last executing test programs: 1m22.34799205s ago: executing program 1 (id=1219): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in6=@remote, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x7f, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x200, 0xfeffffffffffffff}, {0x3, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) 1m22.33655981s ago: executing program 1 (id=1220): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m22.325091461s ago: executing program 1 (id=1221): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r1, 0x0, 0x0) 1m22.288212263s ago: executing program 1 (id=1223): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x10) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m21.782143813s ago: executing program 1 (id=1227): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x29, 0x3, "014dffffff7f"}], 0x18}}], 0x1, 0x4000000) 1m21.558683935s ago: executing program 1 (id=1234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000140000021000054"], 0x14}}, 0x4004800) close(0x3) 1m21.511592978s ago: executing program 32 (id=1234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000140000021000054"], 0x14}}, 0x4004800) close(0x3) 15.493428787s ago: executing program 2 (id=2870): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 9.639958381s ago: executing program 2 (id=2939): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) write$tun(r0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000040)=""/18, &(0x7f0000000080)=0x12) r3 = socket(0x11, 0x3, 0x9) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x24) socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 8.953110909s ago: executing program 2 (id=2948): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1840, 0x92) 8.896621613s ago: executing program 2 (id=2949): recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x25, 0x0}}], 0x3f, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000004c0)={0xa0, 0x0, 0x0, {{0x2, 0x2, 0x9, 0xa, 0x99ea, 0x0, {0x5, 0xc4, 0x4, 0x3, 0x8, 0x80000000, 0x2, 0x9, 0x7f, 0xa000, 0x7, r2, 0x0, 0x3, 0x7}}, {0x0, 0x4}}}, 0xa0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x4054) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x101241, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000001340)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) 8.896289953s ago: executing program 2 (id=2950): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mknodat(r0, 0x0, 0x8910, 0x2) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x5501, 0x0) open_tree(r0, 0x0, 0x1100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x814}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a003000"], 0xb8}}, 0x4000) 8.500104995s ago: executing program 3 (id=2953): openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1840, 0x92) link(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='./file0\x00') 8.485273306s ago: executing program 3 (id=2954): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 8.470216907s ago: executing program 3 (id=2955): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x10) 8.452075898s ago: executing program 3 (id=2957): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mount$incfs(0x0, &(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000540), 0x48001, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 8.316294456s ago: executing program 3 (id=2961): r0 = fsmount(0xffffffffffffffff, 0x0, 0x8a) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x8, 0x76, 0x12, 0x10, 0x33d8, 0xbbce, 0x3fd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x4, 0x40, 0x4, [{{0x9, 0x4, 0x7c, 0x5, 0x1, 0x58, 0x42, 0x0, 0x0, [], [{{0x9, 0x5, 0x3, 0x8, 0x8, 0xe, 0x8, 0x7}}]}}]}}]}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x8}, @period={0x5a, 0x1000, 0x7, 0x5, 0x3, {0xe55, 0xf84, 0x8, 0x10}, 0x5, &(0x7f00000001c0)=[0xfff9, 0x2, 0x4, 0x9, 0x2]}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, 0x0, &(0x7f0000000040)) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0xe, 0x0) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000180), 0x2) mprotect(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x1, 0x0, 0x0}) syz_open_procfs$namespace(0x0, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x90) dup3(r4, 0xffffffffffffffff, 0x0) mount_setattr(r0, 0x0, 0x0, &(0x7f0000000240)={0x4, 0x75, 0x20000, {r4}}, 0x20) 8.24775086s ago: executing program 4 (id=2965): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x10) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 8.156587355s ago: executing program 2 (id=2966): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 7.847931593s ago: executing program 3 (id=2967): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x10) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 7.565961829s ago: executing program 0 (id=2968): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) 7.54512629s ago: executing program 0 (id=2969): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) 7.526099531s ago: executing program 0 (id=2970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000280)={0x0, 0x8, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0xb, 0x9f, [0x1, 0x7, 0xddc9, 0x5, 0x7, 0x7fffffff, 0xff]}}]}, 0x50) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x8000, @empty}}}, 0x32) sendmsg$inet6(r3, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e1c, 0x9, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x6}, 0x1c, 0x0}, 0x20000010) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x8, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000008000000, 0x0, 0x2000000000000, 0x7, 0x0, 0x7, 0x0, 0x6, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.501854804s ago: executing program 4 (id=2971): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, 0x0) 1.495745695s ago: executing program 0 (id=2979): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x8, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000008000000, 0x0, 0x2000000000000, 0x7, 0x0, 0x7, 0x0, 0x6, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.426608618s ago: executing program 0 (id=2972): r0 = socket(0x1e, 0x4, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = dup3(r1, r0, 0x0) recvmmsg$unix(r3, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.426369758s ago: executing program 4 (id=2973): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x10) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.309476745s ago: executing program 0 (id=2974): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x10) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 887.287549ms ago: executing program 4 (id=2975): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x1802, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 18.718188ms ago: executing program 4 (id=2976): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x80, 0x7800, 0x3, 0x200, {{0x25, 0x4, 0x2, 0x0, 0x94, 0x64, 0x0, 0x7, 0x4, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0x13, 0xa1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @ra={0x94, 0x4}, @cipso={0x86, 0x52, 0x0, [{0x6, 0xb, "a563c2794d5f56bdbb"}, {0x7, 0x10, "a6ce1b024f16f20fe7915647fee5"}, {0x5, 0x10, "18bcf1c70d9ede65bd8ae1576a39"}, {0x7, 0xb, "a080e5b7d3c134c653"}, {0x5, 0xc, "f2b076496ab8467508b6"}, {0x1, 0x3, "e1"}, {0x7, 0x7, "531072084f"}]}, @timestamp_addr={0x44, 0x14, 0xf5, 0x1, 0xa, [{@multicast1, 0x2}, {@remote, 0x9}]}]}}}}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000ff000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800090001"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 0s ago: executing program 4 (id=2977): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r0, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. [ 21.909069][ T36] audit: type=1400 audit(1770818824.200:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.912924][ T282] cgroup: Unknown subsys name 'net' [ 21.931859][ T36] audit: type=1400 audit(1770818824.200:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.959214][ T36] audit: type=1400 audit(1770818824.230:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.959699][ T282] cgroup: Unknown subsys name 'devices' [ 22.164518][ T282] cgroup: Unknown subsys name 'hugetlb' [ 22.170203][ T282] cgroup: Unknown subsys name 'rlimit' [ 22.347583][ T36] audit: type=1400 audit(1770818824.640:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.370810][ T36] audit: type=1400 audit(1770818824.640:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.395571][ T36] audit: type=1400 audit(1770818824.640:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.420093][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.428977][ T36] audit: type=1400 audit(1770818824.720:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.454461][ T36] audit: type=1400 audit(1770818824.720:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.468414][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.481984][ T36] audit: type=1400 audit(1770818824.750:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.514547][ T36] audit: type=1400 audit(1770818824.750:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.695742][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.703282][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.710413][ T289] bridge_slave_0: entered allmulticast mode [ 23.717242][ T289] bridge_slave_0: entered promiscuous mode [ 23.724925][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.732031][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.739408][ T289] bridge_slave_1: entered allmulticast mode [ 23.746569][ T289] bridge_slave_1: entered promiscuous mode [ 23.849355][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.856455][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.863803][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.870850][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.939881][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.947112][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.954298][ T293] bridge_slave_0: entered allmulticast mode [ 23.960539][ T293] bridge_slave_0: entered promiscuous mode [ 23.967267][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.974575][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.981643][ T293] bridge_slave_1: entered allmulticast mode [ 23.988159][ T293] bridge_slave_1: entered promiscuous mode [ 24.003760][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.010832][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.017966][ T294] bridge_slave_0: entered allmulticast mode [ 24.024365][ T294] bridge_slave_0: entered promiscuous mode [ 24.032081][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.039320][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.046485][ T294] bridge_slave_1: entered allmulticast mode [ 24.052801][ T294] bridge_slave_1: entered promiscuous mode [ 24.125013][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.132061][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.139236][ T295] bridge_slave_0: entered allmulticast mode [ 24.145657][ T295] bridge_slave_0: entered promiscuous mode [ 24.157267][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.164647][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.171759][ T295] bridge_slave_1: entered allmulticast mode [ 24.178335][ T295] bridge_slave_1: entered promiscuous mode [ 24.184770][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.192223][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.218805][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.225927][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.235369][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.242457][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.358433][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.365526][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.378937][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.386024][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.423334][ T289] veth0_vlan: entered promiscuous mode [ 24.431211][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.438295][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.446333][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.453515][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.485784][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.492895][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.500489][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.507604][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.517937][ T289] veth1_macvtap: entered promiscuous mode [ 24.547928][ T294] veth0_vlan: entered promiscuous mode [ 24.559705][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.585853][ T294] veth1_macvtap: entered promiscuous mode [ 24.648273][ T295] veth0_vlan: entered promiscuous mode [ 24.660146][ T293] veth0_vlan: entered promiscuous mode [ 24.691758][ T341] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.696250][ T295] veth1_macvtap: entered promiscuous mode [ 24.717813][ T293] veth1_macvtap: entered promiscuous mode [ 26.050442][ T382] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15'. [ 26.660172][ T397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 26.992758][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 26.992776][ T36] audit: type=1400 audit(1770818829.290:146): avc: denied { read write } for pid=408 comm="syz.2.26" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.042207][ T36] audit: type=1400 audit(1770818829.320:147): avc: denied { open } for pid=408 comm="syz.2.26" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.065657][ T36] audit: type=1400 audit(1770818829.320:148): avc: denied { ioctl } for pid=408 comm="syz.2.26" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.173610][ T36] audit: type=1400 audit(1770818829.470:149): avc: denied { name_bind } for pid=410 comm="syz.3.27" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.222489][ T36] audit: type=1400 audit(1770818829.470:150): avc: denied { node_bind } for pid=410 comm="syz.3.27" saddr=::ffff:224.