last executing test programs: 2.591937621s ago: executing program 0 (id=3833): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) 2.561865583s ago: executing program 0 (id=3834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @pic={0xd8, 0x3, 0x2, 0x8, 0x7f, 0x1, 0x8, 0x7f, 0x2, 0x8, 0x5, 0x2, 0x2, 0x7f, 0x9, 0xe2}}) 2.48160758s ago: executing program 0 (id=3835): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x20, r1, 0x21, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8040) 2.428154604s ago: executing program 0 (id=3836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb96f37538e486dd637288a8"], 0xe) 2.351441821s ago: executing program 0 (id=3838): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)='b', 0x1}], 0x1}}], 0x1, 0x600c857) 2.300150375s ago: executing program 0 (id=3839): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x200, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x80d804}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x153) 2.172137235s ago: executing program 3 (id=3843): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xeffffdff, 0x0, [{0x0, 0x0, 0xf8}, {0x0, 0x5}, {0x0, 0x0, 0x51}, {0x80, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x80}, {0x0, 0x1}, {}, {0x0, 0x6, 0x0, '\x00', 0x4}, {0xf8, 0x0, 0xfe}, {0x0, 0x0, 0x0, '\x00', 0x9}, {}, {0x0, 0x8f}, {}, {}, {0x0, 0x3}, {0x0, 0x8, 0x3}, {0x4}, {0x3}, {0x0, 0xfe}, {0x0, 0x0, 0x4, '\x00', 0x6c}, {0x0, 0x0, 0x0, '\x00', 0x1}]}}) 2.161410975s ago: executing program 3 (id=3844): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x20, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2.150252957s ago: executing program 3 (id=3845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.137623517s ago: executing program 3 (id=3846): inotify_init() setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x20}, [], {}, [], {0x10, 0xa}}, 0x24, 0x2) 2.088240392s ago: executing program 3 (id=3847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000340)={0xa0003, 0x0, [0xa, 0x2, 0x3, 0x80000000, 0x5, 0x7f, 0xd04, 0x4]}) 2.061632744s ago: executing program 3 (id=3848): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000400)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0}) 1.724750191s ago: executing program 1 (id=3864): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000180)=0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x1, 0x9, 0x2, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x5], 0x4, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.665730216s ago: executing program 1 (id=3865): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100021d9167204f17316a3f26010203010902120001000000000904"], 0x0) 518.089029ms ago: executing program 2 (id=3880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mount$9p_fd(0x0, 0x0, 0x0, 0x2004000, &(0x7f0000000300)=ANY=[@ANYBLOB="74726664ff1d25ffef1dbd31562055725fb185c5c10159b0a20facfe3ae846335dc8a4580b861db75795b8d27294f56b6f58c0afd29382de99e6533f1e98032a521e86e3f9c6da34cc73a288e6bd7e32cb92247e83d1cede0a95e428afb5d47bb0520179c99f1dad936482ebbc7c649d11609ff5b072fb16"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000040)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f848b880180000000000000f23c00f21f83500000d000f23f80f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x7b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0xf000, 0x7, 0xfffffff9, 0x9, 0x0, [{0x7, 0x8, 0x4, '\x00', 0x2}, {0xae, 0x3, 0x8, '\x00', 0x9}, {0x3, 0x4, 0x3, '\x00', 0x9}, {0xaa, 0x1, 0x6}, {0x3, 0x4, 0x9, '\x00', 0xd}, {0xc, 0x2, 0x3, '\x00', 0xc9}, {0x1, 0x80, 0xa, '\x00', 0xf}, {0xce, 0x8, 0x19, '\x00', 0x7}, {0xae, 0x40, 0xe6, '\x00', 0x1}, {0x80, 0xff, 0x2, '\x00', 0x6}, {0xfa, 0xff, 0x1, '\x00', 0x9}, {0x7, 0x1, 0x80, '\x00', 0x9}, {0x0, 0x3, 0x5, '\x00', 0x2b}, {0x28, 0x7, 0x6, '\x00', 0x5}, {0x94, 0xa, 0xe, '\x00', 0xd0}, {0x2, 0x7, 0x3, '\x00', 0x40}, {0x3a, 0x3, 0x4, '\x00', 0x3}, {0x65, 0xf, 0xfe, '\x00', 0x2}, {0x9, 0xe, 0x1, '\x00', 0x1}, {0x5, 0x4, 0x5, '\x00', 0x8c}, {0x6, 0xe, 0x2}, {0x1, 0x0, 0x93, '\x00', 0x6}, {0x0, 0x0, 0x7, '\x00', 0x3}, {0xe5, 0x2, 0x81, '\x00', 0xf}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 502.55657ms ago: executing program 1 (id=3881): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 300.193546ms ago: executing program 1 (id=3882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14}}, 0x98}}, 0x0) 300.089406ms ago: executing program 1 (id=3883): unshare(0x22020400) r0 = socket(0xa, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x6, 0x0, 0x0) 300.024696ms ago: executing program 1 (id=3884): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 151.075198ms ago: executing program 2 (id=3885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 81.117623ms ago: executing program 2 (id=3886): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x42046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {0x0}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) 28.203368ms ago: executing program 2 (id=3887): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x19e172f08959ac6e, 0x10001, 0x47}, 0x2c) 21.645198ms ago: executing program 2 (id=3888): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) 0s ago: executing program 2 (id=3889): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x41) kernel console output (not intermixed with test programs): iguration, please check. [ 143.637262][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 143.643978][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.655148][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.665129][ T330] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 143.674513][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.683910][ T330] usb 3-1: config 0 descriptor?? [ 143.784196][ T3933] 9pnet_fd: Insufficient options for proto=fd [ 143.821820][ T3938] fuse: Bad value for 'rootmode' [ 143.842691][ T3943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'. [ 143.947575][ T3965] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1382'. [ 143.957643][ T3965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.164476][ T3978] fuseblk: Bad value for 'fd' [ 144.169874][ T3978] 9pnet_fd: Insufficient options for proto=fd [ 144.211469][ T3984] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1395'. [ 144.250659][ T36] audit: type=1400 audit(1755755643.061:373): avc: denied { map } for pid=3987 comm="syz.0.1397" path="socket:[34538]" dev="sockfs" ino=34538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.274612][ T36] audit: type=1400 audit(1755755643.061:374): avc: denied { listen } for pid=3987 comm="syz.0.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.293729][ T330] usbhid 3-1:0.0: can't add hid device: -71 [ 144.294649][ T36] audit: type=1400 audit(1755755643.061:375): avc: denied { accept } for pid=3987 comm="syz.0.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.304786][ T330] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 144.330841][ T330] usb 3-1: USB disconnect, device number 38 [ 144.391653][ T3992] rust_binder: validate_parent_fixup: fixup_min_offset=94, parent_offset=36 [ 144.391676][ T3992] rust_binder: Error while translating object. [ 144.400633][ T3992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.406948][ T3992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:613 [ 144.530652][ T4005] rust_binder: Error while translating object. [ 144.557292][ T4005] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.563623][ T4005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:622 [ 144.600367][ T4008] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1405'. [ 144.620237][ T4008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.666258][ T4003] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1402'. [ 144.680995][ T4003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.827917][ T10] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 144.835907][ T10] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 144.843884][ T10] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 144.855301][ T4029] ./file0: Can't lookup blockdev [ 144.857269][ T36] audit: type=1400 audit(1755755643.661:376): avc: denied { create } for pid=4028 comm="syz.2.1414" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 144.861385][ T4029] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 144.890318][ T10] hid-generic 0003:0004:0000.001C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 144.907391][ T36] audit: type=1400 audit(1755755643.661:377): avc: denied { mounton } for pid=4028 comm="syz.2.1414" path="/file0" dev="ramfs" ino=35359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 144.940820][ T4033] rust_binder: Fixups oob 156 120 160 164 [ 144.940851][ T4033] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 144.946840][ T4033] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.961018][ T4033] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:634 [ 144.971825][ T4032] fido_id[4032]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.257288][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 145.418291][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 145.430424][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 145.451798][ T10] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 145.461399][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.472797][ T10] usb 3-1: Product: syz [ 145.481309][ T10] usb 3-1: Manufacturer: syz [ 145.489302][ T10] usb 3-1: SerialNumber: syz [ 145.502987][ T10] usb 3-1: config 0 descriptor?? [ 145.513586][ T4041] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.524171][ T4041] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.686293][ T4049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:638 [ 145.747251][ T4041] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.774104][ T4041] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.826960][ T4055] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1423'. [ 145.836928][ T4055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.130388][ T4065] overlay: filesystem on ./bus not supported as upperdir [ 146.225053][ T36] audit: type=1400 audit(1755755645.031:378): avc: denied { watch } for pid=4073 comm="syz.3.1431" path="/482/control" dev="tmpfs" ino=2593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 146.360481][ T4077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1433'. [ 146.591573][ T4041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.601806][ T4041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.964432][ T4089] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1437'. [ 146.974030][ T4089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.164548][ T4101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1442'. [ 147.190707][ T36] audit: type=1400 audit(1755755646.001:379): avc: denied { sqpoll } for pid=4100 comm="syz.3.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 147.237167][ T4108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.378596][ T4114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.652608][ T4133] rust_binder: Error while translating object. [ 147.652653][ T4133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 147.659160][ T4133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:671 [ 148.104108][ T4153] 9pnet_fd: Insufficient options for proto=fd [ 148.167691][ T4158] x_tables: duplicate underflow at hook 2 [ 148.178056][ T36] audit: type=1400 audit(1755755646.985:380): avc: denied { read } for pid=4157 comm="syz.1.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.228741][ T4159] netlink: 'syz.1.1463': attribute type 16 has an invalid length. [ 148.351349][ T4170] 9pnet_fd: Insufficient options for proto=fd [ 148.386282][ T4175] netlink: 'syz.3.1469': attribute type 64 has an invalid length. [ 148.578268][ T4193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.592683][ T4193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.601658][ T4193] fuse: Bad value for 'max_read' [ 149.008855][ T4202] __nla_validate_parse: 7 callbacks suppressed [ 149.008879][ T4202] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1480'. [ 149.148679][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 149.155884][ T4213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1484'. [ 149.165158][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 149.252281][ T36] audit: type=1400 audit(1755755648.055:381): avc: denied { getopt } for pid=4223 comm="syz.3.