last executing test programs: 1.648945967s ago: executing program 1 (id=2210): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a", 0xe}], 0x1}, 0x84) mlockall(0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x44, &(0x7f00000001c0)={0x20, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000040)) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b2f000) 1.576289584s ago: executing program 1 (id=2213): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000092000040"]) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000) 1.576080474s ago: executing program 1 (id=2214): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800ff", @ANYRESOCT=0x0], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x800) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfffffffcde7edd340000000e000100"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x1000007fd) 1.070456534s ago: executing program 1 (id=2238): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f00000000c0)="05", 0x1}], 0x1, 0x9) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x802, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000002940)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/246, 0xf6, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x1, 0xa}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 1.023201849s ago: executing program 0 (id=2240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001a80)={0x0, [{0x3, 0x28, 0x3, &(0x7f0000000140)="680ed42293"}, {0x0, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x5, 0x0, 0xfffffffb, 0x0}, {0x1, 0x0, 0x7fff, 0x0}, {0x2, 0x0, 0x7fff, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x80, 0x0}]}) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xc, 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 964.013495ms ago: executing program 0 (id=2241): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x1, 0x20010, r1, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000302000/0x2000)=nil, 0x2000}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 884.872383ms ago: executing program 1 (id=2248): r0 = getpid() r1 = getpid() syz_pidfd_open(r1, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x3, 0x5002) syz_pidfd_open(r0, 0x0) (async) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x10000c, 0x0, 0x100000}, 0x20) 884.382743ms ago: executing program 0 (id=2249): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x700}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000180)=0x7, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 832.047787ms ago: executing program 0 (id=2251): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000300)=[@exit_looper], 0x0, 0x0, 0x0}) 831.488168ms ago: executing program 3 (id=2252): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r2, 0x55435000) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000ffdbdf250a00fc003a2a5e247b000000080001"], 0x24}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x28}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/185, 0xb9, 0x0, 0xe}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) close_range(r3, r1, 0x2) 831.021978ms ago: executing program 0 (id=2253): syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028d0003010000000904000000010100000a24010000000201020624040000520b2405000053f11ee5f7260b24050000133b9bda531c090501000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240209000200018b7e8e0724010000000009058209ff"], 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f00000000c0), 0x2000008, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x7}}, {@max={'max', 0x3d, 0x9}}, {@stats}, {@max={'max', 0x3d, 0xfffffffffffffffa}}, {@max={'max', 0x3d, 0x100}}, {}, {@max={'max', 0x3d, 0x2}}], [{@appraise}, {@obj_role={'obj_role', 0x3d, ')!${}+*!$&-+.[,'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ashmem\x00'}}, {@appraise}, {@fsmagic}]}) 782.641943ms ago: executing program 3 (id=2255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000083, 0x0, 0x101}]}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0, 0x0) lseek(r4, 0x7d, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x603, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x30}}, 0x10) lseek(r5, 0x7fffffffffffffff, 0x0) getdents64(r4, 0x0, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/33, 0x21}], 0x1}, 0x0) 765.725014ms ago: executing program 3 (id=2256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4aa9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xae}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) 392.817811ms ago: executing program 1 (id=2254): r0 = getpgid(0xffffffffffffffff) prlimit64(r0, 0xb, &(0x7f0000000280)={0x100000005, 0x1}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCNXCL(r1, 0x540d) syz_usb_connect(0x4, 0x3f, &(0x7f0000000100)=ANY=[@ANYRES64=r1], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4c, [{0xe4, &(0x7f0000000400)=@string={0xe4, 0x3, "f9c020b6eb8d749d1022c4b5210cd29dbaf514d57085e5319ebd6cd1f5b739f5f4e3ba5d3f5914e517b5e45431ccc0e67116d691a6144577af4b9d3593b29cef76e49ac0dc55cb81fda7ab854abae061238324fd2c46369f87402b15b1fa734aafa74782676c8e12691ed6a5c857550a5c21f448f1f9e613326b0e52872284329b4188273bd020d426e20c257b2d3278db13ddcb927772cb48a44519b03bb69ec2adc037b019922c4717c3c923dc5edef0c5ae0286f523d6e28be8f2041cba6101d7b5b2c8c8b56ddf51fd19b49e6305a318dbe170ce31ddc070ca1d5db6f6e447c4"}}, {0x9, &(0x7f0000000540)=@string={0x9, 0x3, "1cba16fc000000"}}, {0x4, &(0x7f0000000380)=@lang_id={0xfffffd25, 0x3, 0x43f}}]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, 0x0) fcntl$setsig(r2, 0xa, 0x1e) ptrace$getsig(0x4202, r3, 0x2000000000006b, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000000)={0x400000000000030d}) syz_usb_connect(0x1, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800eef0000000010902120001000000000904000000000000000004007efc13fd98079a"], 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0xa3, 0x3, 0x7, 0x3, 0xfffc}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xbb) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @remote, 0x6}, 0x1c) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000040)={@local}, 0x14) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr\x00') fstat(r8, &(0x7f0000000200)) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000200)={0x8000}) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) readv(r9, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) 314.752369ms ago: executing program 0 (id=2258): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x9b, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0xc, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '^%'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xfffd, 0xfe00, 0x3c}, {0x6, 0x24, 0x1a, 0x6000, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0xffff}, @mbim_extended={0x8, 0x24, 0x1c, 0x6adf, 0x2, 0x6}, @obex={0x5, 0x24, 0x15, 0x7}, @obex={0x5}, @acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0xd, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x98, 0x3, 0x1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x909629787e269090, 0x3, 0x5, 0xf, 0x10, 0x9f}, 0x115, &(0x7f0000000280)={0x5, 0xf, 0x115, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x18, 0x3, 0x5, 0x0, 0x80}, @ssp_cap={0x14, 0x10, 0xa, 0xc2, 0x2, 0x800, 0xff00, 0x1, [0xf, 0xffc0]}, @generic={0xc0, 0x10, 0x1, "644bf92a272e06c793b09b759a270fdbbd04d85a9b30390bd5bf2aad5f7bb516b690bd15ed5a06a638838a589908cade530a41d8013a1520e4b7baa6bf86d9cb006612df184fd720473336ff4cf33deb8c90b137d8ccd033bb2f455198bae10a641d0a9d5f12dc198d5af501d7ce26e512848bc3f5e3125b6db4340fc4a809e6634f5e6633b2e14b53496b506c05272bb3dd55970f168750d24ce2a4e39edad1e82e2aeaceca8ca44ae82e1988891ded50aaed64339c1f3c6bfda9e574"}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x3bab, 0xf000, 0x7, [0x3f00, 0x3f00, 0xff3fcf, 0xc007, 0xf, 0x3e40]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x3, 0xddd}]}, 0x3, [{0x1b, &(0x7f00000003c0)=@string={0x1b, 0x3, "2e3d680071c61b0cd4b8126c996e07757d02734b3c345d9f5c"}}, {0x65, &(0x7f0000000400)=@string={0x65, 0x3, "405aa9b06b6d86a76185923b3fbd465ec21f0a758a9fe12d632beab6e4da8fffea51e6702508687d75a4222e597bfb3f086c17a3099c1e89e5d6c27a2e193c9bb1acd9d8b14fc99242c9f1a90ba2c89799502c02a66b1f8bff4734647a1c7474e6571c"}}, {0x96, &(0x7f0000000480)=@string={0x96, 0x3, "8668d16c96836842dadcb6b11e61297fd52ae3cf3fdcece3d80dbe89f519e98e365278b996ceaf425b0fffde5aef1eeec046c4b29d73cc88bcd2fbfdad16b64c680b9e41b594ce22340255c73b6b84fc7e66287245b9d654b4b685f7e991c1f45ce5894c446e01ea522bca74a898f0ce623a1e9b3fc46ca54ed838039a4ed4f38d4161c6da794d9ccde4d88d8e2a4a85589af6c0"}}]}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@rnullb, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) readahead(r0, 0xfffffffff755d836, 0x3) (async) readahead(r0, 0xfffffffff755d836, 0x3) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001c000b0a00ffffe9ffffff00f3ff0000f4", @ANYBLOB="a60590e200c4e1a9fdd3f4c290315fb33a2587ca381368318247d0cb1bdece9065f5b636ea923a8f26f35eca23971350fe7c74b01a3956f66ed27449df27e1bc4d8dc2dd405275b5d9797bace4fc9c8eed61dc831ea8684c2448621b8618d1953887ee73b85b4f3a8d897cbec62a582de2427926cdab52fa53006674b8d2", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), r3) close_range(r2, 0xffffffffffffffff, 0x0) 201.50496ms ago: executing program 3 (id=2264): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) (async) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2046) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async, rerun: 64) sendmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (async) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000280)="a019f85a46f974e1459522f37751ce188250a5208c0886b0e3dc7dac5ca3d17d2795b2e1416c616e2e9df5dfebc4f637efb4801d09a2193ccfe170c1c3aa3c8ef68ef70427dffaf608164cee3275b06f4a158dcfc52f0bc51d10c5db0700718de2de10df95efd6fe4be17bd1e0b90caa396beb925943000252d773c71a0af399c89186138992ef24f9ed2954cf2b6cf533fc8a137169f10531b9a43ef4afa4e522", 0xa1, 0x0) 193.926051ms ago: executing program 3 (id=2266): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x59) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3e9}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0xfffffffffffffffb, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x9}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 148.589625ms ago: executing program 3 (id=2269): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syslog(0x2, &(0x7f0000000000)=""/41, 0x29) ioprio_set$pid(0x2, 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 147.974495ms ago: executing program 2 (id=2270): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r0 = dup(0xffffffffffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x4, 0x1100, 0x50, 0x493, 0x40, 0x0, 0x0, 0x0, 0x40}}, 0x50) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18, 0x0, r2, {0x8}}, 0x18) write$FUSE_INIT(r0, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 147.665895ms ago: executing program 2 (id=2271): setresuid(0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 95.867661ms ago: executing program 2 (id=2272): syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x7fffffff, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x1, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000000c0)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) r4 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x80081272, 0x3) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x1, 0x6, 0x3, 0x2, 0x4, 0x0, 0x8, 0x2, 0x7, 0x3, 0x8000000000000000, 0x7, 0xb, 0x1ff}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000440)={{r5, 0x4, 0x3, 0x8, 0x10, 0xcbd1, 0xffffffffffffff7f, 0x5, 0x5, 0xae, 0x1, 0x7b, 0x177, 0xa, 0x1}}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, 0x52, 0x1, 0x70bd04, 0x24dfdbfc, {0xa}}, 0x14}}, 0x8800) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000003400)={0x30, r8, 0x239, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}]}]}, 0x30}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 74.576932ms ago: executing program 2 (id=2273): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080)) keyctl$reject(0x13, 0x0, 0x8000, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioperm(0x8, 0x1, 0x10001) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) r5 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f00000003c0)=0x43df, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x40000c0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xac}}, 0x9}, 0x1c) fcntl$lock(r4, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r7 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$invalidate(0x15, r8) add_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="3d6714975f12f069d563cbf0787d4dcc1808a4a7a3923865433037313a93da17f123b21d02167cf8edaa2f3b1cc7b045a43aca8235f81c91628e9fdc1e457dbfd78b79d10d43937b05314098cbd7cf3c026a05ce07c469f2827d76c8e45cfee14ebeafd684276b16d7", 0x69, r7) add_key$fscrypt_v1(&(0x7f00000001c0), 0x0, 0x0, 0x0, r8) fadvise64(r6, 0x0, 0x45c, 0x5) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 58.582174ms ago: executing program 2 (id=2274): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='cpuset\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = openat$incfs(r2, &(0x7f0000000000)='.log\x00', 0x80040, 0x42) read$rfkill(r3, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x103002, 0x107) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000002c80)={0x30}, 0x30) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000100)='\'*.