last executing test programs: 4.405739139s ago: executing program 0 (id=1835): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000240)="85ad72d0bb44ef96e9ef0dfbc7b059e3", 0x10) 4.377481839s ago: executing program 1 (id=1836): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x1, 0x30, 0x66, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x35, 0x64, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x37, 0x31, 0x35, 0x62, 0x65, 0x34, 0x30, 0x30, 0x30, 0x0, 0x38, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000880)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x61, 0x30, 0x32, 0x66]}, &(0x7f0000000100)={0x0, "00111433445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeaff", 0x22}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_provisioning(&(0x7f0000000580), &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000800)={0x2, 0x0, @d}, 0x18, r0) keyctl$unlink(0x9, r1, r0) 4.34489658s ago: executing program 1 (id=1838): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x41, 0x0}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0xaf, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc8, 0x0, 0x6}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 4.265747312s ago: executing program 0 (id=1840): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f00000000c0)={0x3, 0x100, 0x8}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=0x40) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) 4.265524562s ago: executing program 1 (id=1841): r0 = syz_usb_connect$hid(0x5, 0x3f, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000140), 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 3.689937037s ago: executing program 1 (id=1853): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) 3.638510498s ago: executing program 1 (id=1854): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000400000000", @ANYRES32=0x0, @ANYBLOB="937b010021000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00\\'], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3.601082789s ago: executing program 1 (id=1855): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x4b, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39, 0x1, 0x1, 0x8, 0x30, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x1, [@ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0x3, 0x10, 0x40, 0x8, 0x6f, 0x20, {0x5, 0x25, 0x1, 0x1, "a2"}}}, {{0x9, 0x5, 0xf, 0x76f40b2c72d285e5, 0x400, 0xb, 0x0, 0x4, {0x9, 0x25, 0x1, 0x5, "37ce0645fe"}}}]}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.797712014s ago: executing program 4 (id=1912): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000000cd00)={'syz_tun\x00', &(0x7f000000ccc0)=@ethtool_gfeatures}) 1.795159374s ago: executing program 4 (id=1913): r0 = syz_usb_connect$hid(0x5, 0x3f, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000140), 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x31, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10003}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 1.254748228s ago: executing program 0 (id=1915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.18993112s ago: executing program 0 (id=1917): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a48", 0x8}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.18943684s ago: executing program 0 (id=1919): unshare(0x22020600) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000ffff27bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d6163736563000018000280050003000c0000000f000100060000000000000108000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 1.17022658s ago: executing program 2 (id=1920): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7000002, 0x8031, 0xffffffffffffffff, 0x6be38000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) 1.162527621s ago: executing program 0 (id=1921): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000340)={[{}]}) 1.035758524s ago: executing program 2 (id=1926): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000400)) fstat(r0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) 981.653635ms ago: executing program 2 (id=1928): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}, 0x72}, {{0x0, 0x0, 0x0}, 0x800}], 0x2, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 967.777195ms ago: executing program 2 (id=1932): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, 0x0) 746.041271ms ago: executing program 4 (id=1933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r4, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0xfffffffffffffe92, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 534.428486ms ago: executing program 4 (id=1934): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 461.974238ms ago: executing program 4 (id=1935): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 198.181085ms ago: executing program 2 (id=1939): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12, 0x0, 0x6, "2a161d2d71db"}}) 198.095834ms ago: executing program 3 (id=1940): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'pim6reg\x00', {0x2, 0x4e20, @multicast1}}) 197.950274ms ago: executing program 2 (id=1941): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) 179.830255ms ago: executing program 3 (id=1942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000040)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x40000, &(0x7f0000001000/0x40000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000100)={0x0, 0x40, 0x0, &(0x7f0000000140)=[0x1001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) 179.607715ms ago: executing program 3 (id=1943): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), 0x0}, 0x20) r1 = socket$igmp6(0xa, 0x3, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@loopback, 0x80}) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r2, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") 167.032555ms ago: executing program 3 (id=1944): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00#a\xe2\xa0&E\te\xec\xd4\xd4<\xdf\xb0\xa9k0\x8f~BsZ\x91\x7ft\xdb\xac\x9d\x87\fC\xcf\x9d\x94n\x1fP\x7f2\xb28\x00\x1a\xd2'}]}, 0x4f) write$UHID_INPUT(r1, &(0x7f0000001dc0)={0x8, {"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", 0x1000}}, 0xbe0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 166.710815ms ago: executing program 3 (id=1945): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @broadcast}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f00000000c0)=0x91) 118.036927ms ago: executing program 3 (id=1946): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) syz_usb_connect(0x5, 0x36, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x301) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010103}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x1ab880, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x7434, 0x0) 0s ago: executing program 4 (id=1947): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000008c0)={[{@mb_optimize_scan}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={@_ha_fsid={[0x4, 0xfffffffe]}, {0x1ff, 0x70, 0x8, 0x9}}, 0x100, 0x0, 0x0}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000400), 0x22920, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000190001002bbd710000000d00021880000008000700ac14143800000000002000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x85, 0x6, 0x0, 0x3, 0x10003, 0x3d, 0x400200cc4, 0xffd, 0x4, 0x9, 0x8001, 0x4, 0x2, 0xfffffffffffffffc, 0x6a, 0x8d], 0x60000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): _u:object_r:device_t tclass=chr_file permissive=1 [ 43.814849][ T30] audit: type=1400 audit(1786169648.600:240): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=615 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.834508][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 43.912835][ T39] usb 2-1: USB disconnect, device number 4 [ 43.964600][ T26] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.976428][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 43.983082][ T26] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 43.993436][ T398] usb 3-1: Using ep0 maxpacket: 16 [ 43.998752][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.007383][ T26] usb 1-1: config 0 descriptor?? [ 44.114596][ T398] usb 3-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 44.125354][ T398] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.284649][ T398] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.293808][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.302116][ T398] usb 3-1: Product: syz [ 44.306341][ T398] usb 3-1: Manufacturer: syz [ 44.311015][ T398] usb 3-1: SerialNumber: syz [ 44.428420][ T847] capability: warning: `syz.1.211' uses 32-bit capabilities (legacy support in use) [ 44.485705][ T26] hid-generic 0003:1038:12C2.0006: unknown main item tag 0x0 [ 44.493320][ T26] hid-generic 0003:1038:12C2.0006: unknown main item tag 0x0 [ 44.504668][ T26] hid-generic 0003:1038:12C2.0006: unexpected long global item [ 44.515908][ T26] hid-generic: probe of 0003:1038:12C2.0006 failed with error -22 [ 44.634707][ T398] usb 3-1: 0:2 : does not exist [ 44.700174][ T26] usb 1-1: USB disconnect, device number 6 [ 44.726496][ T398] usb 3-1: USB disconnect, device number 5 [ 44.736113][ T6] usb 5-1: USB disconnect, device number 3 [ 44.756487][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.863078][ T862] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 45.920162][ T881] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=881 comm=syz.1.223 [ 46.384619][ T30] audit: type=1400 audit(1786169651.160:241): avc: denied { nlmsg_write } for pid=894 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 46.463125][ T30] audit: type=1400 audit(1786169651.160:242): avc: denied { audit_write } for pid=894 comm="syz.4.228" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.500748][ T30] audit: type=1107 audit(1786169651.160:243): pid=894 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 47.101483][ T30] audit: type=1400 audit(1786169651.880:244): avc: denied { read append } for pid=943 comm="syz.0.250" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.138363][ T947] netlink: 100 bytes leftover after parsing attributes in process `syz.3.252'. [ 47.232013][ T30] audit: type=1400 audit(1786169651.880:245): avc: denied { open } for pid=943 comm="syz.0.250" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.283825][ T30] audit: type=1400 audit(1786169651.980:246): avc: denied { mount } for pid=938 comm="syz.4.248" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 47.976940][ T978] tipc: Can't bind to reserved service type 2 [ 48.566025][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 48.566043][ T30] audit: type=1326 audit(1786169653.330:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=989 comm="syz.4.271" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b702c20d9 code=0x0 [ 48.814556][ T398] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 48.833464][ T30] audit: type=1400 audit(1786169653.610:252): avc: denied { read } for pid=1007 comm="syz.1.274" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.993365][ T1026] xt_policy: output policy not valid in PREROUTING and INPUT [ 49.011968][ T1026] overlayfs: failed to resolve './file1': -2 [ 49.057744][ T1028] 9pnet: p9_fd_create_tcp (1028): problem connecting socket to 127.0.0.1 [ 49.094560][ T398] usb 3-1: Using ep0 maxpacket: 32 [ 49.104503][ T30] audit: type=1400 audit(1786169653.830:253): avc: denied { write } for pid=1014 comm="syz.4.276" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.285347][ T398] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 49.302241][ T398] usb 3-1: config 0 has no interface number 0 [ 49.464761][ T398] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 49.474322][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.483034][ T398] usb 3-1: Product: syz [ 49.487331][ T398] usb 3-1: Manufacturer: syz [ 49.491922][ T398] usb 3-1: SerialNumber: syz [ 49.497481][ T398] usb 3-1: config 0 descriptor?? [ 49.535103][ T398] smsc95xx v2.0.0 [ 49.849221][ T1035] SELinux: failed to load policy [ 50.404720][ T398] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 50.624554][ T398] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 50.706166][ T30] audit: type=1400 audit(1786169655.390:254): avc: denied { setopt } for pid=1065 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.823420][ T398] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 50.831761][ T398] usb 3-1: USB disconnect, device number 6 [ 51.659241][ T30] audit: type=1400 audit(1786169656.440:255): avc: denied { getopt } for pid=1094 comm="syz.4.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.679278][ T30] audit: type=1400 audit(1786169656.450:256): avc: denied { write } for pid=1093 comm="syz.1.306" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.708608][ T30] audit: type=1400 audit(1786169656.450:257): avc: denied { open } for pid=1093 comm="syz.1.306" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.465106][ T1121] overlayfs: failed to resolve './file1': -2 [ 53.046807][ T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 53.115423][ T402] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 53.152225][ T30] audit: type=1400 audit(1786169657.930:258): avc: denied { read } for pid=1141 comm="syz.2.325" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.178970][ T30] audit: type=1400 audit(1786169657.970:259): avc: denied { ioctl } for pid=1141 comm="syz.2.325" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.313358][ T1150] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1150 comm=syz.4.328 [ 53.444510][ T39] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 53.494694][ T402] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 53.514142][ T402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.537039][ T402] usb 1-1: config 0 descriptor?? [ 53.594506][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 53.694526][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 53.785986][ T1177] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1177 comm=syz.3.340 [ 53.814648][ T39] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 53.830425][ T39] usb 3-1: config 0 has no interface number 0 [ 53.838390][ T39] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 176, changing to 11 [ 53.851231][ T39] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024 [ 53.866455][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.873567][ T1183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 53.877498][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 53.896415][ T1183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 53.899468][ T6] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 53.913838][ T1183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 53.917181][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.918711][ T6] usb 2-1: config 0 descriptor?? [ 53.934741][ T39] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 53.947342][ T39] usb 3-1: config 0 has no interface number 0 [ 53.953599][ T39] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 176, changing to 11 [ 53.965060][ T39] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024 [ 54.134589][ T39] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 54.143745][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.152003][ T39] usb 3-1: Product: syz [ 54.156462][ T39] usb 3-1: Manufacturer: syz [ 54.161050][ T39] usb 3-1: SerialNumber: syz [ 