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.624578][ T4258] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.624607][ T4258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:682 [ 150.003800][ T4284] overlayfs: failed to clone upperpath [ 150.006461][ T4286] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 150.019478][ T4286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:701 [ 150.096763][ T4297] overlayfs: failed to clone upperpath [ 150.404988][ T36] audit: type=1400 audit(1755755649.205:382): avc: denied { write } for pid=4326 comm="syz.1.1525" path="socket:[36177]" dev="sockfs" ino=36177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.132335][ T36] audit: type=1326 audit(1755755649.935:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab29d8ebe9 code=0x7fc00000 [ 151.172519][ T4338] tipc: Enabling of bearer rejected, failed to enable media [ 151.217328][ T625] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.312477][ T4356] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1538'. [ 151.384413][ T36] audit: type=1326 audit(1755755650.185:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.1541" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab29d8ebe9 code=0x0 [ 151.440196][ T4366] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1541'. [ 151.464874][ T36] audit: type=1326 audit(1755755650.265:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.1541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab29d8ebe9 code=0x0 [ 151.575597][ T36] audit: type=1326 audit(1755755650.375:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4375 comm="syz.1.1545" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ae958ebe9 code=0x0 [ 151.628093][ T4377] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1545'. [ 151.637407][ T4377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.698537][ T10] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -32 [ 151.709853][ T10] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 151.850461][ T148] dm9601 3-1:0.0 eth1: MDIO read error: -32 [ 151.857124][ T148] dm9601 3-1:0.0 eth1: MDIO read error: -32 [ 151.863287][ T148] dm9601 3-1:0.0 eth1: link down [ 151.869218][ T148] dm9601 3-1:0.0 eth1: MDIO read error: -32 [ 151.876066][ T148] dm9601 3-1:0.0 eth1: MDIO read error: -32 [ 151.882829][ T148] dm9601 3-1:0.0 eth1: MDIO read error: -32 [ 152.281989][ T4394] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1546'. [ 152.432969][ T4399] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1548'. [ 153.085930][ T4417] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1555'. [ 153.105696][ T4419] netlink: 29 bytes leftover after parsing attributes in process `syz.3.1556'. [ 153.125126][ T4423] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1558'. [ 153.158506][ T36] audit: type=1400 audit(1755755651.965:387): avc: denied { ioctl } for pid=4420 comm="syz.0.1557" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 153.159014][ T4421] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 153.184307][ T4421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:707 [ 154.145476][ T4471] __nla_validate_parse: 2 callbacks suppressed [ 154.145506][ T4471] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1575'. [ 154.351210][ T4483] sit0: entered promiscuous mode [ 154.357493][ T4483] netlink: 'syz.0.1581': attribute type 1 has an invalid length. [ 154.365305][ T4483] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1581'. [ 154.463850][ T4485] binder: Unknown parameter 'defcontext€' [ 154.481463][ T4487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.481491][ T4487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:700 [ 154.507297][ T4489] rust_binder: Write failure EFAULT in pid:702 [ 154.743607][ T4498] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1588'. [ 154.759219][ T4498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.837268][ T36] audit: type=1400 audit(1755755653.635:388): avc: denied { create } for pid=4510 comm="syz.1.1593" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.858342][ T36] audit: type=1400 audit(1755755653.645:389): avc: denied { write } for pid=4510 comm="syz.1.1593" name="file2" dev="tmpfs" ino=2771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.880839][ T36] audit: type=1400 audit(1755755653.645:390): avc: denied { open } for pid=4510 comm="syz.1.1593" path="/513/file2" dev="tmpfs" ino=2771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.903938][ T36] audit: type=1400 audit(1755755653.645:391): avc: denied { ioctl } for pid=4510 comm="syz.1.1593" path="/513/file2" dev="tmpfs" ino=2771 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 156.582753][ T4563] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1615'. [ 157.410333][ T4592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.425772][ T4592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.646851][ T4602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1631'. [ 157.999126][ T4606] binder: Unknown parameter 'defcontext€' [ 158.092236][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 158.092350][ T36] audit: type=1400 audit(1755755656.895:393): avc: denied { getattr } for pid=4607 comm="syz.2.1634" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.092675][ T4608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.133979][ T4608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.583653][ T36] audit: type=1400 audit(1755755657.385:394): avc: denied { mount } for pid=4623 comm="syz.1.1641" name="/" dev="configfs" ino=2491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 158.606798][ T36] audit: type=1400 audit(1755755657.385:395): avc: denied { search } for pid=4623 comm="syz.1.1641" name="/" dev="configfs" ino=2491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.680691][ T4640] netlink: 'syz.2.1647': attribute type 6 has an invalid length. [ 158.978028][ T36] audit: type=1400 audit(1755755657.785:396): avc: denied { load_policy } for pid=4652 comm="syz.2.1651" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 158.978434][ T4653] SELinux: failed to load policy [ 159.212448][ T36] audit: type=1400 audit(1755755658.015:397): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=725 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 159.236797][ T36] audit: type=1400 audit(1755755658.015:398): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=725 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 159.261422][ T36] audit: type=1400 audit(1755755658.015:399): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=725 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 159.454871][ T4674] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1660'. [ 159.464237][ T4674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.238134][ T4699] cgroup: Bad value for 'name' [ 160.495229][ T4727] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1680'. [ 160.504759][ T4727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.767703][ T36] audit: type=1400 audit(1755755659.575:400): avc: denied { mount } for pid=4748 comm="syz.1.1689" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 160.810142][ T36] audit: type=1400 audit(1755755659.615:401): avc: denied { map } for pid=4750 comm="syz.1.1690" path="pipe:[39186]" dev="pipefs" ino=39186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 161.018964][ T36] audit: type=1400 audit(1755755659.825:402): avc: denied { map } for pid=4759 comm="syz.1.1694" path="socket:[39205]" dev="sockfs" ino=39205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 161.332774][ T4770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.341717][ T4770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.877300][ T4812] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 162.188315][ T4836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.206058][ T4836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.739919][ T4872] binder: Unknown parameter 'defcontext€' [ 162.958265][ T4891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.966870][ T4891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.041796][ T4900] overlayfs: failed to clone lowerpath [ 163.670212][ T4925] SELinux: security_context_str_to_sid () failed with errno=-22 [ 164.705181][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 164.705202][ T36] audit: type=1400 audit(1755755663.505:408): avc: denied { shutdown } for pid=4967 comm="syz.2.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 164.733917][ T4968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.743386][ T4968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.280146][ T4976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.289333][ T4976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.298939][ T4976] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 165.438371][ T4985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1782'. [ 165.572155][ T4989] FAULT_INJECTION: forcing a failure. [ 165.572155][ T4989] name failslab, interval 1, probability 0, space 0, times 0 [ 165.585299][ T4989] CPU: 0 UID: 0 PID: 4989 Comm: syz.0.1784 Not tainted syzkaller #0 7151184b8e4c89fd39b0396cbf382e33ab0b9c1a [ 165.585337][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.585353][ T4989] Call Trace: [ 165.585361][ T4989] [ 165.585370][ T4989] __dump_stack+0x21/0x30 [ 165.585407][ T4989] dump_stack_lvl+0x10c/0x190 [ 165.585438][ T4989] ? __cfi_dump_stack_lvl+0x10/0x10 [ 165.585469][ T4989] ? avc_has_perm+0x144/0x220 [ 165.585501][ T4989] ? __cfi_avc_has_perm+0x10/0x10 [ 165.585532][ T4989] dump_stack+0x19/0x20 [ 165.585561][ T4989] should_fail_ex+0x3d9/0x530 [ 165.585595][ T4989] should_failslab+0xac/0x100 [ 165.585620][ T4989] __kmalloc_cache_noprof+0x41/0x3c0 [ 165.585653][ T4989] ? vhost_task_create+0x101/0x350 [ 165.585676][ T4989] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 165.585703][ T4989] vhost_task_create+0x101/0x350 [ 165.585733][ T4989] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 165.585759][ T4989] ? __cfi_vhost_task_create+0x10/0x10 [ 165.585783][ T4989] ? __cfi_vhost_task_fn+0x10/0x10 [ 165.585805][ T4989] ? __kasan_check_write+0x18/0x20 [ 165.585837][ T4989] ? mutex_lock+0x92/0x1c0 [ 165.585869][ T4989] ? __cfi_mutex_lock+0x10/0x10 [ 165.585900][ T4989] ? kernel_text_address+0xa9/0xe0 [ 165.585927][ T4989] kvm_mmu_post_init_vm+0x1a6/0x310 [ 165.585956][ T4989] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 165.585985][ T4989] ? _parse_integer_limit+0x195/0x1e0 [ 165.586015][ T4989] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 165.586043][ T4989] ? kstrtoull+0x13b/0x1e0 [ 165.586072][ T4989] ? kstrtouint+0x78/0xf0 [ 165.586101][ T4989] ? ioctl_has_perm+0x1aa/0x4d0 [ 165.586126][ T4989] ? __asan_memcpy+0x5a/0x80 [ 165.586158][ T4989] ? ioctl_has_perm+0x3e0/0x4d0 [ 165.586182][ T4989] ? has_cap_mac_admin+0xd0/0xd0 [ 165.586208][ T4989] ? __kasan_check_write+0x18/0x20 [ 165.586240][ T4989] ? mutex_lock_killable+0x92/0x1c0 [ 165.586274][ T4989] ? __cfi_mutex_lock_killable+0x10/0x10 [ 165.586308][ T4989] ? proc_fail_nth_write+0x17e/0x210 [ 165.586340][ T4989] kvm_vcpu_ioctl+0x96f/0xee0 [ 165.586375][ T4989] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 165.586410][ T4989] ? __cfi_vfs_write+0x10/0x10 [ 165.586431][ T4989] ? __kasan_check_write+0x18/0x20 [ 165.586462][ T4989] ? mutex_unlock+0x8b/0x240 [ 165.586492][ T4989] ? __cfi_mutex_unlock+0x10/0x10 [ 165.586522][ T4989] ? __fget_files+0x2c5/0x340 [ 165.586547][ T4989] ? __fget_files+0x2c5/0x340 [ 165.586570][ T4989] ? bpf_lsm_file_ioctl+0xd/0x20 [ 165.586601][ T4989] ? security_file_ioctl+0x34/0xd0 [ 165.586626][ T4989] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 165.586659][ T4989] __se_sys_ioctl+0x135/0x1b0 [ 165.586684][ T4989] __x64_sys_ioctl+0x7f/0xa0 [ 165.586715][ T4989] x64_sys_call+0x1878/0x2ee0 [ 165.586748][ T4989] do_syscall_64+0x58/0xf0 [ 165.586774][ T4989] ? clear_bhb_loop+0x50/0xa0 [ 165.586797][ T4989] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 165.586833][ T4989] RIP: 0033:0x7f6a8658ebe9 [ 165.586853][ T4989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.586874][ T4989] RSP: 002b:00007f6a87323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.586900][ T4989] RAX: ffffffffffffffda RBX: 00007f6a867b5fa0 RCX: 00007f6a8658ebe9 [ 165.586917][ T4989] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 165.586932][ T4989] RBP: 00007f6a87323090 R08: 0000000000000000 R09: 0000000000000000 [ 165.586945][ T4989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.586960][ T4989] R13: 00007f6a867b6038 R14: 00007f6a867b5fa0 R15: 00007fff2c49e868 [ 165.586981][ T4989] [ 166.101855][ T5001] sit0: entered promiscuous mode [ 166.109455][ T5001] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1789'. [ 166.167476][ T5007] rust_binder: Error while translating object. [ 166.167512][ T5007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.173918][ T5007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:834 [ 166.218910][ T5015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.237848][ T5015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.249005][ T5015] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 166.282593][ T5018] tmpfs: Unknown parameter 'usrquota0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.282593][ T5018] 0 [ 166.368198][ T5024] fuse: Bad value for 'group_id' [ 166.482297][ T5018] 9pnet_fd: Insufficient options for proto=fd [ 166.486049][ T5024] fuse: Bad value for 'group_id' [ 166.576167][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1808'. [ 166.759235][ T5069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=5069 comm=syz.3.1816 [ 166.776369][ T5060] overlayfs: failed to resolve './file0': -2 [ 166.813594][ T5076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.824532][ T5076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.991293][ T36] audit: type=1400 audit(1755755665.795:409): avc: denied { getopt } for pid=5105 comm="syz.1.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.051295][ T36] audit: type=1326 audit(1755755665.855:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.1836" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ae958ebe9 code=0x80000000 [ 167.364866][ T5118] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1839'. [ 167.376567][ T5118] rust_binder: Write failure EFAULT in pid:844 [ 167.377826][ T5118] netlink: 'syz.2.1839': attribute type 11 has an invalid length. [ 167.431747][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.432743][ T5122] rust_binder: 846: no such ref 4294967295 [ 168.534617][ T36] audit: type=1400 audit(1755755667.335:411): avc: denied { map } for pid=5151 comm="syz.3.1853" path="socket:[40281]" dev="sockfs" ino=40281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 168.598466][ T36] audit: type=1400 audit(1755755667.405:412): avc: denied { read } for pid=5158 comm="syz.3.1856" name="/" dev="configfs" ino=2491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.622444][ T36] audit: type=1400 audit(1755755667.405:413): avc: denied { open } for pid=5158 comm="syz.3.1856" path="/" dev="configfs" ino=2491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.966024][ T5164] fuse: Unknown parameter 'a¡w+ÀJq…T†d' [ 169.457265][ T625] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.463548][ T1137] Bluetooth: hci0: command 0x1003 tx timeout [ 169.583532][ T36] audit: type=1400 audit(1755755668.385:414): avc: denied { accept } for pid=5209 comm="syz.1.