\x1c/)&\x00', &(0x7f0000000140)='\x00', &(0x7f00000001c0)=',/$[(@\xe2\x00', &(0x7f0000000280)='#},&$!\x00', &(0x7f00000002c0)='\x00']}, &(0x7f00000005c0)={[&(0x7f0000000340)='}\x00', &(0x7f0000000440)='/selinux/status\x00', &(0x7f0000000480)='/selinux/status\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/,{\\)$\x00', &(0x7f0000000540)='/selinux/status\x00', &(0x7f0000000580)=',\x00']}) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00aa6600000000", 0x8) setsockopt$inet_opts(r7, 0x0, 0xd, 0x0, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x100, 0x1, 0xc3, 0x0, r6}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x52, 0x0, &(0x7f0000000200), 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 0s ago: executing program 2 (id=2275): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x0, 0x1}]) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000000080102000000000000000000000004060002400a0100074000000005080006400000000508000540000000040600024088fb00004400048008000140000000060800014000000400080006400000000508000140000000090800074000006c3408000340000000080800034000000003080006400001"], 0x84}, 0x1, 0x0, 0x0, 0x10000}, 0x20000000) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a0443000b0018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000140001"], 0x14}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xf) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4) recvfrom$inet(r5, 0x0, 0x0, 0x40000022, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1844674432,\x00'/33]) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x9) r6 = userfaultfd(0x80801) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]}) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) getsockopt$packet_int(r1, 0x107, 0x17, 0x0, &(0x7f0000004480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xa9dbe000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000030d000/0x400000)=nil) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.708236][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 14.708255][ T36] audit: type=1400 audit(1760784812.940:59): avc: denied { transition } for pid=233 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.713097][ T36] audit: type=1400 audit(1760784812.940:60): avc: denied { noatsecure } for pid=233 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.716589][ T36] audit: type=1400 audit(1760784812.950:61): avc: denied { write } for pid=233 comm="sh" path="pipe:[1915]" dev="pipefs" ino=1915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.719988][ T36] audit: type=1400 audit(1760784812.950:62): avc: denied { rlimitinh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.723239][ T36] audit: type=1400 audit(1760784812.950:63): avc: denied { siginh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. [ 22.461766][ T36] audit: type=1400 audit(1760784820.700:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.463246][ T283] cgroup: Unknown subsys name 'net' [ 22.484637][ T36] audit: type=1400 audit(1760784820.700:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.512197][ T36] audit: type=1400 audit(1760784820.730:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.512409][ T283] cgroup: Unknown subsys name 'devices' [ 22.672206][ T283] cgroup: Unknown subsys name 'hugetlb' [ 22.677852][ T283] cgroup: Unknown subsys name 'rlimit' [ 22.854647][ T36] audit: type=1400 audit(1760784821.090:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.877942][ T36] audit: type=1400 audit(1760784821.090:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.902920][ T36] audit: type=1400 audit(1760784821.090:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.908533][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.935141][ T36] audit: type=1400 audit(1760784821.170:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.960695][ T36] audit: type=1400 audit(1760784821.170:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.013495][ T36] audit: type=1400 audit(1760784821.250:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.014069][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.039029][ T36] audit: type=1400 audit(1760784821.250:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.424895][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.439816][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.446941][ T290] bridge_slave_0: entered allmulticast mode [ 24.455991][ T290] bridge_slave_0: entered promiscuous mode [ 24.462803][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.469900][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.477017][ T290] bridge_slave_1: entered allmulticast mode [ 24.483391][ T290] bridge_slave_1: entered promiscuous mode [ 24.625665][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.632762][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.640128][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.647182][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.662349][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.669528][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.676876][ T296] bridge_slave_0: entered allmulticast mode [ 24.683559][ T296] bridge_slave_0: entered promiscuous mode [ 24.690062][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.697102][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.704194][ T296] bridge_slave_1: entered allmulticast mode [ 24.710583][ T296] bridge_slave_1: entered promiscuous mode [ 24.728775][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.735988][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.743351][ T295] bridge_slave_0: entered allmulticast mode [ 24.749677][ T295] bridge_slave_0: entered promiscuous mode [ 24.759982][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.767055][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.774213][ T295] bridge_slave_1: entered allmulticast mode [ 24.780556][ T295] bridge_slave_1: entered promiscuous mode [ 24.842907][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.850390][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.871948][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.879114][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.893402][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.900573][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.907655][ T294] bridge_slave_0: entered allmulticast mode [ 24.914222][ T294] bridge_slave_0: entered promiscuous mode [ 24.922066][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.929135][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.936257][ T294] bridge_slave_1: entered allmulticast mode [ 24.942612][ T294] bridge_slave_1: entered promiscuous mode [ 24.957740][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.964837][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.107006][ T290] veth0_vlan: entered promiscuous mode [ 25.122049][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.129289][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.137408][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.144495][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.177408][ T290] veth1_macvtap: entered promiscuous mode [ 25.188478][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.195567][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.214155][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.221249][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.229409][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.236578][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.255846][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.262940][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.285718][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.299517][ T295] veth0_vlan: entered promiscuous mode [ 25.338761][ T334] rust_binder: Write failure EFAULT in pid:2 [ 25.343877][ T295] veth1_macvtap: entered promiscuous mode [ 25.356591][ T296] veth0_vlan: entered promiscuous mode [ 25.368668][ T296] veth1_macvtap: entered promiscuous mode [ 25.377883][ T294] veth0_vlan: entered promiscuous mode [ 25.416199][ T338] 9pnet_fd: Insufficient options for proto=fd [ 25.426412][ T294] veth1_macvtap: entered promiscuous mode [ 25.452513][ T343] tmpfs: Bad value for 'nr_blocks' [ 25.459404][ T343] binder: Unknown parameter '!T0x0000000000000003' [ 25.500106][ T345] __vm_enough_memory: pid: 345, comm: syz.1.8, bytes: 18014402804453376 not enough memory for the allocation [ 25.515941][ T347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 25.516014][ T347] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 25.528135][ T348] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.553835][ T347] rust_binder: Read failure Err(EFAULT) in pid:2 [ 25.561311][ T350] rust_binder: Error while translating object. [ 25.575647][ T350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.589555][ T353] rust_binder: 12: no such ref 1 [ 25.606292][ T350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 25.623793][ T353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 25.712733][ T363] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.764900][ T367] exFAT-fs (rnullb0): invalid boot record signature [ 25.771666][ T367] exFAT-fs (rnullb0): failed to read boot sector [ 25.778272][ T367] exFAT-fs (rnullb0): failed to recognize exfat type [ 25.832570][ T374] netlink: 5 bytes leftover after parsing attributes in process `syz.1.16'. [ 25.978453][ T383] rust_binder: Write failure EFAULT in pid:29 [ 26.000479][ T385] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 26.006846][ T385] rust_binder: Read failure Err(EFAULT) in pid:31 [ 26.098907][ T389] process 'syz.1.21' launched './file1' with NULL argv: empty string added [ 26.355398][ T393] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 26.355433][ T393] rust_binder: Error while translating object. [ 26.368062][ T393] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.374635][ T393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 26.401567][ T396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 26.410781][ T396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:40 [ 26.543276][ T410] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 26.568550][ T410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 26.570609][ T410] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 26.600037][ T410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:9 [ 26.770995][ T443] rust_binder: Write failure EFAULT in pid:22 [ 26.842864][ T449] Zero length message leads to an empty skb [ 26.858487][ T450] netlink: 51 bytes leftover after parsing attributes in process `syz.2.38'. [ 26.875872][ T450] rust_binder: Write failure EFAULT in pid:24 [ 26.910155][ T468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 26.969304][ T482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 26.980335][ T482] rust_binder: Error while translating object. [ 26.989711][ T482] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.999885][ T482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 27.289852][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.312852][ T489] rust_binder: Write failure EFAULT in pid:44 [ 27.325600][ T491] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 27.331761][ T491] rust_binder: Error while translating object. [ 27.340680][ T491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.346973][ T491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 27.357490][ T492] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.403163][ T499] ======================================================= [ 27.403163][ T499] WARNING: The mand mount option has been deprecated and [ 27.403163][ T499] and is ignored by this kernel. Remove the mand [ 27.403163][ T499] option from the mount to silence this warning. [ 27.403163][ T499] ======================================================= [ 27.429852][ T10] usb 1-1: device descriptor read/64, error -71 [ 27.491015][ T36] kauditd_printk_skb: 120 callbacks suppressed [ 27.491033][ T36] audit: type=1400 audit(1760784825.730:194): avc: denied { map } for pid=502 comm="syz.1.49" path="socket:[3745]" dev="sockfs" ino=3745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 27.645026][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.645393][ T506] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 27.652563][ T506] FAT-fs (rnullb0): bogus number of reserved sectors [ 27.656970][ T508] fuseblk: Unknown parameter 'fbn0xffffffffffffffff' [ 27.660812][ T506] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 27.702029][ T10] usb 1-1: device descriptor read/64, error -71 [ 27.724332][ T36] audit: type=1400 audit(1760784825.950:195): avc: denied { create } for pid=515 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 27.781344][ T36] audit: type=1400 audit(1760784826.020:196): avc: denied { bind } for pid=520 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.800982][ T521] TCP: TCP_TX_DELAY enabled [ 27.839823][ T36] audit: type=1400 audit(1760784826.020:197): avc: denied { connect } for pid=520 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.939854][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.012392][ T36] audit: type=1400 audit(1760784826.250:198): avc: denied { ioctl } for pid=520 comm="syz.1.56" path="socket:[3777]" dev="sockfs" ino=3777 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.069851][ T10] usb 1-1: device descriptor read/64, error -71 [ 28.071543][ T524] netlink: 'syz.1.57': attribute type 32 has an invalid length. [ 28.076157][ T36] audit: type=1400 audit(1760784826.310:199): avc: denied { ioctl } for pid=523 comm="syz.1.57" path="socket:[3786]" dev="sockfs" ino=3786 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.125811][ T36] audit: type=1400 audit(1760784826.360:200): avc: denied { mounton } for pid=526 comm="syz.1.58" path="/30/file0" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 28.198437][ T36] audit: type=1400 audit(1760784826.430:201): avc: denied { execute } for pid=530 comm="syz.1.59" path="/31/cpuacct.usage_percpu" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.282527][ T36] audit: type=1400 audit(1760784826.520:202): avc: denied { bind } for pid=538 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.303629][ T36] audit: type=1400 audit(1760784826.540:203): avc: denied { setopt } for pid=538 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.325379][ T10] usb 1-1: device descriptor read/64, error -71 [ 28.439914][ T10] usb usb1-port1: attempt power cycle [ 28.541805][ T543] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.541950][ T543] rust_binder: 30: no such ref 0 [ 28.553802][ T543] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 28.560894][ T543] rust_binder: 30: no such ref 2 [ 28.565870][ T543] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 28.566791][ T543] netlink: 140 bytes leftover after parsing attributes in process `syz.2.62'. [ 28.584065][ T543] netlink: 48 bytes leftover after parsing attributes in process `syz.2.62'. [ 28.779964][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.800933][ T10] usb 1-1: device descriptor read/8, error -71 [ 28.859852][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.930916][ T10] usb 1-1: device descriptor read/8, error -71 [ 28.989971][ T45] usb 3-1: device descriptor read/64, error -71 [ 29.169891][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 29.190856][ T10] usb 1-1: device descriptor read/8, error -71 [ 29.230126][ T45] usb 3-1: device descriptor read/64, error -71 [ 29.320926][ T10] usb 1-1: device descriptor read/8, error -71 [ 29.429996][ T10] usb usb1-port1: unable to enumerate USB device [ 29.469996][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.599820][ T45] usb 3-1: device descriptor read/64, error -71 [ 29.849871][ T45] usb 3-1: device descriptor read/64, error -71 [ 29.883811][ T572] 9pnet_fd: Insufficient options for proto=fd [ 29.960502][ T45] usb usb3-port1: attempt power cycle [ 30.019734][ T577] netlink: 64 bytes leftover after parsing attributes in process `syz.3.74'. [ 30.071190][ T579] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.101098][ T582] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4 [ 30.108788][ T582] rust_binder: Write failure EINVAL in pid:29 [ 30.183528][ T589] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 30.190184][ T589] rust_binder: Error while translating object. [ 30.199025][ T589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.205325][ T589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 30.262586][ T591] rust_binder: Write failure EFAULT in pid:38 [ 30.558427][ T615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=615 comm=syz.0.87 [ 30.694963][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.785281][ T615] input: syz0 as /devices/virtual/input/input4 [ 30.823453][ T45] usb 3-1: device descriptor read/8, error -71 [ 30.923918][ T626] /dev/nbd1: Can't lookup blockdev [ 30.950849][ T45] usb 3-1: device descriptor read/8, error -71 [ 31.189838][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.210818][ T45] usb 3-1: device descriptor read/8, error -71 [ 31.340907][ T45] usb 3-1: device descriptor read/8, error -71 [ 31.352290][ T659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 31.452342][ T45] usb usb3-port1: unable to enumerate USB device [ 31.627987][ T670] mmap: syz.2.105 (670) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.671026][ T676] capability: warning: `syz.2.107' uses deprecated v2 capabilities in a way that may be insecure [ 31.729872][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 31.879831][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 31.886283][ T45] usb 1-1: config 0 has no interfaces? [ 31.893513][ T45] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 31.902641][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.910692][ T45] usb 1-1: Product: syz [ 31.914870][ T45] usb 1-1: Manufacturer: syz [ 31.919468][ T45] usb 1-1: SerialNumber: syz [ 31.924908][ T45] usb 1-1: config 0 descriptor?? [ 32.184387][ T689] incfs: Can't find or create .index dir in ./file0 [ 32.191209][ T689] incfs: mount failed -1 [ 32.196371][ T689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.205022][ T689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.364625][ T691] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 32.395416][ T691] netlink: 188 bytes leftover after parsing attributes in process `syz.3.112'. [ 32.519442][ T697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35 sclass=netlink_audit_socket pid=697 comm=syz.2.114 [ 32.532265][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 32.532281][ T36] audit: type=1400 audit(1760784830.770:236): avc: denied { create } for pid=695 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 32.799825][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 32.949810][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 32.955990][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 32.964449][ T10] usb 3-1: config 179 has no interface number 0 [ 32.970775][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 32.982033][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 32.993547][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 33.003676][ T10] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 33.017012][ T10] usb 3-1: config 179 interface 65 has no altsetting 0 [ 33.023925][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 33.032983][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.242781][ T36] audit: type=1400 audit(1760784831.480:237): avc: denied { name_bind } for pid=698 comm="syz.2.115" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 33.350485][ T10] usb 3-1: USB disconnect, device number 6 [ 33.369804][ T707] rust_binder: Write failure EINVAL in pid:50 [ 33.447124][ T36] audit: type=1400 audit(1760784831.680:238): avc: denied { mount } for pid=709 comm="syz.2.118" name="/" dev="configfs" ino=2185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 33.503921][ T716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.506353][ T716] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 33.519387][ T36] audit: type=1400 audit(1760784831.750:239): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 33.557439][ T718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.558038][ T718] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 33.583721][ T720] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.592211][ T720] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 33.593061][ T722] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 33.618470][ T724] /dev/sg0: Can't lookup blockdev [ 33.618733][ T36] audit: type=1400 audit(1760784831.850:240): avc: denied { mounton } for pid=723 comm="syz.2.123" path="/syzcgroup/unified/syz2" dev="configfs" ino=2185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 33.721409][ T729] netlink: 'syz.2.124': attribute type 10 has an invalid length. [ 33.729236][ T729] netlink: 5 bytes leftover after parsing attributes in process `syz.2.124'. [ 33.738449][ T729] bridge_slave_1: left promiscuous mode [ 33.744454][ T729] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.790159][ T36] audit: type=1400 audit(1760784832.030:241): avc: denied { relabelfrom } for pid=733 comm="syz.3.126" name="" dev="pipefs" ino=5215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 33.813127][ T36] audit: type=1401 audit(1760784832.030:242): op=setxattr invalid_context="" [ 33.981130][ T739] netlink: 32 bytes leftover after parsing attributes in process `syz.3.128'. [ 34.075417][ T36] audit: type=1400 audit(1760784832.310:243): avc: denied { ioctl } for pid=761 comm="syz.3.136" path="socket:[5261]" dev="sockfs" ino=5261 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.142809][ T771] tipc: Enabling of bearer rejected, failed to enable media [ 34.505172][ T45] usb 1-1: USB disconnect, device number 6 [ 34.511067][ T36] audit: type=1400 audit(1760784832.750:244): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 34.526177][ T773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'. [ 34.561774][ T36] audit: type=1400 audit(1760784832.800:245): avc: denied { read } for pid=779 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.939837][ T45] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 35.091197][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 35.098825][ T45] usb 1-1: can't read configurations, error -61 [ 35.229853][ T45] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 35.281958][ T821] 9pnet: Could not find request transport: xen [ 35.381210][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 35.388875][ T45] usb 1-1: can't read configurations, error -61 [ 35.395425][ T45] usb usb1-port1: attempt power cycle [ 35.740904][ T45] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 35.761656][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 35.769294][ T45] usb 1-1: can't read configurations, error -61 [ 35.899833][ T45] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 35.921723][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 35.929381][ T45] usb 1-1: can't read configurations, error -61 [ 35.935982][ T45] usb usb1-port1: unable to enumerate USB device [ 37.170600][ T893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.180'. [ 37.190804][ T897] 8021q: VLANs not supported on wg2 [ 37.197681][ T897] netlink: 760 bytes leftover after parsing attributes in process `syz.3.181'. [ 37.596559][ T912] netlink: 'syz.1.187': attribute type 21 has an invalid length. [ 37.604445][ T912] netlink: 388 bytes leftover after parsing attributes in process `syz.1.187'. [ 37.622444][ T914] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 37.634985][ T921] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 37.659886][ T921] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 37.670038][ T921] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 37.679583][ T921] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 37.688592][ T921] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 37.696655][ T921] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 37.704697][ T921] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 37.712585][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 37.712600][ T36] audit: type=1400 audit(1760784835.950:265): avc: denied { watch } for pid=924 comm="syz.0.190" path="/28/file0" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.712639][ T921] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 37.781319][ T932] 9pnet_fd: p9_fd_create_tcp (932): problem connecting socket to 127.0.0.1 [ 37.809066][ T934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=934 comm=syz.1.193 [ 38.110155][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 38.259919][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 38.266676][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 38.275373][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.285593][ T45] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 38.294770][ T45] usb 1-1: config 1 has no interface number 1 [ 38.301140][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 38.313759][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 38.323269][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.332032][ T45] usb 1-1: Product: syz [ 38.336326][ T45] usb 1-1: Manufacturer: syz [ 38.341314][ T45] usb 1-1: SerialNumber: syz [ 38.549573][ T944] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 38.549659][ T944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 38.557828][ T944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:93 [ 38.760853][ T36] audit: type=1400 audit(1760784837.000:266): avc: denied { bind } for pid=967 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.761854][ T968] fuse: Bad value for 'user_id' [ 38.794432][ T968] fuse: Bad value for 'user_id' [ 38.852792][ T36] audit: type=1400 audit(1760784837.090:267): avc: denied { ioctl } for pid=974 comm="syz.2.206" path="socket:[6355]" dev="sockfs" ino=6355 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.879341][ T975] sock: sock_timestamping_bind_phc: sock not bind to device [ 38.970507][ T982] validate_nla: 