last executing test programs: 3.110639011s ago: executing program 2 (id=1072): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 3.091736781s ago: executing program 2 (id=1073): sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="49483ea3abd1565ea4", 0x9}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 3.024540482s ago: executing program 2 (id=1074): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2.930948374s ago: executing program 2 (id=1075): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 2.860421475s ago: executing program 2 (id=1077): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) 2.019241228s ago: executing program 2 (id=1114): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000440)={0x2}) 1.188484261s ago: executing program 0 (id=1140): creat(&(0x7f0000000040)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x4}, 0xc) 1.187926531s ago: executing program 0 (id=1142): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000018c0)={@mcast2, r2}, 0x14) 1.160191892s ago: executing program 0 (id=1143): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001540)={0x0, {{0xa, 0x4e22, 0x2, @mcast1, 0xf}}, {{0xa, 0x4e20, 0x7, @remote, 0x3}}}, 0x108) 1.129682602s ago: executing program 0 (id=1144): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e24, 0x9, 0x2}, {0x2000000000, 0x4, 0x1, 0x0, 0xfffffffffffffffc, 0x9, 0xfffffffffffffffe, 0x7}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x20004, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x40000000, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x4, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x9df}, 0x1c) 1.060253384s ago: executing program 0 (id=1145): syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a240104000502010207240705000005082408050400"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) 1.006744594s ago: executing program 1 (id=1146): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x4, 0x0}}], 0x2, 0x40008004) 995.246694ms ago: executing program 1 (id=1147): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, 0x0) 927.280206ms ago: executing program 1 (id=1148): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000240)={@my=0x1}) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) 542.106411ms ago: executing program 0 (id=1149): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x2000001, 0x0, 0x9ff}) 156.447488ms ago: executing program 3 (id=1151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000fff5000097000040"]) 128.815168ms ago: executing program 3 (id=1152): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB=' \x00'], 0x6) 123.859278ms ago: executing program 1 (id=1153): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 73.259279ms ago: executing program 3 (id=1154): r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000340)='posixacl\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 72.904839ms ago: executing program 1 (id=1155): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) 72.665079ms ago: executing program 3 (id=1156): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) 72.507199ms ago: executing program 1 (id=1157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x1000, 0x8000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)) 72.339049ms ago: executing program 3 (id=1158): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, 0x0) 0s ago: executing program 3 (id=1159): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) unshare(0x60000600) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x7, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8, 0xffffffff, 0xd66}}) kernel console output (not intermixed with test programs): cess permissive=1 [ 19.220936][ T36] audit: type=1400 audit(1753816305.180:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. [ 27.636815][ T36] audit: type=1400 audit(1753816313.600:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.638542][ T281] cgroup: Unknown subsys name 'net' [ 27.660132][ T36] audit: type=1400 audit(1753816313.600:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.687483][ T36] audit: type=1400 audit(1753816313.630:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.687799][ T281] cgroup: Unknown subsys name 'devices' [ 27.893095][ T281] cgroup: Unknown subsys name 'hugetlb' [ 27.898809][ T281] cgroup: Unknown subsys name 'rlimit' [ 28.014419][ T36] audit: type=1400 audit(1753816313.980:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.037868][ T36] audit: type=1400 audit(1753816313.980:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.062910][ T36] audit: type=1400 audit(1753816313.980:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.074657][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.094890][ T36] audit: type=1400 audit(1753816314.060:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.120527][ T36] audit: type=1400 audit(1753816314.060:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.157180][ T36] audit: type=1400 audit(1753816314.120:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.183004][ T36] audit: type=1400 audit(1753816314.120:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.183066][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.517158][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.524292][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.531604][ T291] bridge_slave_0: entered allmulticast mode [ 29.538236][ T291] bridge_slave_0: entered promiscuous mode [ 29.546110][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.553311][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.560507][ T291] bridge_slave_1: entered allmulticast mode [ 29.566960][ T291] bridge_slave_1: entered promiscuous mode [ 29.585887][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.593039][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.600322][ T289] bridge_slave_0: entered allmulticast mode [ 29.606675][ T289] bridge_slave_0: entered promiscuous mode [ 29.620702][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.627770][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.634925][ T289] bridge_slave_1: entered allmulticast mode [ 29.641302][ T289] bridge_slave_1: entered promiscuous mode [ 29.688079][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.695195][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.702595][ T288] bridge_slave_0: entered allmulticast mode [ 29.708952][ T288] bridge_slave_0: entered promiscuous mode [ 29.724267][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.731791][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.738877][ T288] bridge_slave_1: entered allmulticast mode [ 29.745286][ T288] bridge_slave_1: entered promiscuous mode [ 29.773963][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.781236][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.788459][ T290] bridge_slave_0: entered allmulticast mode [ 29.795168][ T290] bridge_slave_0: entered promiscuous mode [ 29.801844][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.808921][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.816079][ T290] bridge_slave_1: entered allmulticast mode [ 29.822532][ T290] bridge_slave_1: entered promiscuous mode [ 29.971748][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.978832][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.986247][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.993350][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.010811][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.017962][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.025479][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.032639][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.056191][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.063463][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.070780][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.077827][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.087424][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.094510][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.101795][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.108829][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.148050][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.155535][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.163808][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.171723][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.178961][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.186267][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.206673][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.213946][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.231904][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.239065][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.271535][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.278685][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.289154][ T289] veth0_vlan: entered promiscuous mode [ 30.298656][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.305841][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.325544][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.332635][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.346619][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.353963][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.368716][ T290] veth0_vlan: entered promiscuous mode [ 30.387344][ T289] veth1_macvtap: entered promiscuous mode [ 30.402656][ T290] veth1_macvtap: entered promiscuous mode [ 30.431528][ T291] veth0_vlan: entered promiscuous mode [ 30.460901][ T288] veth0_vlan: entered promiscuous mode [ 30.471049][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.492524][ T291] veth1_macvtap: entered promiscuous mode [ 30.510829][ T288] veth1_macvtap: entered promiscuous mode [ 30.589504][ T341] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 30.713768][ T354] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.760166][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.844245][ T358] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.870594][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.921336][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.932497][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.942590][ T31] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 30.957366][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.971528][ T31] usb 1-1: config 0 descriptor?? [ 31.031081][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 31.040479][ T10] usb 4-1: too many configurations: 29, using maximum allowed: 8 [ 31.049370][ T10] usb 4-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 31.059729][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.070968][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.085491][ T10] usb 4-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 31.096305][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.114739][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.130459][ T10] usb 4-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 31.141749][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.152682][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.173624][ T10] usb 4-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 31.187473][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.198613][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.217444][ T10] usb 4-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 31.229195][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.240283][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.268592][ T10] usb 4-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 31.278869][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.290652][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.305509][ T10] usb 4-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 31.315566][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.325878][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.339855][ T10] usb 4-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 31.350864][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.361657][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.378698][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.384802][ T31] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 31.388883][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 31.410105][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input4 [ 31.414345][ T10] usb 4-1: SerialNumber: syz [ 31.433936][ T10] hub 4-1:1.0: Invalid hub with more than one config or interface [ 31.443032][ T10] hub 