836508][ T66] usb 1-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 72.852777][ T2747] veth1_macvtap: entered promiscuous mode [ 72.857835][ T66] usb 1-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 72.863611][ T2747] macsec0: left promiscuous mode [ 72.872723][ T66] usb 1-1: config 9 has no interface number 0 [ 72.883926][ T66] usb 1-1: config 9 has no interface number 1 [ 72.890238][ T66] usb 1-1: config 9 interface 174 altsetting 1 endpoint 0xD has invalid maxpacket 423, setting to 64 [ 72.901724][ T66] usb 1-1: config 9 interface 174 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 72.913083][ T66] usb 1-1: config 9 interface 178 altsetting 167 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 72.927119][ T66] usb 1-1: config 9 interface 174 has no altsetting 0 [ 72.934209][ T66] usb 1-1: config 9 interface 178 has no altsetting 0 [ 72.942918][ T66] usb 1-1: New USB device found, idVendor=19cf, idProduct=3000, bcdDevice=61.4f [ 72.952311][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.960580][ T66] usb 1-1: Product: 忣蜤 [ 72.965451][ T66] usb 1-1: Manufacturer: ƛ眑⛀꧚㉜逛䙵䆊䁼盏㳎洓嚚蕷䶄㿨轳頙⓲節워 [ 72.977589][ T66] usb 1-1: SerialNumber: 嚺딀甞⛷记䠐ꤺ銎褵ᵿ譪廽㠕卻럼ᷲ〗톤ၛꆫ韂잖뜶ᯉ㲞榯傂䬗鑵㧂ළ궇瀦읝ꮏ䥟➵ⳇ燐䦠㠹 [ 73.324109][ T506] usb 2-1: USB disconnect, device number 23 [ 73.350737][ T2752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.839'. [ 73.394368][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 73.394387][ T36] audit: type=1400 audit(1760031947.271:376): avc: denied { relabelfrom } for pid=2757 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.421065][ T36] audit: type=1400 audit(1760031947.271:377): avc: denied { relabelto } for pid=2757 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.631775][ T2772] fuse: Unknown parameter '0x0000000000000000' [ 73.631775][ T2773] fuse: Unknown parameter '0x0000000000000000' [ 73.778955][ T506] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 73.928971][ T506] usb 2-1: Using ep0 maxpacket: 16 [ 73.936157][ T506] usb 2-1: config 0 has no interfaces? [ 73.943517][ T506] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.956222][ T506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.964647][ T506] usb 2-1: Product: syz [ 73.969217][ T506] usb 2-1: Manufacturer: syz [ 73.974101][ T506] usb 2-1: SerialNumber: syz [ 73.980179][ T506] usb 2-1: config 0 descriptor?? [ 74.060085][ T2787] netlink: 'syz.2.853': attribute type 27 has an invalid length. [ 74.068071][ T2787] lo: entered promiscuous mode [ 74.073228][ T2787] lo: entered allmulticast mode [ 74.079166][ T2787] tunl0: entered promiscuous mode [ 74.084329][ T2787] tunl0: entered allmulticast mode [ 74.090364][ T2787] gre0: entered promiscuous mode [ 74.095409][ T2787] gre0: entered allmulticast mode [ 74.101356][ T2787] gretap0: entered promiscuous mode [ 74.106781][ T2787] gretap0: entered allmulticast mode [ 74.113299][ T2787] erspan0: entered promiscuous mode [ 74.118787][ T2787] erspan0: entered allmulticast mode [ 74.125295][ T2787] ip_vti0: entered promiscuous mode [ 74.130791][ T2787] ip_vti0: entered allmulticast mode [ 74.136765][ T2787] ip6_vti0: entered promiscuous mode [ 74.142709][ T2787] ip6_vti0: entered allmulticast mode [ 74.148816][ T2787] sit0: entered promiscuous mode [ 74.154409][ T2787] sit0: entered allmulticast mode [ 74.166553][ T2787] ip6tnl0: entered promiscuous mode [ 74.172119][ T2787] ip6tnl0: entered allmulticast mode [ 74.178039][ T2787] ip6gre0: entered promiscuous mode [ 74.183637][ T2787] ip6gre0: entered allmulticast mode [ 74.191218][ T2787] ip6gretap0: entered promiscuous mode [ 74.197370][ T506] usb 2-1: USB disconnect, device number 24 [ 74.208789][ T2787] ip6gretap0: entered allmulticast mode [ 74.216926][ T2787] vcan0: entered promiscuous mode [ 74.222568][ T2787] vcan0: entered allmulticast mode [ 74.228174][ T2787] dummy0: entered promiscuous mode [ 74.234693][ T2787] dummy0: entered allmulticast mode [ 74.241636][ T2787] veth0: entered promiscuous mode [ 74.246827][ T2787] veth0: entered allmulticast mode [ 74.253699][ T2787] veth1: entered promiscuous mode [ 74.259355][ T2787] veth1: entered allmulticast mode [ 74.265546][ T2787] wg0: entered promiscuous mode [ 74.271419][ T2787] wg0: entered allmulticast mode [ 74.277494][ T2787] wg1: entered promiscuous mode [ 74.283764][ T2787] wg1: entered allmulticast mode [ 74.290501][ T2787] wg2: entered promiscuous mode [ 74.295507][ T2787] wg2: entered allmulticast mode [ 74.301408][ T2787] veth0_to_bridge: entered promiscuous mode [ 74.307454][ T2787] veth0_to_bridge: entered allmulticast mode [ 74.315744][ T2787] veth1_to_bridge: entered promiscuous mode [ 74.321985][ T2787] veth1_to_bridge: entered allmulticast mode [ 74.330632][ T2787] veth0_to_bond: entered promiscuous mode [ 74.336467][ T2787] veth0_to_bond: entered allmulticast mode [ 74.344121][ T2787] bond_slave_0: entered promiscuous mode [ 74.350468][ T2787] bond_slave_0: entered allmulticast mode [ 74.356981][ T2787] veth1_to_bond: entered promiscuous mode [ 74.363333][ T2787] veth1_to_bond: entered allmulticast mode [ 74.370725][ T2787] bond_slave_1: entered promiscuous mode [ 74.376565][ T2787] bond_slave_1: entered allmulticast mode [ 74.383490][ T2787] veth0_to_team: entered promiscuous mode [ 74.389622][ T2787] veth0_to_team: entered allmulticast mode [ 74.396510][ T2787] team_slave_0: entered promiscuous mode [ 74.402673][ T2787] team_slave_0: entered allmulticast mode [ 74.409462][ T2787] veth1_to_team: entered promiscuous mode [ 74.415570][ T2787] veth1_to_team: entered allmulticast mode [ 74.422872][ T2787] team_slave_1: entered promiscuous mode [ 74.428630][ T2787] team_slave_1: entered allmulticast mode [ 74.435438][ T2787] veth0_to_batadv: entered promiscuous mode [ 74.441690][ T2787] veth0_to_batadv: entered allmulticast mode [ 74.448740][ T2787] batadv_slave_0: entered promiscuous mode [ 74.455264][ T2787] batadv_slave_0: entered allmulticast mode [ 74.462278][ T2787] veth1_to_batadv: entered promiscuous mode [ 74.468529][ T2787] veth1_to_batadv: entered allmulticast mode [ 74.476041][ T2787] batadv_slave_1: entered promiscuous mode [ 74.482253][ T2787] batadv_slave_1: entered allmulticast mode [ 74.489684][ T2787] xfrm0: entered promiscuous mode [ 74.494851][ T2787] xfrm0: entered allmulticast mode [ 74.501015][ T2787] veth0_to_hsr: entered promiscuous mode [ 74.506756][ T2787] veth0_to_hsr: entered allmulticast mode [ 74.514321][ T2787] hsr_slave_0: entered promiscuous mode [ 74.520531][ T2787] hsr_slave_0: entered allmulticast mode [ 74.527009][ T2787] veth1_to_hsr: entered promiscuous mode [ 74.533593][ T2787] veth1_to_hsr: entered allmulticast mode [ 74.540869][ T2787] hsr_slave_1: entered promiscuous mode [ 74.546542][ T2787] hsr_slave_1: entered allmulticast mode [ 74.553658][ T2787] veth1_virt_wifi: entered promiscuous mode [ 74.559866][ T2787] veth1_virt_wifi: entered allmulticast mode [ 74.566808][ T2787] veth0_virt_wifi: entered promiscuous mode [ 74.573588][ T2787] veth0_virt_wifi: entered allmulticast mode [ 74.580968][ T2787] veth1_vlan: entered promiscuous mode [ 74.586611][ T2787] veth1_vlan: entered allmulticast mode [ 74.593845][ T2787] veth0_vlan: entered allmulticast mode [ 74.600836][ T2787] @: entered promiscuous mode [ 74.605799][ T2787] @: entered allmulticast mode [ 74.611908][ T2787] vlan1: entered promiscuous mode [ 74.617401][ T2787] vlan1: entered allmulticast mode [ 74.623884][ T2787] veth1_macvtap: entered allmulticast mode [ 74.631079][ T2787] veth0_macvtap: entered promiscuous mode [ 74.637252][ T2787] veth0_macvtap: entered allmulticast mode [ 74.644419][ T2787] macsec0: entered promiscuous mode [ 74.650306][ T2787] macsec0: entered allmulticast mode [ 74.656563][ T2787] ip6tnl1: entered promiscuous mode [ 74.662369][ T2787] ip6tnl1: entered allmulticast mode [ 74.698598][ T36] audit: type=1400 audit(1760031948.571:378): avc: denied { map } for pid=2786 comm="syz.2.853" path="socket:[13754]" dev="sockfs" ino=13754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 75.237163][ T2796] rust_binder: Write failure EFAULT in pid:333 [ 75.309317][ T2802] rust_binder: Write failure EFAULT in pid:335 [ 75.322356][ T66] usb 1-1: USB disconnect, device number 12 [ 75.363412][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 75.580948][ T2819] overlayfs: failed to clone lowerpath [ 75.587320][ T2819] overlayfs: failed to clone upperpath [ 76.328960][ T366] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 76.478952][ T366] usb 2-1: Using ep0 maxpacket: 16 [ 76.485471][ T366] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 76.495578][ T366] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 76.505717][ T366] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.518943][ T366] usb 2-1: config 1 interface 0 has no altsetting 0 [ 76.527360][ T366] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 76.536594][ T366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.544792][ T366] usb 2-1: Product: syz [ 76.549043][ T366] usb 2-1: Manufacturer: syz [ 76.553692][ T366] usb 2-1: SerialNumber: syz [ 76.761395][ T366] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 76.814510][ T2833] fuse: Bad value for 'fd' [ 76.817696][ T2834] fuse: Bad value for 'fd' [ 76.962056][ T366] usb 2-1: USB disconnect, device number 25 [ 76.968855][ T366] usblp0: removed [ 77.166903][ T2826] rust_binder: Error while translating object. [ 77.166941][ T2826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.173618][ T2826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:338 [ 77.368966][ T1810] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 77.369009][ T1858] Bluetooth: hci1: command 0x1003 tx timeout [ 77.904521][ T2864] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.906300][ T366] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 77.920544][ T366] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 77.928150][ T366] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 77.936941][ T366] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 78.038513][ T2864] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 78.038547][ T2864] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 78.048268][ T2864] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:464 [ 78.339004][ T366] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 78.396785][ T2890] __vm_enough_memory: pid: 2890, comm: syz.1.891, bytes: 18014402804453376 not enough memory for the allocation [ 78.422854][ T2892] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 78.460679][ T2899] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.469361][ T2899] rust_binder: Read failure Err(EFAULT) in pid:353 [ 78.478949][ T366] usb 1-1: device descriptor read/64, error -71 [ 78.613295][ T2912] bridge0: port 3(dummy0) entered blocking state [ 78.619877][ T2912] bridge0: port 3(dummy0) entered disabled state [ 78.626650][ T2912] dummy0: entered allmulticast mode [ 78.632468][ T2912] dummy0: entered promiscuous mode [ 78.634159][ T2914] binder: Unknown parameter 'secZu`Pr{a3lҧ' [ 78.637982][ T2912] bridge0: port 3(dummy0) entered blocking state [ 78.651687][ T2912] bridge0: port 3(dummy0) entered forwarding state [ 78.731485][ T366] usb 1-1: device descriptor read/64, error -71 [ 78.788922][ T2929] rust_binder: Got transaction with invalid offset. [ 78.788969][ T2929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.795849][ T2929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363 [ 78.822710][ T2935] overlayfs: conflicting lowerdir path [ 78.841720][ T36] audit: type=1400 audit(1760031952.721:379): avc: denied { mount } for pid=2934 comm="syz.1.910" name="/" dev="configfs" ino=2418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 78.856582][ T2939] netlink: 'syz.3.912': attribute type 27 has an invalid length. [ 78.867189][ T36] audit: type=1400 audit(1760031953.739:380): avc: denied { search } for pid=2934 comm="syz.1.910" name="/" dev="configfs" ino=2418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.875218][ T2939] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2939 comm=syz.3.912 [ 78.924342][ T36] audit: type=1400 audit(1760031953.799:381): avc: denied { mounton } for pid=2940 comm="syz.3.913" path="/333/file0" dev="tmpfs" ino=1797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.978973][ T366] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 78.983351][ T2943] netlink: 'syz.3.914': attribute type 16 has an invalid length. [ 78.994890][ T2943] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.914'. [ 79.004788][ T36] audit: type=1400 audit(1760031953.889:382): avc: denied { map } for pid=2942 comm="syz.3.914" path="socket:[14112]" dev="sockfs" ino=14112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 79.028520][ T36] audit: type=1400 audit(1760031953.889:383): avc: denied { map } for pid=2942 comm="syz.3.914" path="socket:[14112]" dev="sockfs" ino=14112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 79.108988][ T366] usb 1-1: device descriptor read/64, error -71 [ 79.108987][ T506] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 79.258965][ T506] usb 2-1: Using ep0 maxpacket: 16 [ 79.267974][ T506] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.275713][ T506] usb 2-1: too many configurations: 222, using maximum allowed: 8 [ 79.284265][ T506] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 79.291940][ T506] usb 2-1: can't read configurations, error -71 [ 79.369035][ T366] usb 1-1: device descriptor read/64, error -71 [ 79.479060][ T366] usb usb1-port1: attempt power cycle [ 79.780848][ T36] audit: type=1400 audit(1760031954.659:384): avc: denied { getopt } for pid=2948 comm="syz.1.