58 callbacks suppressed [ 38.970530][ T982] netlink: 'syz.1.208': attribute type 46 has an invalid length. [ 39.416319][ T1023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 39.432903][ T36] audit: type=1326 audit(1760784837.670:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.1.221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb74b38efc9 code=0x0 [ 39.521458][ T1031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8210 sclass=netlink_route_socket pid=1031 comm=syz.2.223 [ 39.666396][ T1043] netlink: 'syz.2.227': attribute type 4 has an invalid length. [ 39.679834][ T1043] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.227'. [ 39.884677][ T1054] netlink: 'syz.3.231': attribute type 6 has an invalid length. [ 40.041244][ T1062] netlink: 64 bytes leftover after parsing attributes in process `syz.2.234'. [ 40.075089][ T36] audit: type=1400 audit(1760784838.310:269): avc: denied { create } for pid=1067 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 40.095772][ T36] audit: type=1400 audit(1760784838.320:270): avc: denied { write } for pid=1067 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 40.407694][ T36] audit: type=1400 audit(1760784838.640:271): avc: denied { create } for pid=1083 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 40.527381][ T1104] >: renamed from veth0_vlan (while UP) [ 40.549745][ T1110] netlink: 'syz.3.253': attribute type 4 has an invalid length. [ 40.551537][ T1112] netlink: 'syz.1.254': attribute type 16 has an invalid length. [ 40.565465][ T1112] netlink: 'syz.1.254': attribute type 2 has an invalid length. [ 40.566197][ T36] audit: type=1400 audit(1760784838.800:272): avc: denied { ioctl } for pid=1111 comm="syz.1.254" path="socket:[6487]" dev="sockfs" ino=6487 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.573691][ T1112] netlink: 64086 bytes leftover after parsing attributes in process `syz.1.254'. [ 40.673427][ T36] audit: type=1400 audit(1760784838.910:273): avc: denied { create } for pid=1115 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 40.833399][ T45] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 40.849699][ T45] usb 1-1: USB disconnect, device number 11 [ 40.872063][ T430] udevd[430]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.914828][ T1148] tipc: Started in network mode [ 40.919718][ T1148] tipc: Node identity 4, cluster identity 4711 [ 40.925941][ T1148] tipc: Node number set to 4 [ 40.931474][ T1148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=1148 comm=syz.2.265 [ 41.014386][ T36] audit: type=1400 audit(1760784839.250:274): avc: denied { append } for pid=1158 comm="syz.0.269" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.014948][ T1159] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 41.044632][ T1159] rust_binder: Write failure EINVAL in pid:100 [ 41.229431][ T1188] rust_binder: Write failure EFAULT in pid:106 [ 41.490674][ T63] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 41.651018][ T63] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.661295][ T63] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.670928][ T63] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 41.680158][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 41.688330][ T63] usb 1-1: SerialNumber: syz [ 42.003527][ T1218] netlink: 'syz.3.288': attribute type 16 has an invalid length. [ 42.011405][ T1218] netlink: 64122 bytes leftover after parsing attributes in process `syz.3.288'. [ 42.021263][ T1218] netlink: 'syz.3.288': attribute type 13 has an invalid length. [ 42.029459][ T1218] erspan0: refused to change device tx_queue_len [ 42.039737][ T1218] overlay: ./file0 is not a directory [ 42.425568][ T1253] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 42.471403][ T63] usb 1-1: 0:2 : does not exist [ 42.503006][ T63] usb 1-1: USB disconnect, device number 12 [ 42.582089][ T1281] erofs: dax options not supported [ 42.592627][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.606159][ T1291] FAT-fs (rnullb0): bogus number of reserved sectors [ 42.617223][ T1291] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 42.641166][ T1300] netlink: 9 bytes leftover after parsing attributes in process `syz.3.310'. [ 42.652476][ T1300] gretap0: entered promiscuous mode [ 42.666321][ T1300] netlink: 5 bytes leftover after parsing attributes in process `syz.3.310'. [ 42.675775][ T1300] 0{X: renamed from gretap0 [ 42.682344][ T1300] 0{X: left promiscuous mode [ 42.687627][ T1300] 0{X: entered allmulticast mode [ 42.694722][ T1300] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 42.724592][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 42.724609][ T36] audit: type=1400 audit(1760784840.960:286): avc: denied { setopt } for pid=1313 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 42.726119][ T1314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 43.014962][ T1342] 9pnet_fd: Insufficient options for proto=fd [ 43.041905][ T36] audit: type=1400 audit(1760784841.280:287): avc: denied { mounton } for pid=1343 comm="syz.3.328" path=2F3131302FE91F7189591E9233614B dev="tmpfs" ino=600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 43.041935][ T1344] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 43.199840][ T63] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 43.215966][ T1350] netlink: 'syz.1.330': attribute type 12 has an invalid length. [ 43.245750][ T1356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'. [ 43.254725][ T1357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'. [ 43.266108][ T36] audit: type=1400 audit(1760784841.500:288): avc: denied { create } for pid=1355 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 43.329830][ T63] usb 1-1: device descriptor read/64, error -71 [ 43.420986][ T36] audit: type=1400 audit(1760784841.660:289): avc: denied { create } for pid=1367 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 43.443171][ T36] audit: type=1400 audit(1760784841.680:290): avc: denied { associate } for pid=1369 comm="syz.2.337" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 43.470327][ T1368] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.337'. [ 43.479957][ T1368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=1368 comm=syz.2.337 [ 43.494758][ T1368] tmpfs: Bad value for 'huge' [ 43.501241][ T36] audit: type=1400 audit(1760784841.740:291): avc: denied { sys_nice } for pid=1367 comm="syz.2.337" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 43.568487][ T1382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=1382 comm=syz.2.341 [ 43.581148][ T63] usb 1-1: device descriptor read/64, error -71 [ 43.759301][ T36] audit: type=1400 audit(1760784841.990:292): avc: denied { mounton } for pid=1399 comm="syz.3.350" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 43.789685][ T1403] netlink: 64 bytes leftover after parsing attributes in process `syz.2.351'. [ 43.839806][ T63] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 43.979647][ T1438] 9pnet_fd: Insufficient options for proto=fd [ 43.989815][ T63] usb 1-1: device descriptor read/64, error -71 [ 44.051232][ T1450] netlink: 8540 bytes leftover after parsing attributes in process `syz.1.368'. [ 44.060520][ T1450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 44.069476][ T1450] netlink: 5 bytes leftover after parsing attributes in process `syz.1.368'. [ 44.101798][ T36] audit: type=1400 audit(1760784842.340:293): avc: denied { accept } for pid=1460 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.229939][ T63] usb 1-1: device descriptor read/64, error -71 [ 44.246837][ T1487] netlink: 'syz.2.379': attribute type 46 has an invalid length. [ 44.254740][ T1487] netlink: 44 bytes leftover after parsing attributes in process `syz.2.379'. [ 44.275753][ T1492] 9pnet_fd: Insufficient options for proto=fd [ 44.312331][ T36] audit: type=1326 audit(1760784842.550:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1493 comm="syz.2.381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d21f8efc9 code=0x0 [ 44.340205][ T63] usb usb1-port1: attempt power cycle [ 44.656438][ T1497] __vm_enough_memory: pid: 1497, comm: syz.1.382, bytes: 21200469831680 not enough memory for the allocation [ 44.679818][ T63] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 44.703003][ T63] usb 1-1: device descriptor read/8, error -71 [ 44.830870][ T63] usb 1-1: device descriptor read/8, error -71 [ 45.069918][ T63] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 45.091108][ T63] usb 1-1: device descriptor read/8, error -71 [ 45.203222][ T1515] netlink: 'syz.2.388': attribute type 32 has an invalid length. [ 45.231489][ T63] usb 1-1: device descriptor read/8, error -71 [ 45.339896][ T63] usb usb1-port1: unable to enumerate USB device [ 45.462577][ T36] audit: type=1400 audit(1760784843.700:295): avc: denied { search } for pid=1528 comm="syz.2.392" name="/" dev="configfs" ino=2185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.684935][ T1567] 9pnet_fd: Insufficient options for proto=fd [ 45.814917][ T1584] netlink: 'syz.2.411': attribute type 13 has an invalid length. [ 45.978455][ T1593] rust_binder: Error while translating object. [ 45.978502][ T1593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.985033][ T1593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 46.031096][ T1603] netlink: 'syz.0.419': attribute type 1 has an invalid length. [ 46.048274][ T1603] rust_binder: Write failure EFAULT in pid:140 [ 46.063082][ T1605] exFAT-fs (rnullb0): invalid boot record signature [ 46.076293][ T1605] exFAT-fs (rnullb0): failed to read boot sector [ 46.082698][ T1605] exFAT-fs (rnullb0): failed to recognize exfat type [ 46.191969][ T1612] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 46.199232][ T1612] IPv6: NLM_F_CREATE should be set when creating new route [ 46.206506][ T1612] IPv6: NLM_F_CREATE should be set when creating new route [ 46.349851][ T63] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 46.499837][ T63] usb 1-1: Using ep0 maxpacket: 8 [ 46.506038][ T63] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 46.516498][ T63] usb 1-1: config 179 has no interface number 0 [ 46.523366][ T63] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 46.534669][ T63] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 46.546119][ T63] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 46.556294][ T63] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 46.569778][ T63] usb 1-1: config 179 interface 65 has no altsetting 0 [ 46.576685][ T63] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 46.585852][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.770188][ T1641] netlink: 'syz.2.434': attribute type 4 has an invalid length. [ 46.817981][ T557] usb 1-1: USB disconnect, device number 17 [ 47.003502][ T1661] 9pnet_fd: Insufficient options for proto=fd [ 47.061118][ T1665] tipc: Failed to remove unknown binding: 66,1,1/4:2580057813/2580057815 [ 47.099943][ T1665] tipc: Failed to remove unknown binding: 66,1,1/4:2580057813/2580057815 [ 47.108512][ T1665] tipc: Failed to remove unknown binding: 66,1,1/4:2580057813/2580057815 [ 47.715875][ T1709] rust_binder: Read failure Err(EAGAIN) in pid:160 [ 47.730355][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 47.730374][ T36] audit: type=1400 audit(1760784845.969:315): avc: denied { ioctl } for pid=1710 comm="syz.0.458" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.825577][ T1712] binder: Unknown parameter 'defcontext01777777777777777777777' [ 48.021122][ T36] audit: type=1326 audit(1760784846.259:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1692 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b38efc9 code=0x7fc00000 [ 48.067457][ T1734] __nla_validate_parse: 2 callbacks suppressed [ 48.067474][ T1734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.464'. [ 48.230252][ T36] audit: type=1400 audit(1760784846.469:317): avc: denied { create } for pid=1759 comm="syz.3.474" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.234373][ T1760] fuse: Bad value for 'fd' [ 48.250990][ T36] audit: type=1400 audit(1760784846.469:318): avc: denied { mounton } for pid=1759 comm="syz.3.474" path="/137/file0" dev="tmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.512195][ T36] audit: type=1400 audit(1760784846.749:319): avc: denied { unlink } for pid=296 comm="syz-executor" name="file0" dev="tmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.831771][ T36] audit: type=1400 audit(1760784847.069:320): avc: denied { setopt } for pid=1812 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.842920][ T1814] raw_sendmsg: syz.2.491 forgot to set AF_INET. Fix it! [ 48.879814][ T63] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 48.994671][ T1842] 9pnet_fd: Insufficient options for proto=fd [ 49.009519][ T1845] overlayfs: failed to clone upperpath [ 49.030912][ T63] usb 1-1: config 1 interface 0 has no altsetting 0 [ 49.039925][ T63] usb 1-1: string descriptor 0 read error: -22 [ 49.046128][ T63] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.40 [ 49.055244][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.266415][ T1776] FAT-fs (rnullb0): bogus number of reserved sectors [ 49.273242][ T1776] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 