last executing test programs: 36.327859232s ago: executing program 1 (id=2746): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x129380, 0xd2) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x228, 0x0, 0x200, 0x70bd28, 0xf, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x40, 0x22}}}}, [@NL80211_ATTR_IE={0x149, 0x2a, [@measure_req={0x26, 0x37, {0x7, 0x7, 0x1, "54fe2a2c3342de284fb138f1ae9a95803e5dc57fc84663c8cc67a372d9317bfc4ca8e514cfd0fd6e0f19ceea2e422119901a4cbc"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @random_vendor={0xdd, 0x90, "0759447f9471d4ab61458d38d68931d26645f32cca69f149ae3b8d00a2359d4570ea17804d5173c91824f3461466613b41e117f815a3a3eb1f1f14d36671b44afc82465da25f0a32ae0524dda15fe973e3252765f43816cb3e59799bf8145c8c0c5be7e22e424b190d15c3ff164f03cc6baebc23eca0b06e349971096d600bd6af6dca2aec2992481fc23376228d82ae"}, @tim={0x5, 0x20, {0x3, 0x5d, 0x54, "eaa58b4bc730e790da05b66d81bf2001db51555e8fdd4595f08752b2a4"}}, @preq={0x82, 0x3b, {{0x1, 0x0, 0x1}, 0x1, 0xff, 0x1, @device_b, 0x2, @void, 0x0, 0x8, 0x3, [{{}, @broadcast, 0x100}, {{0x0, 0x0, 0x1}, @device_b, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x3}]}}, @channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0xa5, 0x1}}, @supported_rates={0x1, 0x1, [{0x30, 0x1}]}, @channel_switch={0x25, 0x3, {0x1, 0xb0}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_IE={0xab, 0x2a, [@preq={0x82, 0x67, {{0x0, 0x1, 0x1}, 0x53, 0x4, 0xfffffffc, @device_b, 0x8, @void, 0x0, 0x3, 0x7, [{{}, @broadcast, 0x9}, {{0x1, 0x0, 0x1}, @device_b, 0x1}, {{}, @broadcast}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x6}, {{0x0, 0x0, 0x1}, @device_b, 0x10}]}}, @mic={0x8c, 0x10, {0xcd1, "a5b9e737dda4", @short="424cfeb2afe84f80"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xf, 0x2, @device_b, 0x3, @value=@device_b, 0x2, 0x5, @device_a, 0x6f}}, @supported_rates={0x1, 0x3, [{0x4, 0x1}, {0x1}, {0x2}]}]}]}, 0x228}}, 0x4004881) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) move_mount(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00', 0x0) (async) faccessat(r0, &(0x7f0000000640)='./file1\x00', 0x5) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x140b1028}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) (async) mount$bind(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file1\x00', &(0x7f0000000840), 0x110800, 0x0) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000880)) pread64(0xffffffffffffffff, &(0x7f00000008c0)=""/208, 0xd0, 0xc1b) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000009c0)) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x1000) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x8001, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000a80)={0x9, 0x0, [{0x8000000c, 0x200, 0x4, 0x5, 0x900, 0xc5ad, 0x2}, {0x7, 0xee, 0x1, 0x0, 0x0, 0x2, 0x4}, {0xc0000001, 0x8, 0x2, 0x3ff, 0x1, 0x80000001, 0x5}, {0x80000000, 0x6, 0x6, 0x8, 0x5, 0x5, 0xf}, {0xa, 0x8, 0x3, 0x7, 0x9, 0x10000, 0x9}, {0x0, 0x1ff, 0x4, 0x0, 0x2, 0x4, 0xfffffff4}, {0x2, 0xb6e8, 0x4, 0xffffffff, 0x81, 0x7, 0x81}, {0x6, 0xffffff5a, 0x4, 0x8fe, 0x5, 0x10000, 0x7}, {0x80000000, 0x7, 0x2, 0x8, 0x1, 0x4, 0x2}]}) (async) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000c00)) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000c40), 0x40000, 0x0) r6 = open_tree(r5, &(0x7f0000000c80)='./file0\x00', 0x9100) (async) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000000d00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000001d00)={{r8, 0x1, 0xae41, 0x0, 0xffff, 0x0, 0x100, 0x5165, 0x49, 0x2, 0x3, 0x100000000, 0x8, 0xfffffffffffeffff}}) ioctl$TIOCGISO7816(r5, 0x80285442, &(0x7f0000002d00)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d80), r6) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x3c, r9, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x6c15, 0x0, 0x1, 0xab3}}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="871756e653ea"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048005}, 0x14) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000002e80), 0x2900, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r10, 0x1000008, 0x40010, r0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002ec0)={'team_slave_0\x00'}) (async) fcntl$dupfd(r6, 0x406, r5) (async) dup2(0xffffffffffffffff, r3) 36.327372642s ago: executing program 1 (id=2747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88203, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x0, 0xe3, 0x3, 0x5, 0xfff, 0x6, 0x9, 0x4}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x0, 0xe3, 0x3, 0x5, 0xfff, 0x6, 0x9, 0x4}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000005c0)) (async) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000005c0)) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) (async) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) (async) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xe, 0x7, 0x7, 0x81}, 0x15, [0x10001, 0x40000, 0x4, 0xf, 0x639, 0x4, 0x4, 0x6, 0x10, 0x9, 0x80000100, 0xb, 0xb0f, 0x4, 0x6, 0x2, 0x4, 0x4cb6, 0x0, 0x1, 0xa, 0x7, 0x8, 0x3, 0x10, 0x4, 0xb2f2, 0xb, 0x0, 0x9, 0x2, 0x2d, 0x0, 0x8, 0x1, 0x0, 0x5743393a, 0x1, 0x2e, 0x8000, 0x2, 0x2, 0x8, 0xf, 0x10000, 0xfffffffe, 0x3, 0x101, 0xc, 0x6, 0xc601, 0xa, 0x1, 0x5, 0x5, 0x6, 0x5, 0x6, 0xfffff2e0, 0x4, 0x9, 0x8, 0x3, 0x100], [0x6, 0xc37, 0x7, 0x4, 0x5, 0x214, 0xd25, 0xf, 0x7, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1, 0x8, 0x2, 0x9, 0x6, 0xcbdb, 0x6, 0x4, 0xfc, 0xe3, 0x11, 0xa39a, 0x8, 0x73, 0x2, 0x8, 0x3, 0xa, 0x40, 0x4, 0x4, 0x0, 0x0, 0x6, 0x8001, 0x7, 0xf075, 0x3, 0x7, 0x3, 0x7d1b, 0x5, 0x5, 0x6, 0x6, 0x2, 0x2, 0x8, 0x69e, 0x6, 0x8246, 0x9, 0xacf, 0xedb, 0xe771, 0x0, 0x10000, 0xe0f9, 0x4, 0xd314], [0x5, 0x6, 0x9, 0x6, 0x6, 0x0, 0x2, 0x0, 0x1, 0x8, 0xffff, 0x401, 0x3, 0x7f, 0xfffffff2, 0x672, 0x5, 0x0, 0x3, 0x6, 0x80000000, 0x80000002, 0x6, 0x0, 0x2, 0x4, 0xf46, 0xffffffff, 0x8, 0x3ff, 0x6, 0x0, 0x8001, 0x33, 0x5, 0x4, 0x6, 0x4, 0x1, 0x3ff, 0x80000001, 0x0, 0x2, 0x6, 0x20000000, 0x10001, 0x10001, 0x628e, 0x7, 0x2, 0x7, 0x7fffffff, 0xe, 0x1, 0xffffffff, 0xb, 0x46, 0xa5f, 0xfff, 0x2, 0x7, 0xf, 0x1, 0x3db1], [0x0, 0x3, 0x1, 0xfffffff8, 0x3, 0x7fff, 0x4, 0x12, 0x2, 0x4, 0x9, 0x2, 0x9, 0x2, 0x3fe, 0xd, 0x1, 0x401, 0x3, 0x7ff, 0x5, 0x4, 0x4, 0xd, 0x1, 0x8, 0x80000001, 0x7f97, 0x401, 0x80000000, 0xd191, 0xe, 0x3141, 0x200, 0x5, 0x80, 0xd4, 0x9, 0x0, 0x8000, 0x1, 0x0, 0x101, 0x6, 0x8, 0x24, 0x5, 0x9, 0xffffffff, 0x80000000, 0x5c6, 0x5, 0x1, 0x9, 0xf1, 0x81, 0x9, 0x4, 0x3, 0x4, 0x1f8c, 0xffffffff, 0x5, 0x8]}, 0x45c) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000002c0), 0x1, 0x0, 0x0, 0x60000000}, 0x20000004) ioctl$EVIOCGLED(r3, 0x80284504, &(0x7f0000000000)=""/56) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 35.43981287s ago: executing program 1 (id=2751): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000140), 0x2000, &(0x7f0000000000)=ANY=[]) 35.43258467s ago: executing program 1 (id=2752): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000240)="0979e127b8b3891be8dd397c67fc82251cecd27196a59beb85cb7450266767e735d2f6932155ed86f508fe87dbb49fc69db4458cbb2113dbf9f32c7a53eed2206e041bb9eee97a5798b41527404ddeff"}) 35.420362771s ago: executing program 1 (id=2753): munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x15, r1, 0xdfd, 0x106) recvmsg$inet_nvme(r0, &(0x7f0000000080)={&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/152, 0x98}, {&(0x7f0000001440)=""/233, 0xe9}], 0x4}, 0x40012122) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x340e, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000000c0)={0x0, 0x0}, 0x10) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=[{0x6, 0x40000, 0xb187}], 0x1, 0x3, 0x1, 0x0, 0xa5, 0x5c}) syz_usb_connect(0x2, 0xb6, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x2, &(0x7f0000000180)=@string={0x2}}, {0x0, 0x0}]}) inotify_init1(0x80800) 35.315306042s ago: executing program 1 (id=2756): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100"], 0x64}}, 0x8080) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0x80, 0xff}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0x550c, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) syz_usb_connect$uac1(0x0, 0xb6, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0x7f, 0xf0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8}, [@selector_unit={0x8, 0x24, 0x5, 0x3, 0xfd, "8f15a6"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x4, 0x81, 0x3, 0x6, 0xa0}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x6, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x2a, 0x81, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x460, 0x3, 0xf, 0x2, {0x7, 0x25, 0x1, 0x3, 0x64, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x8cf4, 0x0, "61cf553caa2d"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x8, 0x2, 'i'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x6, "26ff5a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x0, 0x9, {0x7, 0x25, 0x1, 0x82, 0x4, 0xffff}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x80, 0x8, 0x15, 0x20, 0x6c}, 0x35, &(0x7f00000000c0)={0x5, 0xf, 0x35, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xe, 0x8, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xab, "1ed3b67d5f9c614c05ed27730df37f27"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xe, 0x2, 0xffff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0xc0, 0x1, 0x2, 0xed}]}, 0x5, [{0x20, &(0x7f0000000100)=@string={0x20, 0x3, "ab18b88694105b3ba0f0a693f6c13c91cfb51646c0fa5852179ab908d137"}}, {0x19, &(0x7f0000000240)=@string={0x19, 0x3, "83461bfcb94c4b04baf8478a14c1e1109b5dac7f38d83c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0xf6, &(0x7f00000002c0)=@string={0xf6, 0x3, "2a3527dda00152dfcd7eda85ea5af941818e0bec549fc53b1f2e0fe5234c34dc40e77ed3274ecb200c8a3414aa626ee44e4e2d124542e6139eb5b8e590c15530ea7a0e5126d964dc5d5a34995c3f13148d4a0900e1aca9d10c7abb95665c9d6d04d1e4bee4e566e8778b069ce1e8d557fe0b5d6c07b9f6534ebf2948a3313496a77e79701bd5e784103b63a2f8ba32e6ef17fc54b2fd54b3a6a835cbc3d1e4880027ab883a8f7481b2e32d1439810ec5f38ed17a0419c0d3a27b4e4cd602f7e45f9f4026e27c323d403ef86f16167bc24144cce2847e6b5faf3a748c25bf5bb6836292658cf9383f8c7eaceb5cc14ed9e144aead"}}, {0xc, &(0x7f00000003c0)=@string={0xc, 0x3, "06a6f83e9bf31a65c6a7"}}]}) 35.215520332s ago: executing program 32 (id=2756): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100"], 0x64}}, 0x8080) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0x80, 0xff}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0x550c, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) syz_usb_connect$uac1(0x0, 0xb6, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0x7f, 0xf0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8}, [@selector_unit={0x8, 0x24, 0x5, 0x3, 0xfd, "8f15a6"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x4, 0x81, 0x3, 0x6, 0xa0}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x6, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x2a, 0x81, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x460, 0x3, 0xf, 0x2, {0x7, 0x25, 0x1, 0x3, 0x64, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x8cf4, 0x0, "61cf553caa2d"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x8, 0x2, 'i'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x6, "26ff5a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x0, 0x9, {0x7, 0x25, 0x1, 0x82, 0x4, 0xffff}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x80, 0x8, 0x15, 0x20, 0x6c}, 0x35, &(0x7f00000000c0)={0x5, 0xf, 0x35, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xe, 0x8, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xab, "1ed3b67d5f9c614c05ed27730df37f27"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xe, 0x2, 0xffff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0xc0, 0x1, 0x2, 0xed}]}, 0x5, [{0x20, &(0x7f0000000100)=@string={0x20, 0x3, "ab18b88694105b3ba0f0a693f6c13c91cfb51646c0fa5852179ab908d137"}}, {0x19, &(0x7f0000000240)=@string={0x19, 0x3, "83461bfcb94c4b04baf8478a14c1e1109b5dac7f38d83c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0xf6, &(0x7f00000002c0)=@string={0xf6, 0x3, "2a3527dda00152dfcd7eda85ea5af941818e0bec549fc53b1f2e0fe5234c34dc40e77ed3274ecb200c8a3414aa626ee44e4e2d124542e6139eb5b8e590c15530ea7a0e5126d964dc5d5a34995c3f13148d4a0900e1aca9d10c7abb95665c9d6d04d1e4bee4e566e8778b069ce1e8d557fe0b5d6c07b9f6534ebf2948a3313496a77e79701bd5e784103b63a2f8ba32e6ef17fc54b2fd54b3a6a835cbc3d1e4880027ab883a8f7481b2e32d1439810ec5f38ed17a0419c0d3a27b4e4cd602f7e45f9f4026e27c323d403ef86f16167bc24144cce2847e6b5faf3a748c25bf5bb6836292658cf9383f8c7eaceb5cc14ed9e144aead"}}, {0xc, &(0x7f00000003c0)=@string={0xc, 0x3, "06a6f83e9bf31a65c6a7"}}]}) 4.378678738s ago: executing program 2 (id=3262): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x5498a8b52a905021) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) 4.349257751s ago: executing program 2 (id=3263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) fsetxattr$trusted_overlay_nlink(r2, 0x0, &(0x7f0000000040)={'U-', 0x9}, 0x16, 0x3) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.448979969s ago: executing program 2 (id=3281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x53, 0x0, 0x0) setuid(0xee01) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="0f20e035000004000f22e0c462f992a4f00080000048b848470000000000000f23d00f21f835000000010f23f8660f09c4a2cd9c3666baf80cb81a73ec86ef66bafc0cb0d8ee65470f2086c744240000000000c7442402375c0000c7442406000000000f011c24b8010000000f01c1666466420f38829f93e50000", 0x7b}], 0x1, 0x33, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x1) 3.300705384s ago: executing program 2 (id=3283): openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.451016718s ago: executing program 2 (id=3298): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) 2.332967569s ago: executing program 2 (id=3300): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x85, 0x4f, 0xbe, 0x10, 0x50d, 0x2102, 0x70d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x450}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.177047433s ago: executing program 4 (id=3331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0xeeef0000, 0xfffffffffffffffd, 0x0, 0x2}) 1.176857313s ago: executing program 4 (id=3332): open(&(0x7f00000001c0)='./cgroup\x00', 0x14927e, 0x20) 1.168268074s ago: executing program 4 (id=3333): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x430601, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 753.041735ms ago: executing program 3 (id=3338): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070600be008300"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) creat(&(0x7f0000002240)='./file0\x00', 0x18a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, 0x0, 0x0, 0xb57a) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) 322.552698ms ago: executing program 4 (id=3339): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x1, 0x70bd27, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x4e20, 0xee5f, 0x4e21, 0x101, 0xa, 0x20, 0x0, 0x59, 0x0, 0xffffffffffffffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0x3c}, @in=@multicast1, {0xc04, 0x3, 0x428, 0x3, 0x4, 0xfffffffffffffff8, 0x800, 0xdba0}, {0x79, 0x6, 0x3, 0x2}, {0x9, 0x3d, 0x1}, 0x70bd2a, 0x3502, 0x2, 0x0, 0x3, 0x80}, [@algo_aead={0x4c, 0x12, {{'aegis128\x00'}, 0x0, 0x100}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x844}, 0x40000) 308.938819ms ago: executing program 4 (id=3340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000040)=0x2) 237.023006ms ago: executing program 3 (id=3341): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000c40)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '#'}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private=0x20}}, @sadb_x_filter={0x5, 0x1a, @in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1f, 0x10, 0x10}, @sadb_address={0x3, 0x5, 0x3c, 0x80, 0x0, @in={0x2, 