54.167286][ T39] usb 3-1: config 0 descriptor?? [ 54.274541][ T398] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 54.408677][ T39] usb 3-1: USB disconnect, device number 7 [ 54.426072][ T6] hid-generic 0003:057E:2019.0007: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 54.514559][ T398] usb 5-1: Using ep0 maxpacket: 32 [ 54.634772][ T398] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 54.643123][ T398] usb 5-1: config 0 has no interface number 0 [ 54.650829][ T398] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 54.661066][ T398] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid maxpacket 5100, setting to 1024 [ 54.672831][ T398] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 54.683311][ T398] usb 5-1: config 0 interface 196 has no altsetting 0 [ 54.796278][ T39] usb 1-1: USB disconnect, device number 7 [ 54.824996][ T1200] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1200 comm=syz.0.351 [ 54.844678][ T398] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 54.854088][ T398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.860992][ T6] usb 2-1: USB disconnect, device number 5 [ 54.862689][ T398] usb 5-1: Product: syz [ 54.872242][ T398] usb 5-1: Manufacturer: syz [ 54.877021][ T398] usb 5-1: SerialNumber: syz [ 54.886660][ T398] usb 5-1: config 0 descriptor?? [ 54.904591][ T1191] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 54.915111][ T1191] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 55.027163][ T30] audit: type=1400 audit(1786169659.810:260): avc: denied { call } for pid=1223 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 55.047155][ T1224] binder: 1223:1224 ioctl c0306201 200000000680 returned -14 [ 55.054661][ T30] audit: type=1400 audit(1786169659.840:261): avc: denied { transfer } for pid=1223 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 55.097726][ T1227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 56.094456][ C0] sched: RT throttling activated [ 56.179041][ T398] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 56.188727][ T398] ipheth: probe of 5-1:0.196 failed with error -22 [ 57.297077][ T398] usb 5-1: USB disconnect, device number 4 [ 58.134517][ T1261] xt_CT: No such helper "netbios-ns" [ 58.368260][ T1267] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 58.472934][ T1281] fuse: Unknown parameter 'audit' [ 59.261068][ T30] audit: type=1400 audit(1786169664.040:262): avc: denied { read } for pid=1296 comm="syz.4.392" name="inject" dev="tracefs" ino=7689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 59.485768][ T30] audit: type=1400 audit(1786169664.200:263): avc: denied { create } for pid=1303 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.520006][ T296] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 59.535107][ T296] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.612771][ T30] audit: type=1400 audit(1786169664.390:264): avc: denied { create } for pid=1322 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.814502][ T861] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 59.945551][ T26] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 59.959051][ T1335] tipc: Started in network mode [ 59.964126][ T1335] tipc: Node identity ac14140f, cluster identity 4711 [ 59.971491][ T1335] tipc: New replicast peer: 172.30.0.4 [ 59.977417][ T1335] tipc: Enabled bearer , priority 10 [ 60.054492][ T861] usb 1-1: Using ep0 maxpacket: 8 [ 60.094481][ T296] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 60.174527][ T861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.181308][ T861] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 60.190938][ T861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.199322][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 60.205430][ T861] usb 1-1: config 0 descriptor?? [ 60.484936][ T26] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 60.494537][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 60.504039][ T26] usb 3-1: Product: syz [ 60.511518][ T26] usb 3-1: Manufacturer: syz [ 60.514585][ T296] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.516524][ T26] usb 3-1: SerialNumber: syz [ 60.532040][ T26] usb 3-1: config 0 descriptor?? [ 60.684618][ T296] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 60.694284][ T296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.696815][ T861] logitech-djreceiver 0003:046D:C534.0009: unknown main item tag 0x4 [ 60.703179][ T296] usb 5-1: Product: syz [ 60.716958][ T296] usb 5-1: Manufacturer: syz [ 60.721641][ T296] usb 5-1: SerialNumber: syz [ 60.727295][ T861] logitech-djreceiver 0003:046D:C534.0009: ignoring exceeding usage max [ 60.737041][ T861] logitech-djreceiver 0003:046D:C534.0009: unknown main item tag 0x4 [ 60.746298][ T861] logitech-djreceiver 0003:046D:C534.0009: hidraw0: USB HID v0.81 Device [HID 046d:c534] on usb-dummy_hcd.0-1/input0 [ 60.778936][ T26] usb 3-1: USB disconnect, device number 8 [ 60.899240][ T861] usb 1-1: USB disconnect, device number 8 [ 61.094563][ T296] tipc: Node number set to 2886997007 [ 61.303692][ T1355] tmpfs: Unsupported parameter 'mpol' [ 61.421102][ T861] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 61.429404][ T861] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 61.437740][ T861] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 61.764530][ T861] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 61.924526][ T864] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 62.014516][ T861] usb 2-1: Using ep0 maxpacket: 8 [ 62.080956][ T1388] overlayfs: failed to clone lowerpath [ 62.134605][ T861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.144927][ T861] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 62.305312][ T864] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 62.320357][ T864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.330684][ T861] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 62.340120][ T861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.348720][ T861] usb 2-1: Product: syz [ 62.353010][ T861] usb 2-1: Manufacturer: syz [ 62.358061][ T861] usb 2-1: SerialNumber: syz [ 62.414640][ T864] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 62.423783][ T864] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 62.431818][ T864] usb 1-1: Manufacturer: syz [ 62.440872][ T864] usb 1-1: config 0 descriptor?? [ 62.724979][ T861] usb 2-1: unit 4 not found! [ 62.774186][ T861] usb 2-1: USB disconnect, device number 6 [ 62.885927][ T39] usb 5-1: USB disconnect, device number 5 [ 62.987404][ T30] audit: type=1400 audit(1786169667.760:265): avc: denied { getopt } for pid=1402 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.993644][ T1405] tmpfs: Unsupported parameter 'mpol' [ 63.043761][ T1410] device syzkaller0 entered promiscuous mode [ 63.051730][ T1410] tipc: Started in network mode [ 63.056898][ T1410] tipc: Node identity 928ef6b18f6d, cluster identity 4711 [ 63.057463][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.064306][ T1410] tipc: Enabled bearer , priority 0 [ 63.092285][ T1409] tipc: Resetting bearer [ 63.099848][ T1409] tipc: Disabling bearer [ 63.152369][ T30] audit: type=1400 audit(1786169667.930:266): avc: denied { read write } for pid=1411 comm="syz.4.438" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.192097][ T30] audit: type=1400 audit(1786169667.930:267): avc: denied { open } for pid=1411 comm="syz.4.438" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.934183][ T1437] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 64.930980][ T654] usb 1-1: USB disconnect, device number 9 [ 64.956483][ T30] audit: type=1400 audit(1786169669.740:268): avc: denied { write } for pid=1448 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 65.064703][ T30] audit: type=1400 audit(1786169669.850:269): avc: denied { search } for pid=1471 comm="syz.2.464" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.140529][ T1470] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 65.156075][ T1479] 9pnet: p9_fd_create_tcp (1479): problem connecting socket to 127.0.0.1 [ 65.633099][ T1500] device bridge1 entered promiscuous mode [ 65.704550][ T654] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 65.733039][ T1503] tmpfs: Unsupported parameter 'mpol' [ 65.764601][ T1456] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 65.804497][ T296] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 66.094575][ T654] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.124859][ T1456] usb 3-1: config 171 has an invalid interface number: 109 but max is 0 [ 66.134117][ T1456] usb 3-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 66.145066][ T1456] usb 3-1: config 171 has no interface number 0 [ 66.151968][ T1456] usb 3-1: config 171 interface 109 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 66.164098][ T1456] usb 3-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 66.294635][ T654] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 66.303857][ T654] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.312187][ T654] usb 1-1: Product: syz [ 66.319845][ T654] usb 1-1: Manufacturer: syz [ 66.325122][ T654] usb 1-1: SerialNumber: syz [ 66.334549][ T1456] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 66.343966][ T1456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.352299][ T1456] usb 3-1: Product: syz [ 66.356788][ T1456] usb 3-1: Manufacturer: syz [ 66.361688][ T1456] usb 3-1: SerialNumber: syz [ 66.374607][ T296] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 66.388329][ T296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.396672][ T296] usb 2-1: Product: syz [ 66.401038][ T296] usb 2-1: Manufacturer: syz [ 66.406222][ T296] usb 2-1: SerialNumber: syz [ 66.412398][ T296] usb 2-1: config 0 descriptor?? [ 66.584896][ T296] usb 1-1: USB disconnect, device number 10 [ 66.608466][ T6] usb 3-1: USB disconnect, device number 9 [ 66.678137][ T1524] 9pnet: Could not find request transport: =0xffffffffffffffff [ 66.727909][ T1532] fuse: Bad value for 'fd' [ 66.744188][ T1534] fuse: Bad value for 'fd' [ 66.805586][ T1544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 66.868065][ T1545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 67.046045][ T30] audit: type=1400 audit(1786169671.830:270): avc: denied { write } for pid=1547 comm="syz.4.497" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 67.069402][ T30] audit: type=1400 audit(1786169671.830:271): avc: denied { ioctl } for pid=1547 comm="syz.4.497" path="/108/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 67.151877][ T30] audit: type=1400 audit(1786169671.930:272): avc: denied { read } for pid=1554 comm="syz.4.500" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 67.178158][ T30] audit: type=1400 audit(1786169671.930:273): avc: denied { open } for pid=1554 comm="syz.4.500" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 67.203727][ T30] audit: type=1400 audit(1786169671.960:274): avc: denied { ioctl } for pid=1554 comm="syz.4.500" path="/dev/loop-control" dev="devtmpfs" ino=115 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 67.384514][ T1456] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 67.744712][ T1456] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 67.765595][ T1456] usb 1-1: config 1 has no interface number 0 [ 67.785570][ T1456] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 67.796275][ T1456] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 576 [ 67.806583][ T1456] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 68.740157][ T26] usb 2-1: USB disconnect, device number 7 [ 68.935968][ T1456] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 68.945227][ T1456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.953211][ T1456] usb 1-1: Product: syz [ 68.958063][ T1456] usb 1-1: Manufacturer: syz [ 68.962686][ T1456] usb 1-1: SerialNumber: syz [ 68.984586][ T1559] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 68.991669][ T1559] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 69.054545][ T296] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 69.204503][ T26] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 69.208221][ T6] usb 1-1: USB disconnect, device number 11 [ 69.304490][ T296] usb 3-1: Using ep0 maxpacket: 8 [ 69.464608][ T296] usb 3-1: unable to get BOS descriptor or descriptor too short [ 69.544620][ T296] usb 3-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 69.555246][ T296] usb 3-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 69.564596][ T26] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 69.573237][ T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.649268][ T1634] fuse: Invalid rootmode [ 69.674615][ T26] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 69.684012][ T26] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 69.692098][ T26] usb 2-1: Manufacturer: syz [ 69.697260][ T26] usb 2-1: config 0 descriptor?? [ 69.714622][ T296] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 69.723865][ T296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.732434][ T296] usb 3-1: Product: syz [ 69.736814][ T296] usb 3-1: Manufacturer: syz [ 69.741720][ T296] usb 3-1: SerialNumber: syz [ 69.847407][ T1648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=120 sclass=netlink_route_socket pid=1648 comm=syz.0.539 [ 69.948331][ T26] usb 2-1: USB disconnect, device number 8 [ 70.142847][ T30] audit: type=1400 audit(1786169674.920:275): avc: denied { write } for pid=1661 comm="syz.0.545" name="anycast6" dev="proc" ino=4026532518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 70.392936][ T296] usb 3-1: USB disconnect, device number 10 [ 70.950212][ T30] audit: type=1400 audit(1786169675.730:276): avc: denied { bind } for pid=1674 comm="syz.4.