49.282719][ T63] usbhid 1-1:1.0: can't add hid device: -71 [ 49.288709][ T63] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 49.297410][ T63] usb 1-1: USB disconnect, device number 18 [ 49.798968][ T1868] 9pnet_fd: Insufficient options for proto=fd [ 49.849610][ T36] audit: type=1400 audit(1760784848.079:321): avc: denied { read write } for pid=1872 comm="syz.0.513" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 49.873113][ T36] audit: type=1400 audit(1760784848.079:322): avc: denied { open } for pid=1872 comm="syz.0.513" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 49.948542][ T36] audit: type=1400 audit(1760784848.179:323): avc: denied { read } for pid=1877 comm="syz.0.515" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 49.950119][ T1880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.979882][ T36] audit: type=1400 audit(1760784848.179:324): avc: denied { open } for pid=1877 comm="syz.0.515" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 49.980552][ T1880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.094998][ T1883] fuse: Bad value for 'user_id' [ 50.099986][ T1883] fuse: Bad value for 'user_id' [ 50.179873][ T331] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 50.342026][ T331] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 50.350448][ T331] usb 1-1: config 1 has no interface number 0 [ 50.356647][ T331] usb 1-1: config 1 interface 105 has no altsetting 0 [ 50.365254][ T331] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 50.374600][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.382778][ T331] usb 1-1: Product: syz [ 50.387035][ T331] usb 1-1: Manufacturer: syz [ 50.391886][ T331] usb 1-1: SerialNumber: syz [ 50.504499][ T1920] netlink: 32 bytes leftover after parsing attributes in process `syz.1.529'. [ 50.600080][ T331] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 50.619586][ T331] usb 1-1: USB disconnect, device number 19 [ 50.649109][ T1928] 9pnet_fd: Insufficient options for proto=fd [ 50.686613][ T1933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 50.696555][ T1933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1933 comm=syz.1.535 [ 50.964686][ T1972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 50.973617][ T1973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 51.009016][ T1977] netlink: 'syz.2.551': attribute type 2 has an invalid length. [ 51.040538][ T1981] overlayfs: failed to clone upperpath [ 51.123213][ T1986] 9pnet_fd: Insufficient options for proto=fd [ 51.174201][ T1988] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1988 comm=syz.3.556 [ 51.428471][ T2012] kvm: pic: non byte write [ 51.590342][ T2030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2030 comm=syz.2.571 [ 51.688424][ T2037] netlink: 36 bytes leftover after parsing attributes in process `syz.2.573'. [ 51.907192][ T2055] sock: sock_timestamping_bind_phc: sock not bind to device [ 51.925575][ T2057] netlink: 'syz.1.577': attribute type 12 has an invalid length. [ 51.970369][ T2066] 9pnet_fd: Insufficient options for proto=fd [ 52.056738][ T2072] netlink: 32 bytes leftover after parsing attributes in process `syz.1.583'. [ 52.067344][ T2072] tipc: Invalid UDP bearer configuration [ 52.067372][ T2072] tipc: Enabling of bearer rejected, failed to enable media [ 52.550348][ T2126] netlink: 116 bytes leftover after parsing attributes in process `syz.1.603'. [ 52.718259][ T2157] 9pnet_fd: Insufficient options for proto=fd [ 52.774524][ T2164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.617'. [ 52.816220][ T2169] netlink: 'syz.2.619': attribute type 13 has an invalid length. [ 52.824486][ T2169] erspan0: refused to change device tx_queue_len [ 52.917484][ T2175] netlink: 9 bytes leftover after parsing attributes in process `syz.1.621'. [ 52.926451][ T2175] z00X: renamed from gretap0 (while UP) [ 52.934594][ T2179] syz.0.620 (2179): attempted to duplicate a private mapping with mremap. This is not supported. [ 52.946384][ T2175] z00X: entered allmulticast mode [ 52.954487][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 52.954503][ T36] audit: type=1400 audit(1760784851.189:335): avc: denied { bind } for pid=2183 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.006673][ T2197] overlayfs: failed to clone upperpath [ 53.070735][ T2205] x_tables: unsorted underflow at hook 4 [ 53.077716][ T36] audit: type=1400 audit(1760784852.303:336): avc: denied { getopt } for pid=2204 comm="syz.2.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.225950][ T36] audit: type=1400 audit(1760784852.453:337): avc: denied { accept } for pid=2220 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.495000][ T2252] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2252 comm=syz.3.647 [ 53.507733][ T2252] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=2252 comm=syz.3.647 [ 53.521747][ T2252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1054 sclass=netlink_route_socket pid=2252 comm=syz.3.647 [ 53.576811][ T2255] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.671430][ T36] audit: type=1400 audit(1760784852.903:338): avc: denied { listen } for pid=2270 comm="syz.1.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.920405][ T2325] netlink: 44 bytes leftover after parsing attributes in process `syz.1.670'. [ 53.940048][ T2325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.670'. [ 53.948945][ T2325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 53.999839][ T63] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 54.027361][ T36] audit: type=1400 audit(1760784853.253:339): avc: denied { mount } for pid=2336 comm="syz.2.673" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 54.070458][ T2341] x_tables: unsorted underflow at hook 2 [ 54.081499][ T36] audit: type=1400 audit(1760784853.303:340): avc: denied { read } for pid=2338 comm="syz.2.674" path="socket:[10327]" dev="sockfs" ino=10327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.138472][ T2349] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 54.148829][ T63] usb 1-1: device descriptor read/64, error -71 [ 54.389837][ T63] usb 1-1: device descriptor read/64, error -71 [ 54.629830][ T63] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 54.689802][ T36] audit: type=1326 audit(1760784853.913:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2360 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03518efc9 code=0x7ffc0000 [ 54.715272][ T36] audit: type=1326 audit(1760784853.913:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2360 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03518efc9 code=0x7ffc0000 [ 54.739061][ T36] audit: type=1326 audit(1760784853.923:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2360 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe03518efc9 code=0x7ffc0000 [ 54.759838][ T63] usb 1-1: device descriptor read/64, error -71 [ 54.762558][ T36] audit: type=1326 audit(1760784853.923:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2360 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03518efc9 code=0x7ffc0000 [ 55.009826][ T63] usb 1-1: device descriptor read/64, error -71 [ 55.131956][ T63] usb usb1-port1: attempt power cycle [ 55.489806][ T63] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 55.520830][ T63] usb 1-1: device descriptor read/8, error -71 [ 55.623244][ T2394] fuse: Bad value for 'fd' [ 55.650789][ T63] usb 1-1: device descriptor read/8, error -71 [ 55.889810][ T63] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 55.915103][ T63] usb 1-1: device descriptor read/8, error -71 [ 56.060193][ T63] usb 1-1: device descriptor read/8, error -71 [ 56.169923][ T63] usb usb1-port1: unable to enumerate USB device [ 56.217484][ T2417] mmap: syz.3.698 (2417): VmData 29077504 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 56.392779][ T2436] capability: warning: `syz.3.704' uses 32-bit capabilities (legacy support in use) [ 56.858944][ T2456] SELinux: security_context_str_to_sid () failed with errno=-22 [ 56.878755][ T2458] sit0: entered promiscuous mode [ 56.885067][ T2458] netlink: 'syz.0.711': attribute type 1 has an invalid length. [ 56.892934][ T2458] netlink: 1 bytes leftover after parsing attributes in process `syz.0.711'. [ 58.456540][ T36] kauditd_printk_skb: 223 callbacks suppressed [ 58.456560][ T36] audit: type=1400 audit(1760784857.683:568): avc: denied { shutdown } for pid=2549 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.456717][ T2550] SELinux: Context system_u:object_r:system_map_t:s0 is not valid (left unmapped). [ 58.472523][ T36] audit: type=1400 audit(1760784857.683:569): avc: denied { relabelfrom } for pid=2549 comm="syz.1.742" name="NETLINK" dev="sockfs" ino=10760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.516640][ T36] audit: type=1326 audit(1760784857.713:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2544 comm="syz.3.740" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe03518efc9 code=0x0 [ 58.539388][ T36] audit: type=1400 audit(1760784857.713:571): avc: denied { relabelto } for pid=2549 comm="syz.1.742" name="NETLINK" dev="sockfs" ino=10760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_xfrm_socket permissive=1 trawcon="system_u:object_r:system_map_t:s0" [ 58.758012][ T2575] netlink: 'syz.0.749': attribute type 16 has an invalid length. [ 58.774027][ T2575] netlink: 64122 bytes leftover after parsing attributes in process `syz.0.749'. [ 58.946364][ T36] audit: type=1326 audit(1760784858.173:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2602 comm="syz.0.754" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f939938efc9 code=0x0 [ 59.465239][ T36] audit: type=1400 audit(1760784858.693:573): avc: denied { map } for pid=2630 comm="syz.1.763" path="socket:[9905]" dev="sockfs" ino=9905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.530977][ T36] audit: type=1400 audit(1760784858.763:574): avc: denied { write } for pid=2643 comm="syz.2.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.551383][ T2646] netlink: 'syz.2.765': attribute type 4 has an invalid length. [ 59.559142][ T2646] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.765'. [ 59.568382][ T2645] netlink: 'syz.2.765': attribute type 4 has an invalid length. [ 59.576331][ T2645] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.765'. [ 59.586208][ T36] audit: type=1400 audit(1760784858.823:575): avc: denied { accept } for pid=2643 comm="syz.2.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 60.093859][ T2668] netlink: 'syz.1.772': attribute type 46 has an invalid length. [ 60.893548][ T2721] netlink: 5 bytes leftover after parsing attributes in process `syz.0.788'. [ 60.989484][ T2738] netlink: 152 bytes leftover after parsing attributes in process `syz.2.795'. [ 60.999371][ T2738] netlink: 'syz.2.795': attribute type 27 has an invalid length. [ 61.057465][ T2746] tipc: Started in network mode [ 61.063166][ T2746] tipc: Node identity ac14140f, cluster identity 4711 [ 61.071888][ T2746] tipc: New replicast peer: 139.255.255.255 [ 61.078131][ T2746] tipc: Enabled bearer , priority 10 [ 61.133141][ T2764] 9pnet_fd: Insufficient options for proto=fd [ 61.334120][ T36] audit: type=1400 audit(1760784860.553:576): avc: denied { getattr } for pid=2791 comm="syz.0.815" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.428942][ T36] audit: type=1400 audit(1760784860.653:577): avc: denied { unmount } for pid=2797 comm="syz.1.816" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 61.765133][ T2827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'. [ 61.849772][ T2831] x_tables: unsorted underflow at hook 2 [ 62.203384][ T556] tipc: Node number set to 2886997007 [ 62.276886][ T2856] incfs: Options parsing error. -22 [ 62.282510][ T2856] incfs: mount failed -22 [ 62.288096][ T2856] overlay: ./file0 is not a directory [ 62.419603][ T2886] tipc: Enabling of bearer rejected, failed to enable media [ 63.259992][ T2932] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 63.268830][ T2932] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 63.277189][ T2932] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 64.042593][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 64.042613][ T36] audit: type=1400 audit(1760784863.205:582): avc: denied { wake_alarm } for pid=3003 comm="syz.3.891" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.096992][ T36] audit: type=1400 audit(1760784863.254:583): avc: denied { mount } for pid=3009 comm="syz.3.893" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.240885][ T3013] netlink: 'syz.0.894': attribute type 16 has an invalid length. [ 64.248831][ T3013] netlink: 64122 bytes leftover after parsing attributes in process `syz.0.894'. [ 64.474926][ T3038] netlink: 96 bytes leftover after parsing attributes in process `syz.0.902'. [ 65.711971][ T3105] syzkaller0: entered promiscuous mode [ 65.725325][ T3103] syzkaller0: left promiscuous mode [ 65.903628][ T3154] 9pnet_fd: p9_fd_create_tcp (3154): problem binding to privport [ 65.940793][ T3161] netlink: 'syz.3.940': attribute type 12 has an invalid length. [ 66.022672][ T3167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38781 sclass=netlink_route_socket pid=3167 comm=syz.3.943 [ 66.084221][ T36] audit: type=1400 audit(1760784865.191:584): avc: denied { accept } for pid=3169 comm="syz.3.