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.752661][ T5230] netlink: 'syz.3.1887': attribute type 28 has an invalid length. [ 169.980705][ T5247] binder: Unknown parameter 'defcontext' [ 170.029204][ T5255] fuse: Bad value for 'user_id' [ 170.034254][ T5255] fuse: Bad value for 'user_id' [ 170.142270][ T5258] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 170.142298][ T5258] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 170.152074][ T5258] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:869 [ 170.164447][ T5258] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.175074][ T5258] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.182149][ T5258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:869 [ 170.194134][ T641] rust_binder: 5257: removing orphan mapping 0:24 [ 170.364323][ T36] audit: type=1400 audit(1755755669.165:415): avc: denied { view } for pid=5266 comm="syz.1.1900" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 171.114274][ T36] audit: type=1400 audit(1755755669.915:416): avc: denied { accept } for pid=5350 comm="syz.1.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 171.390280][ T5360] binder: Bad value for 'defcontext' [ 171.417754][ T36] audit: type=1400 audit(1755755670.225:417): avc: denied { map } for pid=5363 comm="syz.2.1943" path="socket:[42091]" dev="sockfs" ino=42091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.307606][ T5431] futex_wake_op: syz.2.1971 tries to shift op by -1; fix this program [ 172.367748][ T5446] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 173.095239][ T36] audit: type=1326 audit(1755755671.895:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.3.1984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab29d8ebe9 code=0x0 [ 173.392409][ T5477] netlink: 'syz.2.1985': attribute type 4 has an invalid length. [ 173.405670][ T31] rust_binder: 5475: removing orphan mapping 0:8 [ 174.128823][ T5537] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2007'. [ 174.222899][ T5546] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5546 comm=syz.3.2011 [ 174.557628][ T5561] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2016'. [ 174.580984][ T36] audit: type=1326 audit(1755755673.375:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.3.2017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab29d8ebe9 code=0x0 [ 174.640295][ T5579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=5579 comm=syz.3.2022 [ 174.684535][ T36] audit: type=1400 audit(1755755673.485:420): avc: denied { listen } for pid=5587 comm="syz.3.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 175.668112][ T5634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34579 sclass=netlink_route_socket pid=5634 comm=syz.0.2040 [ 175.686401][ T5637] cgroup: Invalid name [ 175.757287][ T36] audit: type=1400 audit(1755755674.555:421): avc: denied { mounton } for pid=5644 comm="syz.0.2046" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 175.812819][ T36] audit: type=1400 audit(1755755674.615:422): avc: denied { mounton } for pid=5652 comm="syz.0.2050" path="/bus" dev="ramfs" ino=42758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 175.812971][ T5653] overlayfs: failed to clone upperpath [ 175.839367][ T36] audit: type=1400 audit(1755755674.645:423): avc: denied { write } for pid=5650 comm="syz.1.2049" path="socket:[41843]" dev="sockfs" ino=41843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.878933][ T36] audit: type=1400 audit(1755755674.685:424): avc: denied { setattr } for pid=5652 comm="syz.0.2050" name="secretmem" dev="secretmem" ino=41848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.902338][ T36] audit: type=1400 audit(1755755674.685:425): avc: denied { listen } for pid=5657 comm="syz.2.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.931059][ T5664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37651 sclass=netlink_route_socket pid=5664 comm=syz.0.2055 [ 176.058999][ T36] audit: type=1400 audit(1755755674.865:426): avc: denied { getopt } for pid=5679 comm="syz.0.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.118529][ T5691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49939 sclass=netlink_route_socket pid=5691 comm=syz.0.2065 [ 176.204751][ T36] audit: type=1326 audit(1755755675.005:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.0.2072" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a8658ebe9 code=0x0 [ 176.217251][ T5708] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5708 comm=syz.3.2073 [ 176.258635][ T5716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59923 sclass=netlink_route_socket pid=5716 comm=syz.3.2075 [ 176.274912][ T5719] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2076'. [ 177.180812][ T5741] netlink: 'syz.1.2084': attribute type 4 has an invalid length. [ 177.189245][ T5741] netlink: 'syz.1.2084': attribute type 5 has an invalid length. [ 177.197895][ T5741] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2084'. [ 177.405242][ T5749] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59920 sclass=netlink_xfrm_socket pid=5749 comm=syz.0.2088 [ 177.455491][ T5753] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2090'. [ 177.465056][ T5753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.902362][ T36] audit: type=1326 audit(1755755676.705:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.2.2096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2fbb8ebe9 code=0x0 [ 178.417851][ T5782] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2101'. [ 178.427086][ T5782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.454922][ T5784] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65040 sclass=netlink_xfrm_socket pid=5784 comm=syz.0.2102 [ 178.559544][ T36] audit: type=1400 audit(1755755677.365:429): avc: denied { write } for pid=31 comm="kworker/1:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43144 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.584345][ T36] audit: type=1400 audit(1755755677.365:430): avc: denied { mounton } for pid=5789 comm="syz.0.2105" path="/347/file0" dev="tmpfs" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 178.692104][ T5798] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2108'. [ 178.701542][ T5798] 8021q: VLANs not supported on lo [ 179.090813][ T5816] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 179.229870][ T5818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5818 comm=syz.1.2116 [ 179.279662][ T5827] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2119'. [ 179.289024][ T5827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.795687][ T5848] bridge0: port 3(erspan0) entered blocking state [ 179.802423][ T5848] bridge0: port 3(erspan0) entered disabled state [ 179.809354][ T5848] erspan0: entered allmulticast mode [ 179.815311][ T5848] erspan0: entered promiscuous mode [ 179.821072][ T5848] bridge0: port 3(erspan0) entered blocking state [ 179.827577][ T5848] bridge0: port 3(erspan0) entered forwarding state [ 179.846497][ T5848] erspan0: left allmulticast mode [ 179.851737][ T5848] erspan0: left promiscuous mode [ 179.856914][ T5848] bridge0: port 3(erspan0) entered disabled state [ 180.519816][ T5887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.537780][ T5887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.672719][ T5902] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2148'. [ 180.687619][ T5902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.957393][ T5857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2130'. [ 181.085122][ T5930] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5930 comm=syz.2.2161 [ 181.094485][ T5932] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2162'. [ 181.107449][ T5932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.162417][ T5936] rust_binder: Write failure EINVAL in pid:958 [ 181.162750][ T5936] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 181.177543][ T5936] rust_binder: Write failure EINVAL in pid:958 [ 181.178378][ T5936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.193983][ T5936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.212446][ T5944] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2168'. [ 181.267883][ T5958] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2175'. [ 181.277127][ T5958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.303425][ T5960] 8021q: VLANs not supported on lo [ 181.321173][ T5964] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5964 comm=syz.0.2177 [ 181.674081][ T6005] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2192'. [ 181.683397][ T6005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.711098][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2190'. [ 181.720427][ T6008] bridge_slave_1: left allmulticast mode [ 181.726200][ T6008] bridge_slave_1: left promiscuous mode [ 181.732092][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.740388][ T6008] bridge_slave_0: left allmulticast mode [ 181.742953][ T6012] netlink: 'syz.3.2195': attribute type 27 has an invalid length. [ 181.746276][ T6008] bridge_slave_0: left promiscuous mode [ 181.760043][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.824475][ T6018] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6018 comm=syz.2.2197 [ 181.923798][ T6027] netlink: 'syz.0.2201': attribute type 27 has an invalid length. [ 181.932193][ T6027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=6027 comm=syz.0.2201 [ 181.956455][ T6029] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2202'. [ 181.965923][ T6029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.317879][ T6050] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2212'. [ 182.327106][ T6050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.634601][ T6074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.723692][ T6089] syz.2.2230 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 182.751907][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 182.751929][ T36] audit: type=1400 audit(1755755681.555:435): avc: denied { setattr } for pid=6093 comm="syz.2.2233" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 183.013955][ T6109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.469511][ T6134] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6134 comm=syz.0.2249 [ 183.598338][ T6145] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6145 comm=syz.0.2254 [ 183.687671][ T6152] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6152 comm=syz.3.2256 [ 183.931187][ T6170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.964815][ T6170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.991366][ T36] audit: type=1400 audit(1755755682.795:436): avc: denied { execute } for pid=6171 comm="syz.0.2266" path="/dev/rnullb0" dev="tmpfs" ino=1891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 184.061008][ T6179] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6179 comm=syz.0.2268 [ 184.099553][ T6183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.137648][ T6191] SELinux: Context system_u:object_r:dhcpc_exec_t:s0 is not valid (left unmapped). [ 184.147227][ T36] audit: type=1400 audit(1755755682.945:437): avc: denied { relabelfrom } for pid=6190 comm="syz.0.2273" name="UDP" dev="sockfs" ino=43755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 184.170457][ T36] audit: type=1400 audit(1755755682.945:438): avc: denied { relabelto } for pid=6190 comm="syz.0.2273" name="UDP" dev="sockfs" ino=43755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:dhcpc_exec_t:s0" [ 184.229356][ T6204] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6204 comm=syz.3.2279 [ 184.259758][ T6207] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6207 comm=syz.0.2276 [ 184.453976][ T6215] __nla_validate_parse: 6 callbacks suppressed [ 184.454004][ T6215] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2283'. [ 184.478956][ T6215] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 184.524065][ T36] audit: type=1400 audit(1755755683.325:439): avc: denied { getattr } for pid=6216 comm="syz.2.2284" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 184.641837][ T6229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.655462][ T6229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.665200][ T6229] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 184.983936][ T6271] overlay: ./file0 is not a directory [ 184.998636][ T6271] 9pnet_fd: Insufficient options for proto=fd [ 185.071983][ T6278] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6278 comm=syz.0.2308 [ 185.440757][ T6292] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2314'. [ 186.486232][ T6311] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6311 comm=syz.0.2323 [ 186.513095][ T6317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2325'. [ 186.552471][ T6321] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2327'. [ 186.564215][ T6321] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2327'. [ 186.591797][ T6327] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2330'. [ 186.901702][ T6353] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6353 comm=syz.1.2340 [ 187.447584][ T6364] 9pnet_fd: Insufficient options for proto=fd [ 187.832322][ T36] audit: type=1400 audit(1755755686.635:440): avc: denied { execute } for pid=6385 comm="syz.1.2353" path="pipe:[44953]" dev="pipefs" ino=44953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 187.958322][ T6393] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6393 comm=syz.1.2356 [ 187.999004][ T6403] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2361'. [ 188.074887][ T6422] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6422 comm=syz.1.2369 [ 188.098839][ T6425] netlink: 'syz.1.2370': attribute type 4 has an invalid length. [ 188.106644][ T6425] netlink: 'syz.1.2370': attribute type 5 has an invalid length. [ 188.114483][ T6425] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2370'. [ 188.169315][ T6435] netlink: 'syz.1.2374': attribute type 4 has an invalid length. [ 188.177724][ T6435] netlink: 'syz.1.2374': attribute type 5 has an invalid length. [ 188.185920][ T6435] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2374'. [ 188.233319][ T6442] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2377'. [ 188.296963][ T6455] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6455 comm=syz.1.2383 [ 188.346110][ T6464] netlink: 'syz.0.2387': attribute type 4 has an invalid length. [ 188.354458][ T6464] netlink: 'syz.0.2387': attribute type 5 has an invalid length. [ 188.483512][ T6468] netlink: 'syz.2.2389': attribute type 4 has an invalid length. [ 188.491435][ T6468] netlink: 'syz.2.2389': attribute type 5 has an invalid length. [ 188.583088][ T6479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=6479 comm=syz.2.2394 [ 188.606229][ T6481] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6481 comm=syz.2.2395 [ 188.829600][ T6488] rust_binder: 1037: no such ref 0 [ 188.835174][ T6488] rust_binder: 1037: no such ref 2 [ 188.861592][ T6492] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6492 comm=syz.1.2400 [ 188.882771][ T36] audit: type=1400 audit(1755755687.685:441): avc: denied { read } for pid=6491 comm="syz.1.2400" path="socket:[46122]" dev="sockfs" ino=46122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 188.973047][ T6513] raw_sendmsg: syz.3.2411 forgot to set AF_INET. Fix it! [ 188.978888][ T6515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.994233][ T6515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.003115][ T6515] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 189.341995][ T6559] selinux_netlink_send: 1 callbacks suppressed [ 189.342029][ T6559] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6559 comm=syz.3.2429 [ 189.544475][ T36] audit: type=1400 audit(1755755688.345:442): avc: denied { setcurrent } for pid=6571 comm="syz.2.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 189.613796][ T6579] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6579 comm=syz.2.2438 [ 189.639962][ T6581] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6581 comm=syz.2.2439 [ 189.663558][ T36] audit: type=1400 audit(1755755688.465:443): avc: denied { watch_reads } for pid=6584 comm="syz.3.2441" path="/808" dev="tmpfs" ino=4260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 189.666852][ T6587] __nla_validate_parse: 7 callbacks suppressed [ 189.666877][ T6587] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2442'. [ 189.688578][ T6585] overlayfs: failed to clone upperpath [ 189.720279][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.730103][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.738756][ T6589] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 189.757911][ T6595] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2446'. [ 189.798619][ T6597] 9pnet_fd: Insufficient options for proto=fd [ 189.831345][ T6603] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6603 comm=syz.3.2449 [ 190.105776][ T6630] netlink: 'syz.0.2459': attribute type 4 has an invalid length. [ 190.113692][ T6630] netlink: 'syz.0.2459': attribute type 5 has an invalid length. [ 190.121869][ T6630] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2459'. [ 190.133473][ T6630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6630 comm=syz.0.2459 [ 190.299187][ T6646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6646 comm=syz.2.2465 [ 190.312686][ T6646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=6646 comm=syz.2.2465 [ 190.325865][ T6646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=6646 comm=syz.2.2465 [ 190.429673][ T6660] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2470'. [ 190.477069][ T6671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.477504][ T36] audit: type=1400 audit(1755755689.275:444): avc: denied { create } for pid=6670 comm="syz.3.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 190.486445][ T6671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.764452][ T6700] fuse: Bad value for 'fd' [ 190.768707][ T6702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=6702 comm=syz.0.2490 [ 190.799352][ T6704] syzkaller0: entered allmulticast mode [ 190.806891][ T6704] syzkaller0 (unregistering): left allmulticast mode [ 190.860701][ T36] audit: type=1107 audit(1755755689.665:445): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 190.913828][ T6721] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2499'. [ 190.922936][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2499'. [ 191.045412][ T6729] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2502'. [ 191.077619][ T6736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6736 comm=syz.1.2506 [ 191.174065][ T6758] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2515'. [ 191.231835][ T36] audit: type=1400 audit(1755755690.035:446): avc: denied { setopt } for pid=6767 comm="syz.1.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 191.598345][ T36] audit: type=1400 audit(1755755690.405:447): avc: denied { create } for pid=6802 comm="syz.3.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 191.598573][ T6806] rust_binder: Fixups oob 156 120 160 164 [ 191.618440][ T6806] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 191.624288][ T6806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.634498][ T6806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1108 [ 191.732404][ T6827] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 191.750537][ T6827] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97) [ 191.750564][ T6827] rust_binder: Error while translating object. [ 191.765606][ T6827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.775022][ T6827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1110 [ 191.874358][ T6860] tmpfs: Unknown parameter 'nr_' [ 191.888112][ T6863] 9pnet_fd: Insufficient options for proto=fd [ 191.916718][ T36] audit: type=1400 audit(1755755690.715:448): avc: denied { mount } for pid=6866 comm="syz.0.2560" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 191.916770][ T6867] overlayfs: failed to clone lowerpath [ 191.961890][ T31] rust_binder: 0: removing orphan mapping 0:1048 [ 192.025229][ T6880] sit0: left promiscuous mode [ 192.076534][ T6883] rust_binder: 6879 RLIMIT_NICE not set [ 192.083996][ T331] rust_binder: 6877: removing orphan mapping 0:4248 [ 192.113444][ T36] audit: type=1400 audit(1755755690.915:449): avc: denied { create } for pid=6884 comm="syz.1.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 192.148072][ T6891] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2570'. [ 192.154940][ T6893] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2571'. [ 192.172672][ T6895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 192.172712][ T6895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1126 [ 192.359329][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.377920][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.668353][ T6978] incfs: Options parsing error. -22 [ 192.673716][ T6978] incfs: mount failed -22 [ 192.703525][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.712357][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.086567][ T7023] overlayfs: failed to clone upperpath [ 193.299023][ T7046] fuse: Bad value for 'fd' [ 193.483095][ T7064] rust_binder: Write failure EFAULT in pid:1169 [ 194.041033][ T7106] validate_nla: 3 callbacks suppressed [ 194.041056][ T7106] netlink: 'syz.3.2653': attribute type 13 has an invalid length. [ 194.274456][ T7131] netlink: 'syz.2.2663': attribute type 4 has an invalid length. [ 194.282394][ T7131] netlink: 'syz.2.2663': attribute type 5 has an invalid length. [ 194.589643][ T7148] rust_binder: 1183: no such ref 2 [ 194.647655][ T7152] selinux_netlink_send: 3 callbacks suppressed [ 194.647672][ T7152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=7152 comm=syz.0.2671 [ 194.730180][ T7158] __nla_validate_parse: 11 callbacks suppressed [ 194.730205][ T7158] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2674'. [ 194.736505][ T7161] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2675'. [ 194.815977][ T7176] bpf: Bad value for 'mode' [ 194.836636][ T7178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=7178 comm=syz.3.2681 [ 194.911257][ T7191] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2687'. [ 194.943863][ T7198] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2689'. [ 194.996919][ T7209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34592 sclass=netlink_route_socket pid=7209 comm=syz.3.2693 [ 195.042517][ T7215] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2696'. [ 195.088142][ T7224] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2699'. [ 195.107947][ T7226] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7226 comm=syz.3.2700 [ 195.152801][ T7232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61472 sclass=netlink_route_socket pid=7232 comm=syz.3.2703 [ 195.302556][ T7238] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2706'. [ 195.332968][ T7242] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2708'. [ 195.364241][ T7246] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7246 comm=syz.1.2710 [ 195.436064][ T7260] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2715'. [ 195.445537][ T7262] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2716'. [ 195.461352][ T7262] gretap0: entered promiscuous mode [ 196.008814][ T7292] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7292 comm=syz.1.2729 [ 196.032898][ T7294] overlayfs: failed to clone lowerpath [ 196.416251][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 196.416269][ T36] audit: type=1326 audit(1755755695.215:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.2.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fbb8ebe9 code=0x7fc00000 [ 196.446254][ T36] audit: type=1326 audit(1755755695.215:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.2.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fbb8ebe9 code=0x7fc00000 [ 196.676289][ T36] audit: type=1326 audit(1755755695.475:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.0.2748" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a8658ebe9 code=0x0 [ 196.709326][ T7347] overlayfs: failed to clone upperpath [ 196.925838][ T36] audit: type=1400 audit(1755755695.725:455): avc: denied { map } for pid=7401 comm="syz.3.2767" path="socket:[49215]" dev="sockfs" ino=49215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 198.557523][ T7519] netlink: 'syz.0.2806': attribute type 4 has an invalid length. [ 199.654854][ T7583] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 199.722258][ T7584] 9pnet_fd: Insufficient options for proto=fd [ 199.980129][ T7610] netlink: 'syz.2.2844': attribute type 1 has an invalid length. [ 200.002754][ T7613] rust_binder: validate_parent_fixup: new_min_offset=58, sg_entry.length=0 [ 200.002797][ T7613] rust_binder: Error while translating object. [ 200.011855][ T7613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 200.018853][ T7613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1237 [ 200.124221][ T7622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1241 [ 200.201365][ T36] audit: type=1326 audit(1755755699.005:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.3.2854" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab29d8ebe9 code=0x0 [ 200.377981][ T7664] __nla_validate_parse: 14 callbacks suppressed [ 200.377999][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2860'. [ 201.137286][ T7699] futex_wake_op: syz.2.2874 tries to shift op by -1; fix this program [ 201.149344][ T36] audit: type=1326 audit(1755755699.955:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7697 comm="syz.2.2874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2fbb8ebe9 code=0x0 [ 202.052533][ T7718] 9pnet_fd: Insufficient options for proto=fd [ 202.215840][ T7741] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2888'. [ 202.225548][ T7741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.261876][ T7743] netlink: 3529 bytes leftover after parsing attributes in process `syz.2.2889'. [ 202.390695][ T36] audit: type=1400 audit(1755755701.195:458): avc: denied { create } for pid=7749 comm="syz.2.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.459230][ T36] audit: type=1400 audit(1755755701.265:459): avc: denied { setattr } for pid=7755 comm="syz.2.2895" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.496538][ T36] audit: type=1400 audit(1755755701.295:460): avc: denied { create } for pid=7757 comm="syz.2.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.517051][ T36] audit: type=1400 audit(1755755701.295:461): avc: denied { write } for pid=7757 comm="syz.2.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.525006][ T7760] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2897'. [ 202.537909][ T36] audit: type=1400 audit(1755755701.295:462): avc: denied { nlmsg_write } for pid=7757 comm="syz.2.