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.818958][ T366] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 79.849952][ T366] usb 1-1: device descriptor read/8, error -71 [ 79.875266][ T2966] 9pnet_fd: Insufficient options for proto=fd [ 79.980073][ T366] usb 1-1: device descriptor read/8, error -71 [ 80.082837][ T2974] netlink: 104 bytes leftover after parsing attributes in process `syz.3.926'. [ 80.118958][ T506] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 80.228978][ T366] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 80.254901][ T366] usb 1-1: device descriptor read/8, error -71 [ 80.280075][ T506] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.290362][ T506] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.300551][ T506] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 80.309920][ T506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 80.318145][ T506] usb 2-1: SerialNumber: syz [ 80.347451][ T36] audit: type=1400 audit(1760031955.219:385): avc: denied { execute } for pid=2982 comm="syz.3.930" path="/344/cpuacct.usage_sys" dev="tmpfs" ino=1854 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.390238][ T366] usb 1-1: device descriptor read/8, error -71 [ 80.499019][ T366] usb usb1-port1: unable to enumerate USB device [ 80.526148][ T2957] netlink: 104 bytes leftover after parsing attributes in process `syz.1.920'. [ 80.539006][ T506] usb 2-1: skipping empty audio interface (v1) [ 80.547025][ T506] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 80.557016][ T506] usb 2-1: USB disconnect, device number 27 [ 80.564595][ T418] udevd[418]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.054463][ T2992] tipc: Started in network mode [ 81.059650][ T2992] tipc: Node identity ee3123adaa44, cluster identity 4711 [ 81.066942][ T2992] tipc: Enabled bearer , priority 0 [ 81.111530][ T2990] tipc: Disabling bearer [ 81.215701][ T3004] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 81.503920][ T3026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3026 comm=syz.3.944 [ 81.517837][ T3026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3026 comm=syz.3.944 [ 81.556461][ T3031] netlink: 9 bytes leftover after parsing attributes in process `syz.3.946'. [ 81.565929][ T3031] gretap0: entered promiscuous mode [ 82.248767][ T36] audit: type=1400 audit(1760031957.119:386): avc: denied { read } for pid=3058 comm="syz.0.955" name="/" dev="configfs" ino=2418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.270907][ T36] audit: type=1400 audit(1760031957.119:387): avc: denied { open } for pid=3058 comm="syz.0.955" path="/" dev="configfs" ino=2418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.292943][ T36] audit: type=1400 audit(1760031957.119:388): avc: denied { setattr } for pid=3058 comm="syz.0.955" path="/" dev="configfs" ino=2418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.315499][ T366] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 82.468969][ T366] usb 2-1: Using ep0 maxpacket: 8 [ 82.482077][ T366] usb 2-1: unable to get BOS descriptor or descriptor too short [ 82.490764][ T366] usb 2-1: config 4 has an invalid interface number: 156 but max is 0 [ 82.499257][ T366] usb 2-1: config 4 has no interface number 0 [ 82.507112][ T366] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=8a.2e [ 82.516610][ T366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.523103][ T3066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.525077][ T366] usb 2-1: Product: syz [ 82.526179][ T3066] rust_binder: Error while translating object. [ 82.531932][ T366] usb 2-1: Manufacturer: syz [ 82.535953][ T3066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.542478][ T366] usb 2-1: SerialNumber: syz [ 82.546960][ T3066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:492 [ 82.765999][ T3056] rust_binder: Write failure EFAULT in pid:389 [ 82.779647][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.780492][ T366] snd-usb-audio 2-1:4.156: probe with driver snd-usb-audio failed with error -71 [ 82.788431][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.801746][ T366] usb 2-1: USB disconnect, device number 28 [ 82.814575][ T3087] rust_binder: Failed copying remainder into alloc: EFAULT [ 82.814596][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.814598][ T3087] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 82.814638][ T3087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 82.822373][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.829461][ T3087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:499 [ 82.838464][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.864903][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.871440][ T3090] overlayfs: failed to clone upperpath [ 82.883833][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.883862][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.896637][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.903619][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.904766][ T3092] netlink: 32 bytes leftover after parsing attributes in process `syz.3.968'. [ 82.910613][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.918260][ T3092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 82.926147][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.940979][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.947712][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.954353][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.960950][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.967596][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.974077][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.980645][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.987091][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.993605][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.000118][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.006592][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.013239][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.019732][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.026255][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.032718][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.039260][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.045716][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.052292][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.058752][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.065259][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.071735][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.139630][ T3095] FAT-fs (rnullb0): bogus number of reserved sectors [ 83.152902][ T3095] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 83.275464][ T3106] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.276095][ T3106] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 83.282883][ T3106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 83.290932][ T3106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:512 [ 83.331281][ T3110] rust_binder: Got transaction with invalid offset. [ 83.340581][ T3110] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.347246][ T3110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:393 [ 83.525922][ T3112] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 83.535479][ T3112] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 83.543908][ T3112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:395 [ 84.100684][ T3119] FAT-fs (rnullb0): bogus number of reserved sectors [ 84.116859][ T3119] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 84.247930][ T3132] rust_binder: Write failure EFAULT in pid:527 [ 84.385587][ T3162] fuseblk: Bad value for 'group_id' [ 84.397084][ T3162] fuseblk: Bad value for 'group_id' [ 84.416548][ T3164] 9pnet_fd: Insufficient options for proto=fd [ 84.448951][ T506] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 84.499441][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 84.499459][ T36] audit: type=1400 audit(1760031959.379:393): avc: denied { getopt } for pid=3167 comm="syz.3.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.600060][ T506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 84.611006][ T506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 84.624137][ T506] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 84.633328][ T506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.641967][ T506] usb 2-1: config 0 descriptor?? [ 84.647564][ T3128] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.655757][ T506] usbhid 2-1:0.0: can't add hid device: -22 [ 84.661842][ T506] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 84.858499][ T506] usb 2-1: USB disconnect, device number 29 [ 85.302292][ T36] audit: type=1400 audit(1760031960.179:394): avc: denied { create } for pid=3188 comm="syz.3.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 85.328651][ T36] audit: type=1400 audit(1760031960.199:395): avc: denied { execute_no_trans } for pid=3190 comm="syz.3.1002" path="/374/file0" dev="tmpfs" ino=2019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.359550][ T3191] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1002'. [ 85.388764][ T3193] __vm_enough_memory: pid: 3193, comm: syz.1.1003, bytes: 18014402804453376 not enough memory for the allocation [ 85.428944][ T366] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 85.530940][ T3211] netlink: 'syz.2.1010': attribute type 4 has an invalid length. [ 85.580268][ T366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.591415][ T366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.601577][ T366] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 85.610974][ T366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.620042][ T366] usb 1-1: config 0 descriptor?? [ 85.699001][ T506] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 85.848967][ T506] usb 2-1: Using ep0 maxpacket: 16 [ 85.855581][ T506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 85.868176][ T506] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 85.877509][ T506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.885567][ T506] usb 2-1: Product: syz [ 85.889827][ T506] usb 2-1: Manufacturer: syz [ 85.894451][ T506] usb 2-1: SerialNumber: syz [ 85.899967][ T506] usb 2-1: config 0 descriptor?? [ 85.906007][ T506] hub 2-1:0.0: bad descriptor, ignoring hub [ 85.912029][ T506] hub 2-1:0.0: probe with driver hub failed with error -5 [ 86.029801][ T366] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 86.040539][ T366] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 86.110832][ T506] usb 2-1: USB disconnect, device number 30 [ 86.163842][ T36] audit: type=1400 audit(1760031961.039:396): avc: denied { create } for pid=3228 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 86.211336][ T3242] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1020'. [ 86.227154][ T366] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 86.257719][ T36] audit: type=1400 audit(1760031961.129:397): avc: denied { create } for pid=3247 comm="syz.3.