4-1:1.0: probe with driver hub failed with error -22 [ 31.450551][ T10] cdc_ether 4-1:1.0: skipping garbage [ 31.456059][ T10] usb 4-1: bad CDC descriptors [ 31.500625][ T31] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 31.563882][ T385] ======================================================= [ 31.563882][ T385] WARNING: The mand mount option has been deprecated and [ 31.563882][ T385] and is ignored by this kernel. Remove the mand [ 31.563882][ T385] option from the mount to silence this warning. [ 31.563882][ T385] ======================================================= [ 31.662187][ T64] usb 4-1: USB disconnect, device number 2 [ 31.677060][ T392] netpci0: tun_chr_ioctl cmd 1074025676 [ 31.682830][ T392] netpci0: owner set to 0 [ 31.812453][ T339] usb 1-1: USB disconnect, device number 2 [ 31.931664][ T413] input: syz1 as /devices/virtual/input/input5 [ 32.305198][ T437] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 32.313922][ T437] rust_binder: Write failure EINVAL in pid:82 [ 32.404399][ T450] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.620093][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 32.652653][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 32.652679][ T36] audit: type=1400 audit(1753816318.610:161): avc: denied { mount } for pid=485 comm="syz.2.73" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 32.828428][ T36] audit: type=1326 audit(1753816318.790:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=511 comm="syz.2.84" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94d6f8e9a9 code=0x0 [ 32.858135][ T36] audit: type=1400 audit(1753816318.830:163): avc: denied { bind } for pid=515 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.952406][ T36] audit: type=1400 audit(1753816318.920:164): avc: denied { create } for pid=530 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.974237][ T531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 32.975982][ T36] audit: type=1400 audit(1753816318.940:165): avc: denied { write } for pid=530 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.004050][ T531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 33.026152][ T36] audit: type=1400 audit(1753816318.990:166): avc: denied { append } for pid=532 comm="syz.1.94" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.126577][ T36] audit: type=1400 audit(1753816319.090:167): avc: denied { name_bind } for pid=534 comm="syz.1.95" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.154927][ T36] audit: type=1400 audit(1753816319.090:168): avc: denied { node_bind } for pid=534 comm="syz.1.95" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 33.254795][ T36] audit: type=1326 audit(1753816319.220:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=542 comm="syz.3.99" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45ad98e9a9 code=0x0 [ 33.508721][ T36] audit: type=1400 audit(1753816319.470:170): avc: denied { create } for pid=557 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.845840][ T594] netlink: 104 bytes leftover after parsing attributes in process `syz.2.123'. [ 34.011509][ T613] netlink: 104 bytes leftover after parsing attributes in process `syz.1.132'. [ 34.390039][ T64] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.422469][ T652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.422525][ T652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:192 [ 34.540554][ T64] usb 4-1: Using ep0 maxpacket: 8 [ 34.556078][ T64] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.567517][ T292] tipc: Subscription rejected, illegal request [ 34.582128][ T64] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 34.589878][ T64] usb 4-1: can't read configurations, error -71 [ 34.711805][ T689] GUP no longer grows the stack in syz.1.167 (689): 200000004000-20000000a000 (200000001000) [ 34.724648][ T689] CPU: 0 UID: 0 PID: 689 Comm: syz.1.167 Not tainted 6.12.38-syzkaller-gd6ad6516b816 #0 c3d5dfea3b27501c55366ca85841e234aef3b30d [ 34.724688][ T689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 34.724710][ T689] Call Trace: [ 34.724718][ T689] [ 34.724728][ T689] __dump_stack+0x21/0x30 [ 34.724773][ T689] dump_stack_lvl+0x10c/0x190 [ 34.724801][ T689] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.724828][ T689] ? find_vma+0xcd/0x110 [ 34.724865][ T689] ? __switch_to+0xc7b/0x1310 [ 34.724897][ T689] dump_stack+0x19/0x20 [ 34.724923][ T689] __get_user_pages+0x1e34/0x22d0 [ 34.724948][ T689] ? _raw_spin_unlock+0x45/0x60 [ 34.724977][ T689] ? __switch_to_asm+0x3d/0x70 [ 34.725007][ T689] ? __asan_memcpy+0x5a/0x80 [ 34.725038][ T689] ? avc_has_perm_noaudit+0x286/0x360 [ 34.725066][ T689] ? populate_vma_page_range+0x230/0x230 [ 34.725090][ T689] __gup_longterm_locked+0xcb1/0x1580 [ 34.725118][ T689] ? rwsem_read_trylock+0x2b1/0x660 [ 34.725147][ T689] pin_user_pages_remote+0x171/0x220 [ 34.725172][ T689] ? __cfi_pin_user_pages_remote+0x10/0x10 [ 34.725218][ T689] ? up_read+0x26/0x1d0 [ 34.725242][ T689] ? mm_access+0x18d/0x210 [ 34.725265][ T689] process_vm_rw+0x5d4/0xbb0 [ 34.725302][ T689] ? futex_setup_timer+0xb4/0xd0 [ 34.725336][ T689] ? __ia32_sys_process_vm_writev+0x110/0x110 [ 34.725370][ T689] ? futex_wait+0x29a/0x7a0 [ 34.725402][ T689] ? __se_sys_futex+0x28f/0x300 [ 34.725439][ T689] ? __kasan_check_write+0x18/0x20 [ 34.725467][ T689] __x64_sys_process_vm_writev+0xeb/0x100 [ 34.725504][ T689] x64_sys_call+0x1ab/0x2ee0 [ 34.725534][ T689] do_syscall_64+0x58/0xf0 [ 34.725561][ T689] ? clear_bhb_loop+0x50/0xa0 [ 34.725596][ T689] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.725629][ T689] RIP: 0033:0x7f06afd8e9a9 [ 34.725656][ T689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.725675][ T689] RSP: 002b:00007f06b0c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 34.725704][ T689] RAX: ffffffffffffffda RBX: 00007f06affb5fa0 RCX: 00007f06afd8e9a9 [ 34.725721][ T689] RDX: 0000000000000001 RSI: 00002000000012c0 RDI: 00000000000000d9 [ 34.725736][ T689] RBP: 00007f06afe10d69 R08: 0000000000000001 R09: 0000000000000000 [ 34.725750][ T689] R10: 00002000000015c0 R11: 0000000000000246 R12: 0000000000000000 [ 34.725765][ T689] R13: 0000000000000000 R14: 00007f06affb5fa0 R15: 00007ffda5b79da8 [ 34.725784][ T689] [ 35.337415][ T749] netlink: 52 bytes leftover after parsing attributes in process `syz.1.188'. [ 