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.262218][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.297582][ T415] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 27.309280][ T415] syzkaller0: entered promiscuous mode [ 27.315142][ T415] syzkaller0: entered allmulticast mode [ 27.418347][ T36] audit: type=1400 audit(1770818829.710:151): avc: denied { name_bind } for pid=418 comm="syz.3.31" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 27.440340][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 27.457984][ T65] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 27.472147][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.494199][ T65] usb 3-1: config 0 descriptor?? [ 27.608495][ T426] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 27.669482][ T36] audit: type=1400 audit(1770818829.960:152): avc: denied { setopt } for pid=429 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.688767][ T36] audit: type=1400 audit(1770818829.970:153): avc: denied { read } for pid=429 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.800012][ T36] audit: type=1400 audit(1770818830.090:154): avc: denied { unlink } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 27.864969][ T440] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 27.875152][ T437] kvm: pic: level sensitive irq not supported [ 27.875224][ T437] kvm: pic: non byte read [ 27.886339][ T437] kvm: pic: single mode not supported [ 27.886354][ T437] kvm: pic: level sensitive irq not supported [ 27.891813][ T437] kvm: pic: non byte read [ 27.902943][ T437] kvm: pic: level sensitive irq not supported [ 27.903006][ T437] kvm: pic: non byte read [ 27.915686][ T437] kvm: pic: non byte read [ 27.920661][ T437] kvm: pic: non byte read [ 27.926060][ T437] kvm: pic: non byte read [ 27.930760][ T437] kvm: pic: non byte read [ 27.935910][ T437] kvm: pic: non byte read [ 27.940602][ T437] kvm: pic: non byte read [ 27.957450][ T409] kvm: emulating exchange as write [ 27.964787][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 27.972197][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 27.991448][ T36] audit: type=1400 audit(1770818830.280:155): avc: denied { setopt } for pid=446 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.011764][ T65] usb 3-1: USB disconnect, device number 2 [ 28.183817][ T457] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 28.192188][ T457] overlayfs: failed to set xattr on upper [ 28.197979][ T457] overlayfs: ...falling back to redirect_dir=nofollow. [ 28.205279][ T457] overlayfs: ...falling back to uuid=null. [ 28.298311][ T459] 9pnet: p9_errstr2errno: server reported unknown error 1i›”¦\âúå! [ 28.381054][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.238266][ T496] tipc: Started in network mode [ 29.243265][ T496] tipc: Node identity 4, cluster identity 4711 [ 29.249641][ T496] tipc: Node number set to 4 [ 29.922275][ T337] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.045609][ T520] syzkaller0: entered promiscuous mode [ 30.051109][ T520] syzkaller0: entered allmulticast mode [ 30.075394][ T337] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.085682][ T337] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.095509][ T337] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 30.104648][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.112734][ T337] usb 1-1: SerialNumber: syz [ 30.153242][ T522] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.153270][ T522] rust_binder: Read failure Err(EFAULT) in pid:65 [ 30.162655][ T522] rust_binder: Error while translating object. [ 30.169169][ T522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 30.175688][ T522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:65 [ 30.323108][ T337] usb 1-1: 0:2 : does not exist [ 30.339277][ T337] usb 1-1: USB disconnect, device number 2 [ 30.351913][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.382742][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.613521][ T543] netlink: 'syz.3.77': attribute type 4 has an invalid length. [ 30.625424][ T543] netlink: 'syz.3.77': attribute type 4 has an invalid length. [ 30.782168][ T65] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.932220][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 30.939175][ T65] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 30.947590][ T65] usb 3-1: config 0 has no interface number 0 [ 30.953877][ T65] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 30.965918][ T65] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 30.975522][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.983694][ T585] process 'syz.0.82' launched './file0' with NULL argv: empty string added [ 30.984829][ T65] usb 3-1: Product: syz [ 30.996660][ T65] usb 3-1: Manufacturer: syz [ 31.001302][ T65] usb 3-1: SerialNumber: syz [ 31.012389][ T65] usb 3-1: config 0 descriptor?? [ 31.017764][ T541] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 31.228066][ T541] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 32.439075][ T65] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 32.459499][ T65] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 32.492234][ T65] asix 3-1:0.188: probe with driver asix failed with error -71 [ 32.513407][ T65] usb 3-1: USB disconnect, device number 3 [ 32.963798][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 32.963817][ T36] audit: type=1400 audit(1770818835.260:190): avc: denied { unlink } for pid=631 comm="syz.2.98" name="#7" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.992619][ T36] audit: type=1400 audit(1770818835.260:191): avc: denied { mount } for pid=631 comm="syz.2.98" name="/" dev="overlay" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.018080][ T36] audit: type=1400 audit(1770818835.310:192): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.122160][ T337] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 33.276028][ T337] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 33.285123][ T337] usb 2-1: can't read configurations, error -71 [ 33.302225][ T330] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.452398][ T330] usb 3-1: Using ep0 maxpacket: 8 [ 33.453814][ T36] audit: type=1400 audit(1770818835.750:193): avc: denied { create } for pid=650 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 33.460654][ T330] usb 3-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 33.487605][ T330] usb 3-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 33.500939][ T330] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.507766][ T330] usb 3-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 33.517045][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.526060][ T330] usb 3-1: config 0 descriptor?? [ 33.726861][ T36] audit: type=1400 audit(1770818836.020:194): avc: denied { transfer } for pid=658 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 33.749904][ T330] usbhid 3-1:0.0: can't add hid device: -71 [ 33.759507][ T330] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 33.768656][ T330] usb 3-1: USB disconnect, device number 4 [ 33.857255][ T666] netlink: 72 bytes leftover after parsing attributes in process `syz.0.111'. [ 34.122206][ T337] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.272178][ T337] usb 2-1: Using ep0 maxpacket: 16 [ 34.278792][ T337] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 34.291482][ T337] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 34.301551][ T337] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.315282][ T337] usb 2-1: config 1 interface 0 has no altsetting 0 [ 34.323581][ T337] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 34.335713][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.344518][ T337] usb 2-1: Product: syz [ 34.350899][ T337] usb 2-1: Manufacturer: syz [ 34.355709][ T337] usb 2-1: SerialNumber: syz [ 34.484364][ T671] tipc: Failed to remove unknown binding: 66,0,0/0:1836713610/1836713611 [ 34.493601][ T671] tipc: Failed to remove unknown binding: 66,0,0/0:1836713610/1836713611 [ 34.570433][ T337] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 34.780419][ T36] audit: type=1400 audit(1770818837.070:195): avc: denied { read write } for pid=662 comm="syz.1.110" name="lp0" dev="devtmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 34.804707][ T36] audit: type=1400 audit(1770818837.070:196): avc: denied { open } for pid=662 comm="syz.1.110" path="/dev/usb/lp0" dev="devtmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 35.134218][ T36] audit: type=1400 audit(1770818837.430:197): avc: denied { ioctl } for pid=662 comm="syz.1.110" path="/dev/usb/lp0" dev="devtmpfs" ino=447 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 35.159494][ T688] usblp0:failed reading printer status (-32) [ 35.166641][ T428] usb 2-1: USB disconnect, device number 3 [ 35.173530][ T428] usblp0: removed [ 35.309225][ T36] audit: type=1400 audit(1770818837.600:198): avc: denied { setopt } for pid=689 comm="syz.3.120" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.353679][ T36] audit: type=1400 audit(1770818837.620:199): avc: denied { getopt } for pid=689 comm="syz.3.120" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.112243][ T65] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.265165][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.276199][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.286338][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.299370][ T65] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.308644][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.318340][ T65] usb 2-1: config 0 descriptor?? [ 37.728423][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 37.735937][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 37.743441][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 37.775861][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 37.783358][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 37.791192][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 37.799004][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 37.806493][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 37.815625][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 37.823979][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 37.831592][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 37.839061][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 37.846556][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 37.854641][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 37.862293][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 37.869962][ T65] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 37.881038][ T65] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 37.924901][ T755] tipc: Failed to remove unknown binding: 66,0,0/0:1386569827/1386569828 [ 37.951077][ T755] tipc: Failed to remove unknown binding: 66,0,0/0:1386569827/1386569828 [ 37.961902][ T757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 37.961939][ T757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:112 [ 38.071451][ T763] netlink: 1 bytes leftover after parsing attributes in process `syz.3.145'. [ 38.858129][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 38.858147][ T36] audit: type=1400 audit(1770818841.150:206): avc: denied { create } for pid=778 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.860009][ T779] netlink: 'syz.3.149': attribute type 27 has an invalid length. [ 38.906936][ T779] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.914222][ T779] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.026560][ T791] rust_binder: Got transaction with invalid offset. [ 39.026646][ T791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.026666][ T790] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.026679][ T790] rust_binder: Read failure Err(EFAULT) in pid:131 [ 39.033931][ T791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149 [ 39.325418][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 39.502164][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 39.508506][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.519751][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.529819][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 39.539091][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.548311][ T45] usb 4-1: config 0 descriptor?? [ 39.554546][ T45] hub 4-1:0.0: USB hub found [ 39.751266][ T818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 39.751293][ T818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:146 [ 39.764572][ T45] hub 4-1:0.0: 1 port detected [ 39.823080][ T10] usb 2-1: USB disconnect, device number 4 [ 39.905805][ T828] syzkaller0: entered promiscuous mode [ 39.911396][ T828] syzkaller0: entered allmulticast mode [ 40.370971][ T45] hub 4-1:0.0: activate --> -90 [ 40.572353][ T36] audit: type=1400 audit(1770818842.870:207): avc: denied { create } for pid=792 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 40.592279][ T36] audit: type=1400 audit(1770818842.870:208): avc: denied { getopt } for pid=792 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 40.793548][ T10] usb 4-1: USB disconnect, device number 2 [ 40.796358][ T45] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 40.806532][ T45] usb 4-1-port1: connect-debounce failed [ 41.062187][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 41.212198][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 41.218654][ T9] usb 2-1: config 0 has an invalid interface number: 180 but max is 0 [ 41.226920][ T9] usb 2-1: config 0 has no interface number 0 [ 41.234658][ T9] usb 2-1: New USB device found, idVendor=0421, idProduct=0134, bcdDevice=11.72 [ 41.243864][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.251889][ T9] usb 2-1: Product: syz [ 41.256094][ T9] usb 2-1: Manufacturer: syz [ 41.260723][ T9] usb 2-1: SerialNumber: syz [ 41.266061][ T9] usb 2-1: config 0 descriptor?? [ 41.271954][ T9] usb 2-1: bad CDC descriptors [ 41.357248][ T845] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4277660120 (8555320240 ns) > initial count (6769028488 ns). Using initial count to start timer. [ 41.481888][ T9] usb 2-1: USB disconnect, device number 5 [ 41.626814][ T36] audit: type=1400 audit(1770818843.920:209): avc: denied { append } for pid=854 comm="syz.3.178" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 41.660420][ T36] audit: type=1326 audit(1770818843.950:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=854 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed3ef3d399 code=0x7ffc0000 [ 41.684094][ T36] audit: type=1326 audit(1770818843.950:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=854 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed3ef3d399 code=0x7ffc0000 [ 41.708844][ T36] audit: type=1326 audit(1770818843.950:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=854 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed3ef3d399 code=0x7ffc0000 [ 41.732212][ T36] audit: type=1326 audit(1770818843.950:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=854 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed3ef3d399 code=0x7ffc0000 [ 41.755522][ T36] audit: type=1326 audit(1770818843.950:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=854 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed3ef3d399 code=0x7ffc0000 [ 42.086288][ T857] tipc: Started in network mode [ 42.091214][ T857] tipc: Node identity a6c6336eb4cf, cluster identity 4711 [ 42.102018][ T857] tipc: Enabled bearer , priority 0 [ 42.113345][ T856] tipc: Resetting bearer [ 42.155940][ T856] tipc: Disabling bearer [ 42.215420][ T859] rust_binder: validate_parent_fixup: new_min_offset=108, sg_entry.length=0 [ 42.215467][ T859] rust_binder: Error while translating object. [ 42.240524][ T859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.255830][ T859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 42.294785][ T861] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.304651][ T861] rust_binder: Read failure Err(EFAULT) in pid:76 [ 42.313789][ T861] rust_binder: Error while translating object. [ 42.320324][ T861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.326769][ T861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 43.038181][ T887] kvm: pic: non byte write [ 43.052034][ T887] kvm: pic: non byte write [ 43.053129][ T891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.056578][ T891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 43.057843][ T887] kvm: pic: non byte write [ 43.080385][ T887] kvm: pic: level sensitive irq not supported [ 43.080563][ T887] kvm: pic: non byte write [ 43.098710][ T887] kvm: pic: single mode not supported [ 43.098726][ T887] kvm: pic: level sensitive irq not supported [ 43.104802][ T887] kvm: pic: level sensitive irq not supported [ 43.113512][ T887] kvm: pic: non byte write [ 43.125359][ T887] kvm: pic: non byte write [ 43.131049][ T887] kvm: pic: non byte write [ 43.140243][ T894] GUP no longer grows the stack in syz.0.193 (894): 200000004000-200000005000 (200000001000) [ 43.142656][ T887] kvm: pic: non byte write [ 43.151259][ T894] CPU: 1 UID: 0 PID: 894 Comm: syz.0.193 Not tainted syzkaller #0 24a10c3d70c948d82bad81e39d295aea70670ee6 [ 43.151346][ T894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 43.151407][ T894] Call Trace: [ 43.151428][ T894] [ 43.151451][ T894] __dump_stack+0x21/0x30 [ 43.151538][ T894] dump_stack_lvl+0x140/0x1c0 [ 43.151626][ T894] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.151709][ T894] ? find_vma+0xd3/0x120 [ 43.151782][ T894] dump_stack+0x19/0x20 [ 43.151840][ T894] __get_user_pages+0x1e18/0x22b0 [ 43.151926][ T894] ? __kasan_check_write+0x18/0x20 [ 43.151996][ T894] ? save_fpregs_to_fpstate+0x196/0x220 [ 43.152076][ T894] ? __kasan_check_write+0x18/0x20 [ 43.152174][ T894] ? down_read_killable+0x7f/0x100 [ 43.152235][ T894] ? populate_vma_page_range+0x220/0x220 [ 43.152317][ T894] __gup_longterm_locked+0xc5a/0x1600 [ 43.152372][ T894] ? try_grab_folio_fast+0x155/0x520 [ 43.152433][ T894] ? __schedule+0x1357/0x1ea0 [ 43.152486][ T894] ? follow_pfn_pte+0x110/0x110 [ 43.152541][ T894] ? __pte_offset_map+0x1b0/0x230 [ 43.152605][ T894] gup_fast_fallback+0x12e9/0x14e0 [ 43.152668][ T894] ? __sched_text_start+0x10/0x10 [ 43.152733][ T894] ? get_user_pages_fast_only+0xc0/0xc0 [ 43.152788][ T894] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 43.152879][ T894] get_user_pages_fast+0x73/0xb0 [ 43.152926][ T894] __iov_iter_get_pages_alloc+0x3ca/0xa30 [ 43.153005][ T894] ? mutex_lock+0x97/0x1d0 [ 43.153080][ T894] ? __cfi_mutex_lock+0x10/0x10 [ 43.153145][ T894] iov_iter_get_pages2+0x68/0xb0 [ 43.153223][ T894] __se_sys_vmsplice+0x7f4/0x1570 [ 43.153330][ T894] ? __x64_sys_vmsplice+0xc0/0xc0 [ 43.153417][ T894] ? up_read+0x26/0x1c0 [ 43.153514][ T894] ? __mm_populate+0x3dc/0x430 [ 43.153625][ T894] ? __se_sys_mremap+0x68e/0xfe0 [ 43.153693][ T894] ? xfd_validate_state+0x68/0x140 [ 43.153768][ T894] ? __kasan_check_write+0x18/0x20 [ 43.153828][ T894] ? fpregs_restore_userregs+0x11c/0x260 [ 43.153892][ T894] __x64_sys_vmsplice+0x9f/0xc0 [ 43.153977][ T894] x64_sys_call+0x105d/0x2ee0 [ 43.154061][ T894] do_syscall_64+0x57/0xf0 [ 43.154150][ T894] ? clear_bhb_loop+0x50/0xa0 [ 43.154234][ T894] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.154311][ T894] RIP: 0033:0x7f95a4f9bf79 [ 43.154366][ T894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.154419][ T894] RSP: 002b:00007f95a5e84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 43.154495][ T894] RAX: ffffffffffffffda RBX: 00007f95a5215fa0 RCX: 00007f95a4f9bf79 [ 43.154555][ T894] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000007 [ 43.154596][ T894] RBP: 00007f95a50327e0 R08: 0000000000000000 R09: 0000000000000000 [ 43.154646][ T894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.154680][ T894] R13: 00007f95a5216038 R14: 00007f95a5215fa0 R15: 00007ffc5aa5a1e8 [ 43.154726][ T894] [ 43.453526][ T887] kvm: pic: non byte write [ 43.458149][ T887] kvm: pic: non byte write [ 43.463175][ T887] kvm: pic: level sensitive irq not supported [ 43.463623][ T887] kvm: pic: level sensitive irq not supported [ 43.470134][ T887] kvm: pic: level sensitive irq not supported [ 43.476538][ T887] kvm: pic: level sensitive irq not supported [ 43.482959][ T887] kvm: pic: single mode not supported [ 43.489264][ T887] kvm: pic: single mode not supported [ 43.494769][ T887] kvm: pic: level sensitive irq not supported [ 43.500446][ T887] kvm: pic: single mode not supported [ 43.506783][ T887] kvm: pic: single mode not supported [ 43.512218][ T887] kvm: pic: level sensitive irq not supported [ 43.526358][ T887] kvm: pic: single mode not supported [ 43.532581][ T887] kvm: pic: level sensitive irq not supported [ 43.538251][ T887] kvm: pic: single mode not supported [ 43.546761][ T887] kvm: pic: single mode not supported [ 43.552296][ T887] kvm: pic: single mode not supported [ 43.557874][ T887] kvm: pic: single mode not supported [ 43.697572][ T907] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.710870][ T907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 43.718125][ T907] IPv6: NLM_F_CREATE should be set when creating new route [ 43.725408][ T907] IPv6: NLM_F_CREATE should be set when creating new route [ 43.787927][ T907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=907 comm=syz.0.197 [ 43.802226][ T907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=907 comm=syz.0.197 [ 43.815011][ T907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=907 comm=syz.0.197 [ 43.832288][ T907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 43.941880][ T36] kauditd_printk_skb: 3808 callbacks suppressed [ 43.941899][ T36] audit: type=1326 audit(1770818846.230:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed3ef9bf79 code=0x0 [ 43.993550][ T36] audit: type=1326 audit(1770818846.290:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 44.017621][ T36] audit: type=1326 audit(1770818846.290:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 44.041991][ T36] audit: type=1326 audit(1770818846.290:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 44.065754][ T36] audit: type=1326 audit(1770818846.290:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 44.089504][ T36] audit: type=1326 audit(1770818846.310:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 44.113215][ T36] audit: type=1326 audit(1770818846.310:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 44.143148][ T36] audit: type=1326 audit(1770818846.310:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 44.169704][ T36] audit: type=1326 audit(1770818846.320:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 44.205807][ T922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:105 [ 44.206225][ T36] audit: type=1326 audit(1770818846.320:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 44.492159][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 44.643808][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 44.650915][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.663138][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.682172][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 44.692163][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.702698][ T10] usb 3-1: config 0 descriptor?? [ 44.711843][ T10] hub 3-1:0.0: USB hub found [ 44.923021][ T944] netlink: 'syz.0.212': attribute type 4 has an invalid length. [ 44.940475][ T944] netlink: 'syz.0.212': attribute type 4 has an invalid length. [ 44.982949][ T10] hub 3-1:0.0: 1 port detected [ 45.339067][ T960] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 45.366817][ T960] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 45.382410][ T960] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 45.410301][ T960] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 45.447331][ T960] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 45.465998][ T960] kvm: requested 108952 ns i8254 timer period limited to 200000 ns [ 45.480068][ T960] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 45.502908][ T960] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 45.520094][ T960] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 45.537822][ T960] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 45.556684][ T10] hub 3-1:0.0: activate --> -90 [ 45.973193][ T31] usb 3-1: USB disconnect, device number 5 [ 46.156402][ T980] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.192210][ T10] usb 3-1-port1: config error [ 46.452179][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.602147][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 46.612754][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.632136][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.642059][ T45] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 46.651357][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.660461][ T45] usb 1-1: config 0 descriptor?? [ 46.849075][ T1000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 46.859517][ T1000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 46.871190][ T1000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 47.072425][ T45] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 47.080901][ T45] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 47.087933][ T45] savu 0003:1E7D:2D5A.0002: item fetching failed at offset 2/5 [ 47.095983][ T45] savu 0003:1E7D:2D5A.0002: parse failed [ 47.101742][ T45] savu 0003:1E7D:2D5A.0002: probe with driver savu failed with error -22 [ 47.257836][ T1017] rust_binder: got new transaction with bad transaction stack [ 47.257861][ T1017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 47.415610][ T10] usb 1-1: USB disconnect, device number 3 [ 47.527136][ T570] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.582162][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.623027][ T36] kauditd_printk_skb: 440 callbacks suppressed [ 49.623047][ T36] audit: type=1400 audit(1770818851.920:4473): avc: denied { lock } for pid=1064 comm="syz.1.253" path="socket:[10526]" dev="sockfs" ino=10526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 49.965164][ T36] audit: type=1400 audit(1770818852.260:4474): avc: denied { create } for pid=1066 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 50.054515][ T1073] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.255891][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 50.422869][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 50.433120][ T10] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 50.441407][ T10] usb 3-1: config 1 has no interface number 0 [ 50.454394][ T10] usb 3-1: config 1 interface 105 has no altsetting 0 [ 50.470311][ T10] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 50.480736][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.496543][ T10] usb 3-1: Product: syz [ 50.505361][ T10] usb 3-1: Manufacturer: syz [ 50.510015][ T10] usb 