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.992245][ T30] audit: type=1326 audit(1786169675.770:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1676 comm="syz.2.549" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f1fc870d9 code=0x0 [ 71.162950][ T1701] 9pnet: p9_fd_create_tcp (1701): problem binding to privport [ 71.991686][ T30] audit: type=1400 audit(1786169676.030:278): avc: denied { create } for pid=1696 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.013458][ T30] audit: type=1400 audit(1786169676.040:279): avc: denied { ioctl } for pid=1696 comm="syz.3.558" path="socket:[21615]" dev="sockfs" ino=21615 ioctlcmd=0x6e82 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.047385][ T30] audit: type=1400 audit(1786169676.040:280): avc: denied { connect } for pid=1696 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.067543][ T30] audit: type=1400 audit(1786169676.830:281): avc: denied { setopt } for pid=1706 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.073141][ T1715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 72.091094][ T30] audit: type=1400 audit(1786169676.830:282): avc: denied { getopt } for pid=1706 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.131422][ T1718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.563'. [ 72.534345][ T1456] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 72.712058][ T1746] 9pnet: p9_fd_create_tcp (1746): problem binding to privport [ 73.194376][ T30] audit: type=1400 audit(1786169677.970:283): avc: denied { read } for pid=1761 comm="syz.3.580" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.234565][ T1456] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.259736][ T1456] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 73.283420][ T1456] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.292818][ T1456] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 73.304747][ T1456] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 73.334913][ T296] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 73.444585][ T1456] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.455097][ T1456] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.464058][ T1456] usb 1-1: Product: syz [ 73.468385][ T1456] usb 1-1: Manufacturer: syz [ 73.504892][ T1456] cdc_wdm 1-1:1.0: skipping garbage [ 73.512273][ T1456] cdc_wdm 1-1:1.0: skipping garbage [ 73.518794][ T1456] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 73.704549][ T296] usb 5-1: config 100 has an invalid interface number: 9 but max is 0 [ 73.712837][ T296] usb 5-1: config 100 has no interface number 0 [ 73.719148][ T296] usb 5-1: config 100 interface 9 has no altsetting 0 [ 73.884566][ T296] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ffc, bcdDevice=be.6a [ 73.893959][ T296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.902099][ T296] usb 5-1: Product: syz [ 73.906669][ T296] usb 5-1: Manufacturer: syz [ 73.911420][ T296] usb 5-1: SerialNumber: syz [ 74.134502][ T6] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 74.315346][ T296] usb 5-1: USB disconnect, device number 6 [ 74.494544][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.664537][ T6] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 74.674027][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.682523][ T6] usb 3-1: Product: syz [ 74.687121][ T6] usb 3-1: Manufacturer: syz [ 74.691805][ T6] usb 3-1: SerialNumber: syz [ 74.701761][ T6] usb 3-1: config 0 descriptor?? [ 74.956773][ T296] usb 3-1: USB disconnect, device number 11 [ 75.038978][ T30] audit: type=1326 audit(1786169679.820:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1852 comm="syz.3.617" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5e5ce90d9 code=0x0 [ 75.278768][ T654] usb 1-1: USB disconnect, device number 12 [ 75.373670][ T30] audit: type=1400 audit(1786169680.150:285): avc: denied { load_policy } for pid=1872 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 75.373748][ T1873] SELinux: failed to load policy [ 75.456179][ T1882] tun0: tun_chr_ioctl cmd 2148553947 [ 75.543677][ T30] audit: type=1400 audit(1786169680.320:286): avc: denied { search } for pid=1884 comm="syz.0.632" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 75.697109][ T30] audit: type=1400 audit(1786169680.480:287): avc: denied { ioctl } for pid=1895 comm="syz.0.638" path="pid:[4026532430]" dev="nsfs" ino=4026532430 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.753186][ T30] audit: type=1400 audit(1786169680.520:288): avc: denied { ioctl } for pid=1903 comm="syz.2.640" path="/dev/fuse" dev="devtmpfs" ino=91 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 75.789130][ T1908] binder: 1905:1908 ioctl c018620c 200000000040 returned -22 [ 75.895157][ T1923] netlink: 60 bytes leftover after parsing attributes in process `syz.0.649'. [ 75.924548][ T1456] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 76.184704][ T402] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 76.324666][ T1456] usb 5-1: unable to get BOS descriptor or descriptor too short [ 76.349885][ T1943] loop1: detected capacity change from 0 to 128 [ 76.354553][ T1941] binder: 1940:1941 unknown command 0 [ 76.361610][ T1941] binder: 1940:1941 ioctl c0306201 2000000004c0 returned -22 [ 76.387680][ T1943] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,block_validity,,errors=continue. Quota mode: none. [ 76.401236][ T1943] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.412008][ T1456] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 76.454498][ T402] usb 1-1: Using ep0 maxpacket: 32 [ 76.469567][ T1948] loop2: detected capacity change from 0 to 512 [ 76.480593][ T1948] EXT4-fs (loop2): Ignoring removed nobh option [ 76.496746][ T1948] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 76.512222][ T1948] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.542707][ T30] audit: type=1400 audit(1786169681.320:289): avc: denied { write } for pid=1952 comm="syz.1.661" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 76.543513][ T1953] binder: binder_mmap: 1952 200000ffe000-200000fff000 bad vm_flags failed -1 [ 76.604747][ T1456] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 76.614733][ T1456] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.622893][ T1456] usb 5-1: Product: syz [ 76.627171][ T30] audit: type=1400 audit(1786169681.400:290): avc: denied { wake_alarm } for pid=1961 comm="syz.2.665" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.649891][ T1456] usb 5-1: Manufacturer: syz [ 76.655095][ T1456] usb 5-1: SerialNumber: syz [ 76.726388][ T1970] loop2: detected capacity change from 0 to 256 [ 76.763363][ T1970] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 76.795113][ T402] usb 1-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40 [ 76.805219][ T402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.830400][ T402] usb 1-1: Product: syz [ 76.834968][ T402] usb 1-1: Manufacturer: syz [ 76.839784][ T402] usb 1-1: SerialNumber: syz [ 76.865441][ T30] audit: type=1400 audit(1786169681.650:291): avc: denied { ioctl } for pid=1978 comm="syz.3.672" path="socket:[22923]" dev="sockfs" ino=22923 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.865685][ T1979] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.897544][ T1979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.993711][ T1456] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 77.304519][ T30] audit: type=1400 audit(1786169681.890:292): avc: denied { write } for pid=1988 comm="syz.3.677" path="socket:[22938]" dev="sockfs" ino=22938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.365113][ T1456] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 77.375265][ T1456] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 77.689400][ T2010] loop1: detected capacity change from 0 to 512 [ 77.746587][ T2010] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.758868][ T2010] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.775331][ T30] audit: type=1400 audit(1786169682.560:293): avc: denied { append } for pid=2009 comm="syz.1.683" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.799262][ T30] audit: type=1400 audit(1786169682.560:294): avc: denied { map } for pid=2009 comm="syz.1.683" path="/dev/loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.831961][ T2010] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.683: corrupted inode contents [ 77.844318][ T2010] EXT4-fs error (device loop1): ext4_dirty_inode:6108: inode #2: comm syz.1.683: mark_inode_dirty error [ 77.857112][ T2010] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.683: corrupted inode contents [ 77.859896][ T1456] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 77.899953][ T2010] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.683: mark_inode_dirty error [ 77.910374][ T1456] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 78.024609][ T1456] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 78.076198][ T402] usb 1-1: invalid MIDI in EP 0 [ 78.085428][ T1456] usb 5-1: USB disconnect, device number 7 [ 78.094913][ T402] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 78.121805][ T402] usb 1-1: USB disconnect, device number 13 [ 78.145980][ T2058] loop2: detected capacity change from 0 to 128 [ 78.164104][ T2058] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.274476][ T423] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 78.315629][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.585616][ T2061] netlink: 'syz.4.706': attribute type 5 has an invalid length. [ 78.644589][ T423] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 78.654056][ T423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.846865][ T2066] syz.0.708 (2066) used greatest stack depth: 21256 bytes left [ 78.874547][ T296] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 79.114492][ T296] usb 5-1: Using ep0 maxpacket: 32 [ 79.234583][ T296] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 79.242992][ T296] usb 5-1: config 0 has no interface number 0 [ 79.249427][ T296] usb 5-1: too many endpoints for config 0 interface 116 altsetting 101: 115, using maximum allowed: 30 [ 79.261311][ T296] usb 5-1: config 0 interface 116 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 79.275455][ T296] usb 5-1: config 0 interface 116 has no altsetting 0 [ 79.282335][ T296] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 79.291983][ T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.306172][ T296] usb 5-1: config 0 descriptor?? [ 79.677062][ T2096] UDC core: couldn't find an available UDC or it's busy: -16 [ 79.684595][ T2096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.722288][ T2098] loop2: detected capacity change from 0 to 256 [ 79.801149][ T2098] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.841912][ T2112] syz.3.728 (2112) used greatest stack depth: 21192 bytes left [ 79.876028][ T2098] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 79.888895][ T2098] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 79.963970][ T2130] netlink: 76 bytes leftover after parsing attributes in process `syz.3.737'. [ 80.032709][ T2145] binder: 2143:2145 unknown command 0 [ 80.038515][ T2145] binder: 2143:2145 ioctl c0306201 2000000004c0 returned -22 [ 80.383451][ T2156] loop2: detected capacity change from 0 to 512 [ 80.408593][ T2156] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.422301][ T2156] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.434048][ T2156] EXT4-fs (loop2): 1 truncate cleaned up [ 80.440487][ T2156] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,noinit_itable,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 80.465765][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 80.465783][ T30] audit: type=1400 audit(1786169685.250:311): avc: denied { create } for pid=2155 comm="syz.2.747" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 80.496879][ T2170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.753'. [ 80.506238][ T30] audit: type=1400 audit(1786169685.280:312): avc: denied { remove_name } for pid=2155 comm="syz.2.747" name="control" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.529538][ T30] audit: type=1400 audit(1786169685.280:313): avc: denied { rmdir } for pid=2155 comm="syz.2.747" name="control" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 80.627491][ T2176] mmap: syz.2.754 (2176): VmData 40828928 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 80.788388][ T2180] loop2: detected capacity change from 0 to 1024 [ 80.807928][ T2180] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 80.818094][ T2180] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 80.826205][ T2180] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,nojournal_checksum,resgid=0x0000000000000000,bsdgroups,,errors=continue. Quota mode: writeback. [ 80.857851][ T30] audit: type=1400 audit(1786169685.640:314): avc: denied { rmdir } for pid=2179 comm="syz.2.757" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.882271][ T2186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 80.892716][ T2180] EXT4-fs warning (device loop2): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 81.019114][ T6] usb 2-1: USB disconnect, device number 9 [ 81.380484][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 81.392606][ T2211] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 81.401769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.415368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 81.423778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.432525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.441304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.452868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.462432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.578009][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 81.597887][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.658743][ T296] usb 5-1: string descriptor 0 read error: -71 [ 81.661808][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 81.900583][ T30] audit: type=1400 audit(1786169686.670:315): avc: denied { bind } for pid=2221 comm="syz.4.770" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.912677][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.921258][ T296] usb 5-1: USB disconnect, device number 8 [ 81.938927][ T30] audit: type=1400 audit(1786169686.670:316): avc: denied { name_bind } for pid=2221 comm="syz.4.770" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 81.943431][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.959901][ T30] audit: type=1400 audit(1786169686.670:317): avc: denied { node_bind } for pid=2221 comm="syz.4.770" saddr=ff01::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 81.969993][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.990618][ T30] audit: type=1400 audit(1786169686.680:318): avc: denied { create } for pid=2214 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 81.999584][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.027105][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.050702][ T2231] binder: 2230:2231 ioctl c0306201 200000000080 returned -14 [ 82.060043][ T2231] binder: 2230:2231 ioctl c0306201 2000000003c0 returned -14 [ 82.173193][ T30] audit: type=1400 audit(1786169686.950:319): avc: denied { setattr } for pid=2248 comm="syz.4.782" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.594551][ T1456] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 82.602343][ T30] audit: type=1400 audit(1786169687.380:320): avc: denied { create } for pid=2272 comm="syz.3.