35.356069][ T749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 35.372469][ T753] overlayfs: cannot append lower layer [ 35.690238][ T789] netlink: 100 bytes leftover after parsing attributes in process `syz.3.213'. [ 35.723187][ T791] overlay: ./file0 is not a directory [ 36.070338][ T64] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 36.189481][ T842] veth0_to_team: entered promiscuous mode [ 36.230056][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 36.242535][ T64] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 36.252691][ T64] usb 4-1: config 0 has no interface number 0 [ 36.260407][ T64] usb 4-1: New USB device found, idVendor=53f0, idProduct=fba4, bcdDevice=b4.25 [ 36.273973][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.282362][ T64] usb 4-1: Product: syz [ 36.288230][ T64] usb 4-1: Manufacturer: syz [ 36.293007][ T64] usb 4-1: SerialNumber: syz [ 36.298597][ T64] usb 4-1: config 0 descriptor?? [ 36.472143][ T861] netlink: 88 bytes leftover after parsing attributes in process `syz.0.247'. [ 36.481415][ T861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 36.510048][ T64] usb 4-1: USB disconnect, device number 5 [ 36.691844][ T881] netlink: 'syz.2.256': attribute type 16 has an invalid length. [ 36.699733][ T881] netlink: 'syz.2.256': attribute type 3 has an invalid length. [ 36.708614][ T881] netlink: 64058 bytes leftover after parsing attributes in process `syz.2.256'. [ 36.739750][ T885] process 'syz.2.258' launched './file1' with NULL argv: empty string added [ 37.017838][ T933] kvm: kvm [932]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008b) [ 37.133772][ T947] overlayfs: failed to clone lowerpath [ 37.398729][ T993] futex_wake_op: syz.2.311 tries to shift op by 144; fix this program [ 37.695884][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 37.695903][ T36] audit: type=1400 audit(1753816323.660:227): avc: denied { mount } for pid=1052 comm="syz.2.341" name="/" dev="ramfs" ino=7639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 37.725355][ T36] audit: type=1400 audit(1753816323.660:228): avc: denied { mounton } for pid=1052 comm="syz.2.341" path="/63/file0" dev="ramfs" ino=7639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 37.747734][ T36] audit: type=1400 audit(1753816323.660:229): avc: denied { mount } for pid=1052 comm="syz.2.341" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.769633][ T36] audit: type=1400 audit(1753816323.670:230): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.790013][ T36] audit: type=1400 audit(1753816323.720:231): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 37.991862][ T36] audit: type=1400 audit(1753816323.960:232): avc: denied { map } for pid=1083 comm="syz.2.355" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.015755][ T1084] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 1168, size: 18446744073709551585) [ 38.015792][ T1084] rust_binder: Error while translating object. [ 38.028211][ T1084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.034485][ T1084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 38.340024][ T1114] mmap: syz.3.369 (1114) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.391598][ T36] audit: type=1400 audit(1753816324.360:233): avc: denied { read } for pid=1120 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.442976][ T36] audit: type=1400 audit(1753816324.410:234): avc: denied { setopt } for pid=1129 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.572352][ T36] audit: type=1400 audit(1753816324.540:235): avc: denied { write } for pid=1146 comm="syz.2.384" name="igmp" dev="proc" ino=4026532491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 38.691412][ T1166] bridge0: port 3(veth1_macvtap) entered blocking state [ 38.699767][ T1166] bridge0: port 3(veth1_macvtap) entered disabled state [ 38.707093][ T1166] veth1_macvtap: entered allmulticast mode [ 38.714325][ T1166] veth1_macvtap: left allmulticast mode [ 38.730036][ T36] audit: type=1400 audit(1753816324.690:236): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 38.807696][ T1182] __nla_validate_parse: 2 callbacks suppressed [ 38.807725][ T1182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.401'. [ 38.881214][ T1194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.407'. [ 39.002714][ T1212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.415'. [ 39.570018][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 39.741214][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.750022][ T1278] bridge0: port 3(veth1_macvtap) entered blocking state [ 39.760179][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.762562][ T1278] bridge0: port 3(veth1_macvtap) entered disabled state [ 39.771142][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 39.779842][ T1278] veth1_macvtap: entered allmulticast mode [ 39.784394][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 39.791577][ T1278] veth1_macvtap: left allmulticast mode [ 39.799368][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.820413][ T9] usb 4-1: config 0 descriptor?? [ 39.911355][ T1288] rust_binder: Error while translating object. [ 39.911389][ T1288] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 39.917897][ T1288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:188 [ 40.180372][ T1302] fuse: Bad value for 'fd' [ 40.634375][ T9] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 40.648781][ T9] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 40.656644][ T9] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 40.672768][ T9] usb 4-1: USB disconnect, device number 6 [ 41.000045][ T339] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 41.151150][ T339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.161131][ T339] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 41.174264][ T1366] netlink: 'syz.3.486': attribute type 11 has an invalid length. [ 41.176313][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.182604][ T1366] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 41.198510][ T1366] netlink: 3593 bytes leftover after parsing attributes in process `syz.3.486'. [ 41.202252][ T339] usb 2-1: config 0 descriptor?? [ 41.619078][ T339] lenovo 0003:17EF:6047.