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 86.427743][ T366] cp2112 0003:10C4:EA90.0005: error requesting SMBus config [ 86.439837][ T366] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71 [ 86.459393][ T366] usb 1-1: USB disconnect, device number 17 [ 86.598089][ T3278] 9pnet_fd: p9_fd_create_tcp (3278): problem connecting socket to 127.0.0.1 [ 86.647098][ T36] audit: type=1400 audit(1760031961.519:398): avc: denied { mount } for pid=3281 comm="syz.1.1035" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 86.675649][ T36] audit: type=1400 audit(1760031961.549:399): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 87.047446][ T36] audit: type=1400 audit(1760031961.919:400): avc: denied { connect } for pid=3293 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.067254][ T36] audit: type=1400 audit(1760031961.919:401): avc: denied { create } for pid=3293 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 87.088439][ T36] audit: type=1400 audit(1760031961.959:402): avc: denied { create } for pid=3298 comm="syz.3.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 87.123656][ T3302] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 87.124535][ T3303] overlayfs: failed to clone upperpath [ 87.132653][ T3302] overlayfs: missing 'lowerdir' [ 87.478453][ T3320] rust_binder: 541: no such ref 2 [ 87.483588][ T3320] rust_binder: 541: no such ref 1 [ 87.488757][ T3320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:541 [ 87.514504][ T3326] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 87.800429][ T506] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 87.858234][ T3351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.914705][ T3351] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 87.914754][ T3352] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 87.921696][ T3351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 87.930369][ T3352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 87.941405][ T3351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:561 [ 87.951295][ T3352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:561 [ 87.965977][ T506] usb 2-1: Using ep0 maxpacket: 16 [ 87.982270][ T506] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 87.991148][ T506] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.001543][ T506] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 88.012129][ T506] usb 2-1: config 1 has no interface number 1 [ 88.018409][ T506] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 88.047122][ T506] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.060108][ T506] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.069342][ T506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.077550][ T506] usb 2-1: Product: syz [ 88.082129][ T506] usb 2-1: Manufacturer: syz [ 88.086765][ T506] usb 2-1: SerialNumber: syz [ 88.295835][ T3331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.306553][ T3331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.421112][ T506] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 88.429734][ T506] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 88.437315][ T506] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 88.446751][ T506] usb 2-1: USB disconnect, device number 31 [ 88.459922][ T418] udevd[418]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.504600][ T3418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.504983][ T3420] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 88.511713][ T3420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 88.519949][ T3420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:566 [ 89.593188][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 89.617195][ T3444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4889 sclass=netlink_route_socket pid=3444 comm=syz.0.1065 [ 89.623332][ T36] audit: type=1400 audit(1760032220.472:408): avc: denied { append } for pid=3443 comm="syz.0.1065" name="file0" dev="tmpfs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.653448][ T36] audit: type=1400 audit(1760032220.492:409): avc: denied { open } for pid=3443 comm="syz.0.1065" path="/198/file0" dev="tmpfs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.953623][ T3457] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.954334][ T3457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:581 [ 90.016314][ T36] audit: type=1400 audit(1760032220.892:410): avc: denied { write } for pid=3458 comm="syz.2.1071" name="/" dev="configfs" ino=2418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.050192][ T36] audit: type=1400 audit(1760032220.932:411): avc: denied { watch } for pid=3458 comm="syz.2.1071" path="/" dev="configfs" ino=2418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.173267][ T3477] rust_binder: 429: no such ref 3 [ 90.178702][ T3477] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 90.186153][ T3477] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 90.186234][ T36] audit: type=1400 audit(1760032221.063:412): avc: denied { setopt } for pid=3478 comm="syz.2.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.200699][ T3477] rust_binder: Write failure EFAULT in pid:429 [ 90.253342][ T36] audit: type=1400 audit(1760032221.133:413): avc: denied { getopt } for pid=3491 comm="syz.2.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.280959][ T3495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 90.451390][ T36] audit: type=1400 audit(1760032221.325:414): avc: denied { getattr } for pid=3503 comm="syz.1.1086" path="socket:[16935]" dev="sockfs" ino=16935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.668640][ T3523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 90.668669][ T3523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:446 [ 90.953435][ T506] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 91.091371][ T506] usb 2-1: device descriptor read/64, error -71 [ 91.280830][ T3535] 8021q: VLANs not supported on lo [ 91.313402][ T3541] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1098'. [ 91.330012][ T506] usb 2-1: device descriptor read/64, error -71 [ 91.438190][ T3555] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1104'. [ 91.551754][ T3561] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1106'. [ 91.568100][ T506] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 91.584192][ T3565] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1107'. [ 91.607097][ T36] audit: type=1400 audit(1760032222.494:415): avc: denied { setattr } for pid=3568 comm="syz.3.1109" name="XDP" dev="sockfs" ino=17061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.706620][ T506] usb 2-1: device descriptor read/64, error -71 [ 91.822765][ T3585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1116'. [ 91.832504][ T3586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1116'. [ 91.895169][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 91.944831][ T506] usb 2-1: device descriptor read/64, error -71 [ 92.045408][ T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 92.054363][ T506] usb usb2-port1: attempt power cycle [ 92.061115][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.070228][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.078543][ T31] usb 1-1: Product: syz [ 92.082725][ T31] usb 1-1: Manufacturer: syz [ 92.087427][ T31] usb 1-1: SerialNumber: syz [ 92.299213][ T31] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 92.309056][ T31] usb 1-1: USB disconnect, device number 18 [ 92.370400][ T3595] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1119'. [ 92.391502][ T506] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 92.412354][ T506] usb 2-1: device descriptor read/8, error -71 [ 92.541347][ T506] usb 2-1: device descriptor read/8, error -71 [ 92.778490][ T506] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 92.804618][ T506] usb 2-1: device descriptor read/8, error -71 [ 92.846390][ T36] audit: type=1400 audit(1760032223.743:416): avc: denied { getattr } for pid=3604 comm="syz.0.1124" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 92.846436][ T3605] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 92.879480][ T36] audit: type=1400 audit(1760032223.784:417): avc: denied { mounton } for pid=3604 comm="syz.0.1124" path="/207/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.931162][ T3610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 92.940310][ T3610] erspan0: entered promiscuous mode [ 92.946754][ T506] usb 2-1: device descriptor read/8, error -71 [ 92.973956][ T3614] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1128'. [ 93.066926][ T506] usb usb2-port1: unable to enumerate USB device [ 93.538469][ T3628] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1133'. [ 94.088711][ T506] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 94.238823][ T506] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 94.247025][ T506] usb 2-1: config 0 has no interface number 0 [ 94.253359][ T506] usb 2-1: config 0 interface 41 has no altsetting 0 [ 94.262280][ T506] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 94.264854][ T3674] overlayfs: failed to clone upperpath [ 94.271692][ T506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.285612][ T506] usb 2-1: Product: syz [ 94.290084][ T506] usb 2-1: Manufacturer: syz [ 94.295158][ T506] usb 2-1: SerialNumber: syz [ 94.302401][ T506] usb 2-1: config 0 descriptor?? [ 94.566005][ T3704] netlink: 'syz.3.1161': attribute type 8 has an invalid length. [ 94.738035][ T3716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.738487][ T3716] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 94.745227][ T3716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 94.753453][ T3716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:620 [ 95.051568][ T447] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 95.106555][ T506] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 95.162841][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 95.162877][ T36] audit: type=1400 audit(1760032226.081:422): avc: denied { nlmsg_write } for pid=3735 comm="syz.3.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 95.211437][ T447] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.219863][ T447] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.230339][ T447] usb 1-1: config 0 has no interface number 0 [ 95.236573][ T447] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 95.245797][ T447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.254606][ T447] usb 1-1: config 0 descriptor?? [ 95.322571][ T506] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 95.333559][ T506] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 95.343738][ T506] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 95.357549][ T506] usb 2-1: USB disconnect, device number 36 [ 95.720111][ T3752] 9pnet_fd: Insufficient options for proto=fd [ 95.812362][ T506] usb 1-1: USB disconnect, device number 19 [ 95.836711][ T3770] __vm_enough_memory: pid: 3770, comm: syz.1.1186, bytes: 18014402804453376 not enough memory for the allocation [ 95.864822][ T3774] rust_binder: Error while translating object. [ 95.864858][ T3774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 95.871543][ T3774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:465 [ 95.904667][ T3778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.914141][ T3779] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.920880][ T3778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.950375][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 96.103825][ T36] audit: type=1400 audit(1760032227.017:423): avc: denied { create } for pid=3801 comm="syz.2.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 96.408404][ T36] audit: type=1400 audit(1760032227.329:424): avc: denied { connect } for pid=3824 comm="syz.1.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.428477][ T36] audit: type=1400 audit(1760032227.340:425): avc: denied { write } for pid=3824 comm="syz.1.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.448495][ T36] audit: type=1400 audit(1760032227.340:426): avc: denied { execmem } for pid=3824 comm="syz.1.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 96.670090][ T366] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 96.818943][ T366] usb 2-1: Using ep0 maxpacket: 16 [ 96.825439][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.836547][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.848252][ T366] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=dc.b7 [ 96.857635][ T366] usb 2-1: New USB device strings: Mfr=229, Product=165, SerialNumber=0 [ 96.866033][ T366] usb 2-1: Product: syz [ 96.870350][ T366] usb 2-1: Manufacturer: syz [ 96.876400][ T366] usb 2-1: config 0 descriptor?? [ 97.216812][ T3837] __nla_validate_parse: 5 callbacks suppressed [ 97.216834][ T3837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'. [ 97.345951][ T3851] netlink: 'syz.3.1213': attribute type 27 has an invalid length. [ 97.950968][ T1810] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 97.950991][ T1858] Bluetooth: hci1: command 0x1003 tx timeout [ 98.047089][ T3865] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.061155][ T36] audit: type=1326 audit(1760032229.001:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.0.1219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa13818eec9 code=0x0 [ 98.235700][ T36] audit: type=1400 audit(1760032229.172:428): avc: denied { create } for pid=3870 comm="syz.3.