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 82.694520][ T20] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 82.864536][ T398] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 82.956534][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 82.984568][ T1456] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.996657][ T1456] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 83.007918][ T1456] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 83.114603][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.124954][ T20] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.174638][ T1456] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 83.214763][ T1456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.223498][ T1456] usb 2-1: Product: syz [ 83.228538][ T1456] usb 2-1: Manufacturer: syz [ 83.233273][ T1456] usb 2-1: SerialNumber: syz [ 83.254547][ T398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.266149][ T398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.276490][ T398] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.294561][ T1456] usb 2-1: config 0 descriptor?? [ 83.302563][ T398] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.312830][ T398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.362213][ T398] usb 5-1: config 0 descriptor?? [ 83.454606][ T20] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 83.464015][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.472251][ T20] usb 3-1: Product: syz [ 83.476527][ T20] usb 3-1: Manufacturer: syz [ 83.481164][ T20] usb 3-1: SerialNumber: syz [ 83.536895][ T654] usb 2-1: USB disconnect, device number 10 [ 83.825361][ T398] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 83.837197][ T398] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 83.845253][ T20] usb 3-1: unit 6 not found! [ 83.855672][ T20] usb 3-1: unit 48 not found! [ 83.865168][ T20] usb 3-1: USB disconnect, device number 12 [ 84.033960][ T398] usb 5-1: USB disconnect, device number 9 [ 84.430052][ T2328] loop1: detected capacity change from 0 to 1024 [ 84.453118][ T2330] binder: 2329:2330 unknown command 0 [ 84.459991][ T2330] binder: 2329:2330 ioctl c0306201 2000000004c0 returned -22 [ 84.462525][ T2335] fuse: Bad value for 'fd' [ 84.471410][ T2328] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 84.493941][ T2328] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,jqfmt=vfsv1,noquota,delalloc,journal_dev=0x0000000000000008,grpjquota=,,errors=continue. Quota mode: none. [ 84.513181][ T2328] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.565049][ T2347] loop2: detected capacity change from 0 to 512 [ 84.601365][ T2347] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.630606][ T2356] loop4: detected capacity change from 0 to 2048 [ 84.640082][ T2347] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.822: Failed to acquire dquot type 1 [ 84.652072][ T2362] loop1: detected capacity change from 0 to 2048 [ 84.653805][ T2347] EXT4-fs (loop2): 1 truncate cleaned up [ 84.664524][ T2347] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,discard,nodelalloc,minixdf,min_batch_time=0x0000000000000002,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 84.693956][ T2347] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.822: Failed to acquire dquot type 1 [ 84.716087][ T2362] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.726939][ T2362] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.751121][ T2356] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.762485][ T2356] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.805910][ T2372] loop1: detected capacity change from 0 to 512 [ 84.833050][ T2372] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.886480][ T2377] binder: 2375:2377 unknown command 0 [ 84.892205][ T2377] binder: 2375:2377 ioctl c0306201 2000000004c0 returned -22 [ 85.041851][ T2383] using random self ethernet address [ 85.051171][ T2383] using random host ethernet address [ 85.061677][ T2389] kvm: pic: non byte read [ 85.067042][ T2389] kvm: pic: level sensitive irq not supported [ 85.067112][ T2389] kvm: pic: non byte read [ 85.081167][ T2389] kvm: pic: level sensitive irq not supported [ 85.081236][ T2389] kvm: pic: non byte read [ 85.092996][ T2389] kvm: pic: level sensitive irq not supported [ 85.093074][ T2389] kvm: pic: non byte read [ 85.103345][ T2393] loop4: detected capacity change from 0 to 128 [ 85.104721][ T2389] kvm: pic: level sensitive irq not supported [ 85.111687][ T2389] kvm: pic: non byte read [ 85.113725][ T2393] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.118391][ T2389] kvm: pic: level sensitive irq not supported [ 85.136776][ T2389] kvm: pic: non byte read [ 85.140094][ T2393] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.197249][ T8] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.206631][ T1456] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 85.613375][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 85.613390][ T30] audit: type=1400 audit(1786169690.390:389): avc: denied { create } for pid=2407 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.639942][ T30] audit: type=1400 audit(1786169690.390:390): avc: denied { bind } for pid=2407 comm="syz.2.844" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.662197][ T30] audit: type=1400 audit(1786169690.400:391): avc: denied { name_bind } for pid=2407 comm="syz.2.844" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 85.683864][ T1456] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.686334][ T30] audit: type=1400 audit(1786169690.400:392): avc: denied { node_bind } for pid=2407 comm="syz.2.844" saddr=255.255.255.255 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 85.715726][ T654] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 85.755445][ T2412] binder: 2411:2412 unknown command 0 [ 85.760933][ T2412] binder: 2411:2412 ioctl c0306201 2000000004c0 returned -22 [ 85.764865][ T1456] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.843602][ T30] audit: type=1400 audit(1786169690.620:393): avc: denied { write } for pid=2420 comm="syz.0.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.872241][ T30] audit: type=1400 audit(1786169690.650:394): avc: denied { append } for pid=2422 comm="syz.0.851" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.898708][ T30] audit: type=1400 audit(1786169690.650:395): avc: denied { read write } for pid=2422 comm="syz.0.851" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 85.933100][ T30] audit: type=1400 audit(1786169690.650:396): avc: denied { open } for pid=2422 comm="syz.0.851" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 85.957151][ T30] audit: type=1400 audit(1786169690.650:397): avc: denied { map } for pid=2422 comm="syz.0.851" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 86.026675][ T30] audit: type=1400 audit(1786169690.810:398): avc: denied { write } for pid=2430 comm="syz.0.854" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 86.054648][ T1456] usb 2-1: string descriptor 0 read error: -22 [ 86.114578][ T423] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 86.115835][ T1456] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 86.131967][ T1456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.185087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 86.193450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.201872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 86.210955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.219528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.227881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.236555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.245230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.354584][ T654] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 86.364319][ T654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.372493][ T654] usb 5-1: Product: syz [ 86.376949][ T654] usb 5-1: Manufacturer: syz [ 86.378206][ T2381] loop1: detected capacity change from 0 to 512 [ 86.381577][ T654] usb 5-1: SerialNumber: syz [ 86.385926][ T654] usb 5-1: config 0 descriptor?? [ 86.426137][ T2381] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 86.438858][ T2381] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.484584][ T423] usb 3-1: config 100 has an invalid interface number: 9 but max is 0 [ 86.493160][ T423] usb 3-1: config 100 has no interface number 0 [ 86.499617][ T423] usb 3-1: config 100 interface 9 has no altsetting 0 [ 86.664574][ T423] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ffc, bcdDevice=be.6a [ 86.675465][ T423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.683726][ T423] usb 3-1: Product: syz [ 86.688149][ T423] usb 3-1: Manufacturer: syz [ 86.693033][ T423] usb 3-1: SerialNumber: syz [ 86.894645][ T1456] usb 2-1: current rate 262176 is different from the runtime rate 48000 [ 86.904543][ T654] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 86.957997][ T2441] syz.3.857 (2441) used greatest stack depth: 20736 bytes left [ 87.099658][ T423] usb 3-1: USB disconnect, device number 13 [ 87.101299][ T402] usb 2-1: USB disconnect, device number 11 [ 87.154653][ T654] usb 1-1: Using ep0 maxpacket: 32 [ 87.274592][ T654] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.286259][ T654] usb 1-1: New USB device found, idVendor=0a5c, idProduct=0bdc, bcdDevice=ae.30 [ 87.295760][ T654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.305536][ T654] usb 1-1: config 0 descriptor?? [ 87.454114][ T2464] loop2: detected capacity change from 0 to 512 [ 87.497807][ T2464] EXT4-fs (loop2): Ignoring removed bh option [ 87.504703][ T2464] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 87.513425][ T2464] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.866: inode has both inline data and extents flags [ 87.527484][ T2464] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.866: couldn't read orphan inode 15 (err -117) [ 87.539609][ T2464] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000009,prjquota,data_err=ignore,bh,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 87.552867][ T2447] UDC core: couldn't find an available UDC or it's busy: -16 [ 87.566755][ T2447] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 87.579152][ T2446] rtc_cmos 00:00: Alarms can be up to one day in the future [ 87.588662][ T654] usb 1-1: USB disconnect, device number 14 [ 87.666915][ T2474] loop2: detected capacity change from 0 to 512 [ 87.681839][ T2474] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.842904][ T2474] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.868: invalid indirect mapped block 9 (level 0) [ 87.903420][ T1456] usb 5-1: USB disconnect, device number 10 [ 87.973132][ T2479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.870'. [ 87.979538][ T2474] EXT4-fs (loop2): 1 truncate cleaned up [ 87.991813][ T2474] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none. [ 88.018643][ T2481] binder: 2480:2481 unknown command 0 [ 88.025668][ T2481] binder: 2480:2481 ioctl c0306201 2000000004c0 returned -22 [ 88.044336][ T2484] loop4: detected capacity change from 0 to 512 [ 88.100388][ T2484] EXT4-fs (loop4): Test dummy encryption mode enabled [ 88.111864][ T2484] EXT4-fs (loop4): Test dummy encryption mode enabled [ 88.128256][ T2484] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.147114][ T2484] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x000000000000000a,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000007,errors=remount-ro,usrquota,test_dummy_encryption,min_batch_time=0x0000000000000004,. Quota mode: writeback. [ 88.163034][ T2488] kvm: pic: non byte read [ 88.191562][ T2488] kvm: pic: level sensitive irq not supported [ 88.191634][ T2488] kvm: pic: non byte read [ 88.192607][ T654] rtc_cmos 00:00: Alarms can be up to one day in the future [ 88.198836][ T2488] kvm: pic: level sensitive irq not supported [ 88.210389][ T2488] kvm: pic: non byte read [ 88.223253][ T2488] kvm: pic: level sensitive irq not supported [ 88.223324][ T2488] kvm: pic: non byte read [ 88.235219][ T2488] kvm: pic: level sensitive irq not supported [ 88.235621][ T2488] kvm: pic: level sensitive irq not supported [ 88.239110][ T654] rtc_cmos 00:00: Alarms can be up to one day in the future [ 88.261816][ T2484] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 88.270696][ T654] rtc_cmos 00:00: Alarms can be up to one day in the future [ 88.285851][ T2484] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.873: Directory hole found for htree leaf block 0 [ 88.299796][ T2484] EXT4-fs (loop4): Remounting filesystem read-only [ 88.307002][ T654] rtc_cmos 00:00: Alarms can be up to one day in the future [ 88.318593][ T654] rtc rtc0: __rtc_set_alarm: err=-22 [ 88.339034][ T2501] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002] [ 88.348629][ T2501] System zones: 0-2, 18-18, 34-35 [ 88.356601][ T2501] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,debug,sysvgroups,grpjquota=,. Quota mode: writeback. [ 88.371681][ T2501] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.458355][ T2501] EXT4-fs error (device loop2): ext4_ext_remove_space:2944: inode #15: comm syz.2.879: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 88.477465][ T2501] EXT4-fs (loop2): Remounting filesystem read-only [ 88.486377][ T2501] EXT4-fs error (device loop2): ext4_evict_inode:296: comm syz.2.879: couldn't truncate inode 15 (err -117) [ 88.499356][ T2501] EXT4-fs (loop2): Remounting filesystem read-only [ 88.901503][ T2527] binder: 2526:2527 ioctl c0306201 2000000002c0 returned -14 [ 89.471428][ T2564] netlink: 156 bytes leftover after parsing attributes in process `syz.1.904'. [ 89.560408][ T2556] kvm: pic: single mode not supported [ 89.560552][ T2556] kvm: pic: single mode not supported [ 89.567163][ T2556] kvm: pic: single mode not supported [ 89.574937][ T2556] kvm: pic: single mode not supported [ 89.583408][ T2556] kvm: pic: single mode not supported [ 89.590333][ T2556] kvm: pic: single mode not supported [ 89.598214][ T2556] kvm: pic: single mode not supported [ 89.604108][ T2556] kvm: pic: single mode not supported [ 89.639177][ T2556] kvm: pic: single mode not supported [ 89.644877][ T2556] kvm: pic: single mode not supported [ 89.766020][ T2594] set_capacity_and_notify: 1 callbacks suppressed [ 89.766032][ T2594] loop2: detected capacity change from 0 to 256 [ 89.842699][ T2594] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.849772][ T2596] netlink: 124 bytes leftover after parsing attributes in process `syz.4.917'. [ 89.862308][ T2594] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 89.867274][ T2596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 89.880451][ T2594] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 89.950934][ T2601] loop4: detected capacity change from 0 to 256 [ 89.961034][ T2601] exfat: Deprecated parameter 'utf8' [ 89.966760][ T2601] exfat: Deprecated parameter 'utf8' [ 89.972637][ T2601] exfat: Deprecated parameter 'utf8' [ 89.983744][ T2601] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 89.997394][ T6] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 90.089270][ T2608] binder: 2607:2608 unknown command 0 [ 90.102089][ T2608] binder: 2607:2608 ioctl c0306201 2000000004c0 returned -22 [ 90.104792][ T2610] loop2: detected capacity change from 0 to 1024 [ 90.166025][ T2610] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 90.186455][ T2610] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.249353][ T2618] ipt_REJECT: TCP_RESET invalid for non-tcp [ 90.392015][ T2610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.923'. [ 90.416903][ T2622] loop4: detected capacity change from 0 to 128 [ 90.623901][ T2631] loop2: detected capacity change from 0 to 256 [ 90.672740][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 90.672758][ T30] audit: type=1400 audit(1786169695.450:435): avc: denied { mount } for pid=2630 comm="syz.2.929" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 90.694538][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.713424][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.723719][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.737237][ T6] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.746657][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.756366][ T6] usb 1-1: config 0 descriptor?? [ 90.854677][ T2631] bpf setsockopt: ignoring program buffer with optlen=425315382 (max_optlen=4096) [ 91.030513][ T30] audit: type=1400 audit(1786169695.810:436): avc: denied { write } for pid=2638 comm="syz.2.931" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.057097][ T2639] binder: 2638:2639 ioctl c0046209 0 returned -22 [ 91.064207][ T30] audit: type=1400 audit(1786169695.810:437): avc: denied { relabelfrom } for pid=2636 comm="syz.1.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 91.086396][ T30] audit: type=1400 audit(1786169695.810:438): avc: denied { relabelto } for pid=2636 comm="syz.1.