3-1: SerialNumber: syz [ 50.728879][ T10] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 51.036266][ T1095] netlink: 'syz.0.264': attribute type 27 has an invalid length. [ 51.119601][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.126937][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.147234][ T36] audit: type=1400 audit(1770818853.440:4475): avc: denied { read } for pid=1097 comm="syz.1.265" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.192681][ T36] audit: type=1400 audit(1770818853.440:4476): avc: denied { open } for pid=1097 comm="syz.1.265" path="/46/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.244924][ T36] audit: type=1400 audit(1770818853.470:4477): avc: denied { mounton } for pid=1097 comm="syz.1.265" path="/46/file0" dev="incremental-fs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.372154][ T36] audit: type=1400 audit(1770818853.470:4478): avc: denied { ioctl } for pid=1097 comm="syz.1.265" path="/46/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.441273][ T36] audit: type=1400 audit(1770818853.480:4479): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 52.940942][ T10] usb 3-1: USB disconnect, device number 6 [ 53.192207][ T36] audit: type=1400 audit(1770818855.480:4480): avc: denied { create } for pid=1145 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 53.782271][ T1164] tipc: Failed to remove unknown binding: 66,0,0/0:3633610040/3633610042 [ 53.790174][ T1156] serio: Serial port ptm0 [ 53.803080][ T1164] tipc: Failed to remove unknown binding: 66,0,0/0:3633610040/3633610041 [ 53.820527][ T1164] tipc: Failed to remove unknown binding: 66,0,0/0:3633610040/3633610042 [ 53.830435][ T1164] tipc: Failed to remove unknown binding: 66,0,0/0:3633610040/3633610041 [ 53.966250][ T1182] rust_binder: Error while translating object. [ 53.966278][ T1182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.972629][ T1182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:240 [ 54.161290][ T36] audit: type=1400 audit(1770818856.450:4481): avc: denied { write } for pid=1198 comm="syz.3.300" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.198847][ T36] audit: type=1400 audit(1770818856.450:4482): avc: denied { open } for pid=1198 comm="syz.3.300" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.463401][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 54.622165][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 54.632565][ T10] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 54.640880][ T10] usb 3-1: config 0 has no interface number 0 [ 54.655098][ T10] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 54.667423][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 54.676703][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.691815][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 54.691834][ T36] audit: type=1400 audit(1770818856.980:4484): avc: denied { read write } for pid=1217 comm="syz.3.307" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.692269][ T10] usb 3-1: Product: syz [ 54.706586][ T36] audit: type=1400 audit(1770818856.980:4485): avc: denied { open } for pid=1217 comm="syz.3.307" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.752325][ T10] usb 3-1: Manufacturer: syz [ 54.761564][ T10] usb 3-1: SerialNumber: syz [ 54.773101][ T10] usb 3-1: config 0 descriptor?? [ 54.786322][ T1202] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 54.883263][ T1222] 9pnet: p9_errstr2errno: server reported unknown error 3aK [ 54.974113][ T1226] create_pit_timer: 5 callbacks suppressed [ 54.974138][ T1226] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 54.996646][ T1202] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 55.027332][ T1228] kvm: pic: non byte read [ 55.031933][ T1228] pic_ioport_write: 20 callbacks suppressed [ 55.031953][ T1228] kvm: pic: level sensitive irq not supported [ 55.048796][ T1228] kvm: pic: non byte read [ 55.081107][ T1228] kvm: pic: level sensitive irq not supported [ 55.081849][ T1228] kvm: pic: non byte read [ 55.103356][ T1228] kvm: pic: level sensitive irq not supported [ 55.103465][ T1228] kvm: pic: non byte read [ 55.124381][ T1220] kvm: pic: level sensitive irq not supported [ 55.273950][ T1231] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.333751][ T1238] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.333775][ T1238] rust_binder: Read failure Err(EFAULT) in pid:266 [ 55.344726][ T1238] rust_binder: Error while translating object. [ 55.351400][ T1238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 55.358387][ T1238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:266 [ 55.421467][ T1242] syzkaller0: entered promiscuous mode [ 55.448377][ T1242] syzkaller0: entered allmulticast mode [ 55.454422][ T36] audit: type=1400 audit(1770818857.750:4486): avc: denied { setopt } for pid=1243 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 55.485231][ T36] audit: type=1400 audit(1770818857.750:4487): avc: denied { write } for pid=1241 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.542957][ T1247] Invalid argument reading file caps for ./file0 [ 55.549384][ T36] audit: type=1400 audit(1770818857.840:4488): avc: denied { execute_no_trans } for pid=1246 comm="syz.0.319" path="/100/bus/file0" dev="overlay" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.590847][ T1250] netlink: 'syz.3.320': attribute type 11 has an invalid length. [ 55.665116][ T36] audit: type=1400 audit(1770818857.950:4489): avc: denied { unmount } for pid=1256 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.693447][ T36] audit: type=1400 audit(1770818857.990:4490): avc: denied { mount } for pid=1258 comm="syz.1.324" name="/" dev="configfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 55.732652][ T36] audit: type=1400 audit(1770818858.030:4491): avc: denied { search } for pid=1258 comm="syz.1.324" name="/" dev="configfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.765289][ T36] audit: type=1400 audit(1770818858.050:4492): avc: denied { read } for pid=1258 comm="syz.1.324" name="/" dev="configfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.787732][ T36] audit: type=1400 audit(1770818858.050:4493): avc: denied { open } for pid=1258 comm="syz.1.324" path="/" dev="configfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.092215][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 56.243364][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.254489][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.264552][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.277695][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.286935][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.299491][ T31] usb 2-1: config 0 descriptor?? [ 56.429654][ T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 56.439985][ T10] asix 3-1:0.188: probe with driver asix failed with error -71 [ 56.448977][ T10] usb 3-1: USB disconnect, device number 7 [ 56.711539][ T31] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 56.721477][ T31] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 56.973411][ T10] usb 2-1: USB disconnect, device number 6 [ 56.990374][ T1290] netlink: 'syz.0.336': attribute type 10 has an invalid length. [ 56.998363][ T1290] netlink: 17 bytes leftover after parsing attributes in process `syz.0.336'. [ 57.016906][ T1288] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 58.372168][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 58.406852][ T1339] rust_binder: 302: no such ref 3 [ 58.523381][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.533753][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.543733][ T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 58.553173][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 58.561352][ T31] usb 3-1: SerialNumber: syz [ 58.702244][ T65] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 58.772574][ T31] usb 3-1: 0:2 : does not exist [ 58.779659][ T31] usb 3-1: USB disconnect, device number 8 [ 58.791384][ T623] udevd[623]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.852183][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 58.858634][ T65] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 58.867121][ T65] usb 2-1: config 0 has no interface number 0 [ 58.877101][ T65] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 58.888824][ T65] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 58.897982][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.906061][ T65] usb 2-1: Product: syz [ 58.910231][ T65] usb 2-1: Manufacturer: syz [ 58.914885][ T65] usb 2-1: SerialNumber: syz [ 58.920157][ T65] usb 2-1: config 0 descriptor?? [ 58.925516][ T1344] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 59.135086][ T1344] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 59.762204][ T330] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 59.912212][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 59.918608][ T330] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.928791][ T330] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.939305][ T330] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.948455][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.956520][ T330] usb 3-1: Product: syz [ 59.960936][ T330] usb 3-1: Manufacturer: syz [ 59.966125][ T330] usb 3-1: SerialNumber: syz [ 60.175022][ T330] usb 3-1: 0:2 : does not exist [ 60.182834][ T330] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 60.194835][ T330] usb 3-1: USB disconnect, device number 9 [ 60.238654][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.755532][ T65] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 60.767648][ T65] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 60.778486][ T65] asix 2-1:0.188: probe with driver asix failed with error -71 [ 60.789658][ T65] usb 2-1: USB disconnect, device number 7 [ 60.972393][ T1389] Zero length message leads to an empty skb [ 60.979385][ T1389] ªªªªª»: renamed from bridge_slave_1 (while UP) [ 61.032764][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 61.032782][ T36] audit: type=1400 audit(1770818863.330:4503): avc: denied { watch watch_reads } for pid=1398 comm="syz.3.378" path="/130/file0" dev="tmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.048669][ T1395] kvm: user requested TSC rate below hardware speed [ 61.070693][ T1395] kvm: vcpu 0: requested 40 ns lapic timer period limited to 200000 ns [ 61.079169][ T1395] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (335544320 ns) > initial count (200000 ns). Using initial count to start timer. [ 61.586465][ T36] audit: type=1400 audit(1770818863.880:4504): avc: denied { write } for pid=1417 comm="syz.3.386" name="file0" dev="tmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.609688][ T36] audit: type=1400 audit(1770818863.900:4505): avc: denied { ioctl } for pid=1417 comm="syz.3.386" path="/131/file0" dev="tmpfs" ino=718 ioctlcmd=0x9417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.732138][ T750] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 61.760557][ T1426] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 61.782788][ T36] audit: type=1400 audit(1770818864.080:4506): avc: denied { mounton } for pid=1429 comm="syz.2.391" path="/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 61.892223][ T750] usb 2-1: Using ep0 maxpacket: 32 [ 61.898511][ T750] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.909478][ T750] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.920340][ T750] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 61.929473][ T750] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 61.937951][ T750] usb 2-1: Product: syz [ 61.942175][ T750] usb 2-1: Manufacturer: syz [ 61.949858][ T750] hub 2-1:4.0: USB hub found [ 62.052181][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 62.150744][ T750] hub 2-1:4.0: 2 ports detected [ 62.203494][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.213789][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.223665][ T45] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 62.232908][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 62.241107][ T45] usb 1-1: SerialNumber: syz [ 62.324521][ T36] audit: type=1400 audit(1770818864.620:4507): avc: denied { write } for pid=1440 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 62.448982][ T45] usb 1-1: 0:2 : does not exist [ 62.465111][ T45] usb 1-1: USB disconnect, device number 4 [ 62.945055][ T1470] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.409'. [ 62.963347][ T750] usb 2-1: USB disconnect, device number 8 [ 63.096127][ T36] audit: type=1400 audit(1770818865.390:4508): avc: denied { append } for pid=1471 comm="syz.0.410" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.169261][ T36] audit: type=1400 audit(1770818865.460:4509): avc: denied { write } for pid=1480 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 63.574275][ T1500] syzkaller0: entered promiscuous mode [ 63.579884][ T1500] syzkaller0: entered allmulticast mode [ 63.931540][ T36] audit: type=1400 audit(1770818866.220:4510): avc: denied { execute } for pid=1522 comm="syz.3.429" name="file0" dev="ramfs" ino=13337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 63.953941][ T36] audit: type=1400 audit(1770818866.220:4511): avc: denied { execute_no_trans } for pid=1522 comm="syz.3.429" path="/file0" dev="ramfs" ino=13337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 64.354425][ T1538] bridge0: port 3(syz_tun) entered blocking state [ 64.360921][ T1538] bridge0: port 3(syz_tun) entered disabled state [ 64.367496][ T1538] syz_tun: entered allmulticast mode [ 64.373931][ T1538] syz_tun: entered promiscuous mode [ 64.379329][ T1538] bridge0: port 3(syz_tun) entered blocking state [ 64.386268][ T1538] bridge0: port 3(syz_tun) entered forwarding state [ 64.593420][ T1542] picdev_write: 72 callbacks suppressed [ 64.593438][ T1542] kvm: pic: non byte write [ 65.001201][ T1551] syzkaller0: entered promiscuous mode [ 65.007535][ T1551] syzkaller0: entered allmulticast mode [ 65.113623][ T36] audit: type=1400 audit(1770818867.410:4512): avc: denied { read } for pid=1555 comm="syz.3.