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.367443][ T3178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3178 comm=syz.1.946 [ 66.442934][ T3183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 66.465941][ T3183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.947'. [ 66.523243][ T3185] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.542782][ T3185] IPv6: NLM_F_REPLACE set, but no existing node found! [ 66.776205][ T3207] netlink: 'syz.0.956': attribute type 4 has an invalid length. [ 66.783902][ T3207] netlink: 17 bytes leftover after parsing attributes in process `syz.0.956'. [ 67.044801][ T36] audit: type=1400 audit(1760784866.138:585): avc: denied { read } for pid=3208 comm="syz.3.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.271306][ T3259] 9pnet_fd: Insufficient options for proto=fd [ 67.597992][ T3288] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 67.616392][ T36] audit: type=1400 audit(1760784866.686:586): avc: denied { setopt } for pid=3295 comm="syz.1.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.645284][ T36] audit: type=1400 audit(1760784866.715:587): avc: denied { write } for pid=3299 comm="syz.1.992" name="/" dev="configfs" ino=2185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.094779][ T3338] syz.2.1007 uses obsolete (PF_INET,SOCK_PACKET) [ 68.124812][ T36] audit: type=1400 audit(1760784867.184:588): avc: denied { accept } for pid=3344 comm="syz.1.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.144435][ T36] audit: type=1400 audit(1760784867.204:589): avc: denied { read } for pid=3344 comm="syz.1.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.727104][ T3389] 9pnet_fd: Insufficient options for proto=fd [ 68.751250][ T3396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'. [ 68.776382][ T3387] IPv6: A: Disabled Multicast RS [ 68.781819][ T3398] can: request_module (can-proto-7) failed. [ 68.790714][ T3400] can: request_module (can-proto-7) failed. [ 68.939622][ T36] audit: type=1400 audit(1760784867.987:590): avc: denied { create } for pid=3430 comm="syz.2.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 69.113015][ T3465] 9pnet_fd: Insufficient options for proto=fd [ 69.131676][ T3467] bridge0: entered allmulticast mode [ 69.163223][ T3471] 9pnet: Unknown protocol version 9p200.u [ 69.201443][ T36] audit: type=1326 audit(1760784868.242:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.2.1056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d21f8efc9 code=0x0 [ 69.664531][ T3483] netlink: 488 bytes leftover after parsing attributes in process `syz.1.1059'. [ 69.688154][ T36] audit: type=1400 audit(1760784868.712:592): avc: denied { remount } for pid=3484 comm="syz.1.1060" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.574580][ T36] audit: type=1400 audit(1760784869.585:593): avc: denied { create } for pid=3501 comm="syz.0.1067" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.600679][ T36] audit: type=1400 audit(1760784869.585:594): avc: denied { read } for pid=3501 comm="syz.0.1067" name="file2" dev="tmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.623808][ T36] audit: type=1400 audit(1760784869.585:595): avc: denied { open } for pid=3501 comm="syz.0.1067" path="/156/file2" dev="tmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.647018][ T36] audit: type=1400 audit(1760784869.585:596): avc: denied { ioctl } for pid=3501 comm="syz.0.1067" path="/156/file2" dev="tmpfs" ino=849 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.671633][ T36] audit: type=1400 audit(1760784869.615:597): avc: denied { unlink } for pid=294 comm="syz-executor" name="file2" dev="tmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.705840][ T36] audit: type=1400 audit(1760784869.713:598): avc: denied { remount } for pid=3514 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.779674][ T3521] netlink: 'syz.0.1075': attribute type 4 has an invalid length. [ 70.787684][ T3521] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1075'. [ 70.797583][ T3521] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 70.805610][ T3521] netlink: 'syz.0.1075': attribute type 2 has an invalid length. [ 71.305809][ T3531] fuse: Unknown parameter 'X)AaC̴ߐGB?g۬R69Ng.%pT\gӴA#0x0000000000000003' [ 71.485700][ T36] audit: type=1400 audit(1760784870.489:599): avc: denied { create } for pid=3548 comm="syz.3.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 71.514347][ T3551] 9pnet_fd: Insufficient options for proto=fd [ 71.535576][ T3551] veth1: entered allmulticast mode [ 71.591575][ T339] tipc: Subscription rejected, illegal request [ 71.605630][ T36] audit: type=1326 audit(1760784870.597:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3518 comm="syz.1.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b38efc9 code=0x7fc00000 [ 71.649857][ T3571] fuse: Bad value for 'fd' [ 71.700460][ T3576] syzkaller0: entered allmulticast mode [ 71.706275][ T3576] syzkaller0: entered promiscuous mode [ 71.715284][ T3576] syzkaller0 (unregistering): left promiscuous mode [ 71.722491][ T3576] syzkaller0 (unregistering): left allmulticast mode [ 72.309079][ T3543] veth1: left allmulticast mode [ 72.325134][ T3601] netlink: 'syz.0.1106': attribute type 2 has an invalid length. [ 72.396698][ T3609] can: request_module (can-proto-0) failed. [ 72.419573][ T3611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 72.428744][ T3611] erspan0: entered promiscuous mode [ 72.565620][ T3621] 9pnet_fd: Insufficient options for proto=fd [ 73.675431][ T3668] tipc: MTU too low for tipc bearer [ 75.442710][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 75.442730][ T36] audit: type=1400 audit(1760784874.377:604): avc: denied { bind } for pid=3763 comm="syz.3.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.469805][ T3764] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1164'. [ 75.479782][ T3764] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1164'. [ 75.541645][ T3768] 9pnet_fd: Insufficient options for proto=fd [ 75.868923][ T3807] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1176'. [ 77.229652][ T3935] netlink: 'syz.2.1220': attribute type 8 has an invalid length. [ 77.267693][ T36] audit: type=1400 audit(1760784876.174:605): avc: denied { ioctl } for pid=3940 comm="syz.2.1222" path="socket:[13620]" dev="sockfs" ino=13620 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.299141][ T3945] netlink: 'syz.0.1223': attribute type 10 has an invalid length. [ 77.307184][ T3945] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1223'. [ 77.314791][ T36] audit: type=1400 audit(1760784876.184:606): avc: denied { create } for pid=3940 comm="syz.2.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 77.331752][ T3947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1224'. [ 77.350479][ T3947] netlink: 'syz.3.1224': attribute type 6 has an invalid length. [ 77.358511][ T3947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 77.421168][ T36] audit: type=1400 audit(1760784876.332:607): avc: denied { bind } for pid=3960 comm="syz.3.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.456452][ T3963] 9pnet_fd: Insufficient options for proto=fd [ 77.503016][ T3972] netlink: 'syz.2.1235': attribute type 1 has an invalid length. [ 78.083546][ T4013] overlayfs: failed to clone upperpath [ 78.113731][ T4026] futex_wake_op: syz.2.1247 tries to shift op by 144; fix this program [ 78.138946][ T36] audit: type=1400 audit(1760784877.034:608): avc: denied { accept } for pid=4033 comm="syz.2.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.921707][ T4080] netlink: 'syz.1.1266': attribute type 12 has an invalid length. [ 79.381757][ T4095] netlink: 'syz.2.1272': attribute type 4 has an invalid length. [ 79.389576][ T4095] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1272'. [ 79.398894][ T4094] netlink: 'syz.2.1272': attribute type 4 has an invalid length. [ 79.406692][ T4094] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1272'. [ 79.486763][ T36] audit: type=1400 audit(1760784878.379:609): avc: denied { write } for pid=4097 comm="syz.1.1273" name="file2" dev="tmpfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.527793][ T36] audit: type=1400 audit(1760784878.418:610): avc: denied { sqpoll } for pid=4102 comm="syz.2.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.594103][ T4111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 79.679466][ T4114] tipc: Can't bind to reserved service type 0 [ 80.720279][ T4148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'. [ 80.746355][ T4150] overlay: ./file0 is not a directory [ 82.544928][ T36] audit: type=1400 audit(1760784881.409:611): avc: denied { relabelfrom } for pid=4210 comm="syz.2.1309" name="NETLINK" dev="sockfs" ino=14713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 82.544935][ T4211] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 82.579659][ T36] audit: type=1400 audit(1760784881.439:612): avc: denied { relabelto } for pid=4210 comm="syz.2.1309" name="NETLINK" dev="sockfs" ino=14713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 82.935150][ T4241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1320'. [ 83.164608][ T36] audit: type=1400 audit(1760784882.004:613): avc: denied { execute } for pid=4258 comm="syz.1.1328" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.349935][ T36] audit: type=1400 audit(1760784882.193:614): avc: denied { map } for pid=4278 comm="syz.3.1334" path="socket:[14051]" dev="sockfs" ino=14051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.373106][ T36] audit: type=1326 audit(1760784882.203:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.3.1334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe03518efc9 code=0x0 [ 83.974714][ T4333] batadv_slave_0: mtu less than device minimum [ 84.170378][ T36] audit: type=1326 audit(1760784883.016:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.3.1351" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe03518efc9 code=0x0 [ 84.626079][ T36] audit: type=1400 audit(1760784883.463:617): avc: denied { read } for pid=4380 comm="syz.1.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.101450][ T4401] sock: sock_set_timeout: `syz.0.1371' (pid 4401) tries to set negative timeout [ 85.805222][ T4441] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1384'. [ 85.818561][ T4441] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1384'. [ 86.106018][ T4472] 9pnet_fd: Insufficient options for proto=fd [ 86.126313][ T4474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4122 sclass=netlink_route_socket pid=4474 comm=syz.3.1395 [ 86.820288][ T4503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2816 sclass=netlink_tcpdiag_socket pid=4503 comm=syz.1.1406 [ 87.033471][ T4527] overlayfs: cannot append lower layer [ 87.080483][ T4536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1418'. [ 87.347913][ T4574] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.355794][ T4574] IPv6: NLM_F_REPLACE set, but no existing node found! [ 88.157893][ T4630] tipc: Enabling of bearer rejected, media not registered [ 88.246587][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 88.272328][ T36] audit: type=1326 audit(1760784887.088:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03518efc9 code=0x7fc00000 [ 88.308200][ T36] audit: type=1326 audit(1760784887.088:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe03518efc9 code=0x7fc00000 [ 88.345794][ T4659] netlink: 'syz.3.1464': attribute type 27 has an invalid length. [ 88.354877][ T4659] 0{X: left allmulticast mode [ 88.469544][ T4679] 9pnet_fd: Insufficient options for proto=fd [ 88.508171][ T36] audit: type=1400 audit(1760784887.327:620): avc: denied { map } for pid=4687 comm="syz.2.1475" path="socket:[15587]" dev="sockfs" ino=15587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 89.193105][ T4709] netlink: 'syz.1.1483': attribute type 8 has an invalid length. [ 89.234459][ T4714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'. [ 89.381925][ T4731] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 89.390995][ T4731] overlayfs: missing 'lowerdir' [ 89.461600][ T36] audit: type=1400 audit(1760784888.261:621): avc: denied { remount } for pid=4734 comm="syz.2.1493" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 89.968669][ T4751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'. [ 90.319581][ T4795] fuse: Bad value for 'user_id' [ 90.323929][ T4796] fuse: Unknown parameter 'groU_id' [ 90.324536][ T4795] fuse: Bad value for 'user_id' [ 90.329957][ T4796] fuse: Unknown parameter 'groU_id' [ 90.335243][ T4795] fuse: Bad value for 'user_id' [ 90.340885][ T4796] fuse: Unknown parameter 'groU_id' [ 90.346071][ T4795] fuse: Bad value for 'user_id' [ 90.351224][ T4796] fuse: Unknown parameter 'groU_id' [ 90.357257][ T4795] fuse: Bad value for 'user_id' [ 90.361302][ T4796] fuse: Unknown parameter 'groU_id' [ 90.365974][ T4795] fuse: Bad value for 'user_id' [ 90.366085][ T4795] fuse: Bad value for 'user_id' [ 90.371894][ T4796] fuse: Unknown parameter 'groU_id' [ 90.376694][ T4795] fuse: Bad value for 'user_id' [ 90.425209][ T4804] x_tables: duplicate underflow at hook 1 [ 90.543489][ T4824] 9pnet_fd: Insufficient options for proto=fd [ 90.591601][ T4835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41238 sclass=netlink_route_socket pid=4835 comm=syz.1.1526 [ 90.701759][ T36] audit: type=1400 audit(1760784889.505:622): avc: denied { read } for pid=4852 comm="syz.0.1532" name="file0" dev="tmpfs" ino=1592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.724504][ T36] audit: type=1400 audit(1760784889.505:623): avc: denied { open } for pid=4852 comm="syz.0.1532" path="/296/file0" dev="tmpfs" ino=1592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.747491][ T36] audit: type=1400 audit(1760784889.534:624): avc: denied { audit_write } for pid=4854 comm="syz.0.1533" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.768897][ T36] audit: type=1107 audit(1760784889.534:625): pid=4854 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 90.883273][ T4859] 9pnet_fd: Insufficient options for proto=fd [ 90.920754][ T4865] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1538'. [ 91.004060][ T36] audit: type=1326 audit(1760784889.803:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.3.1539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe03518efc9 code=0x0 [ 91.269363][ T36] audit: type=1326 audit(1760784890.062:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.3.1547" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe03518efc9 code=0x0 [ 91.626653][ T4933] 9pnet_fd: Insufficient options for proto=fd [ 108.209484][ T4976] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1575'. [ 108.256790][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 108.256810][ T36] audit: type=1400 audit(1760784907.000:629): avc: denied { accept } for pid=4981 comm="syz.2.