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.237073][ T3871] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1220'. [ 98.256082][ T36] audit: type=1400 audit(1760032229.172:429): avc: denied { write } for pid=3870 comm="syz.3.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.285315][ T36] audit: type=1400 audit(1760032229.172:430): avc: denied { nlmsg_write } for pid=3870 comm="syz.3.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.320852][ T3877] netlink: 'syz.3.1223': attribute type 10 has an invalid length. [ 98.330013][ T36] audit: type=1400 audit(1760032229.273:431): avc: denied { map } for pid=3876 comm="syz.3.1223" path="socket:[18100]" dev="sockfs" ino=18100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.331379][ T3877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 98.365376][ T3877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1223'. [ 99.152694][ T447] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 99.301639][ T447] usb 1-1: Using ep0 maxpacket: 32 [ 99.308139][ T447] usb 1-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 99.317838][ T447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.326632][ T447] usb 1-1: config 0 descriptor?? [ 99.395345][ T366] usb 2-1: USB disconnect, device number 37 [ 99.466005][ T3891] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1229'. [ 99.489086][ T3893] overlayfs: failed to clone lowerpath [ 99.598065][ T3926] syz.3.1235 uses obsolete (PF_INET,SOCK_PACKET) [ 99.605522][ T3926] /dev/loop0: Can't lookup blockdev [ 99.635889][ T3931] fuseblk: Unknown parameter 'group_it' [ 99.769221][ T3938] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1240'. [ 99.785938][ T447] wacom 0003:056A:00B2.0006: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 99.796342][ T447] wacom 0003:056A:00B2.0006: hidraw0: USB HID v1.05 Device [HID 056a:00b2] on usb-dummy_hcd.0-1/input0 [ 99.809215][ T447] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B2.0006/input/input11 [ 99.987748][ T366] usb 1-1: USB disconnect, device number 20 [ 99.996390][ T3949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:475 [ 100.334693][ T366] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 100.375961][ T3965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=3965 comm=syz.2.1247 [ 100.389348][ T3965] 9pnet_fd: Insufficient options for proto=fd [ 100.524619][ T366] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 100.533067][ T366] usb 1-1: config 1 has no interface number 0 [ 100.539585][ T366] usb 1-1: config 1 interface 105 has no altsetting 0 [ 100.548431][ T366] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 100.558023][ T366] usb 1-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 100.567012][ T366] usb 1-1: Product: syz [ 100.571408][ T366] usb 1-1: Manufacturer: syz [ 100.576414][ T366] usb 1-1: SerialNumber: syz [ 101.181823][ T366] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 101.195918][ T3978] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 101.203462][ T366] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 101.230313][ T366] usb 1-1: USB disconnect, device number 21 [ 101.506905][ T358] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 101.552259][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 101.552278][ T36] audit: type=1326 audit(1760032232.505:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.2.1252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f150d18eec9 code=0x0 [ 101.667015][ T358] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.677542][ T358] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.687288][ T358] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.696601][ T358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.704729][ T358] usb 2-1: SerialNumber: syz [ 101.781467][ T3985] rust_binder: Write failure EFAULT in pid:672 [ 101.797866][ T36] audit: type=1400 audit(1760032232.756:438): avc: denied { link } for pid=3987 comm="syz.0.1255" name="#7" dev="tmpfs" ino=1248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.854643][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.854898][ T3988] rust_binder: Failed copying remainder into alloc: EFAULT [ 101.861774][ T3988] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 101.869316][ T3988] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 101.877733][ T3988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:675 [ 101.914922][ T36] audit: type=1400 audit(1760032232.877:439): avc: granted { setsecparam } for pid=3977 comm="syz.1.1251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 101.944903][ T358] usb 2-1: invalid UAC_HEADER (v1) [ 101.952690][ T358] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 101.969234][ T358] usb 2-1: USB disconnect, device number 38 [ 101.984756][ T418] udevd[418]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.025687][ T4006] sit0: entered promiscuous mode [ 102.031988][ T4006] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 102.039989][ T4006] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1261'. [ 102.100441][ T4007] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.536262][ T36] audit: type=1400 audit(1760032233.501:440): avc: denied { mount } for pid=4010 comm="syz.1.1263" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 102.566602][ T4011] ./cgroup: Can't lookup blockdev [ 102.578980][ T36] audit: type=1400 audit(1760032233.541:441): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 102.605113][ T36] audit: type=1400 audit(1760032233.572:442): avc: denied { create } for pid=4012 comm="syz.1.1264" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.627745][ T36] audit: type=1400 audit(1760032233.572:443): avc: denied { ioctl } for pid=4012 comm="syz.1.1264" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18849 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.654509][ T36] audit: type=1400 audit(1760032233.592:444): avc: denied { read write } for pid=4012 comm="syz.1.1264" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.678303][ T36] audit: type=1400 audit(1760032233.592:445): avc: denied { open } for pid=4012 comm="syz.1.1264" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.702015][ T36] audit: type=1400 audit(1760032233.592:446): avc: denied { ioctl } for pid=4012 comm="syz.1.1264" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.858121][ T358] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 103.015931][ T358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.038111][ T358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.055418][ T358] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 103.069335][ T358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.080543][ T358] usb 2-1: config 0 descriptor?? [ 103.109375][ T4018] rust_binder: Write failure EFAULT in pid:696 [ 103.171936][ T4035] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1271'. [ 103.225316][ T4037] netlink: 'syz.2.1272': attribute type 63 has an invalid length. [ 103.234009][ T4037] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1272'. [ 103.244773][ T4037] netlink: 'syz.2.1272': attribute type 27 has an invalid length. [ 103.252835][ T4037] lo: left promiscuous mode [ 103.257419][ T4037] lo: left allmulticast mode [ 103.264247][ T4037] tunl0: left promiscuous mode [ 103.269112][ T4037] tunl0: left allmulticast mode [ 103.274772][ T4037] gre0: left promiscuous mode [ 103.279675][ T4037] gre0: left allmulticast mode [ 103.285114][ T4037] gretap0: left promiscuous mode [ 103.290395][ T4037] gretap0: left allmulticast mode [ 103.296266][ T4037] erspan0: left promiscuous mode [ 103.301274][ T4037] erspan0: left allmulticast mode [ 103.307337][ T4037] ip_vti0: left promiscuous mode [ 103.313690][ T4037] ip_vti0: left allmulticast mode [ 103.321485][ T4037] ip6_vti0: left promiscuous mode [ 103.327000][ T4037] ip6_vti0: left allmulticast mode [ 103.333854][ T4037] sit0: left promiscuous mode [ 103.339127][ T4037] sit0: left allmulticast mode [ 103.345324][ T4037] ip6tnl0: left promiscuous mode [ 103.354185][ T4037] ip6tnl0: left allmulticast mode [ 103.359857][ T4037] ip6gre0: left promiscuous mode [ 103.364938][ T4037] ip6gre0: left allmulticast mode [ 103.370517][ T4037] ip6gretap0: left promiscuous mode [ 103.375870][ T4037] ip6gretap0: left allmulticast mode [ 103.381814][ T4037] bridge0: left promiscuous mode [ 103.386889][ T4037] bridge0: left allmulticast mode [ 103.392827][ T4037] vcan0: left promiscuous mode [ 103.397820][ T4037] vcan0: left allmulticast mode [ 103.403098][ T4037] dummy0: left promiscuous mode [ 103.408860][ T4037] dummy0: left allmulticast mode [ 103.415112][ T4037] veth0: left promiscuous mode [ 103.421164][ T4037] veth0: left allmulticast mode [ 103.427635][ T4037] veth1: left promiscuous mode [ 103.432718][ T4037] veth1: left allmulticast mode [ 103.439310][ T4037] wg0: left promiscuous mode [ 103.444020][ T4037] wg0: left allmulticast mode [ 103.450278][ T4037] wg1: left promiscuous mode [ 103.455837][ T4037] wg1: left allmulticast mode [ 103.461201][ T4037] wg2: left promiscuous mode [ 103.467050][ T4037] wg2: left allmulticast mode [ 103.472393][ T4037] veth0_to_bridge: left promiscuous mode [ 103.479399][ T4037] veth0_to_bridge: left allmulticast mode [ 103.487037][ T4037] veth1_to_bridge: left promiscuous mode [ 103.492946][ T4037] veth1_to_bridge: left allmulticast mode [ 103.501008][ T4037] veth0_to_bond: left promiscuous mode [ 103.506579][ T358] pyra 0003:1E7D:2CF6.0007: item fetching failed at offset 4/7 [ 103.506811][ T358] pyra 0003:1E7D:2CF6.0007: parse failed [ 103.516557][ T4037] veth0_to_bond: left allmulticast mode [ 103.527726][ T4037] bond_slave_0: left promiscuous mode [ 103.534823][ T4037] bond_slave_0: left allmulticast mode [ 103.541004][ T4037] veth1_to_bond: left promiscuous mode [ 103.542572][ T358] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -22 [ 103.548311][ T4037] veth1_to_bond: left allmulticast mode [ 103.568990][ T4037] bond_slave_1: left promiscuous mode [ 103.577814][ T4037] bond_slave_1: left allmulticast mode [ 103.584947][ T4037] veth0_to_team: left promiscuous mode [ 103.590558][ T4037] veth0_to_team: left allmulticast mode [ 103.598765][ T4037] team_slave_0: left promiscuous mode [ 103.605222][ T4037] team_slave_0: left allmulticast mode [ 103.611307][ T4037] veth1_to_team: left promiscuous mode [ 103.621072][ T4037] veth1_to_team: left allmulticast mode [ 103.629349][ T4037] team_slave_1: left promiscuous mode [ 103.635844][ T4037] team_slave_1: left allmulticast mode [ 103.645099][ T4037] veth0_to_batadv: left promiscuous mode [ 103.651083][ T4037] veth0_to_batadv: left allmulticast mode [ 103.658646][ T4037] batadv_slave_0: left promiscuous mode [ 103.668420][ T4037] batadv_slave_0: left allmulticast mode [ 103.675451][ T4037] veth1_to_batadv: left promiscuous mode [ 103.681272][ T4037] veth1_to_batadv: left allmulticast mode [ 103.690638][ T4037] batadv_slave_1: left promiscuous mode [ 103.697033][ T4037] batadv_slave_1: left allmulticast mode [ 103.706673][ T4037] xfrm0: left promiscuous mode [ 103.714953][ T4037] xfrm0: left allmulticast mode [ 103.720507][ T4037] veth0_to_hsr: left promiscuous mode [ 103.727082][ T4037] veth0_to_hsr: left allmulticast mode [ 103.734118][ T4037] hsr_slave_0: left promiscuous mode [ 103.739571][ T4037] hsr_slave_0: left allmulticast mode [ 103.755670][ T4037] veth1_to_hsr: left promiscuous mode [ 103.771930][ T4037] veth1_to_hsr: left allmulticast mode [ 103.788149][ T4037] hsr_slave_1: left promiscuous mode [ 103.793609][ T4037] hsr_slave_1: left allmulticast mode [ 103.799895][ T4037] veth1_virt_wifi: left promiscuous mode [ 103.805715][ T4037] veth1_virt_wifi: left allmulticast mode [ 103.812580][ T4037] veth0_virt_wifi: left promiscuous mode [ 103.818381][ T4037] veth0_virt_wifi: left allmulticast mode [ 103.825539][ T4037] veth1_vlan: left promiscuous mode [ 103.830876][ T4037] veth1_vlan: left allmulticast mode [ 103.838179][ T4037] @: left promiscuous mode [ 103.843045][ T4037] @: left allmulticast mode [ 103.848437][ T4037] vlan1: left promiscuous mode [ 103.853854][ T4037] vlan1: left allmulticast mode [ 103.859108][ T4037] veth0_vlan: left allmulticast mode [ 103.865832][ T4037] veth0_macvtap: left promiscuous mode [ 103.871813][ T4037] veth0_macvtap: left allmulticast mode [ 103.878041][ T4037] macsec0: left promiscuous mode [ 103.883683][ T4037] macsec0: left allmulticast mode [ 103.889171][ T4037] veth1_macvtap: left allmulticast mode [ 103.889996][ T4060] rust_binder: Write failure EFAULT in pid:703 [ 103.895775][ T4037] ip6tnl1: left promiscuous mode [ 103.907437][ T4037] ip6tnl1: left allmulticast mode [ 103.916036][ T4055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1280'. [ 103.918374][ T358] usb 2-1: USB disconnect, device number 39 [ 103.929432][ T4058] netlink: 'syz.3.1280': attribute type 27 has an invalid length. [ 103.972589][ T4058] gretap0: left promiscuous mode [ 103.988420][ T4058] bridge0: left promiscuous mode [ 103.999370][ T4058] bridge0: left allmulticast mode [ 104.036239][ T4065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.134295][ T4069] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1286'. [ 104.471092][ T4097] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.474464][ T4097] rust_binder: Write failure EFAULT in pid:714 [ 104.679276][ T4117] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.692002][ T4116] rust_binder: Failed copying into alloc: EFAULT [ 104.698751][ T4116] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 104.705368][ T4116] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 104.715499][ T4116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:496 [ 104.740992][ T4116] rust_binder: 496: no such ref 0 [ 104.767033][ T4116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:496 [ 104.859833][ T4129] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 105.024463][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 105.173559][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 105.181158][ T31] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 105.189946][ T31] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 105.198641][ T31] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 105.208998][ T31] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 105.218133][ T31] usb 1-1: config 250 has no interface number 0 [ 105.224459][ T31] usb 1-1: config 250 interface 228 has no altsetting 0 [ 105.233987][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 105.243121][ T31] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 105.251475][ T31] usb 1-1: Product: syz [ 105.255710][ T31] usb 1-1: SerialNumber: syz [ 105.264488][ T31] hub 1-1:250.228: bad descriptor, ignoring hub [ 105.271123][ T31] hub 1-1:250.228: probe with driver hub failed with error -5 [ 105.741550][ T31] usb 1-1: reset high-speed USB device number 22 using dummy_hcd [ 105.786240][ T4155] FAT-fs (rnullb0): bogus number of reserved sectors [ 105.793043][ T4155] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 105.910754][ T31] usb 1-1: device firmware changed [ 105.916547][ T31] usb 1-1: USB disconnect, device number 22 [ 105.977962][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.067986][ T506] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 106.217109][ T31] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 106.227542][ T506] usb 2-1: Invalid ep0 maxpacket: 64 [ 106.299052][ T4188] cgroup: fork rejected by pids controller in /syz2 [ 106.356343][ T506] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 106.395993][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 106.425799][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.479333][ T31] usb 1-1: config 0 has no interfaces? [ 106.518864][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 106.535156][ T506] usb 2-1: Invalid ep0 maxpacket: 64 [ 106.541008][ T36] kauditd_printk_skb: 460 callbacks suppressed [ 106.541026][ T36] audit: type=1400 audit(1760032237.526:907): avc: denied { ioctl } for pid=4156 comm="syz.1.1317" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.541083][ T506] usb usb2-port1: attempt power cycle [ 106.577741][ T31] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 106.586264][ T31] usb 1-1: Product: syz [ 106.590470][ T31] usb 1-1: SerialNumber: syz [ 106.599169][ T31] usb 1-1: config 0 descriptor?? [ 106.608753][ T36] audit: type=1400 audit(1760032237.597:908): avc: denied { ioctl } for pid=4122 comm="syz.0.1304" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.664472][ T36] audit: type=1400 audit(1760032237.597:909): avc: denied { ioctl } for pid=4122 comm="syz.0.1304" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.714937][ T36] audit: type=1400 audit(1760032237.617:910): avc: denied { ioctl } for pid=4156 comm="syz.1.1317" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.741002][ T36] audit: type=1400 audit(1760032237.617:911): avc: denied { ioctl } for pid=4156 comm="syz.1.1317" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.767224][ T36] audit: type=1400 audit(1760032237.627:912): avc: denied { ioctl } for pid=4122 comm="syz.0.1304" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.794412][ T36] audit: type=1400 audit(1760032237.687:913): avc: denied { ioctl } for pid=4156 comm="syz.1.1317" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.821226][ T36] audit: type=1400 audit(1760032237.687:914): avc: denied { ioctl } for pid=4156 comm="syz.1.1317" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.853010][ T36] audit: type=1400 audit(1760032237.838:915): avc: denied { ioctl } for pid=4122 comm="syz.0.1304" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.881000][ T36] audit: type=1400 audit(1760032237.868:916): avc: denied { create } for pid=4260 comm="syz.3.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.962616][ T506] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 106.983808][ T506] usb 2-1: Invalid ep0 maxpacket: 64 [ 107.111651][ T506] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 107.132763][ T506] usb 2-1: Invalid ep0 maxpacket: 64 [ 107.138215][ T506] usb usb2-port1: unable to enumerate USB device [ 107.209771][ T9] usb 1-1: USB disconnect, device number 23 [ 107.663071][ T4306] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1346'. [ 107.721204][ T4309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'. [ 108.321269][ T4341] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1355'. [ 108.622669][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 108.761881][ T9] usb 1-1: device descriptor read/64, error -71 [ 109.030308][ T9] usb 1-1: device descriptor read/64, error -71 [ 109.076636][ T4387] /dev/loop0: Can't lookup blockdev [ 109.308706][ T358] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 109.318616][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 109.487891][ T9] usb 1-1: device descriptor read/64, error -71 [ 109.524688][ T358] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 109.545200][ T358] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.556749][ T358] usb 2-1: config 0 has no interfaces? [ 109.563468][ T358] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 109.574775][ T358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.593122][ T358] usb 2-1: config 0 descriptor?? [ 109.756454][ T9] usb 1-1: device descriptor read/64, error -71 [ 109.806444][ T4385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.815797][ T4385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.852126][ T4385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.865691][ T4385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.877564][ T9] usb usb1-port1: attempt power cycle [ 110.047975][ T507] usb 2-1: USB disconnect, device number 44 [ 110.226408][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 110.249135][ T9] usb 1-1: device descriptor read/8, error -71 [ 110.379076][ T9] usb 1-1: device descriptor read/8, error -71 [ 110.588341][ T4454] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 110.588369][ T4454] rust_binder: Error while translating object. [ 110.599091][ T4454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.605422][ T4454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:517 [ 110.616308][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 110.648749][ T9] usb 1-1: device descriptor read/8, error -71 [ 110.655813][ T4456] rust_binder: Write failure EFAULT in pid:519 [ 110.781757][ T9] usb 1-1: device descriptor read/8, error -71 [ 110.896902][ T9] usb usb1-port1: unable to enumerate USB device [ 111.407220][ T4473] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 111.460112][ T4479] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.462184][ T4483] rust_binder: Error while translating object. [ 111.468836][ T4483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 111.475187][ T4483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:745 [ 111.519797][ T4488] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 111.536109][ T4488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:749 [ 111.548698][ T36] kauditd_printk_skb: 554 callbacks suppressed [ 111.548720][ T36] audit: type=1400 audit(1760032502.558:1471): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.588345][ T36] audit: type=1400 audit(1760032502.558:1472): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.614736][ T36] audit: type=1400 audit(1760032502.558:1473): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.653153][ T36] audit: type=1400 audit(1760032502.578:1474): avc: denied { read } for pid=4489 comm="syz.0.1407" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 111.676047][ T36] audit: type=1400 audit(1760032502.588:1475): avc: denied { read open } for pid=4489 comm="syz.0.1407" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 111.699701][ T36] audit: type=1400 audit(1760032502.588:1476): avc: denied { ioctl } for pid=4489 comm="syz.0.1407" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 111.724417][ T36] audit: type=1400 audit(1760032502.618:1477): avc: denied { create } for pid=4489 comm="syz.0.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.744309][ T36] audit: type=1400 audit(1760032502.628:1478): avc: denied { setopt } for pid=4489 comm="syz.0.1407" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.764661][ T36] audit: type=1400 audit(1760032502.628:1479): avc: denied { bind } for pid=4489 comm="syz.0.1407" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.784794][ T36] audit: type=1400 audit(1760032502.628:1480): avc: denied { name_bind } for pid=4489 comm="syz.0.1407" src=20009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 111.876473][ T506] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 112.025945][ T506] usb 1-1: Using ep0 maxpacket: 16 [ 112.033135][ T506] usb 1-1: unable to get BOS descriptor or descriptor too short [ 112.044148][ T506] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.057679][ T506] usb 1-1: config 1 interface 0 has no altsetting 0 [ 112.070183][ T506] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 112.079911][ T506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.089104][ T506] usb 1-1: Product: syz [ 112.093470][ T506] usb 1-1: Manufacturer: syz [ 112.095817][ T4499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1410'. [ 112.099543][ T506] usb 1-1: SerialNumber: syz [ 112.336795][ T4490] syzkaller0: entered promiscuous mode [ 112.342332][ T4490] syzkaller0: entered allmulticast mode [ 112.391065][ T4510] rust_binder: Write failure EFAULT in pid:535 [ 112.433987][ T506] usbhid 1-1:1.0: can't add hid device: -71 [ 112.466093][ T506] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 112.480346][ T506] usb 1-1: USB disconnect, device number 28 [ 112.590884][ T4515] __vm_enough_memory: pid: 4515, comm: syz.0.1414, bytes: 18014402804453376 not enough memory for the allocation [ 112.709195][ T4518] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1415'. [ 113.080502][ T4535] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1421'. [ 113.178880][ T4537] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1422'. [ 113.215658][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 113.375650][ T9] usb 1-1: device descriptor read/64, error -71 [ 113.589261][ T4551] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 113.625566][ T9] usb 1-1: device descriptor read/64, error -71 [ 113.658018][ T4554] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1428'. [ 113.668503][ T4554] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1428'. [ 113.679891][ T4554] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1428'. [ 113.691054][ T4554] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1428'. [ 113.702195][ T4554] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1428'. [ 113.713374][ T4554] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1428'. [ 113.724656][ T4554] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1428'. [ 113.735883][ T4554] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1428'. [ 113.747960][ T4554] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1428'. [ 113.758675][ T4554] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1428'. [ 113.759025][ T4557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:551 [ 113.838748][ T4560] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 113.875494][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 114.040696][ T4571] 9pnet: Could not find request transport: xen [ 114.047942][ T9] usb 1-1: device descriptor read/64, error -71 [ 114.295423][ T9] usb 1-1: device descriptor read/64, error -71 [ 114.415465][ T9] usb usb1-port1: attempt power cycle [ 114.621894][ T4605] cgroup: Name too long [ 114.626814][ T4606] cgroup: Name too long [ 114.697991][ T4612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.727433][ T4612] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 114.755571][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 114.809212][ T9] usb 1-1: device descriptor read/8, error -71 [ 114.948050][ T9] usb 1-1: device descriptor read/8, error -71 [ 115.185248][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 115.207704][ T9] usb 1-1: device descriptor read/8, error -71 [ 115.327968][ T4631] 9pnet_fd: Insufficient options for proto=fd [ 115.348090][ T9] usb 1-1: device descriptor read/8, error -71 [ 115.455628][ T9] usb usb1-port1: unable to enumerate USB device [ 115.880145][ T4676] /dev/loop0: Can't lookup blockdev [ 116.192519][ T4702] fuseblk: Unknown parameter 'group_Md' [ 116.313281][ T4704] SELinux: security_context_str_to_sid () failed with errno=-22 [ 116.392089][ T4707] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.392575][ T4707] rust_binder: inc_ref_done called when no active inc_refs [ 116.537901][ T4715] overlayfs: workdir and upperdir must be separate subtrees [ 116.555017][ T36] kauditd_printk_skb: 1047 callbacks suppressed [ 116.555035][ T36] audit: type=1400 audit(1760032507.569:2528): avc: denied { write } for pid=4714 comm="syz.0.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.567165][ T4715] 9pnet_fd: Insufficient options for proto=fd [ 116.615048][ T36] audit: type=1400 audit(1760032507.569:2529): avc: denied { write } for pid=4714 comm="syz.0.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.704498][ T36] audit: type=1400 audit(1760032507.569:2530): avc: denied { write } for pid=4711 comm="syz.1.1488" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.728281][ T4727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.750618][ T36] audit: type=1400 audit(1760032507.569:2531): avc: denied { write } for pid=4711 comm="syz.1.1488" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.815501][ T4725] audit: audit_backlog=65 > audit_backlog_limit=64 [ 116.824851][ T36] audit: type=1400 audit(1760032507.579:2532): avc: denied { mounton } for pid=4711 comm="syz.1.1488" path="/208" dev="tmpfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 116.832342][ T4725] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 116.895520][ T4737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:582 [ 116.903032][ T4725] audit: backlog limit exceeded [ 116.917308][ T36] audit: type=1400 audit(1760032507.599:2533): avc: denied { create } for pid=4714 comm="syz.0.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.957510][ T290] audit: audit_backlog=65 > audit_backlog_limit=64 [ 117.160664][ T4746] binder: Unknown parameter 'fscontext?}' [ 117.729814][ T4764] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.787661][ T4765] SELinux: syz.0.1504 (4765) set checkreqprot to 1. This is no longer supported. [ 117.878596][ T4765] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 117.878630][ T4765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 117.898224][ T4765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:796 [ 118.026010][ T4769] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.371642][ T4771] 9pnet: Could not find request transport: ^fd [ 118.604097][ T4784] tmpfs: Bad value for 'nr_blocks' [ 118.665755][ T4795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=4795 comm=syz.3.1514 [ 118.742350][ T4799] can: request_module (can-proto-5) failed. [ 118.809221][ T4806] __nla_validate_parse: 63 callbacks suppressed [ 118.809244][ T4806] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1518'. [ 118.882248][ T4809] futex_wake_op: syz.3.1520 tries to shift op by 144; fix this program [ 118.921537][ T4813] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 118.930943][ T4813] 9pnet_fd: Insufficient options for proto=fd [ 118.977181][ T4816] 9pnet_fd: Insufficient options for proto=fd [ 119.110326][ T4822] SELinux: failed to load policy [ 119.164585][ T4824] rust_binder: 811: no such ref 1 [ 119.165669][ T4825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:811 [ 119.169776][ T4824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:811 [ 119.897912][ T4831] binder: Bad value for 'max' [ 119.897911][ T4830] binder: Bad value for 'max' [ 120.072012][ T4835] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.074097][ T4835] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 120.080731][ T4835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 120.088845][ T4835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:816 [ 120.126759][ T4837] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 120.145718][ T4837] SELinux: failed to load policy [ 120.743899][ T507] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 120.883801][ T507] usb 1-1: device descriptor read/64, error -71 [ 121.123722][ T507] usb 1-1: device descriptor read/64, error -71 [ 121.363713][ T507] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 121.503630][ T507] usb 1-1: device descriptor read/64, error -71 [ 121.552089][ T4859] /dev/loop0: Can't lookup blockdev [ 121.614395][ T36] kauditd_printk_skb: 462 callbacks suppressed [ 121.614415][ T36] audit: type=1400 audit(1760032512.630:2994): avc: denied { ioctl } for pid=4853 comm="syz.0.1534" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.646664][ T36] audit: type=1400 audit(1760032512.630:2995): avc: denied { ioctl } for pid=4853 comm="syz.0.1534" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.671946][ T36] audit: type=1400 audit(1760032512.660:2996): avc: denied { ioctl } for pid=4853 comm="syz.0.1534" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.698582][ T36] audit: type=1400 audit(1760032512.690:2997): avc: denied { ioctl } for pid=4853 comm="syz.0.1534" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.718321][ T4863] 9pnet_fd: Insufficient options for proto=fd [ 121.724352][ T36] audit: type=1400 audit(1760032512.690:2998): avc: denied { ioctl } for pid=4853 comm="syz.0.1534" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.756374][ T36] audit: type=1400 audit(1760032512.690:2999): avc: denied { read write } for pid=292 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.781690][ T36] audit: type=1400 audit(1760032512.690:3000): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.806916][ T36] audit: type=1400 audit(1760032512.690:3001): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.833524][ T507] usb 1-1: device descriptor read/64, error -71 [ 121.839967][ T36] audit: type=1400 audit(1760032512.710:3002): avc: denied { ioctl } for pid=4853 comm="syz.0.1534" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.865276][ T36] audit: type=1400 audit(1760032512.710:3003): avc: denied { ioctl } for pid=4853 comm="syz.0.1534" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.943609][ T507] usb usb1-port1: attempt power cycle [ 122.030456][ T4874] overlayfs: failed to clone upperpath [ 122.283435][ T507] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 122.305819][ T507] usb 1-1: device descriptor read/8, error -71 [ 122.436236][ T507] usb 1-1: device descriptor read/8, error -71 [ 122.635932][ T4889] rust_binder: Write failure EFAULT in pid:620 [ 122.673389][ T507] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 122.706429][ T507] usb 1-1: device descriptor read/8, error -71 [ 122.820407][ T4894] batadv_slave_0: mtu less than device minimum [ 122.826795][ T4895] batadv_slave_0: mtu less than device minimum [ 122.846630][ T507] usb 1-1: device descriptor read/8, error -71 [ 122.963867][ T507] usb usb1-port1: unable to enumerate USB device [ 122.968635][ T4899] 9pnet_fd: Insufficient options for proto=fd [ 123.063436][ T4905] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"Br?ISY,8' [ 123.113251][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 123.263201][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 123.271767][ T9] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 123.280866][ T9] usb 2-1: config 0 has no interface number 0 [ 123.290194][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 123.299494][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.307608][ T9] usb 2-1: Product: syz [ 123.311800][ T9] usb 2-1: Manufacturer: syz [ 123.316442][ T9] usb 2-1: SerialNumber: syz [ 123.322645][ T9] usb 2-1: config 0 descriptor?? [ 123.532925][ T4897] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.559009][ T4910] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 123.571548][ T4911] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.632452][ T4897] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 123.729219][ T4918] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 124.632863][ T358] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 124.795188][ T358] usb 1-1: config 1 interface 0 has no altsetting 0 [ 124.807315][ T358] usb 1-1: string descriptor 0 read error: -22 [ 124.816937][ T358] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.40 [ 124.826121][ T358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.045275][ T358] usbhid 1-1:1.0: can't add hid device: -71 [ 125.063617][ T358] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 125.074560][ T358] usb 1-1: USB disconnect, device number 37 [ 125.133073][ T4942] random: crng reseeded on system resumption [ 125.163788][ T4944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.172342][ T4944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.231324][ T4954] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1568'. [ 125.735399][ T4962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.806594][ T4970] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 125.955868][ T4982] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1578'. [ 126.088528][ T4992] rust_binder: Write failure EFAULT in pid:643 [ 126.166935][ T4996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.181780][ T4996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.441801][ T5008] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1588'. [ 126.720637][ T36] kauditd_printk_skb: 470 callbacks suppressed [ 126.720655][ T36] audit: type=1400 audit(1760032517.731:3474): avc: denied { create } for pid=5011 comm="syz.3.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.749680][ T36] audit: type=1400 audit(1760032517.731:3475): avc: denied { bind } for pid=5011 comm="syz.3.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.762826][ T5018] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.770563][ T36] audit: type=1400 audit(1760032517.741:3476): avc: denied { read write } for pid=292 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.803315][ T36] audit: type=1400 audit(1760032517.741:3477): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.828929][ T36] audit: type=1400 audit(1760032517.741:3478): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.889772][ T36] audit: type=1400 audit(1760032517.761:3479): avc: denied { connect } for pid=5011 comm="syz.3.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.909927][ T36] audit: type=1400 audit(1760032517.761:3480): avc: denied { bind } for pid=5011 comm="syz.3.