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 91.158720][ T30] audit: type=1400 audit(1786169695.940:439): avc: denied { mounton } for pid=2646 comm="syz.1.935" path="/173/file0" dev="tmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.182824][ T30] audit: type=1400 audit(1786169695.940:440): avc: denied { mount } for pid=2646 comm="syz.1.935" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 91.220189][ T30] audit: type=1400 audit(1786169696.000:441): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 91.255831][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x4 [ 91.263955][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x7 [ 91.271861][ T6] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x6 [ 91.279837][ T6] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 91.305588][ T6] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 91.364347][ T30] audit: type=1400 audit(1786169696.140:442): avc: denied { append } for pid=2654 comm="syz.1.939" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.413931][ T2664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.942'. [ 91.878928][ T30] audit: type=1400 audit(1786169696.600:443): avc: denied { read } for pid=2673 comm="syz.4.947" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 91.906738][ T654] usb 1-1: USB disconnect, device number 15 [ 91.926031][ T30] audit: type=1400 audit(1786169696.600:444): avc: denied { open } for pid=2673 comm="syz.4.947" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.046171][ T2681] loop2: detected capacity change from 0 to 512 [ 92.055235][ T6] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 92.055374][ T2681] EXT4-fs (loop2): Test dummy encryption mode enabled [ 92.418613][ T2681] EXT4-fs (loop2): Test dummy encryption mode enabled [ 92.426673][ T2681] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.442592][ T2681] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x000000000000000a,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000007,errors=remount-ro,usrquota,test_dummy_encryption,min_batch_time=0x0000000000000004,. Quota mode: writeback. [ 92.527026][ T2681] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.949: Directory hole found for htree leaf block 0 [ 92.545228][ T2681] EXT4-fs (loop2): Remounting filesystem read-only [ 92.554297][ T2703] loop4: detected capacity change from 0 to 128 [ 92.634463][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 92.672133][ T2709] loop4: detected capacity change from 0 to 2048 [ 92.733752][ T2709] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.754571][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 92.773196][ T2709] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 92.775988][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.793814][ T6] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 92.803127][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.812343][ T6] usb 2-1: config 0 descriptor?? [ 92.886999][ T2730] loop4: detected capacity change from 0 to 256 [ 92.909355][ T2730] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 93.025506][ T2741] netlink: 64 bytes leftover after parsing attributes in process `syz.4.973'. [ 93.050097][ T2743] loop4: detected capacity change from 0 to 512 [ 93.077874][ T2743] EXT4-fs (loop4): Test dummy encryption mode enabled [ 93.100587][ T2743] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 93.114828][ T2743] EXT4-fs (loop4): 1 truncate cleaned up [ 93.120809][ T2743] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,data_err=abort,barrier,test_dummy_encryption,noauto_da_alloc,,errors=continue. Quota mode: none. [ 93.206930][ T2754] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.223735][ T2754] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.240450][ T2754] syz.2.979 (pid 2754) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 93.296159][ T6] wacom 0003:056A:0094.000D: unknown main item tag 0x7 [ 93.303811][ T6] wacom 0003:056A:0094.000D: unknown main item tag 0x0 [ 93.310818][ T6] wacom 0003:056A:0094.000D: unknown main item tag 0x1 [ 93.318900][ T6] wacom 0003:056A:0094.000D: unknown main item tag 0xd [ 93.329135][ T6] wacom 0003:056A:0094.000D: Using device in hidraw-only mode [ 93.339237][ T6] wacom 0003:056A:0094.000D: hidraw0: USB HID vc3.3b Device [HID 056a:0094] on usb-dummy_hcd.1-1/input0 [ 93.506690][ T654] usb 2-1: USB disconnect, device number 12 [ 93.792332][ T2792] pic_ioport_write: 134 callbacks suppressed [ 93.792348][ T2792] kvm: pic: level sensitive irq not supported [ 93.799220][ T2792] kvm: pic: level sensitive irq not supported [ 93.806212][ T2792] kvm: pic: level sensitive irq not supported [ 93.812596][ T2792] kvm: pic: level sensitive irq not supported [ 93.820885][ T2792] kvm: pic: level sensitive irq not supported [ 93.830062][ T2792] kvm: pic: level sensitive irq not supported [ 93.837346][ T2792] kvm: pic: level sensitive irq not supported [ 93.844222][ T2792] kvm: pic: level sensitive irq not supported [ 93.851398][ T2792] kvm: pic: level sensitive irq not supported [ 93.858223][ T2792] kvm: pic: level sensitive irq not supported [ 94.070251][ T2812] xt_hashlimit: size too large, truncated to 1048576 [ 94.501550][ T2817] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 94.514555][ T2817] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 94.545487][ T2817] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 94.553658][ T2817] System zones: 0-5 [ 94.558408][ T2817] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,grpjquota=./file1,noload,init_itable=0x000000000a2a41b4,nodiscard,jqfmt=vfsv1,debug,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 94.754565][ T1456] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 94.890594][ T2862] fuse: Bad value for 'fd' [ 94.934991][ T2875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1030'. [ 95.144667][ T1456] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 95.155126][ T1456] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 95.344534][ T1456] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 95.354658][ T1456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.362746][ T1456] usb 3-1: Product: syz [ 95.367678][ T1456] usb 3-1: Manufacturer: syz [ 95.372288][ T1456] usb 3-1: SerialNumber: syz [ 95.377882][ T1456] usb 3-1: config 0 descriptor?? [ 95.394618][ T2822] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.401781][ T2822] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.616090][ T2822] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.623228][ T2822] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.864564][ T1456] Error reading MAC address [ 95.870159][ T1456] usb 3-1: USB disconnect, device number 14 [ 95.958224][ T2940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1059'. [ 95.974522][ T39] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 96.082342][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 96.082360][ T30] audit: type=1400 audit(1786169700.860:475): avc: denied { mount } for pid=2967 comm="syz.4.1072" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.189129][ T30] audit: type=1400 audit(1786169700.970:476): avc: denied { bind } for pid=2980 comm="syz.4.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.264536][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 96.368757][ T2985] set_capacity_and_notify: 3 callbacks suppressed [ 96.368776][ T2985] loop2: detected capacity change from 0 to 1024 [ 96.425675][ T2985] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 96.434634][ T2985] System zones: 0-1, 3-8 [ 96.445939][ T2985] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv1,noquota,debug,journal_dev=0x0000000000000009,nodioread_nolock,. Quota mode: none. [ 96.464036][ T2985] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.478483][ T30] audit: type=1400 audit(1786169701.260:477): avc: denied { append } for pid=2984 comm="syz.2.1079" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.485993][ T2985] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: comm syz.2.1079: lblock 0 mapped to illegal pblock 0 (length 6) [ 96.515491][ T2985] EXT4-fs (loop2): Remounting filesystem read-only [ 96.534622][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.544998][ T39] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.606539][ T2995] xt_hashlimit: size too large, truncated to 1048576 [ 96.714569][ T39] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 96.724798][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.738703][ T39] usb 2-1: Product: syz [ 96.743205][ T39] usb 2-1: Manufacturer: syz [ 96.750705][ T39] usb 2-1: SerialNumber: syz [ 96.839839][ T30] audit: type=1400 audit(1786169701.620:478): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 96.904098][ T30] audit: type=1400 audit(1786169701.680:479): avc: denied { read } for pid=3013 comm="syz.0.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.916479][ T3016] loop2: detected capacity change from 0 to 512 [ 96.947015][ T3016] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.966281][ T3016] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 96.975111][ T3016] System zones: 1-12 [ 96.979927][ T3016] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.1092: bad orphan inode 131072 [ 96.991075][ T3016] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 97.116988][ T39] usb 2-1: unit 6 not found! [ 97.129521][ T39] usb 2-1: USB disconnect, device number 13 [ 97.421713][ T3039] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1100'. [ 97.452668][ T30] audit: type=1400 audit(1786169702.230:480): avc: denied { sys_module } for pid=3043 comm="syz.2.1104" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 97.480315][ T30] audit: type=1400 audit(1786169702.230:481): avc: denied { read write } for pid=3043 comm="syz.2.1104" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 97.538777][ T3051] picdev_read: 23 callbacks suppressed [ 97.538799][ T3051] kvm: pic: non byte read [ 97.551614][ T3051] kvm: pic: non byte read [ 97.556352][ T30] audit: type=1400 audit(1786169702.230:482): avc: denied { open } for pid=3043 comm="syz.2.1104" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 97.587428][ T30] audit: type=1400 audit(1786169702.230:483): avc: denied { ioctl } for pid=3043 comm="syz.2.1104" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 97.591052][ T3051] kvm: pic: non byte read [ 97.632479][ T3051] kvm: pic: non byte read [ 97.637805][ T3051] kvm: pic: non byte read [ 97.648798][ T3051] kvm: pic: non byte read [ 97.653960][ T3051] kvm: pic: non byte read [ 97.659183][ T3051] kvm: pic: non byte read [ 97.667251][ T3051] kvm: pic: non byte read [ 97.671841][ T30] audit: type=1326 audit(1786169702.450:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3065 comm="syz.1.1113" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1692a850d9 code=0x0 [ 97.734355][ T3079] loop2: detected capacity change from 0 to 128 [ 98.388041][ T3112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 98.548565][ T3130] kvm: pic: non byte read [ 98.873281][ T3136] loop2: detected capacity change from 0 to 512 [ 98.968757][ T3136] EXT4-fs (loop2): Test dummy encryption mode enabled [ 99.274543][ T3136] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.2.1143: corrupted xattr block 95 [ 99.680002][ T3136] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1143: bg 0: block 7: invalid block bitmap [ 99.701247][ T3140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1146'. [ 99.736373][ T3146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1148'. [ 99.765569][ T3150] bridge_slave_0: default FDB implementation only supports local addresses [ 99.786456][ T3136] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 99.810187][ T3136] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #11: comm syz.2.1143: corrupted xattr block 95 [ 99.827268][ T3136] EXT4-fs warning (device loop2): ext4_evict_inode:305: xattr delete (err -117) [ 99.838492][ T3136] EXT4-fs (loop2): 1 orphan inode deleted [ 99.852688][ T3136] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 99.876602][ T3168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1159'. [ 99.896628][ T3136] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 99.944561][ T654] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 100.204513][ T654] usb 2-1: Using ep0 maxpacket: 32 [ 100.334708][ T654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.347126][ T654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.359276][ T654] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 100.369143][ T654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.378676][ T654] usb 2-1: config 0 descriptor?? [ 100.388489][ T3203] loop2: detected capacity change from 0 to 1024 [ 100.425107][ T654] hub 2-1:0.0: USB hub found [ 100.446906][ T3203] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 100.466545][ T3203] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.488462][ T3203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1174'. [ 100.644639][ T654] hub 2-1:0.0: 26 ports detected [ 100.651280][ T3232] fuse: Bad value for 'fd' [ 100.664528][ T654] hub 2-1:0.0: insufficient power available to use all downstream ports [ 100.854518][ T654] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 100.861747][ T654] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 100.984866][ T654] usbhid 2-1:0.0: can't add hid device: -71 [ 100.990877][ T654] usbhid: probe of 2-1:0.0 failed with error -71 [ 101.009224][ T3284] device bridge1 entered promiscuous mode [ 101.009612][ T3283] loop2: detected capacity change from 0 to 512 [ 101.024816][ T654] usb 2-1: USB disconnect, device number 14 [ 101.066160][ T3283] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.078138][ T3283] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.143976][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 101.143993][ T30] audit: type=1400 audit(1786169705.920:491): avc: denied { read append open } for pid=3282 comm="syz.2.1210" path="/183/file0/blkio.bfq.empty_time" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.176103][ T30] audit: type=1400 audit(1786169705.930:492): avc: denied { map } for pid=3282 comm="syz.2.1210" path="/183/file0/blkio.bfq.empty_time" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.200799][ T30] audit: type=1400 audit(1786169705.930:493): avc: denied { write } for pid=3282 comm="syz.2.1210" path="/183/file0/blkio.bfq.empty_time" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.845265][ T30] audit: type=1400 audit(1786169706.630:494): avc: denied { remount } for pid=3313 comm="syz.4.1221" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.128806][ T3326] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1225'. [ 102.308494][ T3346] netlink: 'syz.3.1233': attribute type 3 has an invalid length. [ 102.316979][ T3346] netlink: 'syz.3.1233': attribute type 3 has an invalid length. [ 102.371623][ T3356] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 102.371622][ T30] audit: type=1400 audit(1786169707.150:495): avc: denied { mac_admin } for pid=3355 comm="syz.3.1238" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.405113][ T30] audit: type=1400 audit(1786169707.190:496): avc: denied { relabelto } for pid=3355 comm="syz.3.1238" name="417" dev="tmpfs" ino=2168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 102.434459][ T30] audit: type=1400 audit(1786169707.190:497): avc: denied { associate } for pid=3355 comm="syz.3.1238" name="417" dev="tmpfs" ino=2168 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 102.463852][ T3357] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 102.464580][ T30] audit: type=1400 audit(1786169707.190:498): avc: denied { write } for pid=3355 comm="syz.3.1238" name="417" dev="tmpfs" ino=2168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 102.474144][ T3357] SELinux: duplicate or incompatible mount options [ 102.502575][ T30] audit: type=1400 audit(1786169707.190:499): avc: denied { add_name } for pid=3355 comm="syz.3.1238" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 102.556050][ T30] audit: type=1400 audit(1786169707.190:500): avc: denied { associate } for pid=3355 comm="syz.3.1238" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.803972][ T3373] binder: 3372:3373 ioctl c00c620f 200000000080 returned -22 [ 102.918055][ T3382] loop2: detected capacity change from 0 to 2048 [ 102.955791][ T3382] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 103.219260][ T3411] binder: 3409:3411 unknown command 0 [ 103.226715][ T3411] binder: 3409:3411 ioctl c0306201 2000000004c0 returned -22 [ 103.996399][ T3452] loop2: detected capacity change from 0 to 256 [ 104.015970][ T3452] exfat: Deprecated parameter 'utf8' [ 104.021616][ T3452] exfat: Deprecated parameter 'utf8' [ 104.027255][ T3452] exfat: Deprecated parameter 'utf8' [ 104.087482][ T3452] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 104.624491][ T1456] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 104.918058][ T1456] usb 3-1: Using ep0 maxpacket: 16 [ 105.054787][ T1456] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 252, using maximum allowed: 30 [ 105.070869][ T1456] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 105.091795][ T1456] usb 3-1: config 0 interface 0 has no altsetting 0 [ 105.105027][ T1456] usb 3-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 105.120949][ T1456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.135897][ T1456] usb 3-1: config 0 descriptor?? [ 105.570455][ T3501] picdev_read: 8 callbacks suppressed [ 105.570470][ T3501] kvm: pic: non byte read [ 105.581110][ T3501] pic_ioport_write: 121 callbacks suppressed [ 105.581128][ T3501] kvm: pic: level sensitive irq not supported [ 105.587727][ T3501] kvm: pic: non byte read [ 105.599350][ T3501] kvm: pic: level sensitive irq not supported [ 105.599402][ T3501] kvm: pic: non byte read [ 105.610659][ T3501] kvm: pic: level sensitive irq not supported [ 105.610710][ T3501] kvm: pic: non byte read [ 105.617035][ T1456] wacom 0003:056A:0116.000E: ignoring exceeding usage max [ 105.618071][ T3501] kvm: pic: level sensitive irq not supported [ 105.625123][ T1456] wacom 0003:056A:0116.000E: hidraw0: USB HID v0.01 Device [HID 056a:0116] on usb-dummy_hcd.2-1/input0 [ 105.629538][ T3501] kvm: pic: non byte read [ 105.652660][ T3501] kvm: pic: level sensitive irq not supported [ 105.652731][ T3501] kvm: pic: non byte read [ 105.664643][ T3501] kvm: pic: level sensitive irq not supported [ 105.664711][ T3501] kvm: pic: non byte read [ 105.676300][ T3501] kvm: pic: level sensitive irq not supported [ 105.676369][ T3501] kvm: pic: non byte read [ 105.687790][ T3501] kvm: pic: level sensitive irq not supported [ 105.687841][ T3501] kvm: pic: non byte read [ 105.915240][ T654] usb 3-1: USB disconnect, device number 15 [ 106.179023][ T3538] fuse: Bad value for 'fd' [ 106.789126][ T3567] loop1: detected capacity change from 0 to 256 [ 106.813109][ T3567] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 106.837218][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 106.837233][ T30] audit: type=1400 audit(1786169711.620:512): avc: denied { remove_name } for pid=3566 comm="syz.1.1326" name="file1" dev="loop1" ino=1048615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.842129][ T3567] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 106.845573][ T30] audit: type=1400 audit(1786169711.620:513): avc: denied { unlink } for pid=3566 comm="syz.1.1326" name="file1" dev="loop1" ino=1048615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.866698][ T3567] exFAT-fs (loop1): Filesystem has been set read-only [ 109.739753][ T30] audit: type=1400 audit(1786169714.520:514): avc: denied { nlmsg_write } for pid=3584 comm="syz.4.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 109.923635][ T30] audit: type=1400 audit(1786169714.700:515): avc: denied { write } for pid=3606 comm="syz.1.1343" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 109.975313][ T30] audit: type=1400 audit(1786169714.740:516): avc: denied { setopt } for pid=3612 comm="syz.4.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.995756][ T6] kernel read not supported for file /kmsg (pid: 6 comm: kworker/0:0) [ 110.011333][ T30] audit: type=1400 audit(1786169714.740:517): avc: denied { open } for pid=3606 comm="syz.1.1343" path="/218/dev/kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 110.044069][ T30] audit: type=1400 audit(1786169714.740:518): avc: denied { read } for pid=3606 comm="syz.1.1343" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 110.069335][ T30] audit: type=1400 audit(1786169714.740:519): avc: denied { mounton } for pid=3606 comm="syz.1.1343" path="/218/dev/kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 110.130299][ T3628] loop1: detected capacity change from 0 to 512 [ 110.149613][ T3628] EXT4-fs (loop1): Ignoring removed nobh option [ 110.154309][ T30] audit: type=1400 audit(1786169714.930:520): avc: denied { getopt } for pid=3634 comm="syz.4.1356" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.182589][ T30] audit: type=1400 audit(1786169714.960:521): avc: denied { read write } for pid=3629 comm="syz.0.1355" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 110.226034][ T3642] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1359'. [ 110.236294][ T3628] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,grpquota,,errors=continue. Quota mode: writeback. [ 110.274583][ T3628] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.432712][ T3658] loop2: detected capacity change from 0 to 128 [ 110.448781][ T3658] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 110.485442][ T402] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 110.499551][ T3658] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 110.521618][ T3658] FAT-fs (loop2): Filesystem has been set read-only [ 110.874608][ T402] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 110.900797][ T402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.933539][ T402] usb 1-1: config 0 descriptor?? [ 110.995009][ T3724] netlink: 'syz.4.1396': attribute type 3 has an invalid length. [ 111.020170][ T3724] netlink: 'syz.4.1396': attribute type 3 has an invalid length. [ 111.207028][ T3758] netlink: 'syz.4.1411': attribute type 3 has an invalid length. [ 111.216478][ T3758] netlink: 'syz.4.1411': attribute type 3 has an invalid length. [ 111.301245][ T3774] loop1: detected capacity change from 0 to 1024 [ 111.344155][ T3774] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 111.371730][ T3774] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.389544][ T3774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1420'. [ 111.556799][ T3799] device syzkaller0 entered promiscuous mode [ 111.620881][ T3810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1437'. [ 111.748970][ T3841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1450'. [ 111.781274][ T3849] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1454'. [ 111.790951][ T3849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1454'. [ 111.799991][ T3849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1454'. [ 111.849211][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 111.849229][ T30] audit: type=1400 audit(1786169716.630:526): avc: denied { sys_admin } for pid=3863 comm="syz.2.1461" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 111.889123][ T3869] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1463'. [ 112.013306][ T30] audit: type=1400 audit(1786169716.790:527): avc: denied { create } for pid=3876 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.033170][ T30] audit: type=1400 audit(1786169716.790:528): avc: denied { connect } for pid=3876 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.053346][ T30] audit: type=1400 audit(1786169716.790:529): avc: denied { write } for pid=3876 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.080596][ T3881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1469'. [ 112.093679][ T30] audit: type=1400 audit(1786169716.870:530): avc: denied { read } for pid=3880 comm="syz.2.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.278184][ T30] audit: type=1400 audit(1786169717.060:531): avc: denied { setopt } for pid=3892 comm="syz.2.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.544487][ T654] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 112.914537][ T654] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.914683][ T402] usb 1-1: Cannot set autoneg [ 112.924847][ T654] usb 2-1: config 1 interface 1 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 112.929603][ T402] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 112.953005][ T402] usb 1-1: USB disconnect, device number 16 [ 113.094581][ T654] usb 2-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 113.104520][ T654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.112660][ T654] usb 2-1: Product: syz [ 113.116956][ T654] usb 2-1: Manufacturer: syz [ 113.121830][ T654] usb 2-1: SerialNumber: syz [ 113.491312][ T654] usb 2-1: 1:2 : no or invalid class specific endpoint descriptor [ 113.573006][ T654] usb 2-1: USB disconnect, device number 15 [ 113.894128][ T3948] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 113.935315][ T3951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1501'. [ 113.972786][ T3957] binder: 3956:3957 ioctl 4018620d 0 returned -22 [ 113.984070][ T3957] binder: 3956:3957 unknown command 0 [ 113.989999][ T3957] binder: 3956:3957 ioctl c0306201 2000000004c0 returned -22 [ 115.745110][ T3987] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1518'. [ 115.764346][ T30] audit: type=1400 audit(1786169720.540:532): avc: denied { map } for pid=3985 comm="syz.0.1518" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.790974][ T30] audit: type=1400 audit(1786169720.540:533): avc: denied { call } for pid=3985 comm="syz.0.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 115.811888][ T30] audit: type=1400 audit(1786169720.540:534): avc: denied { transfer } for pid=3985 comm="syz.0.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 115.978744][ T4039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1542'. [ 116.005487][ T4045] fuse: Bad value for 'fd' [ 116.176061][ T4070] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 116.232404][ T4078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1559'. [ 116.346781][ T30] audit: type=1400 audit(1786169721.130:535): avc: denied { create } for pid=4092 comm="syz.4.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.427196][ T4101] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.435046][ T4101] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.522559][ T4106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1572'. [ 116.646252][ T4121] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 116.684538][ T654] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 117.064564][ T654] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.079376][ T654] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 117.244576][ T654] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 117.255039][ T654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.263244][ T654] usb 2-1: Product: syz [ 117.268022][ T654] usb 2-1: Manufacturer: syz [ 117.272945][ T654] usb 2-1: SerialNumber: syz [ 117.435680][ T4140] netlink: 'syz.0.1585': attribute type 3 has an invalid length. [ 117.443915][ T4140] netlink: 'syz.0.1585': attribute type 3 has an invalid length. [ 118.005315][ T4165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1596'. [ 118.010856][ T30] audit: type=1400 audit(1786169722.790:536): avc: denied { create } for pid=4166 comm="syz.2.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.036357][ T30] audit: type=1400 audit(1786169722.800:537): avc: denied { connect } for pid=4166 comm="syz.2.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.057506][ T30] audit: type=1400 audit(1786169722.800:538): avc: denied { write } for pid=4166 comm="syz.2.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.097291][ T4173] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1600'. [ 118.109127][ T4173] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1600'. [ 118.122551][ T4175] fuse: Bad value for 'fd' [ 118.594545][ T307] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 118.666590][ T30] audit: type=1400 audit(1786169723.450:539): avc: denied { execute } for pid=4191 comm="syz.2.1609" name="file0" dev="tmpfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.695897][ T30] audit: type=1400 audit(1786169723.450:540): avc: denied { execute_no_trans } for pid=4191 comm="syz.2.1609" path="/277/file0" dev="tmpfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.974544][ T307] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.985950][ T307] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.996079][ T307] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.009515][ T307] usb 1-1: config 0 interface 0 has no altsetting 0 [ 119.094614][ T307] usb 1-1: New USB device found, idVendor=05ac, idProduct=b4dd, bcdDevice= 0.00 [ 119.106694][ T307] usb 1-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 119.117679][ T307] usb 1-1: Manufacturer: syz [ 119.124114][ T307] usb 1-1: config 0 descriptor?? [ 119.215833][ T4210] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1618'. [ 119.400454][ T26] usb 2-1: USB disconnect, device number 16 [ 119.824520][ T26] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 120.194568][ T26] usb 2-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 120.206530][ T26] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 120.215987][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.244588][ T4231] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 120.265182][ T26] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 120.514702][ T307] usbhid 1-1:0.0: can't add hid device: -71 [ 120.521091][ T307] usbhid: probe of 1-1:0.0 failed with error -71 [ 120.537073][ T307] usb 1-1: USB disconnect, device number 17 [ 120.904513][ T307] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 121.274600][ T307] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 121.285724][ T307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.297246][ T307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.307547][ T307] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 121.327183][ T4324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1670'. [ 121.345444][ T4326] netlink: 'syz.3.1671': attribute type 3 has an invalid length. [ 121.353470][ T4326] netlink: 'syz.3.1671': attribute type 3 has an invalid length. [ 121.376911][ T4330] syz.3.1673 uses obsolete (PF_INET,SOCK_PACKET) [ 121.394527][ T307] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 121.403876][ T307] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 121.412058][ T307] usb 1-1: Manufacturer: syz [ 121.417495][ T307] usb 1-1: config 0 descriptor?? [ 121.527844][ T6] usb 2-1: USB disconnect, device number 17 [ 121.885247][ T307] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 121.892663][ T307] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 121.901849][ T307] appleir 0003:05AC:8243.000F: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 121.944511][ T6] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 122.165192][ T423] usb 1-1: USB disconnect, device number 18 [ 122.253880][ T30] audit: type=1400 audit(1786169727.030:541): avc: denied { name_bind } for pid=4350 comm="syz.3.1681" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 122.280772][ T30] audit: type=1400 audit(1786169727.060:542): avc: denied { bind } for pid=4352 comm="syz.3.