0x0, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0) 236.796396ms ago: executing program 3 (id=3342): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 236.712866ms ago: executing program 3 (id=3343): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 236.490856ms ago: executing program 3 (id=3344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 236.232896ms ago: executing program 4 (id=3345): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="400e10000000"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 230.232017ms ago: executing program 3 (id=3346): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x2, 0x6, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 113.164288ms ago: executing program 0 (id=3348): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @mcast2={0xff, 0x5}, 0xffffffff}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c04"]) 109.325329ms ago: executing program 0 (id=3349): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a6", 0x14, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000040)=""/20, 0x14, 0xc9100120, 0x0, 0x0) 95.98368ms ago: executing program 0 (id=3350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034020010000050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008180}, 0x4014) 33.234876ms ago: executing program 0 (id=3351): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0xe458, 0x5, 0x8000, 0xaf92, 0xcb, "0982aa400000000000e6ffffab5b00", 0x4}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x9) 33.065406ms ago: executing program 0 (id=3352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000071000040000000000081ff00800000ff"]) 0s ago: executing program 0 (id=3353): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000000580)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1790) kernel console output (not intermixed with test programs): root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7398eec9 code=0x7fc00000 [ 87.711146][ T36] audit: type=1326 audit(1760011631.928:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e7398eec9 code=0x7fc00000 [ 87.734996][ T36] audit: type=1326 audit(1760011631.928:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7398eec9 code=0x7fc00000 [ 87.758654][ T36] audit: type=1326 audit(1760011631.928:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7398eec9 code=0x7fc00000 [ 87.782087][ T36] audit: type=1326 audit(1760011631.928:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7398eec9 code=0x7fc00000 [ 87.805426][ T36] audit: type=1326 audit(1760011631.928:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7398eec9 code=0x7fc00000 [ 87.828920][ T36] audit: type=1326 audit(1760011631.928:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7398eec9 code=0x7fc00000 [ 87.852261][ T36] audit: type=1326 audit(1760011631.928:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7398eec9 code=0x7fc00000 [ 87.931394][ T4039] 9pnet_fd: Insufficient options for proto=fd [ 87.972160][ T4053] /dev/rnullb0: Can't lookup blockdev [ 88.352750][ T4063] fuse: Bad value for 'fd' [ 88.593704][ T4087] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 89.038943][ T4103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'. [ 89.385686][ T4174] /dev/rnullb0: Can't lookup blockdev [ 100.196617][ T4194] netlink: 'syz.3.1325': attribute type 27 has an invalid length. [ 100.222394][ T4195] netlink: 'syz.3.1325': attribute type 27 has an invalid length. [ 100.239254][ T4194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4194 comm=syz.3.1325 [ 100.252307][ T4195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4195 comm=syz.3.1325 [ 100.267198][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 100.267214][ T36] audit: type=1326 audit(1760011644.521:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.0.1326" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16e978eec9 code=0x0 [ 100.269073][ T4195] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 100.304083][ T4194] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 100.703983][ T36] audit: type=1400 audit(1760011644.951:436): avc: denied { accept } for pid=4201 comm="syz.2.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 100.755862][ T36] audit: type=1400 audit(1760011645.001:437): avc: denied { accept } for pid=4213 comm="syz.1.1333" path="socket:[16434]" dev="sockfs" ino=16434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.148807][ T4242] 9pnet_fd: Insufficient options for proto=fd [ 102.842927][ T36] audit: type=1400 audit(1760011647.092:438): avc: denied { write } for pid=4285 comm="syz.3.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 103.662155][ T36] audit: type=1400 audit(1760011647.912:439): avc: denied { execute } for pid=4332 comm="syz.1.1377" path="/cpu.stat" dev="cgroup2" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 103.831823][ T36] audit: type=1326 audit(1760011648.082:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.3.1383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad7758eec9 code=0x0 [ 103.905241][ T36] audit: type=1326 audit(1760011648.152:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.2.1387" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a8c38eec9 code=0x0 [ 105.456312][ T4443] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1417'. [ 107.108942][ T4494] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1436'. [ 107.182965][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1438'. [ 107.191952][ T4501] erspan0: entered promiscuous mode [ 107.719412][ T4552] netlink: 'syz.3.1456': attribute type 4 has an invalid length. [ 107.727273][ T4552] netlink: 'syz.3.1456': attribute type 2 has an invalid length. [ 107.857967][ T4577] overlayfs: failed to resolve './file1/file0': -40 [ 108.431070][ T4612] ./cgroup: Can't lookup blockdev [ 108.437059][ T36] audit: type=1400 audit(1760011653.680:442): avc: denied { create } for pid=4611 comm="syz.2.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 108.471322][ T4615] /dev/rnullb0: Can't lookup blockdev [ 108.476868][ T36] audit: type=1400 audit(1760011653.720:443): avc: denied { mounton } for pid=4614 comm="syz.2.1479" path="/syzcgroup/unified/syz2" dev="tmpfs" ino=1452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.539006][ T4621] netlink: 'syz.0.1482': attribute type 30 has an invalid length. [ 108.586879][ T36] audit: type=1400 audit(1760011653.830:444): avc: denied { execute } for pid=4607 comm="syz.3.1476" path="/381/cpuacct.usage_sys" dev="tmpfs" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.611025][ T36] audit: type=1400 audit(1760011653.840:445): avc: denied { module_load } for pid=4607 comm="syz.3.1476" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=16960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 108.699405][ T4642] 9pnet_fd: Insufficient options for proto=fd [ 108.721474][ T4653] tipc: Enabling of bearer <b:veth0_to_bond> rejected, media not registered [ 108.812255][ T4671] netlink: 'syz.3.1500': attribute type 1 has an invalid length. [ 108.852491][ T4680] 9pnet_fd: Insufficient options for proto=fd [ 108.889706][ T4685] devpts: called with bogus options [ 108.979371][ T36] audit: type=1400 audit(1760011654.230:446): avc: denied { map } for pid=4672 comm="syz.1.1501" path="socket:[17073]" dev="sockfs" ino=17073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 109.118238][ T4708] netlink: 'syz.2.1511': attribute type 4 has an invalid length. [ 110.414744][ T4754] /dev/md0: Can't lookup blockdev [ 111.772367][ T4782] overlayfs: failed to clone upperpath [ 111.778732][ T4782] overlayfs: failed to clone upperpath [ 111.802844][ T4788] netlink: 'syz.2.1541': attribute type 10 has an invalid length. [ 112.065370][ T4804] overlayfs: failed to clone upperpath [ 112.353712][ T4836] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1556'. [ 112.451401][ T4856] fuse: Unknown parameter 'F' [ 112.601418][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 112.948924][ T36] audit: type=1400 audit(1760011914.203:447): avc: denied { read } for pid=4875 comm="syz.0.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.385429][ T4887] netlink: 'syz.2.1574': attribute type 2 has an invalid length. [ 113.417846][ T4893] wbArx{Ú+PA'Ji/^;! Ϫ\ЍqTpR?^݊e2k$F [ 113.417846][ T4893] U쀵 8l/Y8YԕOS.3F̡*7BCG0QU"LDYypD-Ej3obtV Ky>ǿ!rrGPDXT[&qҡU&ԽV| Ju#){XDYLyTM m'NmD>]X [jf*}q0@'e pCYgÅpcyVLb8P,{z5 i#rwq&gs7kph۝MFiӝZtd_4Wؓ[z_$0.d40')Fc, priority 10 [ 118.838417][ T5224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1692'. [ 118.849282][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1692'. [ 118.858512][ T5224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1692'. [ 119.104021][ T5239] wireguard: wg0: Could not create IPv4 socket [ 119.640248][ T5251] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1700'. [ 119.650049][ T5253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'. [ 120.820870][ T5286] fuse: Unknown parameter '' [ 121.891413][ T5331] 9pnet_fd: Insufficient options for proto=fd [ 122.143198][ T5362] 9pnet_fd: Insufficient options for proto=fd [ 122.189913][ T5374] fuse: Bad value for 'rootmode' [ 122.195307][ T5374] fuseblk: Bad value for 'fd' [ 122.214968][ T5377] overlayfs: failed to clone upperpath [ 122.221872][ T5377] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1746'. [ 122.605417][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 122.605435][ T36] audit: type=1326 audit(1760011923.853:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.2.1756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a8c38eec9 code=0x0 [ 122.670934][ T5414] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1758'. [ 122.712452][ T5422] netlink: 'syz.0.1760': attribute type 4 has an invalid length. [ 122.720779][ T5422] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1760'. [ 122.734101][ T5422] overlayfs: failed to clone upperpath [ 122.965090][ T36] audit: type=1400 audit(1760011924.213:482): avc: denied { view } for pid=5449 comm="syz.3.1770" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 123.021014][ T5462] netlink: 'syz.3.1775': attribute type 4 has an invalid length. [ 123.030325][ T5462] netlink: 'syz.3.1775': attribute type 4 has an invalid length. [ 123.545190][ T5495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=5495 comm=syz.1.1786 [ 123.644844][ T5510] cgroup2: Unknown parameter 'memory_localevM' [ 123.999988][ T5521] __nla_validate_parse: 2 callbacks suppressed [ 124.000010][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1795'. [ 124.568776][ T36] audit: type=1400 audit(1760011925.823:483): avc: denied { bind } for pid=5542 comm="syz.3.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.132341][ T5552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1808'. [ 125.142874][ T36] audit: type=1400 audit(1760011926.390:484): avc: denied { accept } for pid=5551 comm="syz.1.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 126.278395][ T5613] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1831'. [ 126.299880][ T5615] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1832'. [ 126.429437][ T5618] netlink: 'syz.2.1833': attribute type 4 has an invalid length. [ 126.437402][ T5618] netlink: 'syz.2.1833': attribute type 4 has an invalid length. [ 127.350326][ T36] audit: type=1400 audit(1760011928.583:485): avc: denied { read } for pid=5721 comm="syz.0.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.405097][ T5731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1872'. [ 127.494531][ T5743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5743 comm=syz.0.1875 [ 127.580465][ T5750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1878'. [ 127.590192][ T36] audit: type=1401 audit(1760011928.821:486): op=setxattr invalid_context="" [ 128.128950][ T5765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1883'. [ 128.444582][ T5809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'. [ 129.178508][ T5892] devpts: called with bogus options [ 129.403206][ T36] audit: type=1400 audit(1760011930.618:487): avc: denied { setattr } for pid=5904 comm="syz.3.1935" name="" dev="pipefs" ino=19779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 129.842414][ T5956] netlink: 328 bytes leftover after parsing attributes in process `syz.2.1950'. [ 130.043207][ T5964] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1953'. [ 130.063448][ T5969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=5969 comm=syz.3.1954 [ 130.076267][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1954'. [ 130.418247][ T36] audit: type=1400 audit(1760011931.621:488): avc: denied { read } for pid=5991 comm="syz.2.1963" name="/" dev="configfs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.440309][ T36] audit: type=1400 audit(1760011931.641:489): avc: denied { open } for pid=5991 comm="syz.2.1963" path="/" dev="configfs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.857934][ T6019] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1971'. [ 131.609103][ T6079] overlayfs: failed to clone lowerpath [ 132.390162][ T6114] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 132.472558][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1995'. [ 132.504276][ T36] audit: type=1400 audit(1760011933.696:490): avc: denied { create } for pid=6122 comm="syz.3.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 133.374462][ T6164] 9pnet_fd: Insufficient options for proto=fd [ 133.460769][ T6180] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2016'. [ 133.480159][ T6181] fuse: Unknown parameter '' [ 134.313703][ T6247] 9pnet_fd: Insufficient options for proto=fd [ 134.332648][ T6250] overlayfs: missing 'lowerdir' [ 134.347758][ T6254] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2041'. [ 134.454266][ T36] audit: type=1400 audit(1760011935.632:491): avc: denied { shutdown } for pid=6261 comm="syz.1.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.274858][ T36] audit: type=1326 audit(1760011936.457:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.1.2071" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e7398eec9 code=0x0 [ 135.588289][ T6374] overlayfs: failed to clone upperpath [ 135.712410][ T36] audit: type=1400 audit(1760011936.884:493): avc: denied { create } for pid=6375 comm="syz.2.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 135.848709][ T6395] bpf: Bad value for 'gid' [ 135.909595][ T36] audit: type=1326 audit(1760011937.083:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.0.2091" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16e978eec9 code=0x0 [ 136.074374][ T6411] netlink: 'syz.2.2093': attribute type 19 has an invalid length. [ 136.082293][ T6411] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2093'. [ 136.122578][ T6417] fuse: Bad value for 'group_id' [ 136.127657][ T6417] fuse: Bad value for 'group_id' [ 136.261212][ T6445] netlink: 'syz.3.2106': attribute type 1 has an invalid length. [ 136.679995][ T36] audit: type=1400 audit(1760011937.838:495): avc: denied { map } for pid=6448 comm="syz.2.2108" path="socket:[20293]" dev="sockfs" ino=20293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.914445][ T6488] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2117'. [ 136.995008][ T6496] netlink: 'syz.0.2123': attribute type 27 has an invalid length. [ 137.471762][ T36] audit: type=1326 audit(1760011938.632:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6526 comm="syz.3.2134" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad7758eec9 code=0x0 [ 137.474553][ T6525] /dev/rnullb0: Can't lookup blockdev [ 137.515975][ T6530] fuse: Unknown parameter 'gZoup_id' [ 137.526912][ T36] audit: type=1326 audit(1760011938.682:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6526 comm="syz.3.2134" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad7758eec9 code=0x0 [ 137.602349][ T36] audit: type=1326 audit(1760011938.762:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6526 comm="syz.3.2134" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad7758eec9 code=0x0 [ 137.666650][ T6536] /dev/rnullb0: Can't lookup blockdev [ 137.672873][ T6536] overlayfs: failed to clone upperpath [ 138.445404][ T6564] 9pnet: Could not find request transport: d [ 139.326395][ T6612] new mount options do not match the existing superblock, will be ignored [ 140.037613][ T6659] overlayfs: failed to clone upperpath [ 140.617368][ T6682] incfs_lookup_dentry err:-13 [ 140.622137][ T6682] incfs: Can't find or create .index dir in ./bus [ 140.628629][ T6682] incfs: mount failed -13 [ 140.885444][ T6713] 9pnet_fd: Insufficient options for proto=fd [ 141.591622][ T36] audit: type=1400 audit(1760011942.727:499): avc: denied { getopt } for pid=6741 comm="syz.0.