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.930344][ T36] audit: type=1400 audit(1760032517.761:3481): avc: denied { create } for pid=5011 comm="syz.3.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.951066][ T36] audit: type=1400 audit(1760032517.761:3482): avc: denied { write } for pid=5011 comm="syz.3.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.971526][ T36] audit: type=1400 audit(1760032517.771:3483): avc: denied { read } for pid=5016 comm="syz.1.1591" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 126.980403][ T5022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.004084][ T5022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.014858][ T5022] rust_binder: Write failure EFAULT in pid:654 [ 127.302885][ T5028] netlink: 'syz.3.1594': attribute type 4 has an invalid length. [ 127.466503][ T5034] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1597'. [ 127.633799][ T5040] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.634692][ T5040] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 127.811063][ T5045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.828037][ T5045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.840038][ T5045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.852077][ T5045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.352793][ T9] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 128.359254][ T9] usb 2-1: No valid video chain found. [ 128.493101][ T5056] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.500200][ T5056] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 128.513086][ T5058] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1606'. [ 129.320061][ T5093] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1617'. [ 129.407690][ T5099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.408052][ T5099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.408412][ T5099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.448659][ T5099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.448976][ T5099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.468872][ T5099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.469213][ T5099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.486941][ T5099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.487290][ T5099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.552282][ T31] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 129.572220][ T5115] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.575551][ T5115] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 129.636309][ T5118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.647687][ T5118] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 129.656050][ T5119] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.675033][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1625'. [ 129.711662][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 129.720022][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.732553][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.745593][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.755379][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.763681][ T31] usb 1-1: Product: syz [ 129.768837][ T31] usb 1-1: Manufacturer: syz [ 129.773792][ T31] usb 1-1: SerialNumber: syz [ 129.785415][ T5126] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1629'. [ 129.976138][ T5131] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.983443][ T5131] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 129.989261][ T5132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.006893][ T5132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.025758][ T5132] __vm_enough_memory: pid: 5132, comm: syz.0.1618, bytes: 18014402804453376 not enough memory for the allocation [ 130.044828][ T31] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 130.067098][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 130.079420][ T31] usb 1-1: USB disconnect, device number 38 [ 130.143181][ T418] udevd[418]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 130.287340][ T5140] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.342872][ T5140] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 130.511433][ T5145] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 130.549934][ T5145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.561404][ T5145] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 130.641752][ T5150] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1638'. [ 130.646334][ T5151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.678487][ T5151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.720829][ T46] dummy0: left allmulticast mode [ 130.725905][ T46] dummy0: left promiscuous mode [ 130.736338][ T46] bridge0: port 3(dummy0) entered disabled state [ 130.739824][ T5153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:878 [ 130.744373][ T46] bridge_slave_1: left allmulticast mode [ 130.759641][ T46] bridge_slave_1: left promiscuous mode [ 130.766783][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.775373][ T46] bridge_slave_0: left allmulticast mode [ 130.781151][ T46] bridge_slave_0: left promiscuous mode [ 130.788258][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.807401][ T5154] rust_binder: Failed to allocate buffer. len:4256, is_oneway:true [ 130.807433][ T5154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 130.816358][ T5154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:878 [ 130.915121][ T46] tipc: Disabling bearer [ 130.963704][ T46] tipc: Left network mode [ 130.996585][ T5160] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 131.024132][ T5160] rust_binder: Error while translating object. [ 131.024186][ T5160] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.030510][ T5160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:883 [ 131.042609][ T46] veth1_macvtap: left promiscuous mode [ 131.077534][ T46] >: left promiscuous mode [ 131.258341][ T5172] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1647'. [ 131.404496][ T5179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.451188][ T31] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 131.589750][ T5187] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5187 comm=syz.1.1653 [ 131.607823][ T5187] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1124 sclass=netlink_tcpdiag_socket pid=5187 comm=syz.1.1653 [ 131.623628][ T5187] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5187 comm=syz.1.1653 [ 131.657199][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 131.678498][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 131.697784][ T31] usb 1-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 131.707945][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.720040][ T31] usb 1-1: config 0 descriptor?? [ 131.727773][ T36] kauditd_printk_skb: 728 callbacks suppressed [ 131.727792][ T36] audit: type=1400 audit(1760032522.743:4212): avc: denied { ioctl } for pid=5169 comm="syz.0.1645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.759967][ T5170] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.767861][ T36] audit: type=1400 audit(1760032522.773:4213): avc: denied { ioctl } for pid=5169 comm="syz.0.1645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.770832][ T31] usbhid 1-1:0.0: can't add hid device: -22 [ 131.793243][ T36] audit: type=1400 audit(1760032522.773:4214): avc: denied { ioctl } for pid=5169 comm="syz.0.1645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.829627][ T36] audit: type=1400 audit(1760032522.783:4215): avc: denied { ioctl } for pid=5169 comm="syz.0.1645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.834814][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 131.856767][ T36] audit: type=1400 audit(1760032522.843:4216): avc: denied { create } for pid=5189 comm="syz.1.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.894764][ T36] audit: type=1400 audit(1760032522.883:4217): avc: denied { write } for pid=5189 comm="syz.1.1654" name="raw6" dev="proc" ino=4026532608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 131.918616][ T36] audit: type=1400 audit(1760032522.883:4218): avc: denied { write } for pid=5189 comm="syz.1.1654" path="/proc/714/net/raw6" dev="proc" ino=4026532608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 131.971054][ T36] audit: type=1400 audit(1760032522.883:4219): avc: denied { write } for pid=5189 comm="syz.1.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.021340][ T5170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1645'. [ 132.053744][ T5170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1645'. [ 132.061063][ T36] audit: type=1400 audit(1760032522.883:4220): avc: denied { ioctl } for pid=5189 comm="syz.1.1654" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 132.084232][ T5170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5170 comm=syz.0.1645 [ 132.106586][ T36] audit: type=1400 audit(1760032523.023:4221): avc: denied { execmem } for pid=5191 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 132.129935][ T9] usb 1-1: USB disconnect, device number 39 [ 132.169062][ T5198] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1657'. [ 132.245095][ T5200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47134 sclass=netlink_route_socket pid=5200 comm=syz.1.1659 [ 132.852376][ T5215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:721 [ 132.897099][ T5220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.919577][ T5220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.336711][ T5234] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1666'. [ 134.397059][ T5236] 9pnet_fd: p9_fd_create_unix (5236): problem connecting socket: ./file0: -111 [ 134.556236][ T5245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=5245 comm=syz.2.1671 [ 134.573646][ T5245] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1671'. [ 135.351913][ T5252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.365947][ T5251] overlayfs: failed to clone upperpath [ 135.377671][ T5252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.538373][ T5279] rust_binder: Error while translating object. [ 136.538426][ T5279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 136.555001][ T5279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:909 [ 136.577702][ T5283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1682'. [ 136.821872][ T36] kauditd_printk_skb: 367 callbacks suppressed [ 136.821895][ T36] audit: type=1400 audit(1760032527.844:4589): avc: denied { read } for pid=5293 comm="syz.1.1684" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 136.906412][ T36] audit: type=1400 audit(1760032527.844:4590): avc: denied { read open } for pid=5293 comm="syz.1.1684" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 136.956164][ T36] audit: type=1400 audit(1760032527.894:4591): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.009083][ T36] audit: type=1400 audit(1760032527.894:4592): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.080105][ T36] audit: type=1400 audit(1760032527.894:4593): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.169792][ T36] audit: type=1400 audit(1760032527.964:4594): avc: denied { create } for pid=5293 comm="syz.1.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.209827][ T36] audit: type=1400 audit(1760032527.964:4595): avc: denied { write } for pid=5293 comm="syz.1.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.249773][ T36] audit: type=1400 audit(1760032527.964:4596): avc: denied { read } for pid=5293 comm="syz.1.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.298577][ T36] audit: type=1400 audit(1760032527.964:4597): avc: denied { read } for pid=5293 comm="syz.1.