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.547605][ T7760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.622238][ T7762] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 202.625696][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'. [ 202.638876][ T7762] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 202.651805][ T36] audit: type=1400 audit(1755755701.455:463): avc: denied { watch watch_reads } for pid=7763 comm="syz.0.2899" path="/564/file0" dev="tmpfs" ino=3003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 202.724849][ T36] audit: type=1400 audit(1755755701.525:464): avc: denied { execmem } for pid=7771 comm="syz.0.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 202.817732][ T31] rust_binder: 7761: removing orphan mapping 0:8 [ 202.829252][ T7783] fuse: Bad value for 'fd' [ 202.855217][ T7787] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2907'. [ 202.864613][ T7787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.981112][ T7819] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2920'. [ 202.994578][ T7819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.049413][ T7836] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 203.049660][ T7836] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.062532][ T36] audit: type=1400 audit(1755755701.855:465): avc: denied { connect } for pid=7833 comm="syz.1.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.104633][ T36] audit: type=1400 audit(1755755701.905:466): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 203.181976][ T7849] binder: Bad value for 'stats' [ 203.313167][ T7856] netlink: 'syz.2.2935': attribute type 4 has an invalid length. [ 203.326496][ T7856] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2935'. [ 203.350689][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.359469][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.376661][ T7861] fuse: Unknown parameter '' [ 203.387714][ T7861] overlayfs: failed to resolve './file1': -2 [ 203.407003][ T7864] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2937'. [ 203.416559][ T7864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.603666][ T7875] netlink: 'syz.3.2939': attribute type 4 has an invalid length. [ 203.612035][ T7875] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2939'. [ 203.679222][ T7890] overlayfs: failed to clone upperpath [ 203.777017][ T36] audit: type=1400 audit(1755755702.575:467): avc: denied { create } for pid=7901 comm="syz.3.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 203.947379][ T7939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.051741][ T7971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.657906][ T7995] rust_binder: inc_ref_done called when no active inc_refs [ 204.774258][ T8009] syz.0.2992 (8009): attempted to duplicate a private mapping with mremap. This is not supported. [ 204.842326][ T8005] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 204.842438][ T8005] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.931228][ T8031] netlink: 'syz.0.3002': attribute type 4 has an invalid length. [ 204.945658][ T8031] netlink: 'syz.0.3002': attribute type 5 has an invalid length. [ 205.584026][ T8057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.592709][ T8057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.601262][ T8057] netlink: 'syz.2.3013': attribute type 4 has an invalid length. [ 205.609241][ T8057] netlink: 'syz.2.3013': attribute type 5 has an invalid length. [ 205.617214][ T8057] __nla_validate_parse: 4 callbacks suppressed [ 205.617233][ T8057] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3013'. [ 205.754400][ T8078] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3022'. [ 205.763568][ T8078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.900323][ T8098] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3031'. [ 205.909951][ T8098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.001924][ T8109] 9pnet_fd: Insufficient options for proto=fd [ 206.299930][ T8120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.334672][ T8120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.615943][ T8124] overlayfs: failed to clone upperpath [ 206.892579][ T8134] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3044'. [ 206.917584][ T8134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.995722][ T8140] netlink: 'syz.0.3047': attribute type 4 has an invalid length. [ 207.003975][ T8138] fuse: Bad value for 'rootmode' [ 207.012365][ T8140] netlink: 'syz.0.3047': attribute type 5 has an invalid length. [ 207.029042][ T8140] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3047'. [ 207.178676][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.217660][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.258622][ T8154] rust_binder: Write failure EFAULT in pid:1396 [ 207.318719][ T8162] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3056'. [ 207.334289][ T8162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.534763][ T8176] overlayfs: failed to clone upperpath [ 207.543503][ T8176] 9pnet_fd: Insufficient options for proto=fd [ 207.568311][ T8178] veth1: entered allmulticast mode [ 207.574952][ T8177] veth1: left allmulticast mode [ 207.607809][ T8182] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3066'. [ 207.617537][ T8182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.682447][ T8191] overlayfs: failed to clone upperpath [ 207.804379][ T8210] netlink: 'syz.0.3077': attribute type 27 has an invalid length. [ 207.966961][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 207.966983][ T36] audit: type=1400 audit(1755755706.765:478): avc: denied { execute_no_trans } for pid=8238 comm="syz.0.3089" path="/612/file1" dev="tmpfs" ino=3253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 208.035548][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.044299][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.053336][ T8253] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 208.205569][ T36] audit: type=1326 audit(1755755707.005:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8291 comm="syz.3.3105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab29d8ebe9 code=0x0 [ 208.600886][ T8307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.609799][ T8307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.637503][ T8312] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3112'. [ 208.648008][ T8312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.679488][ T8318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.688245][ T8318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.696680][ T8318] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 209.049795][ T8322] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3118'. [ 209.109866][ T36] audit: type=1326 audit(1755755707.915:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.3.3122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab29d8ebe9 code=0x0 [ 209.148967][ T8340] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3125'. [ 209.158195][ T8340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.220929][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.230170][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.774858][ T8367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.794580][ T36] audit: type=1400 audit(1755755708.605:481): avc: denied { bpf } for pid=8366 comm="syz.2.3136" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.872928][ T8385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.883230][ T8385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.918701][ T36] audit: type=1400 audit(1755755708.725:482): avc: denied { create } for pid=8394 comm="syz.1.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 209.920039][ T8395] netlink: 'syz.1.3147': attribute type 4 has an invalid length. [ 209.947516][ T36] audit: type=1400 audit(1755755708.755:483): avc: denied { write } for pid=8394 comm="syz.1.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 209.975525][ T8403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.017729][ T8416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=8416 comm=syz.3.3154 [ 210.049569][ T36] audit: type=1326 audit(1755755708.855:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8421 comm="syz.1.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae958ebe9 code=0x7ffc0000 [ 210.077249][ T36] audit: type=1326 audit(1755755708.855:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8421 comm="syz.1.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae958ebe9 code=0x7ffc0000 [ 210.101755][ T36] audit: type=1326 audit(1755755708.855:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8421 comm="syz.1.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ae958ebe9 code=0x7ffc0000 [ 210.127691][ T8431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.147902][ T36] audit: type=1326 audit(1755755708.855:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8421 comm="syz.1.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae958ebe9 code=0x7ffc0000 [ 210.455710][ T8479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.591909][ T8494] rust_binder: Fixups oob 156 120 160 164 [ 210.591941][ T8494] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 210.597951][ T8494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 210.606456][ T8494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1457 [ 210.712902][ T8509] __nla_validate_parse: 4 callbacks suppressed [ 210.712930][ T8509] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3191'. [ 210.738396][ T8509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.797688][ T8513] netlink: 'syz.2.3193': attribute type 46 has an invalid length. [ 210.901043][ T8518] overlayfs: failed to clone upperpath [ 211.072157][ T8533] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3201'. [ 211.081688][ T8533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.113495][ T8535] devpts: called with bogus options [ 211.148516][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3206'. [ 211.149931][ T8542] overlay: ./file0 is not a directory [ 211.198819][ T8550] netlink: 'syz.3.3209': attribute type 1 has an invalid length. [ 211.238622][ T8555] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3211'. [ 211.518310][ T8569] sock: sock_timestamping_bind_phc: sock not bind to device [ 211.634365][ T8581] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3222'. [ 211.728605][ T8606] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3232'. [ 211.860292][ T8631] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3242'. [ 212.012896][ T8659] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3254'. [ 212.072089][ T8678] 9pnet_fd: Insufficient options for proto=fd [ 212.139984][ T8690] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3266'. [ 212.259316][ T8715] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3277'. [ 212.477117][ T8742] net_ratelimit: 7 callbacks suppressed [ 212.477152][ T8742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.588180][ T8768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.663890][ T8778] gretap0: entered promiscuous mode [ 212.782241][ T8788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.791096][ T8788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.859361][ T8788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.868057][ T8788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.877450][ T8788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1511 [ 213.079785][ T8792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.419579][ T8815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.490708][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 213.490727][ T36] audit: type=1400 audit(1755755712.295:516): avc: denied { accept } for pid=8827 comm="syz.1.3325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 213.653953][ T8835] gretap0: entered promiscuous mode [ 213.733082][ T8847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.779844][ T8851] 9pnet_fd: Insufficient options for proto=fd [ 213.796622][ T8853] binder: Bad value for 'stats' [ 213.820095][ T36] audit: type=1400 audit(1755755712.625:517): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 213.935311][ T8877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.942612][ T8877] IPv6: NLM_F_CREATE should be set when creating new route [ 213.949898][ T8877] IPv6: NLM_F_CREATE should be set when creating new route [ 214.009170][ T8888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.053407][ T8898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.062195][ T8898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.415104][ T8916] syz.3.3356: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 214.430234][ T8916] CPU: 0 UID: 0 PID: 8916 Comm: syz.3.3356 Not tainted syzkaller #0 7151184b8e4c89fd39b0396cbf382e33ab0b9c1a [ 214.430274][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.430290][ T8916] Call Trace: [ 214.430298][ T8916] [ 214.430307][ T8916] __dump_stack+0x21/0x30 [ 214.430367][ T8916] dump_stack_lvl+0x10c/0x190 [ 214.430399][ T8916] ? __cfi_dump_stack_lvl+0x10/0x10 [ 214.430433][ T8916] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 214.430465][ T8916] dump_stack+0x19/0x20 [ 214.430495][ T8916] warn_alloc+0x1bc/0x2a0 [ 214.430525][ T8916] ? stack_depot_save_flags+0x38/0x800 [ 214.430564][ T8916] ? __cfi_warn_alloc+0x10/0x10 [ 214.430593][ T8916] ? kasan_save_track+0x4f/0x80 [ 214.430617][ T8916] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 214.430652][ T8916] ? xskq_create+0x68/0x2a0 [ 