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.470524][ T6768] 9pnet_fd: Insufficient options for proto=fd [ 142.536897][ T6785] !@: renamed from xfrm0 (while UP) [ 143.047321][ T6813] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.057132][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.064447][ T6813] bridge_slave_0: entered allmulticast mode [ 143.071083][ T6813] bridge_slave_0: entered promiscuous mode [ 143.077765][ T6813] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.084850][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.091950][ T6813] bridge_slave_1: entered allmulticast mode [ 143.098383][ T6813] bridge_slave_1: entered promiscuous mode [ 143.112607][ T6060] bridge_slave_1: left allmulticast mode [ 143.118292][ T6060] bridge_slave_1: left promiscuous mode [ 143.127242][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.138261][ T6060] bridge_slave_0: left allmulticast mode [ 143.146149][ T6060] bridge_slave_0: left promiscuous mode [ 143.152168][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.267833][ T6060] tipc: Left network mode [ 143.288613][ T6060] veth1_macvtap: left promiscuous mode [ 143.294608][ T6060] veth0_vlan: left promiscuous mode [ 143.361120][ T6813] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.368229][ T6813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.375566][ T6813] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.382610][ T6813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.408846][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.416550][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.427069][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.434130][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.443536][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.450740][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.475077][ T6827] netlink: 'syz.1.2234': attribute type 4 has an invalid length. [ 143.484226][ T6827] netlink: 'syz.1.2234': attribute type 4 has an invalid length. [ 143.502414][ T6813] veth0_vlan: entered promiscuous mode [ 143.514812][ T6832] fuse: Bad value for 'fd' [ 143.515995][ T6813] veth1_macvtap: entered promiscuous mode [ 143.558350][ T36] audit: type=1400 audit(1760011944.685:500): avc: denied { mounton } for pid=6813 comm="syz-executor" path="/root/syzkaller.alxCGk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 143.643653][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2244'. [ 143.807159][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2252'. [ 143.996529][ T6060] bridge_slave_1: left allmulticast mode [ 144.002286][ T6060] bridge_slave_1: left promiscuous mode [ 144.008284][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.015822][ T6060] bridge_slave_0: left allmulticast mode [ 144.021578][ T6060] bridge_slave_0: left promiscuous mode [ 144.027233][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.110849][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.119245][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.126358][ T6883] bridge_slave_0: entered allmulticast mode [ 144.132886][ T6883] bridge_slave_0: entered promiscuous mode [ 144.140063][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.147276][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.154486][ T6883] bridge_slave_1: entered allmulticast mode [ 144.161106][ T6883] bridge_slave_1: entered promiscuous mode [ 144.173101][ T6060] tipc: Disabling bearer [ 144.178517][ T6060] tipc: Disabling bearer [ 144.183908][ T6060] tipc: Left network mode [ 144.189317][ T6908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2261'. [ 144.199973][ T6908] overlayfs: failed to clone upperpath [ 144.206722][ T6060] veth1_macvtap: left promiscuous mode [ 144.212279][ T6060] veth0_vlan: left promiscuous mode [ 144.309600][ T403] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 144.347350][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.354444][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.363651][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.370743][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.398779][ T6883] veth0_vlan: entered promiscuous mode [ 144.410206][ T6883] veth1_macvtap: entered promiscuous mode [ 144.461494][ T403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.477065][ T403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.487629][ T403] usb 3-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice=f4.00 [ 144.496712][ T403] usb 3-1: New USB device strings: Mfr=159, Product=0, SerialNumber=0 [ 144.504937][ T403] usb 3-1: Manufacturer: syz [ 144.510669][ T403] usb 3-1: config 0 descriptor?? [ 144.666225][ T36] audit: type=1400 audit(1760011945.779:501): avc: denied { mount } for pid=6946 comm="syz.3.2273" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 144.695956][ T36] audit: type=1400 audit(1760011945.808:502): avc: denied { search } for pid=6946 comm="syz.3.2273" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 144.696171][ T6947] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2273'. [ 144.729469][ T36] audit: type=1400 audit(1760011945.848:503): avc: denied { write } for pid=6946 comm="syz.3.2273" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 144.857095][ T6973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6973 comm=syz.0.2279 [ 144.869822][ T6973] netlink: 'syz.0.2279': attribute type 46 has an invalid length. [ 144.938754][ T6976] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 144.938784][ T6976] rust_binder: Error while translating object. [ 144.940995][ T403] wacom 0003:056A:0317.0004: Unknown device_type for 'syz'. Assuming pen. [ 144.951152][ T6976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.959291][ T403] wacom 0003:056A:0317.0004: hidraw0: USB HID v0.01 Device [syz] on usb-dummy_hcd.2-1/input0 [ 144.966028][ T6976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 144.977058][ T403] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0317.0004/input/input13 [ 145.855709][ T36] audit: type=1400 audit(1760011946.962:504): avc: denied { create } for pid=7007 comm="syz.3.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.875953][ T36] audit: type=1400 audit(1760011946.972:505): avc: denied { write } for pid=7007 comm="syz.3.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.094867][ T36] audit: type=1400 audit(1760011947.200:506): avc: denied { execmem } for pid=7023 comm="syz.3.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 146.738899][ T7066] netlink: 5308 bytes leftover after parsing attributes in process `syz.1.2309'. [ 146.860933][ T7068] netlink: 'syz.1.2310': attribute type 2 has an invalid length. [ 146.868806][ T7069] netlink: 'syz.1.2310': attribute type 2 has an invalid length. [ 147.098164][ T65] usb 3-1: USB disconnect, device number 3 [ 147.120678][ T7080] rust_binder: Error while translating object. [ 147.120729][ T7080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 147.127742][ T7080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:15 [ 147.204190][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2321'. [ 147.228500][ T7094] tipc: Enabling of bearer rejected, failed to enable media [ 147.316401][ T7097] cgroup: noprefix used incorrectly [ 147.439002][ T7108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.446352][ T7108] IPv6: NLM_F_CREATE should be set when creating new route [ 147.453614][ T7108] IPv6: NLM_F_CREATE should be set when creating new route [ 147.799026][ T7116] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 147.799048][ T7116] rust_binder: Error while translating object. [ 147.807895][ T7116] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.814276][ T7116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 147.865771][ T36] audit: type=1400 audit(1760011948.961:507): avc: denied { bind } for pid=7126 comm="syz.2.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.917347][ T7133] overlayfs: failed to resolve './file1/file0': -2 [ 147.919938][ T36] audit: type=1400 audit(1760011949.010:508): avc: denied { nlmsg_write } for pid=7132 comm="syz.2.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.961564][ T36] audit: type=1400 audit(1760011949.060:509): avc: denied { append } for pid=7132 comm="syz.2.2335" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.991689][ T36] audit: type=1400 audit(1760011949.090:510): avc: denied { bind } for pid=7134 comm="syz.0.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 148.031484][ T7146] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2337'. [ 148.044668][ T36] audit: type=1400 audit(1760011949.130:511): avc: denied { nlmsg_read } for pid=7141 comm="syz.3.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.098532][ T7151] 9pnet_fd: Insufficient options for proto=fd [ 148.742880][ T36] audit: type=1326 audit(1760011949.836:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7398eec9 code=0x7ffc0000 [ 148.771959][ T36] audit: type=1326 audit(1760011949.836:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7398eec9 code=0x7ffc0000 [ 148.797800][ T36] audit: type=1326 audit(1760011949.836:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e7398d710 code=0x7ffc0000 [ 148.830509][ T36] audit: type=1326 audit(1760011949.836:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e7398d710 code=0x7ffc0000 [ 148.854667][ T36] audit: type=1326 audit(1760011949.836:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7398eec9 code=0x7ffc0000 [ 149.171780][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.178968][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.186019][ T7186] bridge_slave_0: entered allmulticast mode [ 149.192643][ T7186] bridge_slave_0: entered promiscuous mode [ 149.199411][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.207020][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.214115][ T7186] bridge_slave_1: entered allmulticast mode [ 149.215003][ T7192] rust_binder: 64: no such ref 0 [ 149.221214][ T7192] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 149.233042][ T7192] rust_binder: 64: no such ref 2 [ 149.235153][ T7186] bridge_slave_1: entered promiscuous mode [ 149.307130][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.314234][ T7186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.321581][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.328648][ T7186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.349847][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.357205][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.367183][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.374341][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.383474][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.390649][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.416067][ T7186] veth0_vlan: entered promiscuous mode [ 149.427246][ T7186] veth1_macvtap: entered promiscuous mode [ 149.498465][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 149.660534][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.675383][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.685772][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.699121][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.708630][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.720682][ T10] usb 3-1: config 0 descriptor?? [ 150.343255][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 150.349621][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 150.363111][ T10] usb 3-1: USB disconnect, device number 4 [ 150.423109][ T7262] overlayfs: failed to clone upperpath [ 150.675680][ T7310] team_slave_0: entered promiscuous mode [ 150.685849][ T7310] team_slave_0: left promiscuous mode [ 150.694852][ T403] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 150.698290][ T7315] netlink: 'syz.3.2385': attribute type 46 has an invalid length. [ 150.855733][ T403] usb 1-1: Using ep0 maxpacket: 8 [ 150.862532][ T403] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.873539][ T403] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.883509][ T403] usb 1-1: config 0 interface 0 has no altsetting 0 [ 150.890229][ T403] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 150.899367][ T403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.908307][ T403] usb 1-1: config 0 descriptor?? [ 151.096906][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 151.248961][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.260088][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.270040][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.283788][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.293428][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.305604][ T10] usb 3-1: config 0 descriptor?? [ 151.346351][ T403] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 151.353574][ T403] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 151.361165][ T403] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 151.368300][ T403] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 151.375441][ T403] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 151.383451][ T403] samsung 0003:0419:0001.0005: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0 [ 151.732388][ T10] plantronics 0003:047F:FFFF.0006: collection stack underflow [ 151.740072][ T10] plantronics 0003:047F:FFFF.0006: item 0 2 0 12 parsing failed [ 151.748707][ T10] plantronics 0003:047F:FFFF.0006: parse failed [ 151.755219][ T10] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 151.942253][ T7327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.951942][ T7327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.966745][ T10] usb 3-1: USB disconnect, device number 5 [ 152.502880][ T7377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7377 comm=syz.2.2407 [ 152.800303][ T7395] overlayfs: failed to clone upperpath [ 152.805753][ T403] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 152.814690][ T7395] 9pnet_fd: Insufficient options for proto=fd [ 152.920982][ T7423] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2423'. [ 152.941390][ T7425] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2424'. [ 152.957611][ T403] usb 3-1: config index 0 descriptor too short (expected 36900, got 36) [ 152.966084][ T403] usb 3-1: config 111 has too many interfaces: 233, using maximum allowed: 32 [ 152.974993][ T403] usb 3-1: config 111 has an invalid descriptor of length 108, skipping remainder of the config [ 152.985508][ T403] usb 3-1: config 111 has 0 interfaces, different from the descriptor's value: 233 [ 152.994864][ T403] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 153.003919][ T403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.480073][ T65] usb 1-1: USB disconnect, device number 6 [ 153.496068][ T7434] __vm_enough_memory: pid: 7434, comm: syz.0.2428, bytes: 18014402804453376 not enough memory for the allocation [ 153.521240][ T7436] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 153.528452][ T7436] rust_binder: Write failure EINVAL in pid:32 [ 153.895472][ T7466] FAT-fs (rnullb0): bogus number of reserved sectors [ 153.908657][ T7466] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 153.934748][ T7468] /dev/md0: Can't lookup blockdev [ 154.013302][ T7479] rust_binder: Write failure EFAULT in pid:58 [ 154.014468][ T7479] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.023873][ T7480] overlayfs: failed to clone lowerpath [ 154.037044][ T7480] overlayfs: failed to clone lowerpath [ 154.185498][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 154.185516][ T36] audit: type=1400 audit(1760011955.248:528): avc: denied { read write } for pid=7498 comm="syz.0.2450" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 154.215848][ T36] audit: type=1400 audit(1760011955.248:529): avc: denied { open } for pid=7498 comm="syz.0.2450" path="/dev/usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 154.341569][ T36] audit: type=1400 audit(1760011955.407:530): avc: denied { setattr } for pid=7501 comm="syz.0.2451" path="socket:[25170]" dev="sockfs" ino=25170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.343616][ T7502] rust_binder: Write failure EFAULT in pid:76 [ 154.909584][ T7521] 9pnet_fd: Insufficient options for proto=fd [ 155.120528][ T7540] 9pnet_fd: Insufficient options for proto=fd [ 155.278654][ T7543] rust_binder: Failed copying remainder into alloc: EFAULT [ 155.278683][ T7543] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 155.286273][ T7543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 155.294728][ T7543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:82 [ 155.526227][ T403] usb 3-1: string descriptor 0 read error: -71 [ 155.547108][ T403] usb 3-1: USB disconnect, device number 6 [ 155.880940][ T403] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 156.033381][ T403] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 156.044083][ T403] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 156.054012][ T403] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 156.065915][ T403] usb 3-1: string descriptor 0 read error: -22 [ 156.072159][ T403] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.081207][ T403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.090222][ T7557] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.332798][ T7596] binder: Unknown parameter 'subj_user' [ 156.336165][ T7557] SELinux: failed to load policy [ 156.338525][ T7596] binder: Unknown parameter 'subj_user' [ 156.349887][ T7596] binder: Unknown parameter 'subj_user' [ 156.353501][ T7557] rust_binder: Write failure EINVAL in pid:83 [ 156.355688][ T7596] binder: Unknown parameter 'subj_user' [ 156.369451][ T7596] binder: Unknown parameter 'subj_user' [ 156.375989][ T7596] binder: Unknown parameter 'subj_user' [ 156.379532][ T403] cdc_ncm 3-1:1.0: bind() failure [ 156.382541][ T7596] binder: Unknown parameter 'subj_user' [ 156.393066][ T7596] binder: Unknown parameter 'subj_user' [ 156.397218][ T403] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 156.400624][ T7596] binder: Unknown parameter 'subj_user' [ 156.411108][ T403] cdc_ncm 3-1:1.1: bind() failure [ 156.411505][ T7596] binder: Unknown parameter 'subj_user' [ 156.418260][ T403] usb 3-1: USB disconnect, device number 7 [ 156.424969][ T7596] binder: Unknown parameter 'subj_user' [ 156.442603][ T7596] binder: Unknown parameter 'subj_user' [ 156.449414][ T7596] binder: Unknown parameter 'subj_user' [ 156.455421][ T7596] binder: Unknown parameter 'subj_user' [ 156.461233][ T7596] binder: Unknown parameter 'subj_user' [ 156.467193][ T7596] binder: Unknown parameter 'subj_user' [ 156.472898][ T7596] binder: Unknown parameter 'subj_user' [ 156.478793][ T7596] binder: Unknown parameter 'subj_user' [ 156.484673][ T7596] binder: Unknown parameter 'subj_user' [ 156.490366][ T7596] binder: Unknown parameter 'subj_user' [ 156.496223][ T7596] binder: Unknown parameter 'subj_user' [ 156.501846][ T7596] binder: Unknown parameter 'subj_user' [ 156.507632][ T7596] binder: Unknown parameter 'subj_user' [ 156.513264][ T7596] binder: Unknown parameter 'subj_user' [ 156.519027][ T7596] binder: Unknown parameter 'subj_user' [ 156.524681][ T7596] binder: Unknown parameter 'subj_user' [ 156.530336][ T7596] binder: Unknown parameter 'subj_user' [ 156.536040][ T7596] binder: Unknown parameter 'subj_user' [ 156.541688][ T7596] binder: Unknown parameter 'subj_user' [ 156.547413][ T7596] binder: Unknown parameter 'subj_user' [ 156.553057][ T7596] binder: Unknown parameter 'subj_user' [ 156.558738][ T7596] binder: Unknown parameter 'subj_user' [ 156.564431][ T7596] binder: Unknown parameter 'subj_user' [ 156.570020][ T7596] binder: Unknown parameter 'subj_user' [ 156.575735][ T7596] binder: Unknown parameter 'subj_user' [ 156.581357][ T7596] binder: Unknown parameter 'subj_user' [ 156.587653][ T7596] binder: Unknown parameter 'subj_user' [ 156.593421][ T7596] binder: Unknown parameter 'subj_user' [ 156.599332][ T7596] binder: Unknown parameter 'subj_user' [ 156.605463][ T7596] binder: Unknown parameter 'subj_user' [ 156.611059][ T7596] binder: Unknown parameter 'subj_user' [ 156.616880][ T7596] binder: Unknown parameter 'subj_user' [ 156.622506][ T7596] binder: Unknown parameter 'subj_user' [ 156.628146][ T7596] binder: Unknown parameter 'subj_user' [ 156.633783][ T7596] binder: Unknown parameter 'subj_user' [ 156.639479][ T7596] binder: Unknown parameter 'subj_user' [ 156.645124][ T7596] binder: Unknown parameter 'subj_user' [ 156.650719][ T7596] binder: Unknown parameter 'subj_user' [ 156.656355][ T7596] binder: Unknown parameter 'subj_user' [ 156.661967][ T7596] binder: Unknown parameter 'subj_user' [ 156.667610][ T7596] binder: Unknown parameter 'subj_user' [ 156.673212][ T7596] binder: Unknown parameter 'subj_user' [ 156.678856][ T7596] binder: Unknown parameter 'subj_user' [ 156.684570][ T7596] binder: Unknown parameter 'subj_user' [ 156.690213][ T7596] binder: Unknown parameter 'subj_user' [ 156.696031][ T7596] binder: Unknown parameter 'subj_user' [ 156.701622][ T7596] binder: Unknown parameter 'subj_user' [ 156.707271][ T7596] binder: Unknown parameter 'subj_user' [ 156.712873][ T7596] binder: Unknown parameter 'subj_user' [ 156.718506][ T7596] binder: Unknown parameter 'subj_user' [ 156.724233][ T7596] binder: Unknown parameter 'subj_user' [ 156.729912][ T7596] binder: Unknown parameter 'subj_user' [ 156.735553][ T7596] binder: Unknown parameter 'subj_user' [ 156.741158][ T7596] binder: Unknown parameter 'subj_user' [ 156.746982][ T7596] binder: Unknown parameter 'subj_user' [ 156.873995][ T36] audit: type=1400 audit(1760011957.924:531): avc: denied { mounton } for pid=7609 comm="syz.0.2489" path="/24/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 156.874638][ T7611] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 157.129415][ T7630] overlayfs: failed to clone lowerpath [ 157.151612][ T7630] overlayfs: failed to clone lowerpath [ 158.523558][ T7671] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 158.551621][ T7671] rust_binder: Write failure EINVAL in pid:96 [ 158.554020][ T7669] fuse: Bad value for 'fd' [ 158.621412][ T36] audit: type=1400 audit(1760011959.666:532): avc: denied { lock } for pid=7675 comm="syz.3.2507" path="socket:[26029]" dev="sockfs" ino=26029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.174887][ T7678] rust_binder: 101: no such ref 0 [ 159.184558][ T7678] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 159.198740][ T7678] rust_binder: Write failure EINVAL in pid:101 [ 159.453361][ T36] audit: type=1400 audit(1760011960.492:533): avc: denied { mounton } for pid=7679 comm="syz.2.2509" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 159.496616][ T36] audit: type=1400 audit(1760011960.532:534): avc: denied { unmount } for pid=6813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 159.534955][ T36] audit: type=1400 audit(1760011960.552:535): avc: denied { bind } for pid=7681 comm="syz.2.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 159.883298][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.883330][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.883808][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 159.890317][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.896459][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 159.903006][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.909046][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 159.915215][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.921918][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 159.927820][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.934233][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 159.940695][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.946899][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 159.953388][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.959556][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 159.965881][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.972167][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 159.984772][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 159.985733][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.993702][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 159.997781][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.008575][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.010490][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.017268][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.022925][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.029183][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.035445][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.041735][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.048089][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.054379][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.060674][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.066949][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.073273][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.079529][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.085821][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.092215][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.098504][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.104838][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.111122][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.117431][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.123719][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.130017][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.136316][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.142720][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.149068][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.155352][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.161744][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.174155][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.180622][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.187269][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.195433][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.213604][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.220119][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.226817][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.233464][ T7696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.245528][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.252384][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.259278][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.265773][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.272306][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.278612][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.285019][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.291308][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.297713][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.309123][ T7697] rust_binder: Write failure EINVAL in pid:119 [ 160.334605][ T7705] input: syz0 as /devices/virtual/input/input17 [ 160.572831][ T419] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 160.713486][ T419] usb 3-1: device descriptor read/64, error -71 [ 160.892172][ T36] audit: type=1400 audit(1760011961.926:536): avc: denied { read write } for pid=7734 comm="syz.0.2530" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 160.916938][ T36] audit: type=1400 audit(1760011961.926:537): avc: denied { open } for pid=7734 comm="syz.0.2530" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 160.942039][ T36] audit: type=1400 audit(1760011961.926:538): avc: denied { ioctl } for pid=7734 comm="syz.0.2530" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 160.970647][ T419] usb 3-1: device descriptor read/64, error -71 [ 160.992373][ T7747] 9pnet_fd: Insufficient options for proto=fd [ 161.215728][ T419] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 161.242640][ T7771] cgroup: Unknown subsys name 'measure' [ 161.366405][ T419] usb 3-1: device descriptor read/64, error -71 [ 161.533609][ T7796] /dev/loop0: Can't lookup blockdev [ 161.577661][ T7800] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7800 comm=syz.1.2551 [ 161.617477][ T419] usb 3-1: device descriptor read/64, error -71 [ 161.728378][ T419] usb usb3-port1: attempt power cycle [ 161.778769][ T36] audit: type=1400 audit(1760011962.812:539): avc: denied { setopt } for pid=7801 comm="syz.0.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.039350][ T403] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 162.069490][ T419] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.090616][ T419] usb 3-1: device descriptor read/8, error -71 [ 162.189997][ T403] usb 1-1: Using ep0 maxpacket: 32 [ 162.211359][ T403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.222675][ T419] usb 3-1: device descriptor read/8, error -71 [ 162.229096][ T403] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 162.238240][ T403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.246571][ T403] usb 1-1: Product: syz [ 162.250923][ T403] usb 1-1: Manufacturer: syz [ 162.255719][ T403] usb 1-1: SerialNumber: syz [ 162.267027][ T403] usb 1-1: config 0 descriptor?? [ 162.272498][ T7814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2557'. [ 162.282512][ T403] usb 1-1: bad CDC descriptors [ 162.287500][ T403] usb 1-1: unsupported MDLM descriptors [ 162.365170][ T7823] fuse: Bad value for 'fd' [ 162.415475][ T7836] devpts: called with bogus options [ 162.430801][ T7838] erofs: dax options not supported [ 162.436692][ T7839] erofs: dax options not supported [ 162.462833][ T36] audit: type=1400 audit(1760011963.489:540): avc: denied { lock } for pid=7847 comm="syz.1.2567" path="socket:[26769]" dev="sockfs" ino=26769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 162.486052][ T419] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 162.495107][ T10] usb 1-1: USB disconnect, device number 7 [ 162.512474][ T419] usb 3-1: device descriptor read/8, error -71 [ 162.643002][ T419] usb 3-1: device descriptor read/8, error -71 [ 162.752536][ T419] usb usb3-port1: unable to enumerate USB device [ 163.062540][ T7863] 9pnet_fd: Insufficient options for proto=fd [ 163.126112][ T36] audit: type=1400 audit(1760011964.156:541): avc: denied { nlmsg_read } for pid=7877 comm="syz.3.