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 41.662732][ T1384] capability: warning: `syz.0.494' uses deprecated v2 capabilities in a way that may be insecure [ 41.817215][ T339] lenovo 0003:17EF:6047.0003: Failed to switch F7/9/11 mode: -71 [ 41.825347][ T339] lenovo 0003:17EF:6047.0003: Failed to switch middle button: -71 [ 41.833462][ T339] lenovo 0003:17EF:6047.0003: Fn-lock setting failed: -71 [ 41.840840][ T339] lenovo 0003:17EF:6047.0003: Sensitivity setting failed: -71 [ 41.849898][ T339] usb 2-1: USB disconnect, device number 2 [ 42.700059][ T339] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 42.851229][ T339] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 42.859819][ T339] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 42.870706][ T339] usb 2-1: config 220 has no interface number 2 [ 42.877360][ T339] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 42.890927][ T339] usb 2-1: config 220 interface 0 has no altsetting 0 [ 42.897932][ T339] usb 2-1: config 220 interface 76 has no altsetting 0 [ 42.905087][ T339] usb 2-1: config 220 interface 1 has no altsetting 0 [ 42.913533][ T339] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 42.922780][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.933758][ T339] usb 2-1: Product: syz [ 42.940352][ T339] usb 2-1: Manufacturer: syz [ 42.945301][ T339] usb 2-1: SerialNumber: syz [ 43.117447][ T1461] batadv_slave_0: entered promiscuous mode [ 43.124624][ T1460] batadv_slave_0: left promiscuous mode [ 43.164593][ T339] usb 2-1: selecting invalid altsetting 0 [ 43.178119][ T339] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 43.195844][ T339] usb 2-1: No valid video chain found. [ 43.210575][ T339] usb 2-1: USB disconnect, device number 3 [ 43.326377][ T1485] batadv_slave_0: entered promiscuous mode [ 43.337027][ T1483] batadv_slave_0: left promiscuous mode [ 43.380205][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 43.380224][ T36] audit: type=1400 audit(1753816331.349:256): avc: denied { module_load } for pid=1492 comm="syz.0.545" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 43.390126][ T1495] Invalid ELF header len 16 [ 43.487051][ T1507] netlink: 'syz.0.553': attribute type 58 has an invalid length. [ 43.514276][ T1511] input: syz1 as /devices/virtual/input/input8 [ 43.515385][ T1513] netlink: 168 bytes leftover after parsing attributes in process `syz.0.556'. [ 43.546314][ T36] audit: type=1400 audit(1753816331.509:257): avc: denied { remount } for pid=1515 comm="syz.2.557" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 44.257279][ T36] audit: type=1326 audit(1753816332.229:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1496 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ad98e9a9 code=0x7fc00000 [ 44.456572][ T36] audit: type=1326 audit(1753816332.419:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1529 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d6f8e9a9 code=0x7fc00000 [ 44.512804][ T36] audit: type=1326 audit(1753816332.419:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1529 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94d6f8e9a9 code=0x7fc00000 [ 44.547613][ T36] audit: type=1326 audit(1753816332.419:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1529 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d6f8e9a9 code=0x7fc00000 [ 44.580668][ T36] audit: type=1326 audit(1753816332.419:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1529 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d6f8e9a9 code=0x7fc00000 [ 44.606357][ T36] audit: type=1326 audit(1753816332.419:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1529 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d6f8e9a9 code=0x7fc00000 [ 44.637029][ T36] audit: type=1326 audit(1753816332.419:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1529 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d6f8e9a9 code=0x7fc00000 [ 44.661621][ T36] audit: type=1326 audit(1753816332.419:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1529 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d6f8e9a9 code=0x7fc00000 [ 44.804161][ T1583] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 45.647066][ T1630] netlink: 168 bytes leftover after parsing attributes in process `syz.2.610'. [ 45.766761][ T1642] input: syz1 as /devices/virtual/input/input9 [ 45.882928][ T1654] netlink: 168 bytes leftover after parsing attributes in process `syz.3.620'. [ 46.310787][ T1708] input: syz1 as /devices/virtual/input/input10 [ 46.449071][ T640] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 46.621109][ T640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.640065][ T640] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.663177][ T640] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.700004][ T640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.719723][ T640] usb 2-1: config 0 descriptor?? [ 46.720230][ T1744] tipc: Started in network mode [ 46.748115][ T1744] tipc: Node identity ac14140f, cluster identity 4711 [ 46.760345][ T1744] tipc: New replicast peer: 255.255.255.255 [ 46.775972][ T1744] tipc: Enabled bearer , priority 10 [ 46.782365][ T1746] SELinux: Context system_u:object_r:ksm_device_t:s0 is not valid (left unmapped). [ 46.800237][ T1744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 46.851818][ T1748] batadv_slave_0: entered promiscuous mode [ 46.872936][ T1747] batadv_slave_0: left promiscuous mode [ 47.155234][ T640] plantronics 0003:047F:FFFF.0004: global environment stack underflow [ 47.181203][ T640] plantronics 0003:047F:FFFF.0004: item 0 4 1 11 parsing failed [ 47.204204][ T640] plantronics 0003:047F:FFFF.0004: parse failed [ 47.221996][ T640] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 47.365847][ T339] usb 2-1: USB disconnect, device number 4 [ 47.881649][ T1773] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 47.900112][ T339] tipc: Node number set to 2886997007 [ 47.960765][ T1780] incfs: Can't find or create .index dir in ./file0 [ 47.967557][ T1780] incfs: mount failed -30 [ 48.018556][ T1790] batadv_slave_1: entered promiscuous mode [ 48.039019][ T1790] batadv_slave_1: left promiscuous mode [ 48.096900][ T1798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 48.171052][ T1812] rust_binder: Write failure EFAULT in pid:242 [ 48.247031][ T1829] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 