214.430686][ T8916] ? xsk_init_queue+0xb6/0x120 [ 214.430718][ T8916] ? xsk_setsockopt+0x43f/0x6f0 [ 214.430748][ T8916] ? do_sock_setsockopt+0x26d/0x400 [ 214.430781][ T8916] ? __x64_sys_setsockopt+0x1b8/0x250 [ 214.430814][ T8916] ? x64_sys_call+0x2adc/0x2ee0 [ 214.430850][ T8916] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 214.430889][ T8916] __vmalloc_node_range_noprof+0x135/0x1420 [ 214.430925][ T8916] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 214.430956][ T8916] ? avc_has_perm+0x144/0x220 [ 214.430986][ T8916] ? kasan_save_alloc_info+0x40/0x50 [ 214.431016][ T8916] ? __kasan_kmalloc+0x96/0xb0 [ 214.431040][ T8916] vmalloc_user_noprof+0x77/0x90 [ 214.431069][ T8916] ? xskq_create+0xdb/0x2a0 [ 214.431101][ T8916] xskq_create+0xdb/0x2a0 [ 214.431129][ T8916] xsk_init_queue+0xb6/0x120 [ 214.431152][ T8916] xsk_setsockopt+0x43f/0x6f0 [ 214.431174][ T8916] ? __cfi_xsk_setsockopt+0x10/0x10 [ 214.431206][ T8916] ? do_futex+0x309/0x500 [ 214.431224][ T8916] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 214.431246][ T8916] ? security_socket_setsockopt+0x33/0xd0 [ 214.431262][ T8916] ? __cfi_xsk_setsockopt+0x10/0x10 [ 214.431284][ T8916] do_sock_setsockopt+0x26d/0x400 [ 214.431308][ T8916] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 214.431333][ T8916] __x64_sys_setsockopt+0x1b8/0x250 [ 214.431358][ T8916] x64_sys_call+0x2adc/0x2ee0 [ 214.431383][ T8916] do_syscall_64+0x58/0xf0 [ 214.431403][ T8916] ? clear_bhb_loop+0x50/0xa0 [ 214.431419][ T8916] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 214.431445][ T8916] RIP: 0033:0x7fab29d8ebe9 [ 214.431465][ T8916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.431480][ T8916] RSP: 002b:00007fab2ab32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.431498][ T8916] RAX: ffffffffffffffda RBX: 00007fab29fb5fa0 RCX: 00007fab29d8ebe9 [ 214.431511][ T8916] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 214.431522][ T8916] RBP: 00007fab29e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 214.431533][ T8916] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.431544][ T8916] R13: 00007fab29fb6038 R14: 00007fab29fb5fa0 R15: 00007ffcee4fed28 [ 214.431559][ T8916] [ 214.431569][ T8916] Mem-Info: [ 214.619522][ T8921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.628549][ T8916] active_anon:14398 inactive_anon:531 isolated_anon:0 [ 214.628549][ T8916] active_file:11006 inactive_file:14608 isolated_file:0 [ 214.628549][ T8916] unevictable:0 dirty:125 writeback:0 [ 214.628549][ T8916] slab_reclaimable:6193 slab_unreclaimable:72024 [ 214.628549][ T8916] mapped:24437 shmem:205 pagetables:1476 [ 214.628549][ T8916] sec_pagetables:0 bounce:0 [ 214.628549][ T8916] kernel_misc_reclaimable:0 [ 214.628549][ T8916] free:1508859 free_pcp:2729 free_cma:0 [ 214.799649][ T8916] Node 0 active_anon:57592kB inactive_anon:2124kB active_file:44024kB inactive_file:58432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97748kB dirty:500kB writeback:0kB shmem:820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:6244kB pagetables:5804kB sec_pagetables:0kB all_unreclaimable? no [ 214.832362][ T8916] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965964kB mlocked:0kB bounce:0kB free_pcp:5752kB local_pcp:68kB free_cma:0kB [ 214.833356][ T8943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.867222][ T8916] lowmem_reserve[]: 0 3921 3921 [ 214.874618][ T8943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.876339][ T8944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.884719][ T8916] Normal free:3075412kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57592kB inactive_anon:2124kB active_file:44024kB inactive_file:58432kB unevictable:0kB writepending:500kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4264kB local_pcp:3012kB free_cma:0kB [ 214.902913][ T8944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.926963][ T8916] lowmem_reserve[]: 0 0 0 [ 214.939568][ T8916] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 214.955713][ T8916] Normal: 204*4kB (UE) 436*8kB (UME) 974*16kB (UME) 580*32kB (UME) 495*64kB (UME) 133*128kB (UME) 41*256kB (UME) 13*512kB (UME) 12*1024kB (M) 14*2048kB (UME) 716*4096kB (UME) = 3078000kB [ 214.974982][ T8916] 26347 total pagecache pages [ 214.979926][ T8916] 532 pages in swap cache [ 214.984463][ T8916] Free swap = 122364kB [ 214.988986][ T8916] Total swap = 124996kB [ 214.993239][ T8916] 2097051 pages RAM [ 214.997443][ T8916] 0 pages HighMem/MovableOnly [ 215.002282][ T8916] 351530 pages reserved [ 215.006511][ T8916] 0 pages cma reserved [ 215.007519][ T8955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.014930][ T8916] Memory allocations: [ 215.030794][ T8916] 0 B 0 init/main.c:1370 func:do_initcalls [ 215.038551][ T8916] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 215.046994][ T8916] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 215.055301][ T8916] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 215.063629][ T8916] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 215.071997][ T8916] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 215.080844][ T8916] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 215.089113][ T8916] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 215.097425][ T8916] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 215.105626][ T8916] 0 B 0 init/initramfs.c:101 func:find_link [ 215.367458][ T36] audit: type=1400 audit(1755755714.125:518): avc: denied { create } for pid=8972 comm="syz.3.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 215.514560][ T8985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.585615][ T36] audit: type=1400 audit(1755755714.385:519): avc: denied { write } for pid=8988 comm="syz.2.3385" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 215.587560][ T8989] 9pnet_fd: Insufficient options for proto=fd [ 215.928934][ T9007] __nla_validate_parse: 19 callbacks suppressed [ 215.928958][ T9007] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3393'. [ 215.945198][ T9007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.048812][ T9025] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3401'. [ 216.050529][ T9026] netlink: 'syz.1.3400': attribute type 2 has an invalid length. [ 216.087212][ T9035] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3404'. [ 216.348154][ T9057] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3411'. [ 216.480867][ T9063] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3414'. [ 216.731683][ T9072] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true [ 216.967510][ T9078] veth0_vlan: left promiscuous mode [ 217.001758][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.010327][ T36] audit: type=1400 audit(1755755715.805:520): avc: denied { getopt } for pid=9080 comm="syz.2.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.045082][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.091418][ T9091] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3426'. [ 217.158961][ T9106] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3432'. [ 217.218586][ T9115] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3436'. [ 217.583228][ T9137] netlink: 'syz.2.3444': attribute type 28 has an invalid length. [ 217.606868][ T9139] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3445'. [ 217.660165][ T9145] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3448'. [ 217.669871][ T9145] net_ratelimit: 4 callbacks suppressed [ 217.669895][ T9145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.809992][ T9156] rust_binder: Error in use_page_slow: ESRCH [ 217.810012][ T9156] rust_binder: use_range failure ESRCH [ 217.816142][ T9156] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 217.822054][ T9156] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 217.830125][ T9156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1608 [ 217.903993][ T9169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.018177][ T9194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.152107][ T9207] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 218.225417][ T9219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.481786][ T9247] 9pnet_fd: Insufficient options for proto=fd [ 218.512041][ T9253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.101938][ T9281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8472 sclass=netlink_route_socket pid=9281 comm=syz.0.3502 [ 219.290210][ T31] rust_binder: 9184: removing orphan mapping 0:112 [ 219.297073][ T31] rust_binder: 9184: removing orphan mapping 112:1048 [ 219.329132][ T9303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19480 sclass=netlink_route_socket pid=9303 comm=syz.2.3512 [ 219.491599][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.502947][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.512010][ T9330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26648 sclass=netlink_route_socket pid=9330 comm=syz.0.3524 [ 219.858479][ T9355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.102669][ T9366] SELinux: Context system_u:object_r:update_modules_exec_t:s0 is not valid (left unmapped). [ 220.113550][ T36] audit: type=1400 audit(1755755718.905:521): avc: denied { relabelfrom } for pid=9365 comm="syz.2.3540" name="UDPLITEv6" dev="sockfs" ino=53863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.164577][ T9370] netlink: 'syz.2.3542': attribute type 16 has an invalid length. [ 220.175720][ T36] audit: type=1400 audit(1755755718.935:522): avc: denied { relabelto } for pid=9365 comm="syz.2.3540" name="UDPLITEv6" dev="sockfs" ino=53863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="system_u:object_r:update_modules_exec_t:s0" [ 220.187586][ T9371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.251760][ T9371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.284409][ T9375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.468127][ T9399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31256 sclass=netlink_route_socket pid=9399 comm=syz.1.3554 [ 220.538795][ T9407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.598352][ T9410] overlayfs: failed to clone upperpath [ 220.616283][ T9410] 9pnet_fd: Insufficient options for proto=fd [ 220.845937][ T9436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61464 sclass=netlink_route_socket pid=9436 comm=syz.1.3569 [ 221.078887][ T9449] __nla_validate_parse: 12 callbacks suppressed [ 221.078914][ T9449] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3575'. [ 221.148413][ T9461] netlink: 'syz.0.3580': attribute type 4 has an invalid length. [ 221.156319][ T9461] netlink: 'syz.0.3580': attribute type 5 has an invalid length. [ 221.166613][ T9461] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3580'. [ 221.283278][ T9474] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3586'. [ 221.308545][ T9482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.319178][ T9482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.331132][ T9484] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3590'. [ 221.367835][ T9488] netlink: 'syz.3.3592': attribute type 4 has an invalid length. [ 221.375712][ T9488] netlink: 'syz.3.3592': attribute type 5 has an invalid length. [ 221.383804][ T9488] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3592'. [ 221.405044][ T9490] overlayfs: failed to clone upperpath [ 221.521709][ T9508] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3600'. [ 221.531559][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3589'. [ 221.555009][ T9512] overlayfs: failed to clone upperpath [ 221.576416][ T9518] netlink: 'syz.1.3604': attribute type 4 has an invalid length. [ 221.584575][ T9518] netlink: 'syz.1.3604': attribute type 5 has an invalid length. [ 221.592475][ T9518] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3604'. [ 221.815036][ T36] audit: type=1400 audit(1755755720.625:523): avc: denied { create } for pid=9521 comm="syz.3.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 222.044288][ T9540] overlayfs: failed to clone upperpath [ 222.080215][ T9548] netlink: 'syz.0.3618': attribute type 4 has an invalid length. [ 222.088324][ T9548] netlink: 'syz.0.3618': attribute type 5 has an invalid length. [ 222.097239][ T9548] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3618'. [ 222.144016][ T9561] overlayfs: failed to clone upperpath [ 222.227651][ T9574] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3629'. [ 222.237154][ T9574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.632268][ T9584] overlayfs: failed to clone upperpath [ 222.706982][ T9602] overlayfs: failed to resolve './file1': -2 [ 222.773336][ T9613] overlayfs: failed to clone upperpath [ 222.799285][ T9619] overlayfs: failed to clone upperpath [ 222.924869][ T9642] overlayfs: failed to clone upperpath [ 223.020346][ T36] audit: type=1400 audit(1755755721.825:524): avc: denied { read } for pid=9651 comm="syz.0.3660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 223.040589][ T9658] netlink: 'syz.1.3663': attribute type 4 has an invalid length. [ 223.048949][ T9658] netlink: 'syz.1.3663': attribute type 5 has an invalid length. [ 223.056235][ T9660] 9pnet_fd: Insufficient options for proto=fd [ 223.073513][ T9665] overlayfs: failed to clone upperpath [ 223.094653][ T9672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.140137][ T9680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.152265][ T9680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 223.159204][ T9680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1678 [ 223.169302][ T9680] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 223.179152][ T9680] rust_binder: Read failure Err(EFAULT) in pid:1678 [ 223.264063][ T9698] Unsupported ieee802154 address type: 0 [ 223.280621][ T9703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.490295][ T9728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.563695][ T9726] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 223.603651][ T36] audit: type=1400 audit(1755755722.405:525): avc: denied { setopt } for pid=9738 comm="syz.2.