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 163.126498][ T7878] /dev/loop0: Can't lookup blockdev [ 163.153039][ T7879] tipc: Enabling of bearer rejected, media not registered [ 163.166928][ T7880] fuse: Unknown parameter 'grounLn00000000000000000000' [ 163.273388][ T7897] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2583'. [ 163.531765][ T7910] rust_binder: 7909 RLIMIT_NICE not set [ 163.532696][ T7909] 9pnet: p9_errstr2errno: server reported unknown error [ 163.565961][ T403] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 163.716738][ T403] usb 1-1: Using ep0 maxpacket: 32 [ 163.726064][ T403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.737034][ T403] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 163.746100][ T403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.754998][ T403] usb 1-1: config 0 descriptor?? [ 164.221219][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2593'. [ 164.240495][ T7930] overlayfs: failed to clone upperpath [ 164.341270][ T7948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2599'. [ 164.409672][ T7950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 164.444828][ T36] audit: type=1400 audit(1760011965.460:542): avc: denied { unmount } for pid=6813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 164.531513][ T7960] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 164.555220][ T403] usbhid 1-1:0.0: can't add hid device: -71 [ 164.561961][ T403] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 164.571336][ T36] audit: type=1400 audit(1760011965.590:543): avc: denied { append } for pid=7961 comm="syz.2.2606" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.576137][ T403] usb 1-1: USB disconnect, device number 8 [ 164.619583][ T36] audit: type=1326 audit(1760011965.630:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.2.2607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd3338eec9 code=0x0 [ 164.959089][ T7981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7981 comm=syz.1.2611 [ 164.959884][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2612'. [ 164.980656][ T65] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 165.108011][ T36] audit: type=1400 audit(1760011966.118:545): avc: denied { watch watch_reads } for pid=7991 comm="syz.3.2615" path="/136/file0" dev="tmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 165.112569][ T65] usb 3-1: device descriptor read/64, error -71 [ 165.225184][ T7995] input: syz1 as /devices/virtual/input/input18 [ 165.373595][ T65] usb 3-1: device descriptor read/64, error -71 [ 165.514087][ T8000] veth1: entered allmulticast mode [ 165.526909][ T7999] veth1: left allmulticast mode [ 165.544314][ T10] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 165.614610][ T65] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 165.694929][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 165.745471][ T65] usb 3-1: device descriptor read/64, error -71 [ 165.825498][ T10] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 165.976106][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 165.981552][ T10] usb usb1-port1: attempt power cycle [ 165.986995][ T65] usb 3-1: device descriptor read/64, error -71 [ 166.055239][ T8006] 9pnet_fd: Insufficient options for proto=fd [ 166.096665][ T65] usb usb3-port1: attempt power cycle [ 166.327568][ T10] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 166.347970][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 166.438021][ T65] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 166.459698][ T65] usb 3-1: device descriptor read/8, error -71 [ 166.478496][ T10] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 166.484993][ T8017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2068 sclass=netlink_route_socket pid=8017 comm=syz.3.2625 [ 166.498627][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 166.504085][ T10] usb usb1-port1: unable to enumerate USB device [ 166.589749][ T65] usb 3-1: device descriptor read/8, error -71 [ 166.829616][ T65] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 166.848722][ T36] audit: type=1400 audit(1760011967.851:546): avc: denied { bind } for pid=8065 comm="syz.3.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.869693][ T65] usb 3-1: device descriptor read/8, error -71 [ 167.001392][ T65] usb 3-1: device descriptor read/8, error -71 [ 167.110920][ T65] usb usb3-port1: unable to enumerate USB device [ 167.750727][ T8085] overlayfs: failed to clone upperpath [ 167.931355][ T36] audit: type=1400 audit(1760011968.936:547): avc: denied { mounton } for pid=8091 comm="syz.3.2650" path="/157/file0" dev="tmpfs" ino=870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 167.954383][ T36] audit: type=1400 audit(1760011968.946:548): avc: denied { read write } for pid=8091 comm="syz.3.2650" name="file0" dev="tmpfs" ino=870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 167.977166][ T36] audit: type=1400 audit(1760011968.946:549): avc: denied { open } for pid=8091 comm="syz.3.2650" path="/157/file0" dev="tmpfs" ino=870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 168.034477][ T419] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 168.185069][ T419] usb 3-1: Using ep0 maxpacket: 16 [ 168.191260][ T419] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.201080][ T419] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 168.210167][ T419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.218925][ T419] usb 3-1: config 0 descriptor?? [ 168.225081][ T419] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 168.333546][ T8094] netlink: 'syz.0.2651': attribute type 3 has an invalid length. [ 168.335640][ T36] audit: type=1400 audit(1760011969.335:550): avc: denied { create } for pid=8093 comm="syz.0.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 168.341896][ T8094] __vm_enough_memory: pid: 8094, comm: syz.0.2651, bytes: 18014402804453376 not enough memory for the allocation [ 168.378162][ T8096] 9pnet_fd: Insufficient options for proto=fd [ 168.403526][ T8101] ip6gretap0: mtu less than device minimum [ 168.410624][ T36] audit: type=1400 audit(1760011969.414:551): avc: denied { mounton } for pid=8100 comm="syz.0.2654" path="mnt:[4026532295]" dev="nsfs" ino=4026532295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 168.557601][ T8113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8113 comm=syz.3.2657 [ 168.649086][ T419] usb 3-1: USB disconnect, device number 16 [ 168.665785][ T8118] binder: Unknown parameter 'obj_user' [ 168.687386][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.694472][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.701801][ T8116] bridge_slave_0: entered allmulticast mode [ 168.708297][ T8116] bridge_slave_0: entered promiscuous mode [ 168.714874][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.721962][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.729690][ T8116] bridge_slave_1: entered allmulticast mode [ 168.735928][ T8116] bridge_slave_1: entered promiscuous mode [ 168.802834][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.809951][ T8116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.817240][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.824286][ T8116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.845320][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.852673][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.863074][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.870148][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.879456][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.886511][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.907945][ T403] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 168.920134][ T8116] veth0_vlan: entered promiscuous mode [ 168.933239][ T8116] veth1_macvtap: entered promiscuous mode [ 169.013992][ T8145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.015100][ T8145] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 169.059644][ T403] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 169.078887][ T403] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 169.092090][ T403] usb 1-1: config 0 interface 0 has no altsetting 0 [ 169.098913][ T403] usb 1-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00 [ 169.107964][ T403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.117343][ T403] usb 1-1: config 0 descriptor?? [ 169.294170][ T8149] tmpfs: Unknown parameter '' [ 169.332266][ T8157] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8157 comm=syz.3.2669 [ 169.345011][ T8157] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8157 comm=syz.3.2669 [ 169.526837][ T403] wacom 0003:056A:0323.0007: Unknown device_type for 'HID 056a:0323'. Assuming pen. [ 169.536972][ T403] wacom 0003:056A:0323.0007: hidraw0: USB HID v0.04 Device [HID 056a:0323] on usb-dummy_hcd.0-1/input0 [ 169.548934][ T403] input: Wacom Intuos P M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0323.0007/input/input19 [ 169.730633][ T403] usb 1-1: USB disconnect, device number 13 [ 169.878295][ T8168] netlink: 'syz.3.2672': attribute type 27 has an invalid length. [ 170.261259][ T8174] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.395442][ T8189] binder: Unknown parameter 'context[7' [ 170.421977][ T8192] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2681'. [ 170.463620][ T8200] devpts: called with bogus options [ 170.896585][ T8211] __vm_enough_memory: pid: 8211, comm: syz.0.2688, bytes: 18014402804453376 not enough memory for the allocation [ 171.310919][ T8241] rust_binder: Error in use_page_slow: ESRCH [ 171.310947][ T8241] rust_binder: use_range failure ESRCH [ 171.317053][ T8241] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 171.322724][ T8241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 171.330812][ T8241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:174 [ 171.366091][ T8247] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.375536][ T8247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 171.403673][ T8251] netlink: 'syz.1.2702': attribute type 15 has an invalid length. [ 171.420935][ T8251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2702'. [ 171.494134][ T8256] rust_binder: Write failure EFAULT in pid:20 [ 171.515264][ T36] audit: type=1400 audit(1760011972.502:552): avc: denied { mounton } for pid=8262 comm="syz.1.2706" path="/proc/27/cgroup" dev="proc" ino=28510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 171.545912][ T36] audit: type=1400 audit(1760011972.532:553): avc: denied { remount } for pid=8262 comm="syz.1.2706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 171.565837][ T36] audit: type=1400 audit(1760011972.552:554): avc: denied { ioctl } for pid=8246 comm="syz.0.2700" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.618442][ T419] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 171.666000][ T36] audit: type=1400 audit(1760011972.652:555): avc: denied { write } for pid=8268 comm="syz.1.2707" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 171.722525][ T8275] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2709'. [ 171.768962][ T419] usb 1-1: Using ep0 maxpacket: 32 [ 171.775317][ T419] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.786229][ T419] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.796020][ T419] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 171.805114][ T419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.813866][ T419] usb 1-1: config 0 descriptor?? [ 171.903664][ T8289] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 171.910866][ T8289] rust_binder: Write failure EINVAL in pid:40 [ 171.944256][ T36] audit: type=1400 audit(1760011972.931:556): avc: granted { setsecparam } for pid=8290 comm="syz.2.2715" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 171.951240][ T8291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 172.062780][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.072047][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.078495][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.084953][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.091432][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.097868][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.104434][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.110964][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.117437][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.123919][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.130533][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.130585][ T8296] rust_binder: Error while translating object. [ 172.136995][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.137015][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.143587][ T8296] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 172.149804][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.156316][ T8296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:184 [ 172.163084][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.187696][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.194297][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.200802][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.207243][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.213717][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.220168][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.226707][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.233261][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.239788][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.246316][ T419] usbhid 1-1:0.0: can't add hid device: -71 [ 172.246675][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.252819][ T419] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 172.259048][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.266325][ T419] usb 1-1: USB disconnect, device number 14 [ 172.275917][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.285472][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.292108][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.298655][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.305162][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.311618][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.318068][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.324509][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.330937][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.337481][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.344084][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.350527][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.356978][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.363488][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.369993][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.376494][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.383125][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.389648][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.396250][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.403257][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.409766][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.416463][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.422967][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.429665][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.436286][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.442771][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.449425][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.456093][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.462601][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.469034][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.475665][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.482143][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.488698][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.495209][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.501744][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.508247][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.514766][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.521258][ T8297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.543662][ T8304] batadv_slave_0: mtu less than device minimum [ 172.556513][ T8305] batadv_slave_0: mtu less than device minimum [ 172.570898][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.590569][ T36] audit: type=1400 audit(1760011973.548:557): avc: denied { read write } for pid=8303 comm="syz.2.2720" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.615116][ T36] audit: type=1400 audit(1760011973.548:558): avc: denied { open } for pid=8303 comm="syz.2.2720" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.638517][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.812894][ T65] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 172.953396][ T65] usb 3-1: device descriptor read/64, error -71 [ 173.194322][ T65] usb 3-1: device descriptor read/64, error -71 [ 173.435171][ T65] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 173.565645][ T65] usb 3-1: device descriptor read/64, error -71 [ 173.806526][ T65] usb 3-1: device descriptor read/64, error -71 [ 173.917052][ T65] usb usb3-port1: attempt power cycle [ 174.258374][ T65] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 174.279410][ T65] usb 3-1: device descriptor read/8, error -71 [ 174.409735][ T65] usb 3-1: device descriptor read/8, error -71 [ 174.649594][ T65] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 174.670761][ T65] usb 3-1: device descriptor read/8, error -71 [ 174.801206][ T65] usb 3-1: device descriptor read/8, error -71 [ 174.910657][ T65] usb usb3-port1: unable to enumerate USB device [ 192.548971][ T8315] incfs: Error accessing: ./file0/file0. [ 192.554829][ T8315] incfs: mount failed -20 [ 192.604189][ T36] audit: type=1400 audit(1760011993.524:559): avc: denied { mount } for pid=8327 comm="syz.1.2727" name="/" dev="ramfs" ino=28815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 192.658708][ T36] audit: type=1400 audit(1760011993.584:560): avc: denied { map } for pid=8340 comm="syz.2.2730" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.814052][ T8363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 192.814087][ T8363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 192.854616][ T8378] overlayfs: failed to clone upperpath [ 192.889132][ T8385] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 192.897848][ T8385] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 192.946968][ T65] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 193.047229][ T419] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 193.077307][ T65] usb 3-1: device descriptor read/64, error -71 [ 193.199046][ T419] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 193.212046][ T419] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 193.221335][ T419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.237767][ T419] usb 1-1: config 0 descriptor?? [ 193.317964][ T65] usb 3-1: device descriptor read/64, error -71 [ 193.558602][ T65] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 193.648506][ T419] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 193.656011][ T419] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 193.663405][ T419] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 193.670798][ T419] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 193.678162][ T419] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 193.686416][ T419] dragonrise 0003:0079:0006.0008: hidraw0: USB HID v1.02 Device [HID 0079:0006] on usb-dummy_hcd.0-1/input0 [ 193.689570][ T65] usb 3-1: device descriptor read/64, error -71 [ 193.697987][ T419] dragonrise 0003:0079:0006.0008: no inputs found [ 193.710690][ T419] dragonrise 0003:0079:0006.0008: force feedback init failed [ 193.871498][ T2968] bridge_slave_1: left allmulticast mode [ 193.877280][ T2968] bridge_slave_1: left promiscuous mode [ 193.883842][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.894546][ T2968] bridge_slave_0: left allmulticast mode [ 193.907960][ T2968] bridge_slave_0: left promiscuous mode [ 193.918132][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.949654][ T65] usb 3-1: device descriptor read/64, error -71 [ 194.060739][ T65] usb usb3-port1: attempt power cycle [ 194.136900][ T2968] veth1_macvtap: left promiscuous mode [ 194.142588][ T2968] veth0_vlan: left promiscuous mode [ 194.222132][ T8406] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.229289][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.236615][ T8406] bridge_slave_0: entered allmulticast mode [ 194.243675][ T8406] bridge_slave_0: entered promiscuous mode [ 194.250350][ T8406] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.257724][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.264996][ T8406] bridge_slave_1: entered allmulticast mode [ 194.291048][ T8406] bridge_slave_1: entered promiscuous mode [ 194.367388][ T8406] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.374507][ T8406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.381830][ T8406] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.388893][ T8406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.436961][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.445610][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.452800][ T65] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 194.478916][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.486032][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.495084][ T65] usb 3-1: device descriptor read/8, error -71 [ 194.512073][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.519161][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.545475][ T8406] veth0_vlan: entered promiscuous mode [ 194.559933][ T8406] veth1_macvtap: entered promiscuous mode [ 194.632436][ T65] usb 3-1: device descriptor read/8, error -71 [ 194.662987][ T36] audit: type=1400 audit(1760011995.569:561): avc: denied { create } for pid=8422 comm="syz.4.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 194.872317][ T65] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 194.892198][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 194.900856][ T65] usb 3-1: device descriptor read/8, error -71 [ 194.944068][ T8428] 9pnet_fd: Insufficient options for proto=fd [ 195.033709][ T65] usb 3-1: device descriptor read/8, error -71 [ 195.043415][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 195.050121][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 195.058794][ T10] usb 5-1: config 0 has no interfaces? [ 195.066506][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.076045][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.084536][ T10] usb 5-1: Product: syz [ 195.088865][ T10] usb 5-1: Manufacturer: syz [ 195.093759][ T10] usb 5-1: SerialNumber: syz [ 195.102899][ T10] usb 5-1: config 0 descriptor?? [ 195.143270][ T65] usb usb3-port1: unable to enumerate USB device [ 195.316571][ T8423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.326362][ T8423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.341137][ T65] usb 5-1: USB disconnect, device number 2 [ 195.359283][ T8443] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2765'. [ 195.739139][ T8447] syz.2.2766 (8447): /proc/8446/oom_adj is deprecated, please use /proc/8446/oom_score_adj instead. [ 195.820867][ T419] usb 1-1: USB disconnect, device number 15 [ 195.962760][ T8462] netlink: 'syz.3.2772': attribute type 4 has an invalid length. [ 195.979260][ T8462] netlink: 'syz.3.2772': attribute type 6 has an invalid length. [ 195.994627][ T8462] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2772'. [ 196.228042][ T8464] fuse: Bad value for 'fd' [ 196.244998][ T8464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.264320][ T8464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.476235][ T10] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 196.606641][ T10] usb 1-1: device descriptor read/64, error -71 [ 196.817257][ T8500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 196.817307][ T8500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:20 [ 196.820908][ T8503] fuse: Bad value for 'user_id' [ 196.840966][ T8503] fuse: Bad value for 'user_id' [ 196.847338][ T10] usb 1-1: device descriptor read/64, error -71 [ 196.921749][ T8515] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 196.929072][ T8515] rust_binder: Write failure EINVAL in pid:205 [ 197.097832][ T419] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 197.117886][ T10] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 197.188048][ T336] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 197.258263][ T10] usb 1-1: device descriptor read/64, error -71 [ 197.259376][ T419] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 197.272698][ T419] usb 5-1: config 0 has no interface number 0 [ 197.280304][ T419] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 197.289612][ T419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.297790][ T419] usb 5-1: Product: syz [ 197.302008][ T419] usb 5-1: Manufacturer: syz [ 197.306619][ T419] usb 5-1: SerialNumber: syz [ 197.313502][ T419] usb 5-1: config 0 descriptor?? [ 197.339821][ T336] usb 3-1: not running at top speed; connect to a high speed hub [ 197.348316][ T336] usb 3-1: config 4 has an invalid interface number: 158 but max is 0 [ 197.356568][ T336] usb 3-1: config 4 has no interface number 0 [ 197.362707][ T336] usb 3-1: config 4 interface 158 altsetting 8 endpoint 0xA has invalid maxpacket 1088, setting to 64 [ 197.373832][ T336] usb 3-1: config 4 interface 158 has no altsetting 0 [ 197.382189][ T336] usb 3-1: New USB device found, idVendor=a40d, idProduct=548e, bcdDevice=5b.b9 [ 197.391393][ T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.399438][ T336] usb 3-1: Product: syz [ 197.403620][ T336] usb 3-1: Manufacturer: syz [ 197.408272][ T336] usb 3-1: SerialNumber: syz [ 197.508855][ T10] usb 1-1: device descriptor read/64, error -71 [ 197.527991][ T419] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 197.535078][ T419] usb 5-1: No valid video chain found. [ 197.541719][ T419] usb 5-1: USB disconnect, device number 3 [ 197.619204][ T10] usb usb1-port1: attempt power cycle [ 197.619325][ T336] usb-storage 3-1:4.158: USB Mass Storage device detected [ 197.692070][ T336] usb 3-1: USB disconnect, device number 25 [ 197.740197][ T8533] 9pnet_fd: Insufficient options for proto=fd [ 197.839674][ T419] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 197.870484][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2795'. [ 197.959976][ T10] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 197.980989][ T10] usb 1-1: device descriptor read/8, error -71 [ 197.990050][ T419] usb 5-1: Using ep0 maxpacket: 32 [ 197.996948][ T419] usb 5-1: config 1 has an invalid interface number: 64 but max is 3 [ 198.005119][ T419] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 198.013843][ T419] usb 5-1: config 1 has an invalid interface number: 198 but max is 3 [ 198.022035][ T419] usb 5-1: config 1 has an invalid interface number: 194 but max is 3 [ 198.030268][ T419] usb 5-1: config 1 has an invalid interface number: 27 but max is 3 [ 198.038358][ T419] usb 5-1: config 1 has no interface number 0 [ 198.044477][ T419] usb 5-1: config 1 has no interface number 1 [ 198.050574][ T419] usb 5-1: config 1 has no interface number 2 [ 198.056639][ T419] usb 5-1: config 1 has no interface number 3 [ 198.062768][ T419] usb 5-1: config 1 interface 64 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 198.073571][ T419] usb 5-1: config 1 interface 64 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 198.084195][ T419] usb 5-1: config 1 interface 64 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 198.095433][ T419] usb 5-1: config 1 interface 64 altsetting 5 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 198.106427][ T419] usb 5-1: config 1 interface 64 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 198.117262][ T419] usb 5-1: config 1 interface 198 altsetting 135 has a duplicate endpoint with address 0xC, skipping [ 198.121487][ T10] usb 1-1: device descriptor read/8, error -71 [ 198.128171][ T419] usb 5-1: config 1 interface 198 altsetting 135 bulk endpoint 0xB has invalid maxpacket 1023 [ 198.144700][ T419] usb 5-1: config 1 interface 194 altsetting 9 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 198.155738][ T419] usb 5-1: config 1 interface 194 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 198.166840][ T419] usb 5-1: config 1 interface 27 altsetting 64 has a duplicate endpoint with address 0x9, skipping [ 198.177618][ T419] usb 5-1: config 1 interface 27 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 198.188631][ T419] usb 5-1: config 1 interface 27 altsetting 64 has an endpoint descriptor with address 0x5F, changing to 0xF [ 198.200233][ T419] usb 5-1: config 1 interface 27 altsetting 64 has a duplicate endpoint with address 0xF, skipping [ 198.210960][ T419] usb 5-1: config 1 interface 27 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 198.221846][ T419] usb 5-1: config 1 interface 27 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 198.232583][ T419] usb 5-1: config 1 interface 27 altsetting 64 has a duplicate endpoint with address 0xB, skipping [ 198.243303][ T419] usb 5-1: config 1 interface 64 has no altsetting 0 [ 198.249996][ T419] usb 5-1: config 1 interface 198 has no altsetting 0 [ 198.256798][ T419] usb 5-1: config 1 interface 194 has no altsetting 0 [ 198.263755][ T419] usb 5-1: config 1 interface 27 has no altsetting 0 [ 198.271876][ T419] usb 5-1: New USB device found, idVendor=0d8e, idProduct=7803, bcdDevice=ba.20 [ 198.280996][ T419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.289006][ T419] usb 5-1: Product: 䙯열殻쇭᳊ [ 198.294244][ T419] usb 5-1: Manufacturer: 珹鄪銠釔황啰弡庰㾕쳸ì꼼毂뗳琚액∺Ὕ造剺㩘ﳎ紌侔ꈹ뻊响癓藷绎썆琎⩛ඍ䓖矞悚邯⦨寨䗭舻⇋ᇸ峝ᜟ綶ꚏ怒닌ﲿത订ኡ⣺＊톤ᝦ廦嘃쩙㽥蹋 [ 198.315765][ T419] usb 5-1: SerialNumber: syz [ 198.321578][ T8510] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 198.371063][ T10] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 198.392100][ T10] usb 1-1: device descriptor read/8, error -71 [ 198.411143][ T65] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 198.522485][ T10] usb 1-1: device descriptor read/8, error -71 [ 198.544873][ T419] usb 5-1: USB disconnect, device number 4 [ 198.561549][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 198.567815][ T65] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 198.576156][ T65] usb 3-1: config 179 has no interface number 0 [ 198.582522][ T65] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 198.594286][ T65] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 198.605803][ T65] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 198.622360][ T65] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 198.636621][ T10] usb usb1-port1: unable to enumerate USB device [ 198.644063][ T65] usb 3-1: config 179 interface 65 has no altsetting 0 [ 198.651542][ T65] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 198.662232][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.875685][ T65] usb 3-1: USB disconnect, device number 26 [ 199.402018][ T8568] x_tables: duplicate underflow at hook 1 [ 199.413853][ T8426] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 199.585064][ T8426] usb 5-1: Using ep0 maxpacket: 16 [ 199.595890][ T8426] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.606904][ T8426] usb 5-1: config 0 has no interface number 0 [ 199.613171][ T8426] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.627369][ T8426] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.637544][ T8426] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 199.648859][ T8426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.668108][ T8426] usb 5-1: config 0 descriptor?? [ 199.690632][ T8596] 9pnet_fd: Insufficient options for proto=fd [ 199.697027][ T8595] 9pnet_fd: Insufficient options for proto=fd [ 199.923696][ T8600] tipc: Started in network mode [ 199.929257][ T8600] tipc: Node identity 