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.222270][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 66.392214][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 66.400274][ T31] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 66.423430][ T31] usb 1-1: config 7 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 66.437024][ T31] usb 1-1: config 7 interface 0 has no altsetting 0 [ 66.443883][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 66.453227][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.505332][ T31] usbhid 1-1:7.0: couldn't find an input interrupt endpoint [ 66.580047][ T1576] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.867530][ T36] audit: type=1400 audit(1770818869.120:4513): avc: denied { map } for pid=1593 comm="syz.1.454" path="socket:[13540]" dev="sockfs" ino=13540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.953721][ T31] usb 1-1: USB disconnect, device number 5 [ 67.674775][ T1609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 67.816273][ T1612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 68.847360][ T36] audit: type=1400 audit(1770818871.140:4514): avc: denied { read } for pid=1643 comm="syz.0.470" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.870567][ T36] audit: type=1400 audit(1770818871.140:4515): avc: denied { open } for pid=1643 comm="syz.0.470" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.427764][ T36] audit: type=1400 audit(1770818871.720:4516): avc: denied { read } for pid=1666 comm="syz.0.479" path="socket:[14712]" dev="sockfs" ino=14712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.502184][ T36] audit: type=1400 audit(1770818871.720:4517): avc: denied { ioctl } for pid=1666 comm="syz.0.479" path="socket:[14715]" dev="sockfs" ino=14715 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.573447][ T36] audit: type=1400 audit(1770818871.870:4518): avc: denied { name_bind } for pid=1674 comm="syz.1.483" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 69.622686][ T36] audit: type=1400 audit(1770818871.920:4519): avc: denied { bpf } for pid=1674 comm="syz.1.483" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.818013][ T1681] netlink: 'syz.1.485': attribute type 27 has an invalid length. [ 69.930506][ T1681] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.937838][ T1681] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.116987][ T36] audit: type=1400 audit(1770818872.100:4520): avc: denied { ioctl } for pid=1680 comm="syz.1.485" path="socket:[14750]" dev="sockfs" ino=14750 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.142484][ T36] audit: type=1400 audit(1770818872.110:4521): avc: denied { bind } for pid=1680 comm="syz.1.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.161896][ T36] audit: type=1400 audit(1770818872.190:4522): avc: denied { read } for pid=1682 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.939537][ T1728] netlink: 3 bytes leftover after parsing attributes in process `syz.1.501'. [ 72.638912][ T1740] netlink: 'syz.3.505': attribute type 27 has an invalid length. [ 73.455466][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 73.455485][ T36] audit: type=1400 audit(1770818875.750:4524): avc: denied { mounton } for pid=1771 comm="syz.2.516" path="/file0" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.493014][ T36] audit: type=1400 audit(1770818875.780:4525): avc: denied { associate } for pid=1773 comm="syz.2.516" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 73.552187][ T750] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 73.742218][ T750] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.760111][ T36] audit: type=1400 audit(1770818876.050:4526): avc: denied { connect } for pid=1780 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.762262][ T750] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.811218][ T36] audit: type=1400 audit(1770818876.100:4527): avc: denied { getopt } for pid=1780 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.836313][ T750] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 73.845858][ T750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 73.855927][ T750] usb 1-1: SerialNumber: syz [ 74.005921][ T36] audit: type=1326 audit(1770818876.300:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95e19bf79 code=0x7ffc0000 [ 74.030027][ T36] audit: type=1326 audit(1770818876.300:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95e19bf79 code=0x7ffc0000 [ 74.054217][ T36] audit: type=1326 audit(1770818876.350:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff95e19bf79 code=0x7ffc0000 [ 74.081691][ T750] usb 1-1: 0:2 : does not exist [ 74.088298][ T36] audit: type=1326 audit(1770818876.350:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95e19bf79 code=0x7ffc0000 [ 74.113814][ T750] usb 1-1: USB disconnect, device number 6 [ 74.130108][ T623] udevd[623]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.146081][ T36] audit: type=1326 audit(1770818876.350:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95e19bf79 code=0x7ffc0000 [ 74.172218][ T36] audit: type=1326 audit(1770818876.350:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff95e19bf79 code=0x7ffc0000 [ 74.380435][ T1812] tipc: Started in network mode [ 74.385491][ T1812] tipc: Node identity 4, cluster identity 4711 [ 74.391876][ T1812] tipc: Node number set to 4 [ 75.052194][ T750] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 75.202148][ T750] usb 1-1: Using ep0 maxpacket: 16 [ 75.208573][ T750] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 75.219660][ T750] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.229511][ T750] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.240499][ T750] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.251857][ T750] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.261089][ T750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.269216][ T750] usb 1-1: Product: syz [ 75.273493][ T750] usb 1-1: Manufacturer: syz [ 75.278122][ T750] usb 1-1: SerialNumber: syz [ 75.332883][ T1849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 75.404487][ T1856] bridge0: port 3(syz_tun) entered disabled state [ 75.412319][ T1856] syz_tun (unregistering): left allmulticast mode [ 75.418811][ T1856] syz_tun (unregistering): left promiscuous mode [ 75.425283][ T1856] bridge0: port 3(syz_tun) entered disabled state [ 75.502571][ T750] usb 1-1: USB disconnect, device number 7 [ 75.515552][ T623] udevd[623]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.812213][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 75.962246][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 75.969166][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 75.977838][ T10] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 75.987683][ T10] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 76.000646][ T10] usb 2-1: config 8 interface 0 has no altsetting 0 [ 76.013877][ T10] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 76.026930][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.035425][ T10] usb 2-1: Product: syz [ 76.039924][ T10] usb 2-1: Manufacturer: syz [ 76.044995][ T10] usb 2-1: SerialNumber: syz [ 76.253917][ T10] usb 2-1: selecting invalid altsetting 0 [ 76.274885][ T10] snd-usb-audio 2-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 76.294728][ T10] usb 2-1: USB disconnect, device number 9 [ 76.307045][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.768339][ T1893] bridge0: port 3(veth0_to_bridge) entered blocking state [ 76.775565][ T1893] bridge0: port 3(veth0_to_bridge) entered disabled state [ 76.782797][ T1893] veth0_to_bridge: entered allmulticast mode [ 76.789195][ T1893] veth0_to_bridge: entered promiscuous mode [ 76.906702][ T1906] loop5: detected capacity change from 0 to 7 [ 77.073352][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 77.083283][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 77.153111][ T1922] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.153139][ T1922] rust_binder: Read failure Err(EFAULT) in pid:407 [ 77.191472][ T1930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 77.259581][ T1941] netlink: 268 bytes leftover after parsing attributes in process `syz.1.592'. [ 77.360178][ T1956] kernel profiling enabled (shift: 63) [ 77.366833][ T1956] profiling shift: 63 too large [ 77.515028][ T1973] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1973 comm=syz.0.607 [ 77.873486][ T2019] loop5: detected capacity change from 0 to 7 [ 78.027592][ T2033] sit0: entered promiscuous mode [ 78.034305][ T2033] netlink: 'syz.2.636': attribute type 1 has an invalid length. [ 78.042388][ T2033] netlink: 1 bytes leftover after parsing attributes in process `syz.2.636'. [ 78.581518][ T2060] loop5: detected capacity change from 0 to 7 [ 78.647434][ T2067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 78.746548][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 78.756522][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 78.951987][ T2093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 79.034271][ T2104] capability: warning: `syz.0.668' uses deprecated v2 capabilities in a way that may be insecure [ 79.095674][ T2110] tipc: Enabling of bearer rejected, failed to enable media [ 79.202142][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 79.202163][ T36] audit: type=1400 audit(1770818881.490:4547): avc: denied { listen } for pid=2115 comm="syz.2.674" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 79.473087][ T2141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 79.897429][ T36] audit: type=1400 audit(1770818882.190:4548): avc: denied { setopt } for pid=2158 comm="syz.2.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.611785][ T2211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'. [ 80.675758][ T2214] tipc: Started in network mode [ 80.680723][ T2214] tipc: Node identity 4, cluster identity 4711 [ 80.687223][ T2214] tipc: Node number set to 4 [ 81.019379][ T2241] tipc: Cannot configure node identity twice [ 81.126863][ T36] audit: type=1400 audit(1770818883.420:4549): avc: denied { bind } for pid=2253 comm="syz.1.737" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.147231][ T36] audit: type=1400 audit(1770818883.420:4550): avc: denied { name_bind } for pid=2253 comm="syz.1.737" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 81.173713][ T36] audit: type=1400 audit(1770818883.420:4551): avc: denied { node_bind } for pid=2253 comm="syz.1.737" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 81.213526][ T2259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 81.328018][ T2276] netlink: 124 bytes leftover after parsing attributes in process `syz.3.747'. [ 81.786402][ T2291] tipc: Cannot configure node identity twice [ 81.845078][ T2296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 82.025817][ T2313] tipc: Cannot configure node identity twice [ 82.347352][ T36] audit: type=1400 audit(1770818884.640:4552): avc: denied { write } for pid=2353 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.352273][ T750] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 82.522164][ T750] usb 2-1: Using ep0 maxpacket: 16 [ 82.529059][ T750] usb 2-1: config 3 has an invalid interface number: 124 but max is 0 [ 82.537418][ T750] usb 2-1: config 3 has no interface number 0 [ 82.543649][ T750] usb 2-1: config 3 interface 124 has no altsetting 0 [ 82.551903][ T750] usb 2-1: New USB device found, idVendor=33d8, idProduct=bbce, bcdDevice=3f.d1 [ 82.561143][ T750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.569433][ T750] usb 2-1: Product: syz [ 82.573720][ T750] usb 2-1: Manufacturer: syz [ 82.578347][ T750] usb 2-1: SerialNumber: syz [ 82.662488][ T2390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.801'. [ 82.699061][ T36] audit: type=1400 audit(1770818884.990:4553): avc: denied { remount } for pid=2393 comm="syz.3.803" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.785848][ T36] audit: type=1400 audit(1770818885.080:4554): avc: denied { ioctl } for pid=2326 comm="syz.1.771" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.823432][ T750] usb 2-1: USB disconnect, device number 10 [ 83.012835][ T36] audit: type=1400 audit(1770818885.310:4555): avc: denied { read } for pid=2423 comm="syz.0.817" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.035369][ T2426] 9p: Unknown Cache mode or invalid value fs [ 83.401888][ T2462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 83.669213][ T2502] batadv_slave_1: entered promiscuous mode [ 83.675625][ T2502] batadv_slave_1: left promiscuous mode [ 83.704890][ T2507] kvm: kvm [2505]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x1 [ 83.766081][ T2514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'. [ 83.968829][ T2533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 83.990406][ T2535] loop5: detected capacity change from 0 to 7 [ 84.032345][ T36] audit: type=1400 audit(1770818886.330:4556): avc: denied { connect } for pid=2536 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.164898][ T2546] netlink: 36 bytes leftover after parsing attributes in process `syz.3.874'. [ 84.303416][ T2564] tmpfs: Too small a size for current use [ 84.522175][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 84.672147][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 84.678554][ T9] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 84.691339][ T9] usb 2-1: config 0 has no interface number 0 [ 84.697677][ T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.708723][ T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.718547][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 84.727720][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.736390][ T9] usb 2-1: config 0 descriptor?? [ 85.304468][ T2602] netlink: 108 bytes leftover after parsing attributes in process `syz.2.902'. [ 85.336440][ T36] audit: type=1400 audit(1770818887.630:4557): avc: denied { setopt } for pid=2605 comm="syz.2.