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 223.960729][ T9756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.103924][ T9781] overlayfs: failed to clone upperpath [ 224.433949][ T36] audit: type=1326 audit(1755755723.235:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9738 comm="syz.2.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fbb8ebe9 code=0x7fc00000 [ 224.457415][ T36] audit: type=1326 audit(1755755723.235:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9738 comm="syz.2.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2fbb8ebe9 code=0x7fc00000 [ 224.481122][ T36] audit: type=1326 audit(1755755723.235:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9738 comm="syz.2.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fbb8ebe9 code=0x7fc00000 [ 224.504718][ T36] audit: type=1326 audit(1755755723.235:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9738 comm="syz.2.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fbb8ebe9 code=0x7fc00000 [ 224.528279][ T36] audit: type=1326 audit(1755755723.235:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9738 comm="syz.2.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fbb8ebe9 code=0x7fc00000 [ 224.668831][ T9808] exFAT-fs (rnullb0): invalid boot record signature [ 224.675522][ T9808] exFAT-fs (rnullb0): failed to read boot sector [ 224.681920][ T9808] exFAT-fs (rnullb0): failed to recognize exfat type [ 224.688826][ T9807] exFAT-fs (rnullb0): invalid boot record signature [ 224.695747][ T9807] exFAT-fs (rnullb0): failed to read boot sector [ 224.702449][ T9807] exFAT-fs (rnullb0): failed to recognize exfat type [ 225.769395][ T36] kauditd_printk_skb: 139 callbacks suppressed [ 225.769415][ T36] audit: type=1400 audit(1755755724.575:670): avc: denied { mounton } for pid=9819 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 225.806439][ T36] audit: type=1400 audit(1755755724.575:671): avc: denied { sys_module } for pid=9819 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 225.872838][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.879990][ T9819] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.881735][ T10] usb 3-1: USB disconnect, device number 39 [ 225.887111][ T9819] bridge_slave_0: entered allmulticast mode [ 225.901042][ T10] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 225.904076][ T9819] bridge_slave_0: entered promiscuous mode [ 225.922555][ T9819] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.929708][ T9819] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.936884][ T9819] bridge_slave_1: entered allmulticast mode [ 225.943443][ T9819] bridge_slave_1: entered promiscuous mode [ 226.056031][ T9819] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.063214][ T9819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.070620][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.077991][ T9819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.114037][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.122234][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.133796][ T5397] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.141001][ T5397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.151617][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.158832][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.196439][ T9819] veth0_vlan: entered promiscuous mode [ 226.211863][ T9819] veth1_macvtap: entered promiscuous mode [ 226.239492][ T36] audit: type=1400 audit(1755755725.045:672): avc: denied { mounton } for pid=9819 comm="syz-executor" path="/root/syzkaller.4SsPoO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 226.272254][ T9859] validate_nla: 14 callbacks suppressed [ 226.272279][ T9859] netlink: 'syz.1.3735': attribute type 4 has an invalid length. [ 226.287123][ T9859] netlink: 'syz.1.3735': attribute type 5 has an invalid length. [ 226.295410][ T9859] __nla_validate_parse: 15 callbacks suppressed [ 226.295431][ T9859] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3735'. [ 226.502009][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.509426][ T9870] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.516666][ T9870] bridge_slave_0: entered allmulticast mode [ 226.523467][ T9870] bridge_slave_0: entered promiscuous mode [ 226.530295][ T9879] Unsupported ieee802154 address type: 0 [ 226.532954][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.544800][ T9870] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.552551][ T9870] bridge_slave_1: entered allmulticast mode [ 226.559144][ T9870] bridge_slave_1: entered promiscuous mode [ 226.619112][ T9886] tc_dump_action: action bad kind [ 226.632208][ T36] audit: type=1400 audit(1755755725.435:673): avc: denied { read write } for pid=9887 comm="syz.2.3743" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 226.663912][ T36] audit: type=1400 audit(1755755725.435:674): avc: denied { open } for pid=9887 comm="syz.2.3743" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 226.683567][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.694155][ T9870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.701618][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.709062][ T9870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.719268][ T36] audit: type=1400 audit(1755755725.525:675): avc: denied { read write } for pid=9901 comm="syz.2.3745" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.763687][ T36] audit: type=1400 audit(1755755725.525:676): avc: denied { open } for pid=9901 comm="syz.2.3745" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.769094][ T9870] veth0_vlan: entered promiscuous mode [ 226.794045][ T36] audit: type=1400 audit(1755755725.545:677): avc: denied { ioctl } for pid=9901 comm="syz.2.3745" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.799757][ T9904] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3746'. [ 226.818791][ T36] audit: type=1400 audit(1755755725.545:678): avc: denied { map } for pid=9901 comm="syz.2.3745" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.853118][ T9904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.871972][ T12] bridge_slave_1: left allmulticast mode [ 226.878075][ T12] bridge_slave_1: left promiscuous mode [ 226.883891][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.891862][ T12] bridge_slave_0: left allmulticast mode [ 226.898524][ T12] bridge_slave_0: left promiscuous mode [ 226.904282][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.983988][ T9906] syzkaller0: entered promiscuous mode [ 226.989596][ T9906] syzkaller0: entered allmulticast mode [ 226.996831][ T13] syzkaller0: tun_net_xmit 48 [ 227.000555][ T9906] syzkaller0: create flow: hash 1874722907 index 1 [ 227.007786][ T9870] veth1_macvtap: entered promiscuous mode [ 227.035196][ T12] veth1_macvtap: left promiscuous mode [ 227.040882][ T12] veth0_vlan: left promiscuous mode [ 227.079175][ T9906] syzkaller0 (unregistered): delete flow: hash 1874722907 index 0 [ 227.217460][ T36] audit: type=1400 audit(1755755726.015:679): avc: denied { accept } for pid=9919 comm="syz.0.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 227.344034][ T9933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.344166][ T9933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 227.383498][ T9933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:46 [ 227.488786][ T9936] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.505265][ T9936] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.512782][ T9936] bridge_slave_0: entered allmulticast mode [ 227.519475][ T9936] bridge_slave_0: entered promiscuous mode [ 227.546331][ T9936] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.567837][ T9936] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.598596][ T9936] bridge_slave_1: entered allmulticast mode [ 227.614126][ T9936] bridge_slave_1: entered promiscuous mode [ 227.638478][ T12] dummy0: left allmulticast mode [ 227.645639][ T12] dummy0: left promiscuous mode [ 227.651517][ T12] bridge0: port 3(dummy0) entered disabled state [ 227.659553][ T12] bridge_slave_1: left allmulticast mode [ 227.667456][ T12] bridge_slave_1: left promiscuous mode [ 227.676599][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.688943][ T12] bridge_slave_0: left allmulticast mode [ 227.706875][ T12] bridge_slave_0: left promiscuous mode [ 227.713370][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.841402][ T12] tipc: Disabling bearer [ 227.849202][ T12] tipc: Left network mode [ 227.865021][ T12] veth1_macvtap: left promiscuous mode [ 227.927209][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 227.946628][ T9936] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.954005][ T9936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.961386][ T9936] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.968539][ T9936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.978398][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.999032][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.056366][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.063533][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.076422][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.083914][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.091641][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 228.100090][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 228.109386][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.173286][ T10] usb 3-1: config 0 descriptor?? [ 228.199748][ T9936] veth0_vlan: entered promiscuous mode [ 228.232082][ T9936] veth1_macvtap: entered promiscuous mode [ 228.563162][ T9973] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.571084][ T9973] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.578920][ T9973] bridge_slave_0: entered allmulticast mode [ 228.586385][ T9973] bridge_slave_0: entered promiscuous mode [ 228.594204][ T9973] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.601640][ T9973] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.609421][ T9973] bridge_slave_1: entered allmulticast mode [ 228.616030][ T9973] bridge_slave_1: entered promiscuous mode [ 228.693877][ T9973] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.701082][ T9973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.708550][ T9973] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.715642][ T9973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.741650][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.749654][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.760889][ T5397] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.768025][ T5397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.778045][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.785157][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.816844][ T9973] veth0_vlan: entered promiscuous mode [ 228.831044][ T9973] veth1_macvtap: entered promiscuous mode [ 229.011444][ T9994] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 229.388746][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 229.400644][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 229.400843][ T9999] rust_binder: Error while translating object. [ 229.411689][ T9999] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 229.412351][ T10] asix 3-1:0.0: probe with driver asix failed with error -71 [ 229.418175][ T9999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:15 [ 229.431571][ T10] usb 3-1: USB disconnect, device number 40 [ 229.496715][T10007] FAULT_INJECTION: forcing a failure. [ 229.496715][T10007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.509973][T10007] CPU: 1 UID: 0 PID: 10007 Comm: syz.3.3774 Not tainted syzkaller #0 7151184b8e4c89fd39b0396cbf382e33ab0b9c1a [ 229.510009][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.510020][T10007] Call Trace: [ 229.510026][T10007] [ 229.510033][T10007] __dump_stack+0x21/0x30 [ 229.510059][T10007] dump_stack_lvl+0x10c/0x190 [ 229.510080][T10007] ? __cfi_dump_stack_lvl+0x10/0x10 [ 229.510102][T10007] ? vfs_write+0x8ba/0xe80 [ 229.510118][T10007] dump_stack+0x19/0x20 [ 229.510138][T10007] should_fail_ex+0x3d9/0x530 [ 229.510163][T10007] should_fail+0xf/0x20 [ 229.510185][T10007] should_fail_usercopy+0x1e/0x30 [ 229.510200][T10007] _copy_from_user+0x22/0xb0 [ 229.510218][T10007] __sys_bind+0x1de/0x3f0 [ 229.510237][T10007] ? __cfi___sys_bind+0x10/0x10 [ 229.510258][T10007] ? __kasan_check_read+0x15/0x20 [ 229.510281][T10007] __x64_sys_bind+0x7e/0x90 [ 229.510301][T10007] x64_sys_call+0x1ffd/0x2ee0 [ 229.510324][T10007] do_syscall_64+0x58/0xf0 [ 229.510352][T10007] ? clear_bhb_loop+0x50/0xa0 [ 229.510374][T10007] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 229.510405][T10007] RIP: 0033:0x7f1dd518ebe9 [ 229.510419][T10007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.510433][T10007] RSP: 002b:00007f1dd5f4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 229.510450][T10007] RAX: ffffffffffffffda RBX: 00007f1dd53b5fa0 RCX: 00007f1dd518ebe9 [ 229.510462][T10007] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 229.510481][T10007] RBP: 00007f1dd5f4f090 R08: 0000000000000000 R09: 0000000000000000 [ 229.510491][T10007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.510501][T10007] R13: 00007f1dd53b6038 R14: 00007f1dd53b5fa0 R15: 00007ffcc65b5e68 [ 229.510515][T10007] [ 