4, cluster identity 4711 [ 199.937167][ T8600] tipc: Node number set to 4 [ 199.942314][ T6045] tipc: Subscription rejected, illegal request [ 200.085015][ T8562] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2803'. [ 200.295639][ T8426] uclogic 0003:28BD:0071.0009: pen parameters not found [ 200.303068][ T8426] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 200.498170][ T8562] 9pnet_fd: Insufficient options for proto=fd [ 200.537400][ T336] usb 5-1: USB disconnect, device number 5 [ 200.646552][ T419] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 200.797983][ T419] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.808205][ T419] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.817961][ T419] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.827055][ T419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.835049][ T419] usb 3-1: SerialNumber: syz [ 201.837939][ T419] usb 3-1: 0:2 : does not exist [ 201.909577][ T419] usb 3-1: unit 5: unexpected type 0x0c [ 201.941696][ T419] usb 3-1: USB disconnect, device number 27 [ 202.861190][ T8527] udevd[8527]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 202.951897][ T8640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.963873][ T36] audit: type=1400 audit(1760012003.858:562): avc: denied { connect } for pid=8645 comm="syz.2.2834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.061934][ T36] audit: type=1326 audit(1760012003.948:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.2836" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd3338eec9 code=0x0 [ 203.212593][ T8539] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 203.232643][ T8426] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 203.362929][ T8426] usb 5-1: device descriptor read/64, error -71 [ 203.369893][ T36] audit: type=1326 audit(1760012004.257:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.3.2841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa29238eec9 code=0x0 [ 203.374086][ T8539] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.392880][ T36] audit: type=1326 audit(1760012004.257:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.3.2841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa29238eec9 code=0x0 [ 203.403145][ T8539] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.435526][ T8539] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 203.444658][ T8539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 203.452678][ T8539] usb 1-1: SerialNumber: syz [ 203.493285][ T8670] netlink: 'syz.3.2842': attribute type 10 has an invalid length. [ 203.501155][ T8670] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2842'. [ 203.603491][ T8426] usb 5-1: device descriptor read/64, error -71 [ 203.661421][ T8539] usb 1-1: 0:2 : does not exist [ 203.668805][ T8539] usb 1-1: USB disconnect, device number 20 [ 203.677128][ T8527] udevd[8527]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 203.844025][ T8426] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 203.974322][ T8426] usb 5-1: device descriptor read/64, error -71 [ 204.121895][ T8688] overlayfs: failed to clone upperpath [ 204.178031][ T36] audit: type=1400 audit(1760012005.075:566): avc: denied { append } for pid=8690 comm="syz.0.2849" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 204.214939][ T8426] usb 5-1: device descriptor read/64, error -71 [ 204.262490][ T8693] kvm: emulating exchange as write [ 204.268856][ T8693] incfs: Options parsing error. -22 [ 204.274202][ T8693] incfs: mount failed -22 [ 204.279533][ T8693] /dev/rnullb0: Can't open blockdev [ 204.335169][ T8426] usb usb5-port1: attempt power cycle [ 204.466900][ T8698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2852'. [ 204.588615][ T36] audit: type=1400 audit(1760012005.484:567): avc: denied { append } for pid=8701 comm="syz.4.2854" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 204.846880][ T36] audit: type=1326 audit(1760012005.744:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8719 comm="syz.3.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29238eec9 code=0x7fc00000 [ 204.996622][ T8426] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 205.017702][ T8426] usb 5-1: not running at top speed; connect to a high speed hub [ 205.029293][ T8426] usb 5-1: config 1 interface 0 altsetting 29 endpoint 0x2 has invalid maxpacket 1568, setting to 64 [ 205.043801][ T8426] usb 5-1: config 1 interface 0 has no altsetting 0 [ 205.052123][ T8426] usb 5-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.40 [ 205.061443][ T8426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.069705][ T8426] usb 5-1: Product: syz [ 205.074043][ T8426] usb 5-1: Manufacturer: syz [ 205.078718][ T8426] usb 5-1: SerialNumber: syz [ 205.085749][ T8704] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 205.419239][ T36] audit: type=1400 audit(1760012006.313:569): avc: denied { read } for pid=8753 comm="syz.0.2872" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.442623][ T36] audit: type=1400 audit(1760012006.313:570): avc: denied { open } for pid=8753 comm="syz.0.2872" path="/77/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.697792][ T36] audit: type=1400 audit(1760012006.582:571): avc: denied { ioctl } for pid=8773 comm="syz.3.2882" path="socket:[30631]" dev="sockfs" ino=30631 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.731938][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2883'. [ 205.988821][ T65] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 206.139162][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 206.149537][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.157859][ T65] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 206.165526][ T65] usb 1-1: can't read configurations, error -71 [ 206.510051][ T8539] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 206.663246][ T8539] usb 3-1: Using ep0 maxpacket: 32 [ 206.671132][ T8539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.682075][ T8539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.691899][ T8539] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 206.701022][ T8539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.709749][ T8539] usb 3-1: config 0 descriptor?? [ 206.905446][ T31] kernel write not supported for file [eventfd] (pid: 31 comm: kworker/1:0) [ 207.001148][ T65] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 207.120810][ T8539] savu 0003:1E7D:2D5A.000A: unexpected long global item [ 207.128117][ T8539] savu 0003:1E7D:2D5A.000A: parse failed [ 207.134039][ T8539] savu 0003:1E7D:2D5A.000A: probe with driver savu failed with error -22 [ 207.151380][ T65] usb 1-1: Using ep0 maxpacket: 8 [ 207.157712][ T65] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.167926][ T65] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 200 [ 207.177801][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.187501][ T65] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.197199][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.210126][ T65] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 207.219227][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.231787][ T65] usb 1-1: config 0 descriptor?? [ 207.237056][ T8808] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 207.320768][ T65] usb 3-1: USB disconnect, device number 28 [ 207.450215][ T698] usb 1-1: USB disconnect, device number 22 [ 207.615719][ T8426] usbhid 5-1:1.0: can't add hid device: -71 [ 207.625511][ T8426] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 207.635863][ T8426] usb 5-1: USB disconnect, device number 8 [ 208.211047][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 208.211066][ T36] audit: type=1400 audit(1760012009.097:574): avc: denied { ioctl } for pid=8901 comm="syz.0.2941" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 209.155706][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 209.265898][ T8539] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 209.307010][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.318070][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.327859][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.347903][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.361877][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.370777][ T31] usb 5-1: config 0 descriptor?? [ 209.427321][ T8539] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 88, setting to 64 [ 209.438130][ T8539] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.450945][ T8539] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.457604][ T8539] usb 1-1: New USB device found, idVendor=18d1, idProduct=5057, bcdDevice= 0.00 [ 209.466674][ T8539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.475332][ T8539] usb 1-1: config 0 descriptor?? [ 209.480710][ T8948] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 209.781409][ T31] plantronics 0003:047F:FFFF.000B: unbalanced collection at end of report description [ 209.793186][ T31] plantronics 0003:047F:FFFF.000B: parse failed [ 209.800605][ T31] plantronics 0003:047F:FFFF.000B: probe with driver plantronics failed with error -22 [ 209.893709][ T8539] hid-generic 0003:18D1:5057.000C: hidraw0: USB HID v0.00 Device [HID 18d1:5057] on usb-dummy_hcd.0-1/input0 [ 209.993640][ T8539] usb 5-1: USB disconnect, device number 9 [ 210.104207][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.116576][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.160333][ T8426] usb 1-1: USB disconnect, device number 23 [ 210.292584][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'. [ 210.325401][ T36] audit: type=1400 audit(1760012011.202:575): avc: denied { append } for pid=8994 comm="syz.2.2984" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.337928][ T8995] loop3: detected capacity change from 0 to 7 [ 210.718870][ T8539] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 210.729701][ T9023] rust_binder: Write failure EINVAL in pid:276 [ 210.730501][ T9023] rust_binder: validate_parent_fixup: new_min_offset=562949953421320, sg_entry.length=210 [ 210.736833][ T9023] rust_binder: Error while translating object. [ 210.746836][ T9023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 210.753088][ T8426] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 210.753101][ T9023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:276 [ 210.869172][ T8539] usb 3-1: Using ep0 maxpacket: 32 [ 210.884705][ T8539] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 210.892927][ T8539] usb 3-1: config 0 has no interface number 0 [ 210.899055][ T8539] usb 3-1: config 0 interface 184 has no altsetting 0 [ 210.907333][ T8539] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 210.916425][ T8539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.924444][ T8539] usb 3-1: Product: syz [ 210.928623][ T8539] usb 3-1: Manufacturer: syz [ 210.933256][ T8539] usb 3-1: SerialNumber: syz [ 210.938536][ T8539] usb 3-1: config 0 descriptor?? [ 210.942324][ T8426] usb 5-1: config 16 has an invalid interface number: 50 but max is 0 [ 210.944563][ T8539] smsc75xx v1.0.0 [ 210.952128][ T8426] usb 5-1: config 16 has no interface number 0 [ 210.963224][ T8426] usb 5-1: New USB device found, idVendor=046d, idProduct=08c2, bcdDevice=d4.71 [ 210.972368][ T8426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.980409][ T8426] usb 5-1: Product: syz [ 210.984645][ T8426] usb 5-1: Manufacturer: syz [ 210.989255][ T8426] usb 5-1: SerialNumber: syz [ 211.198202][ T8426] usb 5-1: Found UVC 0.00 device syz (046d:08c2) [ 211.204802][ T8426] usb 5-1: No valid video chain found. [ 211.400704][ T419] usb 5-1: USB disconnect, device number 10 [ 211.634206][ T9031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3001'. [ 211.943756][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3008'. [ 211.952753][ T8539] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 211.963731][ T8539] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 211.981444][ T8426] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 212.013542][ T9048] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 212.134212][ T8426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.144025][ T8426] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.157301][ T8426] usb 1-1: New USB device found, idVendor=056a, idProduct=037b, bcdDevice= 0.00 [ 212.166769][ T8426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.172713][ T9066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3017'. [ 212.182084][ T8426] usb 1-1: config 0 descriptor?? [ 212.185349][ T8539] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 212.199742][ T9040] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 212.207089][ T8539] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 212.216811][ T8539] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 212.226288][ T8539] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 212.239203][ T8539] usb 3-1: USB disconnect, device number 29 [ 212.827858][ T8426] wacom 0003:056A:037B.000D: Unknown device_type for 'HID 056a:037b'. Assuming pen. [ 212.838766][ T8426] wacom 0003:056A:037B.000D: hidraw0: USB HID v0.02 Device [HID 056a:037b] on usb-dummy_hcd.0-1/input0 [ 212.850885][ T8426] input: Wacom One by Wacom M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:037B.000D/input/input22 [ 213.028530][ T8539] usb 1-1: USB disconnect, device number 24 [ 213.253976][ T8426] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 213.404261][ T8426] usb 3-1: Using ep0 maxpacket: 16 [ 213.410601][ T8426] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.421527][ T8426] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.428279][ T8426] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 213.438067][ T8426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.448827][ T8426] usb 3-1: config 0 descriptor?? [ 213.642590][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3043'. [ 214.027041][ T8426] hid (null): invalid report_size 812540268 [ 214.234987][ T8539] usb 3-1: USB disconnect, device number 30 [ 214.728574][ T9153] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 214.788046][ T36] audit: type=1326 audit(1760012015.663:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.2.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd3338eec9 code=0x7ffc0000 [ 214.812365][ T36] audit: type=1326 audit(1760012015.663:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.2.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd3338eec9 code=0x7ffc0000 [ 214.850490][ T36] audit: type=1326 audit(1760012015.663:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.2.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcd3338eec9 code=0x7ffc0000 [ 214.876728][ T36] audit: type=1326 audit(1760012015.663:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.2.