48.419912][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 48.419932][ T36] audit: type=1400 audit(1753816336.379:328): avc: denied { lock } for pid=1856 comm="syz.0.717" path="socket:[11371]" dev="sockfs" ino=11371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 48.545406][ T1883] input: syz1 as /devices/virtual/input/input11 [ 48.607817][ T1893] incfs: Can't find or create .index dir in ./file0 [ 48.618063][ T1893] incfs: mount failed -30 [ 48.718578][ T1916] netlink: 44 bytes leftover after parsing attributes in process `syz.3.746'. [ 48.728423][ T1916] netlink: 43 bytes leftover after parsing attributes in process `syz.3.746'. [ 48.738052][ T1916] netlink: 'syz.3.746': attribute type 6 has an invalid length. [ 48.746048][ T1916] netlink: 'syz.3.746': attribute type 5 has an invalid length. [ 48.760595][ T1916] netlink: 43 bytes leftover after parsing attributes in process `syz.3.746'. [ 48.875512][ T36] audit: type=1400 audit(1753816336.839:329): avc: denied { bind } for pid=1937 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.919840][ T36] audit: type=1400 audit(1753816336.839:330): avc: denied { bind } for pid=1936 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.942929][ T36] audit: type=1400 audit(1753816336.839:331): avc: denied { connect } for pid=1936 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.357685][ T36] audit: type=1400 audit(1753816337.319:332): avc: denied { create } for pid=1980 comm="syz.3.776" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 49.407856][ T36] audit: type=1400 audit(1753816337.319:333): avc: denied { write } for pid=1980 comm="syz.3.776" name="file0" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 49.434040][ T36] audit: type=1400 audit(1753816337.319:334): avc: denied { open } for pid=1980 comm="syz.3.776" path="/139/file0" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 49.480052][ T36] audit: type=1400 audit(1753816337.379:335): avc: denied { unlink } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 49.548224][ T36] audit: type=1400 audit(1753816337.509:336): avc: denied { setopt } for pid=1989 comm="syz.2.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.771468][ T2013] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2013 comm=syz.2.791 [ 49.813531][ T36] audit: type=1400 audit(1753816337.779:337): avc: denied { bind } for pid=2020 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.210007][ T640] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 50.381072][ T640] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.400002][ T640] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 50.411174][ T640] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 50.421370][ T640] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.434840][ T640] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.444120][ T640] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.452954][ T640] usb 3-1: config 0 descriptor?? [ 50.861957][ T640] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 50.870662][ T640] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 50.879998][ T640] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 51.120929][ T45] usb 3-1: USB disconnect, device number 2 [ 51.366325][ T2089] overlayfs: failed to clone lowerpath [ 52.192713][ T2181] netlink: 104 bytes leftover after parsing attributes in process `syz.1.867'. [ 52.550028][ T640] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 52.701142][ T640] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 52.712403][ T640] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.725640][ T640] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 52.734767][ T640] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.743945][ T640] usb 3-1: config 0 descriptor?? [ 52.749293][ T2192] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.027372][ T2203] netlink: 104 bytes leftover after parsing attributes in process `syz.3.876'. [ 53.111603][ T2215] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 53.145097][ T2219] capability: warning: `syz.0.885' uses 32-bit capabilities (legacy support in use) [ 53.166834][ T640] belkin 0003:1020:0006.0006: item fetching failed at offset 2/5 [ 53.175721][ T640] belkin 0003:1020:0006.0006: parse failed [ 53.184141][ T640] belkin 0003:1020:0006.0006: probe with driver belkin failed with error -22 [ 53.380713][ T45] usb 3-1: USB disconnect, device number 3 [ 53.527217][ T2255] incfs: Can't find or create .index dir in ./file0 [ 53.534157][ T2255] incfs: mount failed -1 [ 53.542246][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 53.542267][ T36] audit: type=1400 audit(1753816341.509:344): avc: denied { watch watch_reads } for pid=2252 comm="syz.1.901" path="/224/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 53.582771][ T36] audit: type=1400 audit(1753816341.549:345): avc: denied { read write } for pid=2259 comm="syz.3.903" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.608083][ T36] audit: type=1400 audit(1753816341.549:346): avc: denied { open } for pid=2259 comm="syz.3.903" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.669560][ T36] audit: type=1400 audit(1753816341.579:347): avc: denied { ioctl } for pid=2259 comm="syz.3.903" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.769657][ T36] audit: type=1400 audit(1753816341.729:348): avc: denied { create } for pid=2278 comm="syz.3.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 53.841187][ T36] audit: type=1400 audit(1753816341.809:349): avc: denied { bind } for pid=2285 comm="syz.3.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.917200][ T36] audit: type=1400 audit(1753816341.879:350): avc: denied { ioctl } for pid=2291 comm="syz.3.920" path="socket:[12215]" dev="sockfs" ino=12215 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.509426][ T36] audit: type=1326 audit(1753816342.469:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2334 comm="syz.1.937" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06afd8e9a9 code=0x0 [ 54.747257][ T2343] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 54.874815][ T36] audit: type=1326 audit(1753816342.839:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2311 comm="syz.2.