229.803508][T10012] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3776'. [ 230.208256][ T10] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 230.317248][ T64] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 230.347534][ T10] usb 3-1: device descriptor read/64, error -71 [ 230.467285][ T64] usb 2-1: Using ep0 maxpacket: 8 [ 230.473628][ T64] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 230.484763][ T64] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 230.496111][ T64] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.506106][ T64] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 230.519435][ T64] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.526216][ T64] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 230.535488][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.573350][ T64] usb 2-1: config 0 descriptor?? [ 230.607245][ T10] usb 3-1: device descriptor read/64, error -71 [ 230.704538][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3784'. [ 230.857236][ T10] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 230.982412][T10026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.987240][ T10] usb 3-1: device descriptor read/64, error -71 [ 230.992678][T10026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.015380][ T64] logitech-djreceiver 0003:046D:C53A.001D: hidraw0: USB HID v0.81 Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 231.237219][ T10] usb 3-1: device descriptor read/64, error -71 [ 231.282569][ T641] usb 2-1: USB disconnect, device number 23 [ 231.332777][T10042] binder: Bad value for 'max' [ 231.347547][ T10] usb usb3-port1: attempt power cycle [ 231.507786][T10049] fuse: Bad value for 'fd' [ 231.687262][ T10] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 231.708605][ T10] usb 3-1: device descriptor read/8, error -71 [ 231.787238][ T64] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 231.838477][ T10] usb 3-1: device descriptor read/8, error -71 [ 231.948711][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.959978][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.961339][T10064] binder: Bad value for 'stats' [ 231.970198][ T64] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.988376][ T64] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.997833][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.006843][ T64] usb 4-1: config 0 descriptor?? [ 232.047228][ T331] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 232.077221][ T10] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 232.108530][ T10] usb 3-1: device descriptor read/8, error -71 [ 232.197196][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 232.204013][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.215215][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.225837][ T331] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 232.235171][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.244700][ T331] usb 2-1: config 0 descriptor?? [ 232.250935][ T10] usb 3-1: device descriptor read/8, error -71 [ 232.367374][ T10] usb usb3-port1: unable to enumerate USB device [ 232.427129][ T64] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 232.434847][ T64] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 232.442532][ T64] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 232.450041][ T64] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 232.457594][ T64] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 232.465015][ T64] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 232.472732][ T64] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 232.481915][ T64] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 232.608209][T10071] incfs: Error accessing: ./file0. [ 232.613685][T10071] incfs: mount failed -20 [ 232.613769][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 232.613789][ T36] audit: type=1400 audit(1755755731.415:688): avc: denied { mounton } for pid=10070 comm="syz.0.3800" path="/6/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 232.619794][T10071] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 232.654407][T10071] rust_binder: Write failure EINVAL in pid:16 [ 232.655858][ T331] hid-multitouch 0003:1FD2:6007.001F: item fetching failed at offset 2/5 [ 232.672500][ T331] hid-multitouch 0003:1FD2:6007.001F: probe with driver hid-multitouch failed with error -22 [ 232.750739][T10080] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3803'. [ 232.760626][T10080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.786561][T10082] netlink: 3749 bytes leftover after parsing attributes in process `syz.0.3804'. [ 232.856662][T10057] binder: Bad value for 'stats' [ 232.862440][ T331] usb 2-1: USB disconnect, device number 24 [ 233.026852][ T36] audit: type=1400 audit(1755755731.825:689): avc: denied { mounton } for pid=10093 comm="syz.0.3809" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 233.206095][T10108] overlay: ./file0 is not a directory [ 233.206170][ T36] audit: type=1400 audit(1755755732.005:690): avc: denied { mounton } for pid=10107 comm="syz.0.3815" path="/18/file0" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 233.269648][ T330] usb 4-1: USB disconnect, device number 18 [ 233.281105][T10114] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.317246][ T331] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 233.477220][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 233.484067][ T331] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 233.492438][ T331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.502699][ T331] usb 3-1: config 0 has no interface number 0 [ 233.510308][ T331] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 233.519515][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.527628][ T331] usb 3-1: Product: syz [ 233.531849][ T331] usb 3-1: Manufacturer: syz [ 233.536491][ T331] usb 3-1: SerialNumber: syz [ 233.545941][ T331] usb 3-1: config 0 descriptor?? [ 233.552632][ T331] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 233.559196][ T331] usb 3-1: No valid video chain found. [ 233.755557][ T331] usb 3-1: USB disconnect, device number 45 [ 233.846918][T10154] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 234.319129][ T36] audit: type=1400 audit(1755755733.125:691): avc: denied { read } for pid=10180 comm="syz.1.3850" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 234.341655][ T36] audit: type=1400 audit(1755755733.125:692): avc: denied { open } for pid=10180 comm="syz.1.3850" path="/13/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 234.389117][T10194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:77 [ 234.454084][T10208] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3863'. [ 234.454097][ T36] audit: type=1400 audit(1755755733.255:693): avc: denied { nlmsg_read } for pid=10207 comm="syz.1.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.510715][T10211] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 234.627232][ T64] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 234.777330][ T64] usb 4-1: Using ep0 maxpacket: 8 [ 234.785136][ T64] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 234.794265][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.802351][ T641] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 234.810125][ T64] usb 4-1: Product: syz [ 234.814391][ T64] usb 4-1: Manufacturer: syz [ 234.819156][ T64] usb 4-1: SerialNumber: syz [ 234.824767][ T64] usb 4-1: config 0 descriptor?? [ 234.967233][ T641] usb 2-1: Using ep0 maxpacket: 32 [ 234.975441][ T641] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 234.985167][ T641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.993241][ T641] usb 2-1: Product: syz [ 234.997493][ T641] usb 2-1: Manufacturer: syz [ 235.002202][ T641] usb 2-1: SerialNumber: syz [ 235.007534][ T641] usb 2-1: config 0 descriptor?? [ 235.215080][ T330] usb 2-1: USB disconnect, device number 25 [ 235.480226][ T36] audit: type=1400 audit(1755755734.295:694): avc: denied { write } for pid=10234 comm="syz.2.3874" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 235.539008][ T36] audit: type=1326 audit(1755755734.345:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.2.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9058ebe9 code=0x7ffc0000 [ 235.562652][ T36] audit: type=1326 audit(1755755734.345:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.2.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9058ebe9 code=0x7ffc0000 [ 235.586338][ T36] audit: type=1326 audit(1755755734.345:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.2.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f8b9058ebe9 code=0x7ffc0000 [ 235.662594][T10245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 236.005632][T10250] kvm: pic: non byte write [ 236.010414][T10250] kvm: pic: non byte write [ 236.014978][T10250] kvm: pic: non byte write [ 236.157245][ T641] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 236.307211][ T641] usb 2-1: Using ep0 maxpacket: 8 [ 236.313508][ T641] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 236.321980][ T641] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.332057][ T641] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.342615][ T641] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.352609][ T641] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.365736][ T641] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 236.374853][ T641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.008413][T10271] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI [ 237.021074][T10271] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 237.029582][T10271] CPU: 1 UID: 0 PID: 10271 Comm: syz.2.3889 Not tainted syzkaller #0 7151184b8e4c89fd39b0396cbf382e33ab0b9c1a [ 237.041235][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.051590][T10271] RIP: 0010:fuse_file_release+0x29e/0x400 [ 237.057354][T10271] Code: 00 74 12 48 89 df e8 81 f3 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 34 f2 a0 ff 48 ba 00 00 00 00 00 fc [ 237.077169][T10271] RSP: 0018:ffffc9000ed8fd00 EFLAGS: 00010202 [ 237.083892][T10271] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff8881214bcc00 [ 237.091977][T10271] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff88811456b078 [ 237.099985][T10271] RBP: ffffc9000ed8fd48 R08: 0000000000000003 R09: 0000000000000004 [ 237.108056][T10271] R10: dffffc0000000000 R11: fffff52001db1f70 R12: 0000000000048002 [ 237.116124][T10271] R13: ffff88811d1c7180 R14: ffff88811456b000 R15: 00000000000000c8 [ 237.124106][T10271] FS: 000055558b0d8500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 237.133051][T10271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.139729][T10271] CR2: 00007f4443f48ff0 CR3: 000000010b7f2000 CR4: 00000000003526b0 [ 237.147718][T10271] Call Trace: [ 237.151192][T10271] [ 237.154128][T10271] ? __kasan_check_write+0x18/0x20 [ 237.159285][T10271] fuse_release+0x13e/0x1b0 [ 237.164076][T10271] ? __cfi_fuse_release+0x10/0x10 [ 237.169107][T10271] __fput+0x1fb/0xa00 [ 237.173155][T10271] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 237.178727][T10271] ____fput+0x20/0x30 [ 237.182724][T10271] task_work_run+0x1e3/0x250 [ 237.187322][T10271] ? __cfi_task_work_run+0x10/0x10 [ 237.192449][T10271] ? __kasan_check_write+0x18/0x20 [ 237.197623][T10271] resume_user_mode_work+0x36/0x50 [ 237.202771][T10271] syscall_exit_to_user_mode+0x64/0xb0 [ 237.208448][T10271] do_syscall_64+0x64/0xf0 [ 237.212974][T10271] ? clear_bhb_loop+0x50/0xa0 [ 237.217747][T10271] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 237.223774][T10271] RIP: 0033:0x7f8b9058ebe9 [ 237.228214][T10271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.248179][T10271] RSP: 002b:00007ffe3a5610d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 237.256612][T10271] RAX: 0000000000000000 RBX: 0000000000039aaa RCX: 00007f8b9058ebe9 [ 237.264594][T10271] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 237.272763][T10271] RBP: 00007f8b907b7da0 R08: 0000000000000001 R09: 000000073a5613cf [ 237.280737][T10271] R10: 0000001b31a20000 R11: 0000000000000246 R12: 00007f8b907b609c [ 237.288721][T10271] R13: 00007f8b907b6090 R14: ffffffffffffffff R15: 00007ffe3a5611f0 [ 237.296842][T10271] [ 237.299872][T10271] Modules linked in: [ 237.303952][T10271] ---[ end trace 0000000000000000 ]--- [ 237.318615][ T64] usb 4-1: USB disconnect, device number 19 [ 237.320013][T10271] RIP: 0010:fuse_file_release+0x29e/0x400 [ 237.332708][T10271] Code: 00 74 12 48 89 df e8 81 f3 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 34 f2 a0 ff 48 ba 00 00 00 00 00 fc [ 237.352584][T10271] RSP: 0018:ffffc9000ed8fd00 EFLAGS: 00010202 [ 237.358857][T10271] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff8881214bcc00 [ 237.367044][T10271] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff88811456b078 [ 237.375128][T10271] RBP: ffffc9000ed8fd48 R08: 0000000000000003 R09: 0000000000000004 [ 237.383238][T10271] R10: dffffc0000000000 R11: fffff52001db1f70 R12: 0000000000048002 [ 237.391503][T10271] R13: ffff88811d1c7180 R14: ffff88811456b000 R15: 00000000000000c8 [ 237.399635][T10271] FS: 000055558b0d8500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 237.408781][T10271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.415575][T10271] CR2: 00007f44309c1f98 CR3: 000000010b7f2000 CR4: 00000000003526b0 [ 237.423626][T10271] DR0: 000000000000000a DR1: 0000000000000002 DR2: 0000000000000003 [ 237.431719][T10271] DR3: 0000000080000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 237.439947][T10271] Kernel panic - not syncing: Fatal exception [ 237.446358][T10271] Kernel Offset: disabled [ 237.450859][T10271] Rebooting in 86400 seconds..