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.304296][ T4984] af_packet: tpacket_rcv: packet too big, clamped from 65532 to 3944. macoff=96 [ 108.567746][ T5010] 9pnet_fd: Insufficient options for proto=fd [ 108.648719][ T36] audit: type=1400 audit(1760784907.390:630): avc: denied { mount } for pid=5019 comm="syz.2.1590" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 108.719648][ T5030] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1593'. [ 108.955020][ T5070] fuse: blksize only supported for fuseblk [ 108.982384][ T5074] veth1: entered allmulticast mode [ 108.988169][ T5072] veth1: left allmulticast mode [ 109.333131][ T5091] netlink: 'syz.3.1610': attribute type 4 has an invalid length. [ 109.340984][ T5091] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1610'. [ 109.536632][ T36] audit: type=1400 audit(1760784908.288:631): avc: denied { shutdown } for pid=5117 comm="syz.0.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.654813][ T5148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1630'. [ 109.663747][ T5148] erspan0: default FDB implementation only supports local addresses [ 109.672910][ T5148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5148 comm=syz.3.1630 [ 109.743963][ T5161] netlink: 'syz.3.1636': attribute type 4 has an invalid length. [ 109.752051][ T5161] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1636'. [ 110.311118][ T5184] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1645'. [ 110.329305][ T5191] netlink: 'syz.3.1646': attribute type 11 has an invalid length. [ 110.415627][ T5228] overlayfs: failed to clone upperpath [ 110.759127][ T5255] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1656'. [ 110.825192][ T36] audit: type=1326 audit(1760784909.567:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.1.1661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb74b38efc9 code=0x0 [ 110.876007][ T5272] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 110.958816][ T5293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1670'. [ 111.328760][ T5358] netlink: 'syz.3.1693': attribute type 5 has an invalid length. [ 111.617972][ T5397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1706'. [ 111.842780][ T5418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=5418 comm=syz.2.1715 [ 111.855818][ T5418] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1715'. [ 111.866082][ T5407] overlayfs: failed to clone lowerpath [ 111.886797][ T36] audit: type=1326 audit(1760784910.625:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5420 comm="syz.2.1716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d21f8efc9 code=0x0 [ 111.915573][ T5425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5425 comm=syz.1.1718 [ 111.993682][ T36] audit: type=1326 audit(1760784910.735:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.1.1719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb74b38efc9 code=0x0 [ 112.533756][ T36] audit: type=1400 audit(1760784911.274:635): avc: denied { create } for pid=5444 comm="syz.0.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 112.571551][ T36] audit: type=1400 audit(1760784911.314:636): avc: denied { listen } for pid=5455 comm="syz.0.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 113.096719][ T5550] syz.2.1764: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 113.111791][ T5550] CPU: 0 UID: 0 PID: 5550 Comm: syz.2.1764 Not tainted syzkaller #0 22de895e84cf4880b304a967638547f141894232 [ 113.111824][ T5550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.111849][ T5550] Call Trace: [ 113.111854][ T5550] [ 113.111862][ T5550] __dump_stack+0x21/0x30 [ 113.111889][ T5550] dump_stack_lvl+0x10c/0x190 [ 113.111910][ T5550] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.111934][ T5550] dump_stack+0x19/0x20 [ 113.111963][ T5550] warn_alloc+0x1bc/0x2a0 [ 113.111986][ T5550] ? __cfi_warn_alloc+0x10/0x10 [ 113.112008][ T5550] ? kasan_save_track+0x4f/0x80 [ 113.112024][ T5550] ? __kasan_kmalloc+0x96/0xb0 [ 113.112042][ T5550] ? __kmalloc_cache_noprof+0x24c/0x490 [ 113.112058][ T5550] ? do_sock_setsockopt+0x26d/0x400 [ 113.112083][ T5550] ? __x64_sys_setsockopt+0x1b8/0x250 [ 113.112106][ T5550] ? x64_sys_call+0x2adc/0x2ee0 [ 113.112130][ T5550] ? do_syscall_64+0x58/0xf0 [ 113.112154][ T5550] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.112174][ T5550] __vmalloc_node_range_noprof+0x135/0x1420 [ 113.112205][ T5550] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 113.112234][ T5550] ? kasan_save_alloc_info+0x40/0x50 [ 113.112258][ T5550] ? __kasan_kmalloc+0x96/0xb0 [ 113.112276][ T5550] ? __kmalloc_cache_noprof+0x24c/0x490 [ 113.112291][ T5550] ? futex_setup_timer+0xb4/0xd0 [ 113.112307][ T5550] vmalloc_user_noprof+0x77/0x90 [ 113.112330][ T5550] ? xskq_create+0xdb/0x2a0 [ 113.112356][ T5550] xskq_create+0xdb/0x2a0 [ 113.112384][ T5550] xsk_init_queue+0xb6/0x120 [ 113.112407][ T5550] xsk_setsockopt+0x43f/0x6f0 [ 113.112431][ T5550] ? __cfi_xsk_setsockopt+0x10/0x10 [ 113.112453][ T5550] ? do_futex+0x309/0x500 [ 113.112470][ T5550] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 113.112491][ T5550] ? security_socket_setsockopt+0x33/0xd0 [ 113.112507][ T5550] ? __cfi_xsk_setsockopt+0x10/0x10 [ 113.112530][ T5550] do_sock_setsockopt+0x26d/0x400 [ 113.112554][ T5550] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 113.112580][ T5550] __x64_sys_setsockopt+0x1b8/0x250 [ 113.112612][ T5550] x64_sys_call+0x2adc/0x2ee0 [ 113.112646][ T5550] do_syscall_64+0x58/0xf0 [ 113.112675][ T5550] ? clear_bhb_loop+0x50/0xa0 [ 113.112694][ T5550] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.112712][ T5550] RIP: 0033:0x7f8d21f8efc9 [ 113.112732][ T5550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.112747][ T5550] RSP: 002b:00007f8d22e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.112765][ T5550] RAX: ffffffffffffffda RBX: 00007f8d221e5fa0 RCX: 00007f8d21f8efc9 [ 113.112777][ T5550] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 113.112788][ T5550] RBP: 00007f8d22011f91 R08: 0000000000000004 R09: 0000000000000000 [ 113.112798][ T5550] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.112809][ T5550] R13: 00007f8d221e6038 R14: 00007f8d221e5fa0 R15: 00007fff73a1de68 [ 113.112824][ T5550] [ 113.112924][ T5550] Mem-Info: [ 113.408005][ T5550] active_anon:12196 inactive_anon:16 isolated_anon:0 [ 113.408005][ T5550] active_file:21720 inactive_file:3323 isolated_file:0 [ 113.408005][ T5550] unevictable:16395 dirty:50 writeback:0 [ 113.408005][ T5550] slab_reclaimable:6463 slab_unreclaimable:71427 [ 113.408005][ T5550] mapped:23715 shmem:6041 pagetables:1697 [ 113.408005][ T5550] sec_pagetables:0 bounce:0 [ 113.408005][ T5550] kernel_misc_reclaimable:0 [ 113.408005][ T5550] free:1497597 free_pcp:6789 free_cma:0 [ 113.454186][ T5550] Node 0 active_anon:48984kB inactive_anon:64kB active_file:86880kB inactive_file:13292kB unevictable:65580kB isolated(anon):0kB isolated(file):0kB mapped:94860kB dirty:200kB writeback:0kB shmem:24364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:6360kB pagetables:6788kB sec_pagetables:0kB all_unreclaimable? no [ 113.488980][ T5550] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:68kB free_cma:0kB [ 113.526946][ T5550] lowmem_reserve[]: 0 3921 3921 [ 113.532334][ T5550] Normal free:3035688kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48984kB inactive_anon:64kB active_file:86880kB inactive_file:13292kB unevictable:65580kB writepending:200kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:16104kB local_pcp:3580kB free_cma:0kB [ 113.539822][ T5566] __nla_validate_parse: 2 callbacks suppressed [ 113.539849][ T5566] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1770'. [ 113.580142][ T5566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.614531][ T5550] lowmem_reserve[]: 0 0 0 [ 113.619009][ T5550] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 113.639947][ T5550] Normal: 235*4kB (UME) 216*8kB (UME) 112*16kB (UE) 47*32kB (UME) 236*64kB (UME) 115*128kB (UME) 68*256kB (UME) 47*512kB (UME) 65*1024kB (UME) 31*2048kB (UME) 689*4096kB (UM) = 3029452kB [ 113.719978][ T5550] 50506 total pagecache pages [ 113.735517][ T5550] 36 pages in swap cache [ 113.743702][ T5550] Free swap = 124352kB [ 113.751264][ T5550] Total swap = 124996kB [ 113.755516][ T5550] 2097051 pages RAM [ 113.759374][ T5550] 0 pages HighMem/MovableOnly [ 113.764390][ T5550] 351537 pages reserved [ 113.768603][ T5550] 0 pages cma reserved [ 113.776128][ T5550] Memory allocations: [ 113.780460][ T5550] 0 B 0 init/main.c:1370 func:do_initcalls [ 113.798575][ T5550] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 113.809200][ T5550] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 113.816952][ T5550] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 113.833031][ T5550] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 113.861164][ T5550] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 113.869845][ T5550] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 113.878005][ T5550] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 113.886102][ T5550] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 113.894138][ T5550] 0 B 0 init/initramfs.c:101 func:find_link [ 113.981598][ T5613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1785'. [ 114.635638][ T5667] 9pnet_fd: Insufficient options for proto=fd [ 114.658966][ T5675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5675 comm=syz.3.1810 [ 114.672661][ T5675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5675 comm=syz.3.1810 [ 114.750972][ T5701] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1818'. [ 114.989826][ T36] audit: type=1400 audit(1760784913.721:637): avc: denied { shutdown } for pid=5715 comm="syz.2.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.983790][ T5750] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1837'. [ 116.023112][ T5756] 9pnet_fd: Insufficient options for proto=fd [ 116.102238][ T5772] cgroup: Invalid name [ 116.141044][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 116.235892][ T5788] 8021q: VLANs not supported on ip_vti0 [ 116.896477][ T5824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1864'. [ 116.905894][ T5825] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1864'. [ 116.932666][ T5829] netlink: 'syz.1.1866': attribute type 1 has an invalid length. [ 116.940910][ T5829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1866'. [ 116.953176][ T5829] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1866'. [ 117.497251][ T5863] overlayfs: cannot append lower layer [ 117.532137][ T5876] netlink: 'syz.1.1883': attribute type 4 has an invalid length. [ 117.540088][ T5876] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1883'. [ 118.024515][ T5926] netlink: 'syz.2.1898': attribute type 28 has an invalid length. [ 118.330740][ T36] audit: type=1400 audit(1760784917.068:638): avc: denied { lock } for pid=5989 comm="syz.0.1920" path="socket:[18943]" dev="sockfs" ino=18943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 118.752252][ T6004] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1541 sclass=netlink_xfrm_socket pid=6004 comm=syz.3.1925 [ 118.803810][ T6013] overlayfs: missing 'workdir' [ 119.338206][ T6071] netlink: 'syz.0.1948': attribute type 4 has an invalid length. [ 119.653699][ T6084] overlayfs: failed to clone upperpath [ 119.661926][ T36] audit: type=1326 audit(1760784918.397:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.2.1953" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d21f8efc9 code=0x0 [ 119.772927][ T36] audit: type=1400 audit(1760784918.507:640): avc: denied { create } for pid=6086 comm="syz.2.