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d6f8e9a9 code=0x7fc00000 [ 54.900607][ T2352] veth1_macvtap: left promiscuous mode [ 54.906548][ T2352] macsec0: entered promiscuous mode [ 54.912202][ T2352] macsec0: entered allmulticast mode [ 54.930231][ T2352] veth1_macvtap: entered promiscuous mode [ 54.940026][ T2352] veth1_macvtap: entered allmulticast mode [ 54.950453][ T2352] macsec0: left promiscuous mode [ 54.955650][ T2352] macsec0: left allmulticast mode [ 54.966656][ T2352] veth1_macvtap: left allmulticast mode [ 55.156792][ T2374] lo: entered promiscuous mode [ 55.162301][ T2374] lo: left promiscuous mode [ 55.186532][ T2377] batadv_slave_1: entered promiscuous mode [ 55.193605][ T2376] batadv_slave_1: left promiscuous mode [ 55.720037][ T64] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 55.871271][ T64] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 55.883033][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 55.894338][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 55.904191][ T64] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.917195][ T64] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.926465][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.935425][ T64] usb 2-1: config 0 descriptor?? [ 56.163507][ T36] audit: type=1326 audit(1753816344.129:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.2.997" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94d6f8e9a9 code=0x0 [ 56.343975][ T64] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 56.354391][ T64] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 56.363594][ T64] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 57.108716][ T2489] batadv_slave_1: entered promiscuous mode [ 57.115666][ T2488] batadv_slave_1: left promiscuous mode [ 57.136279][ T2491] netlink: 'syz.2.1008': attribute type 12 has an invalid length. [ 57.307277][ T2512] overlayfs: failed to clone upperpath [ 58.111392][ T2576] TCP: TCP_TX_DELAY enabled [ 58.480077][ T10] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 58.630565][ T10] usb 2-1: device firmware changed [ 58.642242][ T45] usb 2-1: USB disconnect, device number 5 [ 58.780225][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 58.846000][ T2616] new mount options do not match the existing superblock, will be ignored [ 58.931346][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.942445][ T45] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 58.951708][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.961188][ T45] usb 2-1: config 0 descriptor?? [ 59.120050][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 59.295849][ T10] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.307223][ T10] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.317674][ T10] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 59.330904][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 59.337932][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 59.347530][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.360303][ T10] usb 4-1: config 0 descriptor?? [ 59.374264][ T45] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 59.384563][ T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0008/input/input13 [ 59.462412][ T45] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 59.694153][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 59.694176][ T36] audit: type=1400 audit(1753816603.664:359): avc: denied { read } for pid=2680 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 59.778402][ T10] uclogic 0003:28BD:0042.0009: interface is invalid, ignoring [ 59.929546][ T10] usb 2-1: USB disconnect, device number 6 [ 59.968270][ T2714] overlayfs: failed to clone upperpath [ 59.976429][ T2714] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 59.989723][ T36] audit: type=1400 audit(1753816603.954:360): avc: denied { sys_ptrace } for pid=2680 comm="poweroff" capability=19 scontext=system_u:system_r:acpid_t tcontext=system_u:system_r:acpid_t tclass=cap_userns permissive=1 [ 60.011451][ T2714] overlayfs: missing 'lowerdir' [ 60.085267][ T64] usb 4-1: USB disconnect, device number 7 [ 60.096634][ T36] audit: type=1400 audit(1753816604.064:361): avc: denied { mount } for pid=2726 comm="syz.0.1117" name="/" dev="configfs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.124579][ T36] audit: type=1400 audit(1753816604.064:362): avc: denied { search } for pid=2726 comm="syz.0.1117" name="/" dev="configfs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.151486][ T36] audit: type=1400 audit(1753816604.064:363): avc: denied { setattr } for pid=2726 comm="syz.0.1117" name="/" dev="configfs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 200) OK Stopping crond: stopped /usr/sbin/crond (pid 193) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) [ 60.258620][ T36] audit: type=1400 audit(1753816604.224:364): avc: denied { search } for pid=2739 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 60.301514][ T1364] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 60.331367][ T36] audit: type=1400 audit(1753816604.294:365): avc: denied { ioctl } for pid=2720 comm="syz.2.1114" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.360235][ T36] audit: type=1400 audit(1753816604.294:366): avc: denied { read write } for pid=2746 comm="ip" path="/dev/console" dev="rootfs" ino=21 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 60.430672][ T36] audit: type=1400 audit(1753816604.394:367): avc: denied { write } for pid=148 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.452589][ T36] audit: type=1400 audit(1753816604.394:368): avc: denied { remove_name } for pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping iptables: OK [ 60.492596][ T1364] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 60.514499][ T1364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 Stopping system message bus: [ 60.531684][ T1364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 60.543370][ T1364] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.563050][ T1364] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.573296][ T1364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.582732][ T1364] usb 3-1: config 0 descriptor?? [ 60.588130][ T2721] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 60.632029][ T2767] netlink: 'syz.1.1124': attribute type 4 has an invalid length. [ 60.643871][ T2767] netlink: 'syz.1.1124': attribute type 17 has an