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcd3338eec9 code=0x7ffc0000 [ 214.901496][ T698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=698 comm=kworker/0:4 [ 215.378052][ T698] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 215.549034][ T36] audit: type=1400 audit(1760012016.422:580): avc: denied { lock } for pid=9226 comm="syz.0.3087" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 215.582438][ T698] usb 3-1: config 4 has an invalid interface number: 71 but max is 0 [ 215.590639][ T698] usb 3-1: config 4 has no interface number 0 [ 215.596765][ T698] usb 3-1: config 4 interface 71 has no altsetting 0 [ 215.609535][ T698] usb 3-1: New USB device found, idVendor=f589, idProduct=34c5, bcdDevice=55.87 [ 215.627124][ T698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.635415][ T698] usb 3-1: Product: syz [ 215.641393][ T698] usb 3-1: Manufacturer: syz [ 215.646081][ T698] usb 3-1: SerialNumber: syz [ 215.874485][ T698] usb 3-1: MIDIStreaming interface descriptor not found [ 215.909580][ T698] usb 3-1: USB disconnect, device number 31 [ 216.237195][ T9258] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 216.268191][ T9258] SELinux: failed to load policy [ 216.274648][ T9260] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3101'. [ 216.699772][ T36] audit: type=1400 audit(1760012018.546:581): avc: denied { sys_module } for pid=9273 comm="syz.2.3107" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 216.819723][ T419] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 216.897702][ T330] kernel write not supported for file /352/clear_refs (pid: 330 comm: kworker/0:3) [ 216.969754][ T8539] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 216.979712][ T419] usb 5-1: Using ep0 maxpacket: 16 [ 216.989152][ T419] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 217.000252][ T419] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.009361][ T419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.017447][ T419] usb 5-1: Product: syz [ 217.021659][ T419] usb 5-1: Manufacturer: syz [ 217.026253][ T419] usb 5-1: SerialNumber: syz [ 217.130707][ T8539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.140563][ T8539] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 217.149610][ T8539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.158498][ T8539] usb 3-1: config 0 descriptor?? [ 217.219746][ T330] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 217.240670][ T419] usb 5-1: USB disconnect, device number 11 [ 217.252082][ T8441] udevd[8441]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 217.369721][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 217.376090][ T330] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 217.385327][ T330] usb 1-1: config 1 has no interface number 1 [ 217.391467][ T330] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.402204][ T330] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 217.415119][ T330] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.436614][ T330] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.445898][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.454075][ T330] usb 1-1: Product: syz [ 217.458477][ T330] usb 1-1: Manufacturer: syz [ 217.463257][ T330] usb 1-1: SerialNumber: syz [ 217.573413][ T8539] nintendo 0003:057E:200E.000F: item fetching failed at offset 5/7 [ 217.581607][ T8539] nintendo 0003:057E:200E.000F: HID parse failed [ 217.588074][ T8539] nintendo 0003:057E:200E.000F: probe - fail = -22 [ 217.594982][ T8539] nintendo 0003:057E:200E.000F: probe with driver nintendo failed with error -22 [ 217.767045][ T8539] usb 3-1: USB disconnect, device number 32 [ 217.880465][ T330] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 218.649737][ T419] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 218.695910][ T330] usb 1-1: 2:1: cannot get freq at ep 0x82 [ 218.706332][ T330] usb 1-1: USB disconnect, device number 25 [ 218.810793][ T419] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 218.820056][ T419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.828656][ T419] usb 3-1: config 0 descriptor?? [ 219.256284][ T9403] kvm: kvm [9402]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000033) = 0x0 [ 219.340096][ T9417] 9pnet_fd: Insufficient options for proto=fd [ 219.402560][ T9430] new mount options do not match the existing superblock, will be ignored [ 220.289747][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 220.439736][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 220.478379][ T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 220.487488][ T31] usb 1-1: config 0 has no interface number 0 [ 220.494785][ T31] usb 1-1: config 0 interface 184 has no altsetting 0 [ 220.504910][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 220.514238][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.523765][ T31] usb 1-1: Product: syz [ 220.531819][ T31] usb 1-1: Manufacturer: syz [ 220.539220][ T31] usb 1-1: SerialNumber: syz [ 220.551324][ T31] usb 1-1: config 0 descriptor?? [ 220.559081][ T31] smsc75xx v1.0.0 [ 220.769766][ T65] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 220.921297][ T65] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 220.932979][ T65] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.942157][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.950283][ T65] usb 5-1: Product: syz [ 220.954569][ T65] usb 5-1: Manufacturer: syz [ 220.959322][ T65] usb 5-1: SerialNumber: syz [ 221.166688][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 221.191640][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 221.195407][ T9497] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 221.429707][ T8426] usb 3-1: USB disconnect, device number 33 [ 221.810018][ T9497] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 221.810338][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 221.828052][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 221.837656][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 221.847132][ T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 221.858270][ T31] usb 1-1: USB disconnect, device number 26 [ 221.889759][ T8426] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 222.018440][ T65] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 222.025045][ T65] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 222.032616][ T65] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 222.049933][ T8426] usb 3-1: Using ep0 maxpacket: 8 [ 222.056064][ T8426] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 222.065163][ T8426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.074023][ T8426] usb 3-1: config 0 descriptor?? [ 222.220658][ T65] cdc_ncm 5-1:1.0: setting tx_max = 136 [ 222.228094][ T65] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 222.241063][ T65] usb 5-1: USB disconnect, device number 12 [ 222.247395][ T65] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 222.251696][ T36] audit: type=1400 audit(1760012024.116:582): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 222.280600][ T8426] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 222.482795][ T8426] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 222.492854][ T8426] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 222.503156][ T8426] asix 3-1:0.0: probe with driver asix failed with error -32 [ 223.589870][ T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 223.761578][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.773722][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.784494][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.798004][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.807628][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.819937][ T31] usb 1-1: config 0 descriptor?? [ 224.240785][ T31] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 224.259132][ T31] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 224.266809][ T31] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 224.274466][ T31] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 224.284399][ T31] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 224.299715][ T31] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 224.317483][ T31] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 224.327273][ T31] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 224.334924][ T31] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 224.342509][ T31] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 224.350166][ T31] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 224.357631][ T31] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 224.370310][ T31] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 224.378145][ T31] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 224.409714][ T31] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 224.418844][ T9590] netlink: 'syz.4.3243': attribute type 4 has an invalid length. [ 224.601592][ T65] usb 3-1: USB disconnect, device number 34 [ 225.563935][ T9568] usb 1-1: string descriptor 0 read error: -71 [ 226.112880][ T9693] input: syz0 as /devices/virtual/input/input27 [ 226.340478][ T8539] usb 1-1: USB disconnect, device number 27 [ 227.109769][ T31] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 227.259735][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 227.267833][ T31] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 227.276386][ T31] usb 3-1: config 0 has no interface number 0 [ 227.284792][ T31] usb 3-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 227.309262][ T31] usb 3-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 227.320627][ T31] usb 3-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 227.332435][ T31] usb 3-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 227.341713][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.349878][ T31] usb 3-1: Product: syz [ 227.354124][ T31] usb 3-1: Manufacturer: syz [ 227.358751][ T31] usb 3-1: SerialNumber: syz [ 227.364549][ T31] usb 3-1: config 0 descriptor?? [ 227.371817][ T9720] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 227.379090][ T9720] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 227.422121][ T36] audit: type=1400 audit(1760012029.296:583): avc: denied { mounton } for pid=9723 comm="syz.3.3302" path="/463/file0" dev="tmpfs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 227.615594][ T9758] tmpfs: Invalid gid '0x00000000ffffffff' [ 227.664167][ T9766] input: syz0 as /devices/virtual/input/input28 [ 227.720760][ T9773] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 227.771912][ T9776] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 227.788318][ T9776] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 227.797174][ T9776] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 227.809478][ T9776] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 227.817973][ T9776] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 227.826350][ T9776] kvm: requested 176838 ns i8254 timer period limited to 200000 ns [ 227.836930][ T9776] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 227.845586][ T9776] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 227.854172][ T9776] kvm: requested 117333 ns i8254 timer period limited to 200000 ns [ 227.862616][ T9776] kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 229.219733][ T698] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 229.221146][ T9839] ------------[ cut here ]------------ [ 229.233086][ T9839] WARNING: CPU: 1 PID: 9839 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 229.242532][ T9839] Modules linked in: [ 229.246456][ T9839] CPU: 1 UID: 0 PID: 9839 Comm: syz.0.3353 Not tainted syzkaller #0 3139412e88f9c10565e68fba112d07c2ae2cf1ea [ 229.258331][ T9839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.268457][ T9839] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 229.274427][ T9839] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a2 1f ee 05 00 0f 85 be 00 00 00 c6 05 95 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 229.294197][ T9839] RSP: 0018:ffffc9000d5e7560 EFLAGS: 00010246 [ 229.300325][ T9839] RAX: 0000000000000000 RBX: 000000000000000d RCX: 0000000000000000 [ 229.308352][ T9839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d5e7618 [ 229.316366][ T9839] RBP: ffffc9000d5e76a0 R08: ffffc9000d5e7617 R09: 0000000000000000 [ 229.324402][ T9839] R10: ffffc9000d5e7600 R11: fffff52001abcec3 R12: ffffc9000d5e75a0 [ 229.332425][ T9839] R13: dffffc0000000000 R14: 1ffff92001abceb0 R15: 0000000000000000 [ 229.340448][ T9839] FS: 00007f5223eab6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 229.349396][ T9839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.356021][ T9839] CR2: 0000200000001000 CR3: 000000012b0a6000 CR4: 00000000003526b0 [ 229.364072][ T9839] Call Trace: [ 229.367376][ T9839] [ 229.370429][ T9839] ? vfs_write+0x3c0/0xf30 [ 229.374905][ T9839] ? ksys_write+0x141/0x250 [ 229.379421][ T9839] ? x64_sys_call+0x271c/0x2ee0 [ 229.384371][ T9839] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 229.389700][ T698] usb 5-1: Using ep0 maxpacket: 16 [ 229.390152][ T9839] ? hashtab_init+0xdb/0x1f0 [ 229.396580][ T698] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 229.399855][ T9839] ___kmalloc_large_node+0x81/0x220 [ 229.408554][ T698] usb 5-1: config 0 has no interface number 0 [ 229.413279][ T9839] ? hashtab_init+0xdb/0x1f0 [ 229.419753][ T698] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 229.423943][ T9839] __kmalloc_large_node_noprof+0x1e/0xe0 [ 229.436598][ T698] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 229.440684][ T9839] ? hashtab_init+0xdb/0x1f0 [ 229.449802][ T698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.454338][ T9839] __kmalloc_noprof+0x336/0x530 [ 229.462387][ T698] usb 5-1: Product: syz [ 229.467200][ T9839] ? kasan_save_alloc_info+0x40/0x50 [ 229.472250][ T698] usb 5-1: Manufacturer: syz [ 229.476726][ T9839] hashtab_init+0xdb/0x1f0 [ 229.476758][ T9839] ? common_read+0x16d/0x480 [ 229.481728][ T698] usb 5-1: SerialNumber: syz [ 229.485949][ T9839] symtab_init+0x44/0x70 [ 229.499302][ T9839] common_read+0x1de/0x480 [ 229.503765][ T9839] ? hashtab_init+0xdb/0x1f0 [ 229.508386][ T9839] ? __cfi_common_read+0x10/0x10 [ 229.508632][ T698] usb 5-1: config 0 descriptor?? [ 229.513386][ T9839] ? hashtab_init+0x105/0x1f0 [ 229.513417][ T9839] policydb_read+0xaa8/0x28c0 [ 229.527753][ T9839] ? __kasan_kmalloc+0x96/0xb0 [ 229.532586][ T9839] ? __cfi_policydb_read+0x10/0x10 [ 229.537735][ T9839] ? security_load_policy+0x128/0x12f0 [ 229.543271][ T9839] security_load_policy+0x162/0x12f0 [ 229.548585][ T9839] ? irqentry_exit+0x4a/0x60 [ 229.553231][ T9839] ? exc_page_fault+0x66/0xc0 [ 229.557925][ T9839] ? asm_exc_page_fault+0x2b/0x30 [ 229.562979][ T9839] ? __cfi_security_load_policy+0x10/0x10 [ 229.568728][ T9839] ? rep_movs_alternative+0x4a/0xa0 [ 229.573965][ T9839] sel_write_load+0x298/0x5e0 [ 229.578671][ T9839] ? futex_wait+0x29a/0x7a0 [ 229.583215][ T9839] ? __cfi_sel_write_load+0x10/0x10 [ 229.588445][ T9839] ? __cfi_futex_wait+0x10/0x10 [ 229.593335][ T9839] ? bpf_lsm_file_permission+0xd/0x20 [ 229.598740][ T9839] ? __cfi_sel_write_load+0x10/0x10 [ 229.603974][ T9839] vfs_write+0x3c0/0xf30 [ 229.608236][ T9839] ? __cfi_vfs_write+0x10/0x10 [ 229.613068][ T9839] ? __kasan_check_write+0x18/0x20 [ 229.618218][ T9839] ? mutex_lock+0x92/0x1c0 [ 229.622693][ T9839] ? __cfi_mutex_lock+0x10/0x10 [ 229.627575][ T9839] ? __fget_files+0x2c5/0x340 [ 229.632286][ T9839] ksys_write+0x141/0x250 [ 229.636648][ T9839] ? xfd_validate_state+0x68/0x150 [ 229.641831][ T9839] ? __cfi_ksys_write+0x10/0x10 [ 229.646717][ T9839] ? __kasan_check_write+0x18/0x20 [ 229.651918][ T9839] ? fpregs_restore_userregs+0x11d/0x260 [ 229.657589][ T9839] __x64_sys_write+0x7f/0x90 [ 229.662219][ T9839] x64_sys_call+0x271c/0x2ee0 [ 229.666933][ T9839] do_syscall_64+0x58/0xf0 [ 229.671662][ T9839] ? clear_bhb_loop+0x50/0xa0 [ 229.676367][ T9839] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 229.682307][ T9839] RIP: 0033:0x7f5222f8eec9 [ 229.686773][ T9839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.706435][ T9839] RSP: 002b:00007f5223eab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.714927][ T9839] RAX: ffffffffffffffda RBX: 00007f52231e5fa0 RCX: 00007f5222f8eec9 [ 229.722961][ T9839] RDX: 0000000000001790 RSI: 0000200000000000 RDI: 0000000000000003 [ 229.730982][ T9839] RBP: 00007f5223011f91 R08: 0000000000000000 R09: 0000000000000000 [ 229.738967][ T9839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.746981][ T9839] R13: 00007f52231e6038 R14: 00007f52231e5fa0 R15: 00007ffdb56b6778 [ 229.755005][ T9839] [ 229.758062][ T9839] ---[ end trace 0000000000000000 ]--- [ 229.764331][ T9839] SELinux: failed to load policy [ 229.867944][ T31] usb 3-1: USB disconnect, device number 35 [ 231.993610][ T698] usb 5-1: USB disconnect, device number 13