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 119.980094][ T36] audit: type=1326 audit(1760784918.717:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b38efc9 code=0x7fc00000 [ 120.003718][ T36] audit: type=1326 audit(1760784918.717:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb74b38efc9 code=0x7fc00000 [ 120.004892][ T6115] 9pnet_fd: Insufficient options for proto=fd [ 120.027523][ T36] audit: type=1326 audit(1760784918.717:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b38efc9 code=0x7fc00000 [ 120.056803][ T36] audit: type=1326 audit(1760784918.717:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b38efc9 code=0x7fc00000 [ 120.080293][ T36] audit: type=1326 audit(1760784918.717:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b38efc9 code=0x7fc00000 [ 120.104210][ T36] audit: type=1326 audit(1760784918.717:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b38efc9 code=0x7fc00000 [ 120.128751][ T36] audit: type=1326 audit(1760784918.717:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b38efc9 code=0x7fc00000 [ 120.152132][ T36] audit: type=1326 audit(1760784918.717:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b38efc9 code=0x7fc00000 [ 120.175629][ T36] audit: type=1326 audit(1760784918.717:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b38efc9 code=0x7fc00000 [ 120.199076][ T36] audit: type=1326 audit(1760784918.717:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b38efc9 code=0x7fc00000 [ 120.222706][ T36] audit: type=1326 audit(1760784918.717:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.1.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b38efc9 code=0x7fc00000 [ 120.314027][ T6122] netlink: 'syz.0.1966': attribute type 2 has an invalid length. [ 120.536679][ T6166] fuse: blksize only supported for fuseblk [ 121.763350][ T6244] netlink: 'syz.0.2007': attribute type 6 has an invalid length. [ 122.100651][ T6284] overlayfs: failed to clone lowerpath [ 122.139247][ T6291] netlink: 8540 bytes leftover after parsing attributes in process `syz.1.2024'. [ 122.148458][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 122.157330][ T6291] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2024'. [ 122.211960][ T6291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2024'. [ 122.221239][ T6291] tipc: Invalid UDP bearer configuration [ 122.221355][ T6291] tipc: Enabling of bearer rejected, failed to enable media [ 122.958139][ T6333] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2041'. [ 122.968257][ T6333] veth1: entered allmulticast mode [ 123.056552][ T6348] 9pnet_fd: p9_fd_create_unix (6348): problem connecting socket: ./file0: -111 [ 123.726592][ T6369] syz.2.2053 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.730176][ T6370] netlink: 536 bytes leftover after parsing attributes in process `syz.0.2052'. [ 123.748619][ T6370] 9pnet_virtio: no channels available for device syz [ 123.790156][ T6332] veth1: left allmulticast mode [ 124.101707][ T6405] netlink: 'syz.3.2065': attribute type 27 has an invalid length. [ 124.849815][ T6461] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2084'. [ 125.331986][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 125.332004][ T36] audit: type=1326 audit(1760784924.063:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.0.2106" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f939938efc9 code=0x0 [ 126.024055][ T6553] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2114'. [ 126.599288][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 126.632078][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2122'. [ 126.978754][ T36] audit: type=1400 audit(1760784925.702:718): avc: denied { module_load } for pid=6620 comm="syz.3.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 126.978781][ T6621] Invalid ELF header type: 2 != 1 [ 127.274225][ T6643] 9pnet_fd: Insufficient options for proto=fd [ 127.302599][ T6649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.309875][ T6649] IPv6: NLM_F_CREATE should be set when creating new route [ 127.317156][ T6649] IPv6: NLM_F_CREATE should be set when creating new route [ 127.623735][ T36] audit: type=1400 audit(1760784926.352:719): avc: denied { listen } for pid=6687 comm="syz.3.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 127.711206][ T6692] netlink: 'syz.3.2162': attribute type 15 has an invalid length. [ 127.719347][ T6692] __nla_validate_parse: 1 callbacks suppressed [ 127.719381][ T6692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2162'. [ 127.751395][ T36] audit: type=1326 audit(1760784926.482:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.3.2164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe03518efc9 code=0x0 [ 129.810989][ T6799] overlayfs: missing 'workdir' [ 130.182793][ T36] audit: type=1400 audit(1760784928.911:721): avc: denied { mount } for pid=6820 comm="syz.2.2201" name="/" dev="pstore" ino=2276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 130.876960][ T6856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2214'. [ 131.149746][ T36] audit: type=1400 audit(1760784929.871:722): avc: denied { setattr } for pid=6886 comm="syz.0.2226" name="TIPC" dev="sockfs" ino=20424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.205782][ T6900] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2231'. [ 131.215882][ T6900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2231'. [ 131.221012][ T6903] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 131.366255][ T6920] netlink: 'syz.2.2237': attribute type 16 has an invalid length. [ 131.375297][ T6920] netlink: 'syz.2.2237': attribute type 16 has an invalid length. [ 131.384443][ T6922] netlink: 'syz.2.2237': attribute type 16 has an invalid length. [ 131.392455][ T6920] netlink: 'syz.2.2237': attribute type 16 has an invalid length. [ 131.652177][ T36] audit: type=1400 audit(1760784930.370:723): avc: denied { map } for pid=6965 comm="syz.3.2252" path="socket:[21194]" dev="sockfs" ino=21194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 131.809447][ T6977] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.816691][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.823962][ T6977] bridge_slave_0: entered allmulticast mode [ 131.830225][ T6977] bridge_slave_0: entered promiscuous mode [ 131.836840][ T6977] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.843997][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.851095][ T6977] bridge_slave_1: entered allmulticast mode [ 131.857699][ T6977] bridge_slave_1: entered promiscuous mode [ 131.909454][ T6977] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.916587][ T6977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.923926][ T6977] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.930992][ T6977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.954866][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.962265][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.973332][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.980401][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.989430][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.996526][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.024925][ T6977] veth0_vlan: entered promiscuous mode [ 132.036962][ T6977] veth1_macvtap: entered promiscuous mode [ 132.059154][ T36] audit: type=1400 audit(1760784930.780:724): avc: denied { unmount } for pid=6977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 132.116415][ T36] audit: type=1326 audit(1760784930.840:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.2.2257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d21f8efc9 code=0x0 [ 132.150332][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'. [ 132.189642][ T7002] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.271359][ T36] audit: type=1107 audit(1760784930.990:726): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 132.314649][ T7029] 9pnet_fd: Insufficient options for proto=fd [ 132.342631][ T9] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 132.441965][ T7043] netlink: 'syz.2.2275': attribute type 11 has an invalid length. [ 132.450331][ T7043] netlink: 'syz.2.2275': attribute type 1 has an invalid length. [ 132.458254][ T7043] netlink: 3593 bytes leftover after parsing attributes in process `syz.2.2275'. [ 132.470239][ T7043] ------------[ cut here ]------------ [ 132.475836][ T7043] WARNING: CPU: 1 PID: 7043 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 132.485291][ T7043] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 132.489215][ T7043] CPU: 1 UID: 0 PID: 7043 Comm: syz.2.2275 Not tainted syzkaller #0 22de895e84cf4880b304a967638547f141894232 [ 132.497432][ T36] audit: type=1400 audit(1760784931.220:727): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[2471]" dev="pipefs" ino=2471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 132.500843][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 132.533953][ T7043] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 132.539910][ T7043] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d f2 0e ee 05 00 0f 85 be 00 00 00 c6 05 e5 0e ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 132.559615][ T7043] RSP: 0018:ffffc9000d92f860 EFLAGS: 00010246 [ 132.565781][ T7043] RAX: 0000000000000000 RBX: 000000000000001f RCX: 0000000000000000 [ 132.573843][ T7043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d92f918 [ 132.581938][ T7043] RBP: ffffc9000d92f988 R08: ffffc9000d92f917 R09: 0000000000000000 [ 132.590049][ T7043] R10: ffffc9000d92f900 R11: fffff52001b25f23 R12: ffffc9000d92f8a0 [ 132.598104][ T7043] R13: dffffc0000000000 R14: 1ffff92001b25f10 R15: 0000000000000000 [ 132.606166][ T7043] FS: 00007f8d22e276c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 132.615282][ T7043] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.621926][ T7043] CR2: 0000000000000000 CR3: 00000001416b2000 CR4: 00000000003526b0 [ 132.630091][ T7043] Call Trace: [ 132.633431][ T7043] [ 132.636422][ T7043] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 132.642543][ T7043] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 132.648350][ T7043] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 132.654069][ T7043] ___kmalloc_large_node+0x81/0x220 [ 132.659477][ T7043] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 132.665190][ T7043] __kmalloc_large_node_noprof+0x1e/0xe0 [ 132.670882][ T7043] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 132.676598][ T7043] __kmalloc_noprof+0x336/0x530 [ 132.681509][ T7043] ? __cfi_lockref_get+0x10/0x10 [ 132.686613][ T7043] incfs_realloc_mount_info+0xa7/0x4d0 [ 132.692133][ T7043] ? incfs_add_sysfs_node+0x118/0x240 [ 132.697609][ T7043] incfs_alloc_mount_info+0x479/0x600 [ 132.703150][ T7043] incfs_mount_fs+0x3ca/0x960 [ 132.708106][ T7043] ? __cfi_incfs_mount_fs+0x10/0x10 [ 132.713455][ T7043] ? vfs_parse_fs_string+0x102/0x170 [ 132.718809][ T7043] ? selinux_capable+0x38/0x50 [ 132.723824][ T7043] legacy_get_tree+0x106/0x1b0 [ 132.728659][ T7043] ? __cfi_incfs_mount_fs+0x10/0x10 [ 132.733968][ T7043] vfs_get_tree+0x9e/0x290 [ 132.738482][ T7043] do_new_mount+0x251/0xb40 [ 132.743065][ T7043] ? security_capable+0xcf/0xf0 [ 132.747970][ T7043] path_mount+0x688/0x1050 [ 132.752430][ T7043] ? putname+0x113/0x150 [ 132.756751][ T7043] __se_sys_mount+0x2bd/0x480 [ 132.761495][ T7043] ? __x64_sys_mount+0xf0/0xf0 [ 132.766318][ T7043] ? __kasan_check_write+0x18/0x20 [ 132.771479][ T7043] ? fpregs_restore_userregs+0x11d/0x260 [ 132.777192][ T7043] __x64_sys_mount+0xc3/0xf0 [ 132.781909][ T7043] x64_sys_call+0x2021/0x2ee0 [ 132.786678][ T7043] do_syscall_64+0x58/0xf0 [ 132.791231][ T7043] ? clear_bhb_loop+0x50/0xa0 [ 132.795973][ T7043] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 132.801906][ T7043] RIP: 0033:0x7f8d21f8efc9 [ 132.806428][ T7043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.826099][ T7043] RSP: 002b:00007f8d22e27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 132.834613][ T7043] RAX: ffffffffffffffda RBX: 00007f8d221e5fa0 RCX: 00007f8d21f8efc9 [ 132.842630][ T7043] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 132.850849][ T7043] RBP: 00007f8d22011f91 R08: 0000200000000280 R09: 0000000000000000 [ 132.859021][ T7043] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 132.867062][ T7043] R13: 00007f8d221e6038 R14: 00007f8d221e5fa0 R15: 00007fff73a1de68 [ 132.875107][ T7043] [ 132.878156][ T7043] ---[ end trace 0000000000000000 ]--- [ 133.015648][ T7043] incfs: Error allocating mount info. -12 [ 133.032938][ T7043] incfs: mount failed -12 [ 133.284969][ T339] bridge_slave_1: left allmulticast mode [ 133.290654][ T339] bridge_slave_1: left promiscuous mode [ 133.296441][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.304216][ T339] bridge_slave_0: left allmulticast mode [ 133.309871][ T339] bridge_slave_0: left promiscuous mode [ 133.315612][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.425262][ T339] veth1_macvtap: left promiscuous mode [ 133.430794][ T339] veth0_vlan: left promiscuous mode