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.339767][ T36] audit: type=1400 audit(1760032527.974:4598): avc: denied { sys_module } for pid=5293 comm="syz.1.1684" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 137.929202][ T5305] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 137.929235][ T5305] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 137.950118][ T5305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:917 [ 138.035689][ T5307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.062977][ T5307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.309558][ T447] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 138.469515][ T447] usb 1-1: Using ep0 maxpacket: 32 [ 138.476792][ T447] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.487840][ T447] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.497682][ T447] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 138.506765][ T447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.516628][ T447] usb 1-1: config 0 descriptor?? [ 138.525483][ T447] hub 1-1:0.0: USB hub found [ 138.725803][ T447] hub 1-1:0.0: 1 port detected [ 139.129437][ T31] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 139.232448][ T5328] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1694'. [ 139.341805][ T5315] netlink: 'syz.0.1689': attribute type 6 has an invalid length. [ 139.374501][ T5315] netlink: 'syz.0.1689': attribute type 4 has an invalid length. [ 139.404859][ T5315] netlink: 'syz.0.1689': attribute type 6 has an invalid length. [ 139.419277][ T5315] netlink: 5944 bytes leftover after parsing attributes in process `syz.0.1689'. [ 139.434672][ T5314] netlink: 'syz.0.1689': attribute type 6 has an invalid length. [ 139.442833][ T5314] netlink: 'syz.0.1689': attribute type 4 has an invalid length. [ 139.450855][ T5314] netlink: 'syz.0.1689': attribute type 6 has an invalid length. [ 139.458713][ T5314] netlink: 5944 bytes leftover after parsing attributes in process `syz.0.1689'. [ 139.579303][ T366] usb 1-1: USB disconnect, device number 40 [ 140.841148][ T5363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.869045][ T5363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.178926][ T447] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 141.331644][ T447] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 141.342159][ T447] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.353271][ T447] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 141.362453][ T447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.370694][ T447] usb 1-1: SerialNumber: syz [ 141.601423][ T447] usb 1-1: 0:2 : does not exist [ 141.608727][ T447] usb 1-1: unit 255 not found! [ 141.625931][ T447] usb 1-1: USB disconnect, device number 41 [ 141.681526][ T418] udevd[418]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 142.123248][ T36] kauditd_printk_skb: 2025 callbacks suppressed [ 142.123268][ T36] audit: type=1400 audit(1760032533.135:6624): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 142.162035][ T36] audit: type=1400 audit(1760032533.175:6625): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.186289][ T36] audit: type=1400 audit(1760032533.175:6626): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.211454][ T36] audit: type=1400 audit(1760032533.175:6627): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.258548][ T36] audit: type=1400 audit(1760032533.265:6628): avc: denied { execmem } for pid=5374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 142.287675][ T36] audit: type=1400 audit(1760032533.295:6629): avc: denied { read } for pid=5375 comm="syz.1.1708" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.318129][ T5379] rust_binder: Write failure EFAULT in pid:766 [ 142.338329][ T5379] rust_binder: Write failure EFAULT in pid:766 [ 142.338797][ T36] audit: type=1400 audit(1760032533.295:6630): avc: denied { read open } for pid=5375 comm="syz.1.1708" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.381817][ T5380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 142.381851][ T5380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:931 [ 142.428696][ T36] audit: type=1400 audit(1760032533.295:6631): avc: denied { read } for pid=5377 comm="syz.0.1707" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 142.467107][ T36] audit: type=1400 audit(1760032533.295:6632): avc: denied { read open } for pid=5377 comm="syz.0.1707" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 142.468159][ T5384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.492266][ T36] audit: type=1400 audit(1760032533.335:6633): avc: denied { read } for pid=5375 comm="syz.1.1708" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.550983][ T5392] rust_binder: Write failure EINVAL in pid:770 [ 144.174826][ T5410] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1718'. [ 144.221107][ T5412] random: crng reseeded on system resumption [ 145.748151][ T5419] netlink: 'syz.2.1723': attribute type 28 has an invalid length. [ 145.782938][ T5423] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1722'. [ 145.787295][ T5419] devpts: called with bogus options [ 145.808306][ T5423] rust_binder: 782: no such ref 3 [ 145.819055][ T5423] rust_binder: 782: no such ref 1 [ 145.826225][ T5423] rust_binder: Write failure EFAULT in pid:782 [ 145.953550][ T5435] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 145.966720][ T5435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 145.978695][ T5438] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1728'. [ 145.988379][ T5435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:953 [ 147.596826][ T36] kauditd_printk_skb: 612 callbacks suppressed [ 147.596849][ T36] audit: type=1400 audit(1760032538.606:7246): avc: denied { mounton } for pid=5442 comm="syz.0.1730" path="/325" dev="tmpfs" ino=1752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 147.642349][ T36] audit: type=1400 audit(1760032538.606:7247): avc: denied { mount } for pid=5442 comm="syz.0.1730" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 147.666402][ T36] audit: type=1400 audit(1760032538.626:7248): avc: denied { execmem } for pid=5441 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 147.689464][ T36] audit: type=1400 audit(1760032538.656:7249): avc: denied { execute } for pid=5443 comm="syz.2.1732" path="/dev/ashmem" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.715600][ T5447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.724365][ T5447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.753479][ T36] audit: type=1400 audit(1760032538.686:7250): avc: denied { map } for pid=5445 comm="syz.1.1731" path="socket:[27420]" dev="sockfs" ino=27420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 147.784042][ T36] audit: type=1400 audit(1760032538.686:7251): avc: denied { create } for pid=5445 comm="syz.1.1731" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 147.807505][ T36] audit: type=1400 audit(1760032538.706:7252): avc: denied { ioctl } for pid=5445 comm="syz.1.1731" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=27421 ioctlcmd=0x5760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 147.835432][ T36] audit: type=1400 audit(1760032538.706:7253): avc: denied { create } for pid=5445 comm="syz.1.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 147.864967][ T36] audit: type=1400 audit(1760032538.706:7254): avc: denied { write } for pid=5445 comm="syz.1.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 147.888575][ T36] audit: type=1400 audit(1760032538.706:7255): avc: denied { read } for pid=5445 comm="syz.1.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 149.559175][ T5457] overlayfs: failed to clone upperpath [ 149.743640][ T5470] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 151.558552][ T5480] overlayfs: failed to clone lowerpath [ 151.825085][ T5499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.827606][ T5499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.843100][ T5499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.876091][ T5499] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 151.884505][ T5501] FAT-fs (rnullb0): bogus number of reserved sectors [ 151.917180][ T5501] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 152.721706][ T36] kauditd_printk_skb: 176 callbacks suppressed [ 152.721726][ T36] audit: type=1400 audit(1760032543.738:7432): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.752199][ T36] audit: type=1400 audit(1760032543.738:7433): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.777622][ T36] audit: type=1400 audit(1760032543.738:7434): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.758855][ T36] audit: type=1400 audit(1760032544.778:7435): avc: denied { execmem } for pid=5503 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 153.764570][ T5507] rust_binder: Write failure EINVAL in pid:975 [ 153.784136][ T36] audit: type=1400 audit(1760032544.778:7436): avc: denied { read } for pid=5504 comm="syz.0.1753" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.845275][ T36] audit: type=1400 audit(1760032544.778:7437): avc: denied { read open } for pid=5504 comm="syz.0.1753" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.919184][ T5516] binder: Bad value for 'max' [ 153.923766][ T36] audit: type=1400 audit(1760032544.778:7438): avc: denied { ioctl } for pid=5504 comm="syz.0.1753" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.949825][ T5516] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 154.018438][ T36] audit: type=1400 audit(1760032544.778:7439): avc: denied { set_context_mgr } for pid=5504 comm="syz.0.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 154.085591][ T36] audit: type=1400 audit(1760032544.778:7440): avc: denied { ioctl } for pid=5504 comm="syz.0.1753" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 154.125700][ T36] audit: type=1400 audit(1760032544.798:7441): avc: denied { create } for pid=5505 comm="syz.1.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.152562][ T5535] tmpfs: Unknown parameter 'noinode32' [ 156.171547][ T5537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.173824][ T5537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.186216][ T5537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.286718][ T5544] random: crng reseeded on system resumption [ 158.452177][ T36] kauditd_printk_skb: 200 callbacks suppressed [ 158.452199][ T36] audit: type=1400 audit(1760032549.469:7642): avc: denied { execmem } for pid=5549 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 158.511329][ T36] audit: type=1400 audit(1760032549.479:7643): avc: denied { read } for pid=5551 comm="syz.1.1770" dev="nsfs" ino=4026532556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 158.537347][ T36] audit: type=1400 audit(1760032549.479:7644): avc: denied { read open } for pid=5551 comm="syz.1.1770" path="net:[4026532556]" dev="nsfs" ino=4026532556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 158.577936][ T36] audit: type=1400 audit(1760032549.479:7645): avc: denied { create } for pid=5551 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.599388][ T36] audit: type=1400 audit(1760032549.499:7646): avc: denied { read write } for pid=5550 comm="syz.0.1769" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 158.652517][ T5563] x_tables: duplicate underflow at hook 1 [ 158.669750][ T36] audit: type=1400 audit(1760032549.499:7647): avc: denied { ioctl open } for pid=5550 comm="syz.0.1769" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 158.700200][ T36] audit: type=1400 audit(1760032549.499:7648): avc: denied { read } for pid=5551 comm="syz.1.1770" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 158.725571][ T36] audit: type=1400 audit(1760032549.509:7650): avc: denied { read open } for pid=5551 comm="syz.1.1770" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 158.750182][ T5566] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9v [ 158.759791][ T36] audit: type=1400 audit(1760032549.499:7649): avc: denied { ioctl } for pid=5550 comm="syz.0.1769" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=3 req=1637 state=3 status=67 (errno 9: Bad file descriptor) [ 158.785870][ T36] audit: type=1400 audit(1760032549.509:7651): avc: denied { ioctl } for pid=5551 comm="syz.1.1770" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 158.961952][ T46] bridge_slave_1: left allmulticast mode [ 158.974618][ T9] usb 2-1: USB disconnect, device number 45 [ 158.994563][ T46] bridge_slave_1: left promiscuous mode [ 159.008368][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.026109][ T46] bridge_slave_0: left allmulticast mode [ 159.032168][ T46] bridge_slave_0: left promiscuous mode [ 159.063599][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.237707][ T46] veth1_macvtap: left promiscuous mode [ 159.243275][ T46] veth0_vlan: left promiscuous mode [ 159.535537][ T46] bridge_slave_1: left allmulticast mode [ 159.541439][ T46] bridge_slave_1: left promiscuous mode [ 159.547711][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.555461][ T46] bridge_slave_0: left allmulticast mode [ 159.561406][ T46] bridge_slave_0: left promiscuous mode [ 159.567421][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.676104][ T46] tipc: Left network mode [ 159.681782][ T46] veth1_macvtap: left promiscuous mode [ 159.687379][ T46] veth0_vlan: left promiscuous mode