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.358302][ T45] usb 2-1: USB disconnect, device number 11 [ 85.408974][ T36] audit: type=1400 audit(1770818887.700:4558): avc: denied { read } for pid=2613 comm="syz.2.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.048497][ T2654] netlink: 'syz.2.927': attribute type 2 has an invalid length. [ 86.057707][ T2656] netlink: 32 bytes leftover after parsing attributes in process `syz.3.928'. [ 86.066785][ T2656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.928'. [ 86.132148][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 86.292296][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 86.299115][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 86.307956][ T9] usb 2-1: config 0 has no interfaces? [ 86.315079][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.328475][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.336857][ T9] usb 2-1: Product: syz [ 86.341290][ T9] usb 2-1: Manufacturer: syz [ 86.346152][ T9] usb 2-1: SerialNumber: syz [ 86.351627][ T9] usb 2-1: config 0 descriptor?? [ 86.563736][ T2625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.572350][ T2625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.581834][ T9] usb 2-1: USB disconnect, device number 12 [ 86.623153][ T2712] ======================================================= [ 86.623153][ T2712] WARNING: The mand mount option has been deprecated and [ 86.623153][ T2712] and is ignored by this kernel. Remove the mand [ 86.623153][ T2712] option from the mount to silence this warning. [ 86.623153][ T2712] ======================================================= [ 87.022176][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 87.173430][ T31] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x6A, changing to 0xA [ 87.185256][ T31] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1023 [ 87.195349][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 87.206979][ T31] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 87.216188][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.224261][ T31] usb 2-1: Product: syz [ 87.228448][ T31] usb 2-1: Manufacturer: syz [ 87.233301][ T31] usb 2-1: SerialNumber: syz [ 87.449521][ T31] cdc_ncm 2-1:1.0: bind() failure [ 87.474304][ T31] usb 2-1: USB disconnect, device number 13 [ 87.515673][ T36] audit: type=1400 audit(1770818889.810:4559): avc: denied { ioctl } for pid=2775 comm="syz.2.986" path="socket:[17906]" dev="sockfs" ino=17906 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.721775][ T36] audit: type=1400 audit(1770818890.010:4560): avc: denied { mount } for pid=2798 comm="syz.3.997" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 88.222935][ T36] audit: type=1400 audit(1770818890.520:4561): avc: denied { read } for pid=2846 comm="syz.1.1020" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.492148][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 88.652132][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 88.658629][ T9] usb 2-1: config 3 has an invalid interface number: 124 but max is 0 [ 88.667150][ T9] usb 2-1: config 3 has no interface number 0 [ 88.673573][ T9] usb 2-1: config 3 interface 124 has no altsetting 0 [ 88.682266][ T9] usb 2-1: New USB device found, idVendor=33d8, idProduct=bbce, bcdDevice=3f.d1 [ 88.691674][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.703855][ T9] usb 2-1: Product: syz [ 88.708157][ T9] usb 2-1: Manufacturer: syz [ 88.713016][ T9] usb 2-1: SerialNumber: syz [ 88.930317][ T9] usb 2-1: USB disconnect, device number 14 [ 89.477484][ T2951] loop5: detected capacity change from 0 to 7 [ 89.580468][ T36] audit: type=1400 audit(1770818891.870:4562): avc: denied { ioctl } for pid=2965 comm="syz.1.1078" path="socket:[19192]" dev="sockfs" ino=19192 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.800441][ T36] audit: type=1400 audit(1770818892.090:4563): avc: denied { shutdown } for pid=2983 comm="syz.2.1086" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.854769][ T36] audit: type=1400 audit(1770818892.150:4564): avc: denied { ioctl } for pid=2987 comm="syz.2.1088" path="socket:[19240]" dev="sockfs" ino=19240 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.892183][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 90.042286][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 90.050391][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.058565][ T9] usb 2-1: no configurations [ 90.063285][ T9] usb 2-1: can't read configurations, error -22 [ 90.452531][ T556] tipc: Subscription rejected, illegal request [ 90.595973][ T3034] overlayfs: unescaped trailing colons in lowerdir mount option. [ 90.686762][ T3039] tipc: Cannot configure node identity twice [ 90.934515][ T36] audit: type=1400 audit(1770818893.230:4565): avc: denied { bind } for pid=3055 comm="syz.2.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.953991][ T36] audit: type=1400 audit(1770818893.230:4566): avc: denied { name_bind } for pid=3055 comm="syz.2.1120" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 90.974858][ T36] audit: type=1400 audit(1770818893.230:4567): avc: denied { node_bind } for pid=3055 comm="syz.2.1120" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 91.043728][ T3066] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1125'. [ 91.052848][ T3066] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1125'. [ 91.061829][ T3066] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1125'. [ 91.154173][ T36] audit: type=1400 audit(1770818893.450:4568): avc: denied { listen } for pid=3077 comm="syz.2.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.178681][ T36] audit: type=1400 audit(1770818893.470:4569): avc: denied { accept } for pid=3077 comm="syz.2.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.262590][ T3087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1135'. [ 91.542192][ T3117] overlayfs: failed to clone lowerpath [ 91.548711][ T3117] overlayfs: failed to clone lowerpath [ 91.574749][ T3123] raw_sendmsg: syz.3.1152 forgot to set AF_INET. Fix it! [ 91.687099][ T36] audit: type=1400 audit(1770818893.980:4570): avc: denied { getattr } for pid=3140 comm="syz.1.1161" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 91.687152][ T3141] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 91.721616][ T36] audit: type=1400 audit(1770818894.010:4571): avc: denied { mounton } for pid=3140 comm="syz.1.1161" path="/242/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.842331][ T3147] tipc: Cannot configure node identity twice [ 92.172437][ T36] audit: type=1400 audit(1770818894.470:4572): avc: denied { map } for pid=3169 comm="syz.0.1175" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.287801][ T36] audit: type=1400 audit(1770818894.580:4573): avc: denied { getopt } for pid=3179 comm="syz.0.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.877018][ T36] audit: type=1400 audit(1770818895.170:4574): avc: denied { append } for pid=3240 comm="syz.1.1209" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.956816][ T3249] capability: warning: `syz.1.1213' uses 32-bit capabilities (legacy support in use) [ 93.208217][ T3274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'. [ 93.977088][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.984205][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.991291][ T3297] bridge_slave_0: entered allmulticast mode [ 93.997718][ T3297] bridge_slave_0: entered promiscuous mode [ 94.004167][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.011207][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.018360][ T3297] bridge_slave_1: entered allmulticast mode [ 94.024665][ T3297] bridge_slave_1: entered promiscuous mode [ 94.071557][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.078635][ T3297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.085947][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.093010][ T3297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.115007][ T958] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.122772][ T958] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.131966][ T556] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.139084][ T556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.157024][ T958] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.164143][ T958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.186767][ T3310] bpf: Bad value for 'gid' [ 94.203098][ T3297] veth0_vlan: entered promiscuous mode [ 94.220841][ T3297] veth1_macvtap: entered promiscuous mode [ 94.678146][ T3365] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1265'. [ 95.032155][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.182215][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 95.189480][ T45] usb 5-1: config 3 has an invalid interface number: 124 but max is 0 [ 95.204230][ T45] usb 5-1: config 3 has no interface number 0 [ 95.217825][ T45] usb 5-1: config 3 interface 124 has no altsetting 0 [ 95.226614][ T45] usb 5-1: New USB device found, idVendor=33d8, idProduct=bbce, bcdDevice=3f.d1 [ 95.239589][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.247934][ T45] usb 5-1: Product: syz [ 95.252338][ T45] usb 5-1: Manufacturer: syz [ 95.257054][ T45] usb 5-1: SerialNumber: syz [ 95.483350][ T45] usb 5-1: USB disconnect, device number 2 [ 95.630556][ T3439] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1300'. [ 95.688521][ T3446] overlayfs: conflicting options: userxattr,metacopy=on [ 96.232148][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.383548][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.394625][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.404447][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 96.417363][ T10] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 96.426506][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.435319][ T10] usb 5-1: config 0 descriptor?? [ 96.647928][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 96.647945][ T36] audit: type=1400 audit(1770818898.940:4583): avc: denied { search } for pid=3472 comm="syz.2.1316" name="/" dev="configfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.689931][ T36] audit: type=1400 audit(1770818898.940:4584): avc: denied { setattr } for pid=3472 comm="syz.2.1316" name="/" dev="configfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.816582][ T3498] 9pnet_fd: Insufficient options for proto=fd [ 96.849867][ T10] steelseries 0003:1038:1410.0005: report_id 0 is invalid [ 96.862395][ T10] steelseries 0003:1038:1410.0005: item 0 0 1 8 parsing failed [ 96.872132][ T10] steelseries 0003:1038:1410.0005: parse failed [ 96.878849][ T10] steelseries 0003:1038:1410.0005: probe with driver steelseries failed with error -22 [ 96.956572][ T3511] overlayfs: failed to clone upperpath [ 96.980013][ T3515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1336'. [ 97.014775][ T3521] overlayfs: failed to clone lowerpath [ 97.058727][ T10] usb 5-1: USB disconnect, device number 3 [ 97.634732][ T3545] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1350'. [ 97.643890][ T3545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1350'. [ 97.770033][ T36] audit: type=1400 audit(1770818900.060:4585): avc: denied { map } for pid=3552 comm="syz.4.1354" path="socket:[21328]" dev="sockfs" ino=21328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 98.135112][ T3606] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1380'. [ 98.678592][ T3632] tipc: Started in network mode [ 98.683569][ T3632] tipc: Node identity 4, cluster identity 4711 [ 98.689812][ T3632] tipc: Node number set to 4 [ 99.668440][ T3663] overlayfs: failed to clone upperpath [ 99.704107][ T3668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1408'. [ 99.734479][ T3671] tipc: New replicast peer: 255.255.255.255 [ 99.752446][ T3671] tipc: Enabled bearer , priority 10 [ 99.759002][ T3673] netlink: 'syz.2.1411': attribute type 12 has an invalid length. [ 99.800139][ T36] audit: type=1400 audit(1770818902.090:4586): avc: denied { bind } for pid=3677 comm="syz.4.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.943280][ T36] audit: type=1400 audit(1770818902.240:4587): avc: denied { accept } for pid=3701 comm="syz.3.1424" path="socket:[22591]" dev="sockfs" ino=22591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.056248][ T36] audit: type=1400 audit(1770818902.350:4588): avc: denied { sqpoll } for pid=3718 comm="syz.3.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.105005][ T3722] overlayfs: failed to clone upperpath [ 100.149027][ T36] audit: type=1400 audit(1770818902.440:4589): avc: denied { bind } for pid=3725 comm="syz.4.