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.314525][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.426283][ T4369] fuse: Bad value for 'fd' [ 122.484575][ T6] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 122.494545][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.502926][ T6] usb 2-1: Product: syz [ 122.507657][ T6] usb 2-1: Manufacturer: syz [ 122.512276][ T6] usb 2-1: SerialNumber: syz [ 122.778212][ T26] usb 2-1: USB disconnect, device number 18 [ 123.014475][ T307] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 123.228657][ T30] audit: type=1400 audit(1786169728.010:543): avc: denied { bind } for pid=4382 comm="syz.4.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.254661][ T307] usb 1-1: Using ep0 maxpacket: 8 [ 123.327802][ T30] audit: type=1400 audit(1786169728.110:544): avc: denied { create } for pid=4392 comm="syz.1.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.352239][ T30] audit: type=1400 audit(1786169728.110:545): avc: denied { create } for pid=4392 comm="syz.1.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.373848][ T30] audit: type=1400 audit(1786169728.140:546): avc: denied { write } for pid=4394 comm="syz.1.1701" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 123.394566][ T307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.450197][ T307] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 123.459522][ T307] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.634662][ T307] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 123.644594][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.654772][ T307] usb 1-1: Product: syz [ 123.659333][ T307] usb 1-1: Manufacturer: syz [ 123.664008][ T307] usb 1-1: SerialNumber: syz [ 123.916340][ T30] audit: type=1400 audit(1786169728.700:547): avc: denied { ioctl } for pid=4418 comm="syz.2.1712" path="socket:[32404]" dev="sockfs" ino=32404 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.351267][ T30] audit: type=1400 audit(1786169729.130:548): avc: denied { create } for pid=4432 comm="syz.3.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 124.394719][ T307] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 124.405173][ T307] usb 1-1: clock source 0 is not valid, cannot use [ 124.654573][ T307] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 124.669970][ T307] usb 1-1: USB disconnect, device number 19 [ 124.875326][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.227341][ T30] audit: type=1400 audit(1786169730.010:549): avc: denied { map } for pid=4456 comm="syz.3.1729" path="socket:[33028]" dev="sockfs" ino=33028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 125.434479][ T398] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 125.854548][ T398] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.894566][ T398] usb 2-1: not running at top speed; connect to a high speed hub [ 125.974566][ T398] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 125.984259][ T398] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 125.994058][ T398] usb 2-1: config 14 has no interface number 0 [ 126.004546][ T398] usb 2-1: config 14 has no interface number 1 [ 126.012002][ T398] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 126.023303][ T398] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0x1B, skipping [ 126.034282][ T398] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 126.045895][ T398] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid maxpacket 6680, setting to 64 [ 126.057492][ T398] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.071124][ T398] usb 2-1: config 14 interface 57 has no altsetting 0 [ 126.078034][ T398] usb 2-1: config 14 interface 228 has no altsetting 0 [ 126.244635][ T398] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 126.253844][ T398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.261980][ T398] usb 2-1: Product: syz [ 126.266363][ T398] usb 2-1: Manufacturer: syz [ 126.271067][ T398] usb 2-1: SerialNumber: syz [ 127.449190][ T4519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 127.458519][ T4519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 127.498564][ T4522] binder: 4521:4522 unknown command 0 [ 127.506004][ T4522] binder: 4521:4522 ioctl c0306201 2000000004c0 returned -22 [ 127.806930][ T30] audit: type=1400 audit(1786169732.590:550): avc: denied { create } for pid=4545 comm="syz.0.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 127.874397][ T30] audit: type=1400 audit(1786169732.650:551): avc: denied { ioctl } for pid=4547 comm="syz.0.1765" path="socket:[33149]" dev="sockfs" ino=33149 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.154603][ T423] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 128.226402][ T4553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'. [ 128.402176][ T423] usb 1-1: Using ep0 maxpacket: 32 [ 128.524602][ T423] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 108, changing to 7 [ 128.651081][ T654] usb 2-1: USB disconnect, device number 19 [ 128.694576][ T423] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 128.703952][ T423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.712728][ T423] usb 1-1: Product: syz [ 128.717257][ T423] usb 1-1: Manufacturer: syz [ 128.723607][ T423] usb 1-1: SerialNumber: syz [ 129.121929][ T423] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 129.144536][ T423] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 129.168650][ T423] usb 1-1: USB disconnect, device number 20 [ 129.377557][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 129.690820][ T4597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1785'. [ 129.749070][ T30] audit: type=1400 audit(1786169734.530:552): avc: denied { write } for pid=4592 comm="syz.0.1784" name="snmp" dev="proc" ino=4026532501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 131.397218][ T30] audit: type=1326 audit(1786169736.180:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4632 comm="syz.4.1800" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b702c20d9 code=0x7ffc0000 [ 131.422846][ T30] audit: type=1326 audit(1786169736.210:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4632 comm="syz.4.1800" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b702c20d9 code=0x7ffc0000 [ 131.459497][ T30] audit: type=1326 audit(1786169736.210:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4632 comm="syz.4.1800" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1b702c20d9 code=0x7ffc0000 [ 131.514472][ T30] audit: type=1326 audit(1786169736.210:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4632 comm="syz.4.1800" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b702c20d9 code=0x7ffc0000 [ 131.548719][ T30] audit: type=1326 audit(1786169736.210:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4632 comm="syz.4.1800" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b702c20d9 code=0x7ffc0000 [ 131.588052][ T30] audit: type=1326 audit(1786169736.210:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4632 comm="syz.4.1800" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f1b702c20d9 code=0x7ffc0000 [ 131.620593][ T30] audit: type=1326 audit(1786169736.210:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4632 comm="syz.4.1800" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b702c20d9 code=0x7ffc0000 [ 131.656371][ T30] audit: type=1326 audit(1786169736.210:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4632 comm="syz.4.1800" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b702c20d9 code=0x7ffc0000 [ 133.012377][ T4710] tipc: Started in network mode [ 133.017484][ T4712] mmap: syz.0.1834 (4712) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 133.030419][ T4710] tipc: Node identity , cluster identity 4711 [ 133.037977][ T4710] tipc: Failed to set node id, please configure manually [ 133.050320][ T4710] tipc: Enabling of bearer rejected, failed to enable media [ 133.178210][ T4723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'. [ 133.454447][ T398] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 133.789248][ T4753] device syz_tun entered promiscuous mode [ 133.796551][ T4753] device syz_tun left promiscuous mode [ 133.814622][ T398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.825930][ T398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.840740][ T398] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.853874][ T398] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.863335][ T398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.872240][ T398] usb 1-1: config 0 descriptor?? [ 134.134586][ T423] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 134.355872][ T398] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 134.366304][ T398] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 134.504603][ T423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.515810][ T423] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 134.524881][ T423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.533847][ T423] usb 2-1: config 0 descriptor?? [ 134.841991][ T30] audit: type=1400 audit(1786169739.620:561): avc: denied { create } for pid=4809 comm="syz.2.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.870431][ T30] audit: type=1400 audit(1786169739.630:562): avc: denied { listen } for pid=4811 comm="syz.3.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.912568][ T4825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 134.914515][ T423] usbhid 2-1:0.0: can't add hid device: -71 [ 134.927439][ T423] usbhid: probe of 2-1:0.0 failed with error -71 [ 134.935462][ T423] usb 2-1: USB disconnect, device number 20 [ 135.248899][ T30] audit: type=1400 audit(1786169740.030:563): avc: denied { ioctl } for pid=4844 comm="syz.4.1898" path="socket:[34156]" dev="sockfs" ino=34156 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.344516][ T423] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 135.373082][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1900'. [ 135.382645][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1900'. [ 135.403496][ T4852] xt_hashlimit: size too large, truncated to 1048576 [ 135.704535][ T423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.717486][ T4882] device veth0_vlan left promiscuous mode [ 135.723505][ T4882] device veth0_vlan entered promiscuous mode [ 135.730223][ T423] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 135.740236][ T423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.749433][ T4882] device veth1_macvtap left promiscuous mode [ 135.756618][ T4882] device veth1_macvtap entered promiscuous mode [ 135.764141][ T423] usb 2-1: config 0 descriptor?? [ 135.775565][ T4882] device bridge1 left promiscuous mode [ 135.783273][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.794841][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.808097][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.816964][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.825164][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.833470][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.842287][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.851143][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.858854][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.867416][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.877104][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 135.885614][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.893885][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 135.902396][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.910801][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.919234][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.927946][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.936841][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.945749][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.954844][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.963465][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.972706][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.981316][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.989847][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.998609][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.007254][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.015606][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.024241][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.033006][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.041739][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.050061][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.058194][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.066137][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.075522][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.084005][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.092103][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.100021][ T4883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1913'. [ 136.273780][ T4895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1919'. [ 136.406729][ T4906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1924'. [ 136.445286][ T4755] UDC core: couldn't find an available UDC or it's busy: -16 [ 136.453010][ T4755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 136.704587][ T423] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 136.716056][ T423] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 136.726578][ T30] audit: type=1400 audit(1786169741.510:564): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=950 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.772467][ T30] audit: type=1400 audit(1786169741.510:565): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=950 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.796976][ T30] audit: type=1400 audit(1786169741.510:566): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=950 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.804926][ T654] usb 1-1: reset high-speed USB device number 21 using dummy_hcd [ 137.124596][ T654] usb 1-1: device firmware changed [ 137.130109][ T2219] usb 1-1: USB disconnect, device number 21 [ 137.190890][ T4930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1936'. [ 137.209556][ T30] audit: type=1400 audit(1786169741.990:567): avc: denied { mounton } for pid=4931 comm="syz.3.1937" path="/bus" dev="ramfs" ino=33664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 137.209676][ T4932] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 137.304604][ T2219] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 137.313155][ T30] audit: type=1400 audit(1786169742.090:568): avc: denied { bind } for pid=4949 comm="syz.3.