invalid length. done [ 60.713425][ T2779] batadv_slave_1: entered promiscuous mode [ 60.723666][ T2778] batadv_slave_1: left promiscuous mode killall: can't kill pid 333: No such process [ 60.872110][ T2803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. Stopping klogd: [ 60.940036][ T64] usb 4-1: new high-speed USB device number 8 using dummy_hcd OK [ 61.002876][ T1364] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 Stopping acpid: [ 61.010893][ T1364] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 61.019609][ T1364] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 61.027238][ T1364] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 61.034992][ T1364] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 61.054354][ T1364] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 61.063263][ T1364] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 61.112134][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.123414][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.133319][ T64] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 61.146366][ T64] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.155485][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.165025][ T64] usb 4-1: config 0 descriptor?? [ 61.374204][ T64] usbhid 4-1:0.0: can't add hid device: -71 [ 61.380999][ T64] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 61.389988][ T64] usb 4-1: USB disconnect, device number 8 [ 61.990651][ T2842] devpts: called with bogus options [ 62.053905][ T2847] ------------[ cut here ]------------ [ 62.059502][ T2847] WARNING: CPU: 0 PID: 2847 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 62.069455][ T2847] Modules linked in: [ 62.073704][ T2847] CPU: 0 UID: 0 PID: 2847 Comm: syz.1.1157 Not tainted 6.12.38-syzkaller-gd6ad6516b816 #0 c3d5dfea3b27501c55366ca85841e234aef3b30d [ 62.087299][ T2847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.097657][ T2847] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 62.103818][ T2847] Code: 00 48 8b 5d a0 74 08 48 89 df e8 e2 24 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 62.123729][ T2847] RSP: 0018:ffffc9000d23fc88 EFLAGS: 00010202 [ 62.130234][ T2847] RAX: 1ffffd1ffff85c22 RBX: ffffc9000d1d68e8 RCX: ffffffff816dadc9 OK[ 62.138523][ T2847] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc2e110 [ 62.146729][ T2847] RBP: ffffc9000d23fcf0 R08: ffffe8ffffc2e117 R09: 1ffffd1ffff85c22 [ 62.154980][ T2847] R10: dffffc0000000000 R11: fffff91ffff85c23 R12: dffffc0000000000 [ 62.163234][ T2847] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc2e110 [ 62.171587][ T2847] FS: 000055559210f500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 Stopping syslogd[ 62.180633][ T2847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 : [ 62.188957][ T2847] CR2: 00002000000000c0 CR3: 000000010a74c000 CR4: 00000000003526b0 stopped /sbin/sy[ 62.197453][ T2847] Call Trace: slogd (pid 91) [ 62.202181][ T2847] OK [ 62.206423][ T2847] kvm_put_kvm+0x1100/0x12b0 [ 62.211306][ T2847] ? __cfi_kvm_vm_release+0x10/0x10 [ 62.216618][ T2847] kvm_vm_release+0x47/0x70 [ 62.221402][ T2847] __fput+0x1fe/0xa00 [ 62.225465][ T2847] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 62.231106][ T2847] ____fput+0x20/0x30 [ 62.235160][ T2847] task_work_run+0x1e0/0x250 [ 62.239815][ T2847] ? __cfi_task_work_run+0x10/0x10 [ 62.245014][ T2847] ? __kasan_check_read+0x15/0x20 [ 62.250148][ T2847] resume_user_mode_work+0x36/0x50 [ 62.255318][ T2847] syscall_exit_to_user_mode+0x64/0xb0 [ 62.261054][ T2847] do_syscall_64+0x64/0xf0 [ 62.265732][ T2847] ? clear_bhb_loop+0x50/0xa0 [ 62.270510][ T2847] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.276482][ T2847] RIP: 0033:0x7f06afd8e9a9 [ 62.280954][ T2847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.300975][ T2847] RSP: 002b:00007ffda5b79f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 62.309890][ T2847] RAX: 0000000000000000 RBX: 000000000000f23d RCX: 00007f06afd8e9a9 [ 62.318092][ T2847] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 62.326243][ T2847] RBP: 00007f06affb7ba0 R08: 0000000000000001 R09: 00000005a5b7a1ff [ 62.334735][ T2847] R10: 00007f06afc00000 R11: 0000000000000246 R12: 00007f06affb5fac [ 62.342882][ T2847] R13: 00007f06affb5fa0 R14: ffffffffffffffff R15: 00007ffda5b7a020 [ 62.351005][ T2847] [ 62.354083][ T2847] ---[ end trace 0000000000000000 ]--- umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.1.85 closed by remote host. Sent SIGTERM to all processes [ 62.687305][ T46] bridge_slave_1: left allmulticast mode [ 62.700644][ T46] bridge_slave_1: left promiscuous mode [ 62.706336][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.770707][ T46] bridge_slave_0: left allmulticast mode [ 62.776413][ T46] bridge_slave_0: left promiscuous mode [ 62.790075][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.013356][ T46] veth1_macvtap: left promiscuous mode [ 63.018903][ T46] veth0_vlan: left promiscuous mode [ 63.161415][ T45] usb 3-1: USB disconnect, device number 4 [ 63.311487][ T46] bridge_slave_1: left allmulticast mode [ 63.317182][ T46] bridge_slave_1: left promiscuous mode [ 63.322970][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.334917][ T46] bridge_slave_0: left allmulticast mode [ 63.340603][ T46] bridge_slave_0: left promiscuous mode [ 63.346468][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.354315][ T46] bridge_slave_1: left allmulticast mode [ 63.360036][ T46] bridge_slave_1: left promiscuous mode [ 63.365814][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.373415][ T46] bridge_slave_0: left allmulticast mode [ 63.379411][ T46] bridge_slave_0: left promiscuous mode [ 63.385069][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.573292][ T46] tipc: Disabling bearer [ 63.578677][ T46] tipc: Left network mode [ 63.584895][ T46] veth1_macvtap: left promiscuous mode [ 63.590520][ T46] veth0_vlan: left promiscuous mode [ 63.596366][ T46] veth1_macvtap: left promiscuous mode [ 63.601957][ T46] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 65.011300][ T2867] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 65.018477][ T2867] ACPI: PM: Preparing to enter system sleep state S5 [ 65.025522][ T2867] kvm: exiting hardware virtualization [ 65.031086][ T2867] reboot: Power down serialport: VM disconnected.