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.549357][ T36] audit: type=1326 audit(1770818902.840:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.2.1448" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff95e19bf79 code=0x0 [ 101.578017][ T3807] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1472'. [ 101.678144][ T3824] input: syz0 as /devices/virtual/input/input5 [ 101.693118][ T36] audit: type=1400 audit(1770818903.990:4591): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=534 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.720776][ T36] audit: type=1400 audit(1770818903.990:4592): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=534 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.752513][ T36] audit: type=1400 audit(1770818903.990:4593): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=534 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.812224][ T36] audit: type=1400 audit(1770818904.110:4594): avc: denied { mount } for pid=3830 comm="syz.3.1484" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.901422][ T36] audit: type=1400 audit(1770818904.190:4595): avc: denied { read } for pid=3834 comm="syz.0.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.146570][ T3863] 9pnet: p9_errstr2errno: server reported unknown error [ 102.204078][ T3874] overlayfs: failed to clone lowerpath [ 102.209927][ T36] audit: type=1400 audit(1770818904.500:4596): avc: denied { mount } for pid=3873 comm="syz.4.1503" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 102.361027][ T3890] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1511'. [ 102.370136][ T3890] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1511'. [ 102.379168][ T3890] netlink: 'syz.3.1511': attribute type 5 has an invalid length. [ 102.387130][ T3890] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1511'. [ 102.858560][ T3938] fuse: Invalid gid '00000000000037777777777' [ 103.433803][ T3977] overlayfs: failed to clone upperpath [ 103.444315][ T36] audit: type=1400 audit(1770818905.740:4597): avc: denied { mount } for pid=3978 comm="syz.3.1554" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 104.903628][ T36] audit: type=1400 audit(1770818907.200:4598): avc: denied { setopt } for pid=4037 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.624333][ T4100] netlink: 'syz.3.1610': attribute type 4 has an invalid length. [ 107.204616][ T4130] fuse: Bad value for 'group_id' [ 107.209618][ T4130] fuse: Bad value for 'group_id' [ 108.781751][ T4194] overlayfs: failed to clone upperpath [ 108.799602][ T4196] overlayfs: failed to clone upperpath [ 109.318568][ T4229] overlayfs: failed to clone upperpath [ 109.410745][ T4234] loop5: detected capacity change from 0 to 7 [ 109.594446][ T36] audit: type=1326 audit(1770818911.890:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.0.1674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f95a4f95d97 code=0x0 [ 110.595157][ T36] audit: type=1400 audit(1770818912.890:4600): avc: denied { connect } for pid=4268 comm="syz.0.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.211121][ T4298] vcan0: entered allmulticast mode [ 111.334332][ T4313] overlayfs: failed to clone upperpath [ 111.524768][ T36] audit: type=1400 audit(1770818913.820:4601): avc: denied { watch watch_reads } for pid=4327 comm="syz.2.1709" path="/416/file0" dev="tmpfs" ino=2239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.899865][ T36] audit: type=1400 audit(1770818914.190:4602): avc: denied { watch watch_reads } for pid=4342 comm="syz.4.1714" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 112.362220][ T4367] overlayfs: failed to clone upperpath [ 113.019045][ T36] audit: type=1400 audit(1770818915.310:4603): avc: denied { map } for pid=4402 comm="syz.3.1739" path="socket:[24643]" dev="sockfs" ino=24643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 113.636619][ T4414] overlayfs: failed to clone upperpath [ 113.801744][ T4423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1748'. [ 114.179616][ T4447] overlayfs: failed to clone upperpath [ 114.232138][ T4451] overlayfs: failed to clone upperpath [ 116.071002][ T36] audit: type=1400 audit(1770818918.350:4604): avc: denied { unmount } for pid=4512 comm="syz.0.1785" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.214334][ T4547] netlink: 'syz.2.1800': attribute type 12 has an invalid length. [ 117.617979][ T4565] overlayfs: failed to clone upperpath [ 119.214368][ T4619] overlayfs: failed to clone upperpath [ 121.271477][ T36] audit: type=1326 audit(1770818923.560:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.3.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 121.312105][ T36] audit: type=1326 audit(1770818923.560:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.3.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 121.352100][ T36] audit: type=1326 audit(1770818923.590:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.3.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 121.382107][ T36] audit: type=1326 audit(1770818923.590:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.3.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 121.422124][ T36] audit: type=1326 audit(1770818923.590:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.3.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 121.465918][ T36] audit: type=1326 audit(1770818923.590:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.3.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 121.503681][ T36] audit: type=1326 audit(1770818923.590:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.3.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 121.547496][ T36] audit: type=1326 audit(1770818923.590:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.3.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 121.581321][ T36] audit: type=1326 audit(1770818923.600:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.3.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 121.622136][ T36] audit: type=1326 audit(1770818923.600:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.3.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 124.327485][ T4762] netlink: 'syz.0.1893': attribute type 27 has an invalid length. [ 124.360543][ T4762] veth0_vlan: left promiscuous mode [ 124.366468][ T4762] veth0_vlan: entered promiscuous mode [ 124.374420][ T4762] veth1_macvtap: left promiscuous mode [ 124.380943][ T4762] veth1_macvtap: entered promiscuous mode [ 124.394493][ T570] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.401627][ T570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.420121][ T570] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.427289][ T570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.853802][ T4791] tipc: Enabling of bearer rejected, failed to enable media [ 124.936820][ T4803] tipc: Enabled bearer , priority 10 [ 125.700660][ T4833] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4833 comm=syz.3.1925 [ 126.875813][ T4912] overlayfs: failed to clone lowerpath [ 127.549762][ T4957] overlayfs: failed to clone upperpath [ 128.929904][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 128.929937][ T36] audit: type=1400 audit(1770818931.220:4622): avc: denied { remount } for pid=5061 comm="syz.0.2036" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 131.137770][ T5165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2085'. [ 132.504003][ T5252] syz.0.2128 uses obsolete (PF_INET,SOCK_PACKET) [ 133.178116][ T36] audit: type=1400 audit(1770818935.470:4623): avc: denied { mount } for pid=5286 comm="syz.3.2145" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 133.179259][ T5287] overlayfs: failed to clone lowerpath [ 133.746550][ T5388] /dev/loop0: Can't lookup blockdev [ 134.392521][ T5431] TCP: TCP_TX_DELAY enabled [ 135.250740][ T5469] overlayfs: failed to clone upperpath [ 135.829394][ T5504] tipc: Enabling of bearer rejected, failed to enable media [ 135.862103][ T5506] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2250'. [ 136.326374][ T5528] overlayfs: failed to clone upperpath [ 136.458998][ T5547] overlayfs: failed to clone upperpath [ 136.733380][ T36] audit: type=1400 audit(1770818939.030:4624): avc: denied { mounton } for pid=5612 comm="syz.0.2303" path="/443/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 136.734204][ T5613] incfs: ino conflict with backing FS 1 [ 136.783031][ T5613] incfs: Unexpected inode type [ 136.806170][ T36] audit: type=1400 audit(1770818939.100:4625): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 137.074396][ T5665] netlink: 'syz.0.2329': attribute type 27 has an invalid length. [ 137.426225][ T5703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2348'. [ 137.631491][ T36] audit: type=1400 audit(1770818939.920:4626): avc: denied { mount } for pid=5712 comm="syz.2.2353" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 137.654405][ T5713] overlayfs: failed to clone lowerpath [ 137.660436][ T5713] overlayfs: failed to clone lowerpath [ 137.932433][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2362'. [ 138.086162][ T5756] 9pnet_fd: p9_fd_create_tcp (5756): problem connecting socket to 127.0.0.1 [ 138.119475][ T5762] overlayfs: failed to clone upperpath [ 138.131755][ T5764] overlayfs: failed to clone upperpath [ 138.435136][ T5786] overlayfs: failed to clone upperpath [ 138.544153][ T5807] overlayfs: failed to clone upperpath [ 138.655744][ T5815] netlink: 1323 bytes leftover after parsing attributes in process `syz.4.2399'. [ 139.355004][ T5851] overlayfs: failed to clone upperpath [ 139.782710][ T36] audit: type=1326 audit(1770818942.080:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.2428" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95a4f9bf79 code=0x0 [ 140.691668][ T5886] overlayfs: failed to clone upperpath [ 141.337089][ T5926] tipc: Enabling of bearer rejected, failed to enable media [ 142.734861][ T5974] overlayfs: failed to clone upperpath [ 142.769942][ T5947] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 142.804316][ T5947] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 142.806767][ T5977] overlayfs: failed to clone upperpath [ 142.828861][ T5947] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 143.434249][ T36] audit: type=1400 audit(1770818945.730:4628): avc: denied { getopt } for pid=6000 comm="syz.0.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.454469][ T6001] netlink: 'syz.0.2480': attribute type 33 has an invalid length. [ 145.192474][ T6069] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2510'. [ 145.514406][ T36] audit: type=1326 audit(1770818947.810:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6087 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 145.539422][ T36] audit: type=1326 audit(1770818947.830:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6087 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 145.563382][ T36] audit: type=1326 audit(1770818947.830:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6087 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 145.587141][ T36] audit: type=1326 audit(1770818947.830:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6087 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 145.610930][ T36] audit: type=1326 audit(1770818947.830:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6087 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 145.635242][ T36] audit: type=1326 audit(1770818947.830:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6087 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 145.659101][ T36] audit: type=1326 audit(1770818947.830:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6087 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 145.692289][ T36] audit: type=1326 audit(1770818947.830:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6087 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 145.716216][ T36] audit: type=1326 audit(1770818947.830:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6087 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed3ef9bf79 code=0x7ffc0000 [ 148.796292][ T6283] overlayfs: failed to clone upperpath [ 148.978878][ T6331] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2636'. [ 150.163705][ T6399] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2671'. [ 150.224550][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'. [ 152.495883][ T6557] batadv_slave_0: entered promiscuous mode [ 152.502512][ T6556] batadv_slave_0: left promiscuous mode [ 153.635769][ T6605] /dev/loop0: Can't lookup blockdev [ 154.967188][ T6623] overlayfs: failed to clone lowerpath [ 154.973490][ T6635] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 155.720687][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2794'. [ 156.464270][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 156.464291][ T36] audit: type=1400 audit(1770818958.760:4641): avc: denied { create } for pid=6677 comm="syz.0.2805" name="#22" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 156.562134][ T36] audit: type=1400 audit(1770818958.760:4642): avc: denied { link } for pid=6677 comm="syz.0.2805" name="#22" dev="tmpfs" ino=3107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 156.640811][ T36] audit: type=1400 audit(1770818958.760:4643): avc: denied { rename } for pid=6677 comm="syz.0.2805" name="#23" dev="tmpfs" ino=3107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 157.102344][ T36] audit: type=1400 audit(1770818959.400:4644): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 157.214120][ T6726] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 159.143241][ T6770] overlayfs: failed to clone lowerpath [ 159.143410][ T6771] overlayfs: failed to clone lowerpath [ 159.232173][ T6780] overlayfs: failed to clone lowerpath [ 159.294837][ T6789] overlayfs: failed to clone upperpath [ 159.760932][ T6801] overlayfs: failed to clone upperpath [ 159.773518][ T6805] overlayfs: failed to clone lowerpath [ 159.907776][ T6823] syz.3.2871: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 159.922669][ T36] audit: type=1400 audit(1770818962.200:4645): avc: denied { ioctl } for pid=6822 comm="syz.3.2871" path="socket:[28661]" dev="sockfs" ino=28661 ioctlcmd=0x89fd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 159.947518][ T6823] CPU: 1 UID: 0 PID: 6823 Comm: syz.3.2871 Not tainted syzkaller #0 24a10c3d70c948d82bad81e39d295aea70670ee6 [ 159.947565][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 159.947581][ T6823] Call Trace: [ 159.947589][ T6823] [ 159.947599][ T6823] __dump_stack+0x21/0x30 [ 159.947640][ T6823] dump_stack_lvl+0x140/0x1c0 [ 159.947669][ T6823] ? __cfi_dump_stack_lvl+0x10/0x10 [ 159.947704][ T6823] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 159.947741][ T6823] dump_stack+0x19/0x20 [ 159.947769][ T6823] warn_alloc+0x1e7/0x2c0 [ 159.947792][ T6823] ? stack_depot_save_flags+0x38/0x800 [ 159.947818][ T6823] ? __cfi_warn_alloc+0x10/0x10 [ 159.947841][ T6823] ? kasan_save_track+0x3e/0x80 [ 159.947871][ T6823] ? kasan_save_alloc_info+0x40/0x50 [ 159.947895][ T6823] ? xsk_init_queue+0xb2/0x120 [ 159.947917][ T6823] ? xsk_setsockopt+0x42c/0x760 [ 159.947937][ T6823] ? do_sock_setsockopt+0x27c/0x410 [ 159.947967][ T6823] ? __x64_sys_setsockopt+0x1b7/0x250 [ 159.947998][ T6823] ? x64_sys_call+0x2adc/0x2ee0 [ 159.948029][ T6823] ? do_syscall_64+0x57/0xf0 [ 159.948061][ T6823] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.948098][ T6823] __vmalloc_node_range_noprof+0x132/0x1480 [ 159.948132][ T6823] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 159.948159][ T6823] ? kasan_save_alloc_info+0x40/0x50 [ 159.948183][ T6823] ? __kasan_kmalloc+0x96/0xb0 [ 159.948213][ T6823] ? __kmalloc_cache_noprof+0x23c/0x470 [ 159.948242][ T6823] vmalloc_user_noprof+0x77/0x90 [ 159.948265][ T6823] ? xskq_create+0xdb/0x290 [ 159.948286][ T6823] xskq_create+0xdb/0x290 [ 159.948309][ T6823] xsk_init_queue+0xb2/0x120 [ 159.948331][ T6823] xsk_setsockopt+0x42c/0x760 [ 159.948352][ T6823] ? __cfi_xsk_setsockopt+0x10/0x10 [ 159.948373][ T6823] ? do_futex+0x32a/0x510 [ 159.948399][ T6823] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 159.948431][ T6823] ? security_socket_setsockopt+0x3d/0x100 [ 159.948464][ T6823] ? __cfi_xsk_setsockopt+0x10/0x10 [ 159.948485][ T6823] do_sock_setsockopt+0x27c/0x410 [ 159.948516][ T6823] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 159.948549][ T6823] __x64_sys_setsockopt+0x1b7/0x250 [ 159.948580][ T6823] x64_sys_call+0x2adc/0x2ee0 [ 159.948610][ T6823] do_syscall_64+0x57/0xf0 [ 159.948641][ T6823] ? clear_bhb_loop+0x50/0xa0 [ 159.948671][ T6823] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.948711][ T6823] RIP: 0033:0x7fed3ef9bf79 [ 159.948731][ T6823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.948753][ T6823] RSP: 002b:00007fed3fe69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 159.948780][ T6823] RAX: ffffffffffffffda RBX: 00007fed3f215fa0 RCX: 00007fed3ef9bf79 [ 159.948798][ T6823] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 159.948814][ T6823] RBP: 00007fed3f0327e0 R08: 0000000000000004 R09: 0000000000000000 [ 159.948829][ T6823] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.948843][ T6823] R13: 00007fed3f216038 R14: 00007fed3f215fa0 R15: 00007fffe2afcc08 [ 159.948864][ T6823] [ 159.949218][ T6823] Mem-Info: [ 160.256950][ T6823] active_anon:51347 inactive_anon:12 isolated_anon:0 [ 160.256950][ T6823] active_file:23330 inactive_file:2620 isolated_file:0 [ 160.256950][ T6823] unevictable:16447 dirty:129 writeback:0 [ 160.256950][ T6823] slab_reclaimable:5227 slab_unreclaimable:86941 [ 160.256950][ T6823] mapped:24888 shmem:46128 pagetables:991 [ 160.256950][ T6823] sec_pagetables:0 bounce:0 [ 160.256950][ T6823] kernel_misc_reclaimable:0 [ 160.256950][ T6823] free:1440892 free_pcp:8214 free_cma:0 [ 160.306749][ T6823] Node 0 active_anon:201388kB inactive_anon:48kB active_file:93320kB inactive_file:10480kB unevictable:65788kB isolated(anon):0kB isolated(file):0kB mapped:103252kB dirty:516kB writeback:0kB shmem:180612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6744kB pagetables:4064kB sec_pagetables:0kB all_unreclaimable? no [ 160.378618][ T6823] DMA32 free:2950100kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:13276kB local_pcp:5456kB free_cma:0kB [ 160.409100][ T6823] lowmem_reserve[]: 0 3921 3921 [ 160.418401][ T6823] Normal free:2841792kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:190988kB inactive_anon:48kB active_file:93320kB inactive_file:10480kB unevictable:65788kB writepending:516kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:6172kB local_pcp:2524kB free_cma:0kB [ 160.452876][ T6823] lowmem_reserve[]: 0 0 0 [ 160.458301][ T6823] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (M) 717*4096kB (M) = 2950100kB [ 160.474578][ T6823] Normal: 825*4kB (UME) 1041*8kB (UME) 671*16kB (UME) 442*32kB (UME) 249*64kB (UME) 81*128kB (UME) 137*256kB (UME) 105*512kB (UM) 21*1024kB (UME) 17*2048kB (UME) 643*4096kB (UM) = 2841692kB [ 160.493954][ T6823] 83684 total pagecache pages [ 160.498762][ T6823] 38 pages in swap cache [ 160.503190][ T6823] Free swap = 124472kB [ 160.507447][ T6823] Total swap = 124996kB [ 160.511721][ T6823] 2097051 pages RAM [ 160.515647][ T6823] 0 pages HighMem/MovableOnly [ 160.521019][ T6823] 352241 pages reserved [ 160.525293][ T6823] 0 pages cma reserved [ 160.540423][ T6823] Memory allocations: [ 160.544727][ T6823] 0 B 0 init/main.c:1477 func:do_initcalls [ 160.552308][ T6823] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 160.579806][ T6823] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 160.589335][ T6823] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 160.598340][ T6823] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 160.606357][ T6823] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 160.615099][ T6823] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 160.623105][ T6823] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 160.631227][ T6823] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 160.639255][ T6823] 0 B 0 init/initramfs.c:101 func:find_link [ 160.816268][ T36] audit: type=1326 audit(1770818963.110:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.3.2884" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed3ef9bf79 code=0x0 [ 163.979008][ T6883] overlayfs: failed to clone upperpath [ 163.979062][ T6918] overlayfs: failed to clone upperpath [ 164.069749][ T36] audit: type=1400 audit(1770818966.360:4647): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 164.077412][ T6924] overlayfs: failed to clone upperpath [ 165.729930][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2939'. [ 165.739309][ T6975] ªªªªª»: left allmulticast mode [ 165.749653][ T6975] ªªªªª»: left promiscuous mode [ 165.759872][ T6975] bridge0: port 2(ªªªªª») entered disabled state [ 165.769323][ T6975] bridge_slave_0: left allmulticast mode [ 165.775228][ T6975] bridge_slave_0: left promiscuous mode [ 165.787906][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.925949][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2957'. [ 309.725130][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 143s! [syz.0.2974:7069] [ 309.725176][ C1] CPU#1 Utilization every 22s during lockup: [ 309.725186][ C1] #1: 100% system, 1% softirq, 1% hardirq, 0% idle [ 309.725200][ C1] #2: 100% system, 1% softirq, 1% hardirq, 0% idle [ 309.725214][ C1] #3: 100% system, 0% softirq, 1% hardirq, 0% idle [ 309.725227][ C1] #4: 100% system, 1% softirq, 1% hardirq, 0% idle [ 309.725241][ C1] #5: 100% system, 1% softirq, 1% hardirq, 0% idle [ 309.725255][ C1] Modules linked in: [ 309.725286][ C1] CPU: 1 UID: 0 PID: 7069 Comm: syz.0.2974 Not tainted syzkaller #0 24a10c3d70c948d82bad81e39d295aea70670ee6 [ 309.725308][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 309.725322][ C1] RIP: 0010:__lookup_mnt+0xb4/0x160 [ 309.725366][ C1] Code: 02 89 ec ff 4d 8b 3f 4d 85 ff 74 7f 4d 8d 67 10 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 e0 88 ec ff 49 8b 04 24 <48> 83 c0 20 4c 39 f0 74 07 e8 7e bd 94 ff eb 25 4d 8d 67 18 4c 89 [ 309.725380][ C1] RSP: 0018:ffffc900011afae8 EFLAGS: 00000246 [ 309.725395][ C1] RAX: ffff88814c0acc40 RBX: ffff888113c16660 RCX: 0000000000080000 [ 309.725408][ C1] RDX: ffffc90007277000 RSI: 000000000007ffff RDI: 0000000000080000 [ 309.725419][ C1] RBP: ffffc900011afb10 R08: 0000000000000003 R09: 0000000000000004 [ 309.725430][ C1] R10: dffffc0000000000 R11: fffff52000235f9c R12: ffff88814c0ada50 [ 309.725443][ C1] R13: dffffc0000000000 R14: ffff8881086cae20 R15: ffff88814c0ada40 [ 309.725457][ C1] FS: 00007f95a5e006c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 309.725471][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.725483][ C1] CR2: 0000200000008000 CR3: 000000012dc74000 CR4: 00000000003526b0 [ 309.725500][ C1] Call Trace: [ 309.725507][ C1] [ 309.725521][ C1] propagate_umount+0x5a8/0x1690 [ 309.725548][ C1] ? __cfi_propagate_umount+0x10/0x10 [ 309.725573][ C1] umount_tree+0x604/0xf90 [ 309.725591][ C1] ? __detach_mounts+0x610/0x610 [ 309.725608][ C1] ? selinux_umount+0xf1/0x130 [ 309.725631][ C1] ? bpf_lsm_sb_umount+0xd/0x20 [ 309.725653][ C1] path_umount+0xeb3/0xf50 [ 309.725671][ C1] ? __cfi_path_umount+0x10/0x10 [ 309.725688][ C1] ? putname+0x113/0x150 [ 309.725708][ C1] __x64_sys_umount+0x12e/0x180 [ 309.725726][ C1] ? __cfi___x64_sys_umount+0x10/0x10 [ 309.725744][ C1] ? switch_fpu_return+0x12/0x20 [ 309.725762][ C1] x64_sys_call+0x2ab8/0x2ee0 [ 309.725785][ C1] do_syscall_64+0x57/0xf0 [ 309.725808][ C1] ? clear_bhb_loop+0x50/0xa0 [ 309.725831][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 309.725853][ C1] RIP: 0033:0x7f95a4f9bf79 [ 309.725872][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.725885][ C1] RSP: 002b:00007f95a5e00028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 309.725902][ C1] RAX: ffffffffffffffda RBX: 00007f95a5216360 RCX: 00007f95a4f9bf79 [ 309.725914][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040 [ 309.725925][ C1] RBP: 00007f95a50327e0 R08: 0000000000000000 R09: 0000000000000000 [ 309.725936][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.725946][ C1] R13: 00007f95a52163f8 R14: 00007f95a5216360 R15: 00007ffc5aa5a1e8 [ 309.725961][ C1] [ 309.725975][ C1] Sending NMI from CPU 1 to CPUs 0: [ 310.060386][ C0] NMI backtrace for cpu 0 [ 310.060400][ C0] CPU: 0 UID: 0 PID: 7044 Comm: syz.3.2967 Not tainted syzkaller #0 24a10c3d70c948d82bad81e39d295aea70670ee6 [ 310.060421][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 310.060431][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 310.060457][ C0] Code: cc cc cc cc cc cc cc b8 3b 63 f3 91 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 8c 48 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 310.060472][ C0] RSP: 0018:ffffc9000fb77850 EFLAGS: 00000246 [ 310.060487][ C0] RAX: ffffffff814428e1 RBX: 0000000000000003 RCX: 0000000000080000 [ 310.060499][ C0] RDX: ffffc9000466d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 310.060511][ C0] RBP: ffffc9000fb77850 R08: ffffffff8740d604 R09: 1ffffffff0e81ac0 [ 310.060523][ C0] R10: dffffc0000000000 R11: fffffbfff0e81ac1 R12: dffffc0000000000 [ 310.060535][ C0] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92001f6ef0c [ 310.060546][ C0] FS: 00007fed3fe276c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 310.060560][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.060572][ C0] CR2: 00007f8cf5de96c0 CR3: 000000011e67c000 CR4: 00000000003526b0 [ 310.060586][ C0] Call Trace: [ 310.060593][ C0] [ 310.060601][ C0] kvm_wait+0x1c6/0x230 [ 310.060622][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 310.060642][ C0] __pv_queued_spin_lock_slowpath+0x8e0/0xe90 [ 310.060658][ C0] ? _raw_spin_unlock+0x45/0x60 [ 310.060682][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 310.060700][ C0] _raw_spin_lock+0x115/0x120 [ 310.060721][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 310.060743][ C0] ? __call_rcu_common+0x43b/0x720 [ 310.060767][ C0] mntput_no_expire+0x157/0x6d0 [ 310.060784][ C0] ? mntput+0xd0/0xd0 [ 310.060798][ C0] ? fsnotify_destroy_marks+0x13f/0x730 [ 310.060819][ C0] cleanup_mnt+0x327/0x4a0 [ 310.060842][ C0] __cleanup_mnt+0x1d/0x40 [ 310.060862][ C0] task_work_run+0x1e5/0x260 [ 310.060880][ C0] ? __cfi_task_work_run+0x10/0x10 [ 310.060897][ C0] ? kernel_clone+0x24d/0x830 [ 310.060915][ C0] get_signal+0x1302/0x14e0 [ 310.060933][ C0] ? __cfi_kernel_clone+0x10/0x10 [ 310.060950][ C0] ? __kasan_check_write+0x18/0x20 [ 310.060971][ C0] arch_do_signal_or_restart+0xbc/0x760 [ 310.060995][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 310.061018][ C0] ? __kasan_check_read+0x15/0x20 [ 310.061037][ C0] syscall_exit_to_user_mode+0x57/0xb0 [ 310.061056][ C0] do_syscall_64+0x63/0xf0 [ 310.061078][ C0] ? clear_bhb_loop+0x50/0xa0 [ 310.061101][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 310.061122][ C0] RIP: 0033:0x7fed3ef9bf79 [ 310.061135][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.061149][ C0] RSP: 002b:00007fed3fe26fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 310.061165][ C0] RAX: fffffffffffffffc RBX: 00007fed3f216180 RCX: 00007fed3ef9bf79 [ 310.061177][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000b21e0000 [ 310.061187][ C0] RBP: 00007fed3f0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 310.061198][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 310.061208][ C0] R13: 00007fed3f216218 R14: 00007fed3f216180 R15: 00007fffe2afcc08 [ 310.061222][ C0]