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.473392][ T4952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1947'. [ 137.484448][ C0] ================================================================================ [ 137.494472][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 137.503080][ C0] index 65092 is out of range for type 'const int[34]' [ 137.510004][ C0] CPU: 0 PID: 4951 Comm: syz.4.1947 Not tainted syzkaller #0 [ 137.517379][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.527451][ C0] Call Trace: [ 137.530912][ C0] [ 137.533839][ C0] __dump_stack+0x21/0x30 [ 137.539054][ C0] dump_stack_lvl+0x110/0x170 [ 137.543737][ C0] ? show_regs_print_info+0x20/0x20 [ 137.548957][ C0] dump_stack+0x15/0x20 [ 137.553186][ C0] ubsan_epilogue+0xe/0x40 [ 137.557632][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 137.563364][ C0] aiptek_irq+0x2045/0x29b0 [ 137.568161][ C0] ? kcov_remote_start+0x217/0x350 [ 137.573288][ C0] __usb_hcd_giveback_urb+0x32f/0x4f0 [ 137.578685][ C0] usb_hcd_giveback_urb+0x11d/0x3f0 [ 137.584796][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 137.589685][ C0] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120 [ 137.595650][ C0] dummy_timer+0xa34/0x31d0 [ 137.600156][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 137.605594][ C0] ? __kasan_check_write+0x14/0x20 [ 137.610829][ C0] ? _raw_spin_lock_irqsave+0x130/0x130 [ 137.616472][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 137.621885][ C0] call_timer_fn+0x38/0x290 [ 137.626399][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 137.631613][ C0] __run_timers+0x637/0x9a0 [ 137.636225][ C0] ? calc_index+0x200/0x200 [ 137.640921][ C0] ? sched_clock_cpu+0x18/0x3d0 [ 137.645765][ C0] run_timer_softirq+0x6a/0xf0 [ 137.650524][ C0] handle_softirqs+0x250/0x560 [ 137.655555][ C0] ? irqtime_account_irq+0xbe/0x390 [ 137.660766][ C0] __irq_exit_rcu+0x52/0xf0 [ 137.665368][ C0] irq_exit_rcu+0x9/0x10 [ 137.669616][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 137.675257][ C0] [ 137.678304][ C0] [ 137.681228][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 137.687207][ C0] RIP: 0010:unmap_page_range+0xd6e/0x1e00 [ 137.693493][ C0] Code: 24 28 e8 b5 bb 0a 00 48 8b 4c 24 28 4c 8b 21 48 8b 44 24 18 49 39 c4 4c 0f 46 e0 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 <48> 8b 5c 24 30 74 0f 48 8b 7c 24 28 e8 21 bc 0a 00 48 8b 4c 24 28 [ 137.713396][ C0] RSP: 0018:ffffc90000c578a0 EFLAGS: 00000246 [ 137.719498][ C0] RAX: dffffc0000000000 RBX: ffffc90000c57bf0 RCX: ffffc90000c57bf8 [ 137.727476][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 137.736674][ C0] RBP: ffffc90000c57a70 R08: ffff88811385a787 R09: 1ffff1102270b4f0 [ 137.744911][ C0] R10: dffffc0000000000 R11: ffffed102270b4f1 R12: ffffffffffffffff [ 137.752888][ C0] R13: ffffc90000c57c00 R14: 1ffff9200018af80 R15: 1ffff9200018af7f [ 137.760866][ C0] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 137.767302][ C0] ? lru_cache_add+0x7e0/0x7e0 [ 137.772364][ C0] unmap_vmas+0x26d/0x380 [ 137.776731][ C0] ? unmap_page_range+0x1e00/0x1e00 [ 137.781928][ C0] ? __kasan_check_write+0x14/0x20 [ 137.787084][ C0] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 137.792693][ C0] exit_mmap+0x412/0x8b0 [ 137.797203][ C0] ? vm_brk+0x30/0x30 [ 137.801375][ C0] ? mutex_unlock+0x8f/0x230 [ 137.805998][ C0] ? uprobe_clear_state+0x2c6/0x320 [ 137.811246][ C0] __mmput+0x92/0x300 [ 137.815256][ C0] mmput+0x50/0x150 [ 137.819212][ C0] do_exit+0xacc/0x29a0 [ 137.823389][ C0] ? blkcg_maybe_throttle_current+0x1e0/0xa00 [ 137.829476][ C0] ? put_task_struct+0x90/0x90 [ 137.834290][ C0] ? try_to_wake_up+0x610/0x1150 [ 137.839230][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 137.844333][ C0] ? wake_up_state+0xb/0x10 [ 137.849251][ C0] ? zap_other_threads+0x29b/0x310 [ 137.854927][ C0] do_group_exit+0x149/0x310 [ 137.859685][ C0] __x64_sys_exit_group+0x3f/0x40 [ 137.864997][ C0] x64_sys_call+0x832/0x9a0 [ 137.869608][ C0] do_syscall_64+0x4c/0xa0 [ 137.874042][ C0] ? clear_bhb_loop+0x50/0xa0 [ 137.878819][ C0] ? clear_bhb_loop+0x50/0xa0 [ 137.883616][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.889865][ C0] RIP: 0033:0x7f1b702c20d9 [ 137.894852][ C0] Code: Unable to access opcode bytes at RIP 0x7f1b702c20af. [ 137.904002][ C0] RSP: 002b:00007ffdabf541c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 137.916319][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b702c20d9 [ 137.926230][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.936426][ C0] RBP: 00007ffdabf5422c R08: 0000000000000000 R09: 00000000000927c0 [ 137.944682][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001c4 [ 137.954011][ C0] R13: 00000000000927c0 R14: 00000000000216f0 R15: 00007ffdabf54280 [ 137.962347][ C0] [ 137.965391][ C0] ================================================================================ [ 137.975450][ C0] ================================================================== [ 137.983919][ C0] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x2063/0x29b0 [ 137.993007][ C0] Read of size 4 at addr ffffffff8582d910 by task syz.4.1947/4951 [ 138.001002][ C0] [ 138.003343][ C0] CPU: 0 PID: 4951 Comm: syz.4.1947 Not tainted syzkaller #0 [ 138.010832][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.020886][ C0] Call Trace: [ 138.024172][ C0] [ 138.027012][ C0] __dump_stack+0x21/0x30 [ 138.031371][ C0] dump_stack_lvl+0x110/0x170 [ 138.036045][ C0] ? show_regs_print_info+0x20/0x20 [ 138.041243][ C0] ? load_image+0x3f0/0x3f0 [ 138.045745][ C0] ? dump_stack_lvl+0x134/0x170 [ 138.050596][ C0] print_address_description+0x7f/0x2c0 [ 138.056235][ C0] ? aiptek_irq+0x2063/0x29b0 [ 138.060912][ C0] kasan_report+0x10f/0x150 [ 138.065412][ C0] ? aiptek_irq+0x2063/0x29b0 [ 138.070525][ C0] __asan_report_load4_noabort+0x14/0x20 [ 138.076678][ C0] aiptek_irq+0x2063/0x29b0 [ 138.081206][ C0] ? kcov_remote_start+0x217/0x350 [ 138.086496][ C0] __usb_hcd_giveback_urb+0x32f/0x4f0 [ 138.092389][ C0] usb_hcd_giveback_urb+0x11d/0x3f0 [ 138.097893][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 138.104227][ C0] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120 [ 138.112713][ C0] dummy_timer+0xa34/0x31d0 [ 138.118060][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 138.124528][ C0] ? __kasan_check_write+0x14/0x20 [ 138.132582][ C0] ? _raw_spin_lock_irqsave+0x130/0x130 [ 138.138164][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 138.143373][ C0] call_timer_fn+0x38/0x290 [ 138.147971][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 138.153521][ C0] __run_timers+0x637/0x9a0 [ 138.158139][ C0] ? calc_index+0x200/0x200 [ 138.162759][ C0] ? sched_clock_cpu+0x18/0x3d0 [ 138.167694][ C0] run_timer_softirq+0x6a/0xf0 [ 138.172726][ C0] handle_softirqs+0x250/0x560 [ 138.177508][ C0] ? irqtime_account_irq+0xbe/0x390 [ 138.182793][ C0] __irq_exit_rcu+0x52/0xf0 [ 138.187557][ C0] irq_exit_rcu+0x9/0x10 [ 138.191888][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 138.197609][ C0] [ 138.200550][ C0] [ 138.203752][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 138.209861][ C0] RIP: 0010:unmap_page_range+0xd6e/0x1e00 [ 138.216099][ C0] Code: 24 28 e8 b5 bb 0a 00 48 8b 4c 24 28 4c 8b 21 48 8b 44 24 18 49 39 c4 4c 0f 46 e0 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 <48> 8b 5c 24 30 74 0f 48 8b 7c 24 28 e8 21 bc 0a 00 48 8b 4c 24 28 [ 138.236093][ C0] RSP: 0018:ffffc90000c578a0 EFLAGS: 00000246 [ 138.242181][ C0] RAX: dffffc0000000000 RBX: ffffc90000c57bf0 RCX: ffffc90000c57bf8 [ 138.250470][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 138.258811][ C0] RBP: ffffc90000c57a70 R08: ffff88811385a787 R09: 1ffff1102270b4f0 [ 138.266980][ C0] R10: dffffc0000000000 R11: ffffed102270b4f1 R12: ffffffffffffffff [ 138.274959][ C0] R13: ffffc90000c57c00 R14: 1ffff9200018af80 R15: 1ffff9200018af7f [ 138.283027][ C0] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 138.289359][ C0] ? lru_cache_add+0x7e0/0x7e0 [ 138.294341][ C0] unmap_vmas+0x26d/0x380 [ 138.298756][ C0] ? unmap_page_range+0x1e00/0x1e00 [ 138.303958][ C0] ? __kasan_check_write+0x14/0x20 [ 138.309083][ C0] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 138.316855][ C0] exit_mmap+0x412/0x8b0 [ 138.321315][ C0] ? vm_brk+0x30/0x30 [ 138.326520][ C0] ? mutex_unlock+0x8f/0x230 [ 138.331488][ C0] ? uprobe_clear_state+0x2c6/0x320 [ 138.337309][ C0] __mmput+0x92/0x300 [ 138.342289][ C0] mmput+0x50/0x150 [ 138.346521][ C0] do_exit+0xacc/0x29a0 [ 138.351276][ C0] ? blkcg_maybe_throttle_current+0x1e0/0xa00 [ 138.358105][ C0] ? put_task_struct+0x90/0x90 [ 138.363103][ C0] ? try_to_wake_up+0x610/0x1150 [ 138.368222][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 138.373339][ C0] ? wake_up_state+0xb/0x10 [ 138.378015][ C0] ? zap_other_threads+0x29b/0x310 [ 138.383237][ C0] do_group_exit+0x149/0x310 [ 138.388284][ C0] __x64_sys_exit_group+0x3f/0x40 [ 138.393313][ C0] x64_sys_call+0x832/0x9a0 [ 138.398008][ C0] do_syscall_64+0x4c/0xa0 [ 138.402772][ C0] ? clear_bhb_loop+0x50/0xa0 [ 138.407867][ C0] ? clear_bhb_loop+0x50/0xa0 [ 138.412709][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.418895][ C0] RIP: 0033:0x7f1b702c20d9 [ 138.423501][ C0] Code: Unable to access opcode bytes at RIP 0x7f1b702c20af. [ 138.430955][ C0] RSP: 002b:00007ffdabf541c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 138.439577][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b702c20d9 [ 138.448384][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.456373][ C0] RBP: 00007ffdabf5422c R08: 0000000000000000 R09: 00000000000927c0 [ 138.464440][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001c4 [ 138.473325][ C0] R13: 00000000000927c0 R14: 00000000000216f0 R15: 00007ffdabf54280 [ 138.481414][ C0] [ 138.484581][ C0] [ 138.486944][ C0] The buggy address belongs to the variable: [ 138.493046][ C0] .str.77+0x10/0x40 [ 138.496974][ C0] [ 138.499301][ C0] Memory state around the buggy address: [ 138.504931][ C0] ffffffff8582d800: f9 f9 f9 f9 06 f9 f9 f9 00 00 01 f9 f9 f9 f9 f9 [ 138.513221][ C0] ffffffff8582d880: 00 00 01 f9 f9 f9 f9 f9 00 00 01 f9 f9 f9 f9 f9 [ 138.521304][ C0] >ffffffff8582d900: 00 00 01 f9 f9 f9 f9 f9 00 00 07 f9 f9 f9 f9 f9 [ 138.529377][ C0] ^ [ 138.533976][ C0] ffffffff8582d980: 00 00 07 f9 f9 f9 f9 f9 00 00 00 04 f9 f9 f9 f9 [ 138.542035][ C0] ffffffff8582da00: 00 00 01 f9 f9 f9 f9 f9 00 00 00 f9 f9 f9 f9 f9 [ 138.550089][ C0] ================================================================== [ 138.558581][ C0] Disabling lock debugging due to kernel taint [ 138.564748][ C0] ================================================================================ [ 138.574028][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 138.582917][ C0] index 65093 is out of range for type 'const int[34]' [ 138.589789][ C0] CPU: 0 PID: 4951 Comm: syz.4.1947 Tainted: G B syzkaller #0 [ 138.598939][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.609626][ C0] Call Trace: [ 138.612939][ C0] [ 138.615787][ C0] __dump_stack+0x21/0x30 [ 138.620403][ C0] dump_stack_lvl+0x110/0x170 [ 138.625343][ C0] ? show_regs_print_info+0x20/0x20 [ 138.630627][ C0] dump_stack+0x15/0x20 [ 138.634784][ C0] ubsan_epilogue+0xe/0x40 [ 138.639391][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 138.645196][ C0] aiptek_irq+0x1f14/0x29b0 [ 138.649708][ C0] ? kcov_remote_start+0x217/0x350 [ 138.654842][ C0] __usb_hcd_giveback_urb+0x32f/0x4f0 [ 138.660311][ C0] usb_hcd_giveback_urb+0x11d/0x3f0 [ 138.665594][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 138.670553][ C0] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120 [ 138.676470][ C0] dummy_timer+0xa34/0x31d0 [ 138.680993][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 138.686201][ C0] ? __kasan_check_write+0x14/0x20 [ 138.691409][ C0] ? _raw_spin_lock_irqsave+0x130/0x130 [ 138.696979][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 138.702218][ C0] call_timer_fn+0x38/0x290 [ 138.706755][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 138.711970][ C0] __run_timers+0x637/0x9a0 [ 138.716484][ C0] ? calc_index+0x200/0x200 [ 138.721010][ C0] ? sched_clock_cpu+0x18/0x3d0 [ 138.725889][ C0] run_timer_softirq+0x6a/0xf0 [ 138.730652][ C0] handle_softirqs+0x250/0x560 [ 138.735418][ C0] ? irqtime_account_irq+0xbe/0x390 [ 138.741302][ C0] __irq_exit_rcu+0x52/0xf0 [ 138.745836][ C0] irq_exit_rcu+0x9/0x10 [ 138.750094][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 138.755739][ C0] [ 138.758685][ C0] [ 138.761720][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 138.767711][ C0] RIP: 0010:unmap_page_range+0xd6e/0x1e00 [ 138.773537][ C0] Code: 24 28 e8 b5 bb 0a 00 48 8b 4c 24 28 4c 8b 21 48 8b 44 24 18 49 39 c4 4c 0f 46 e0 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 <48> 8b 5c 24 30 74 0f 48 8b 7c 24 28 e8 21 bc 0a 00 48 8b 4c 24 28 [ 138.793322][ C0] RSP: 0018:ffffc90000c578a0 EFLAGS: 00000246 [ 138.799410][ C0] RAX: dffffc0000000000 RBX: ffffc90000c57bf0 RCX: ffffc90000c57bf8 [ 138.808639][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 138.817891][ C0] RBP: ffffc90000c57a70 R08: ffff88811385a787 R09: 1ffff1102270b4f0 [ 138.828234][ C0] R10: dffffc0000000000 R11: ffffed102270b4f1 R12: ffffffffffffffff [ 138.838180][ C0] R13: ffffc90000c57c00 R14: 1ffff9200018af80 R15: 1ffff9200018af7f [ 138.851135][ C0] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 138.857995][ C0] ? lru_cache_add+0x7e0/0x7e0 [ 138.862765][ C0] unmap_vmas+0x26d/0x380 [ 138.867391][ C0] ? unmap_page_range+0x1e00/0x1e00 [ 138.872820][ C0] ? __kasan_check_write+0x14/0x20 [ 138.878104][ C0] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 138.884135][ C0] exit_mmap+0x412/0x8b0 [ 138.888628][ C0] ? vm_brk+0x30/0x30 [ 138.892993][ C0] ? mutex_unlock+0x8f/0x230 [ 138.897584][ C0] ? uprobe_clear_state+0x2c6/0x320 [ 138.902798][ C0] __mmput+0x92/0x300 [ 138.906913][ C0] mmput+0x50/0x150 [ 138.910900][ C0] do_exit+0xacc/0x29a0 [ 138.915198][ C0] ? blkcg_maybe_throttle_current+0x1e0/0xa00 [ 138.921288][ C0] ? put_task_struct+0x90/0x90 [ 138.926148][ C0] ? try_to_wake_up+0x610/0x1150 [ 138.931184][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 138.936217][ C0] ? wake_up_state+0xb/0x10 [ 138.940763][ C0] ? zap_other_threads+0x29b/0x310 [ 138.945885][ C0] do_group_exit+0x149/0x310 [ 138.950482][ C0] __x64_sys_exit_group+0x3f/0x40 [ 138.955767][ C0] x64_sys_call+0x832/0x9a0 [ 138.960270][ C0] do_syscall_64+0x4c/0xa0 [ 138.964802][ C0] ? clear_bhb_loop+0x50/0xa0 [ 138.969498][ C0] ? clear_bhb_loop+0x50/0xa0 [ 138.974197][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.980093][ C0] RIP: 0033:0x7f1b702c20d9 [ 138.984506][ C0] Code: Unable to access opcode bytes at RIP 0x7f1b702c20af. [ 138.991954][ C0] RSP: 002b:00007ffdabf541c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 139.000822][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b702c20d9 [ 139.008813][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.016806][ C0] RBP: 00007ffdabf5422c R08: 0000000000000000 R09: 00000000000927c0 [ 139.024803][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001c4 [ 139.032775][ C0] R13: 00000000000927c0 R14: 00000000000216f0 R15: 00007ffdabf54280 [ 139.040748][ C0] [ 139.043765][ C0] ================================================================================ [ 139.070082][ T307] usb 2-1: USB disconnect, device number 21 [ 139.384549][ T2219] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.393804][ T2219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.403393][ T2219] usb 1-1: Product: syz [ 139.424581][ T2219] usb 1-1: can't set config #1, error -71 [ 139.431176][ T2219] usb 1-1: USB disconnect, device number 22