last executing test programs: 1.516495359s ago: executing program 2 (id=203): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a1000"/196], 0x119) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0) 1.440777383s ago: executing program 2 (id=206): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01012bbd7000fbdbdf254b0000000800ba"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40d0) 1.440582933s ago: executing program 0 (id=207): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x2b}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x0, 0xfffffffffffffffc, 0x800000, 0x0, 0x0, 0x5, 0x4}, {0x4, 0x0, 0x2}, {}, 0x70bd27, 0x0, 0xa, 0x0, 0x0, 0x7ee643bd1282d812}}}, 0xf8}}, 0x0) 1.440388033s ago: executing program 2 (id=209): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000001c0)={&(0x7f00001e6000/0x3000)=nil, &(0x7f00008f1000/0x1000)=nil, 0x3000, 0x3}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, 0x0) 1.440300853s ago: executing program 0 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000e40)={&(0x7f00000003c0), 0xff, 0x0, &(0x7f0000000e00)}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x2, 0x1}]}]}, 0x40}}, 0x0) 1.435144253s ago: executing program 2 (id=211): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40d5}, 0x1) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='1', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x79a0, 0x4) sendto(r0, &(0x7f00000003c0)="cec17299253d97363be011fae774c95eff3d8fd74ca2974f22ee90adb120661dae2d9d1a15e80b3f", 0x28, 0x20008804, 0x0, 0x0) 1.324013018s ago: executing program 0 (id=213): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r0, 0x80047437, 0x2) 1.323848398s ago: executing program 0 (id=214): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r1, 0x2, &(0x7f0000000a40)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x8, r0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2}]) 1.047110881s ago: executing program 0 (id=221): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) setns(0xc9, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 1.000530024s ago: executing program 1 (id=224): io_setup(0xfffffff8, &(0x7f0000002b40)) 1.000420993s ago: executing program 1 (id=226): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000140), &(0x7f0000000480)=0x4) 994.671664ms ago: executing program 1 (id=227): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4a, 0x7ff, 0x44, 0x3, 0x7, 0x0, 0x40}, 0xc) listen(r0, 0xb) 936.855016ms ago: executing program 1 (id=229): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r0, 0x402, 0x0) 936.761576ms ago: executing program 1 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)='\"', 0x1}], 0x1, 0x5, 0x7ffffc, 0x1) 921.786167ms ago: executing program 1 (id=234): mount$9p_fd(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x24, 0x2}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) 823.577092ms ago: executing program 3 (id=235): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 760.746475ms ago: executing program 3 (id=236): mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001f80)={0x2e, 0x19, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x306, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000002000)) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) 760.610644ms ago: executing program 3 (id=237): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') writev(r0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="d5070094", 0x4}, {0x0}], 0x2) 751.767815ms ago: executing program 3 (id=238): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa8f86, 0x1) write$FUSE_CREATE_OPEN(r0, &(0x7f0000001100)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x5, 0x1, 0x8000, 0x9, {0x5, 0x7fff, 0xc0, 0x1, 0x7, 0x665, 0x7, 0x3, 0xa7, 0xc000, 0x2, 0x0, 0x0, 0x25, 0x9}}, {0x0, 0x1}}}, 0xa0) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) 698.809407ms ago: executing program 3 (id=239): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x9d1d5e4aaa344bf}, 0x7}], 0x1, 0x2002, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)='8', 0x1}], 0x1, 0x0, 0x0, 0x20004800}, 0x4800) 512.680287ms ago: executing program 2 (id=240): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x8581) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x70, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 512.559087ms ago: executing program 3 (id=241): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0xfffffffffffffffe) 78.258107ms ago: executing program 2 (id=242): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x185) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x2000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/26/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="316ca260eab5a202f705b5ed361c9522fed16f85d7faed288265f1a329a9c1d1b6eb752cab6cd8f025d925e175bba60d65efa05f9a0f38573a92bae7f90c71a90fdbfeaf1e357ceb0feba4acf5045007e22064567f3dcbd6ea735a8f3c1f3eed13fddc9bddd8d748839af168d8dc99fe17a4513cc2535213779da79af52df17c4ec636e0773e274cdc10f03df10da8da15ccc7de5e2f0a4c6f450722b97d14964d5ce9f087d2df1490a324fac5e353a15bd0e4", 0xffffffc4) 0s ago: executing program 0 (id=243): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) close(0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 22.060258][ T36] audit: type=1400 audit(1790038755.780:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.061303][ T286] cgroup: Unknown subsys name 'net' [ 22.082876][ T36] audit: type=1400 audit(1790038755.780:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.110118][ T36] audit: type=1400 audit(1790038755.810:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.110276][ T286] cgroup: Unknown subsys name 'devices' [ 22.210259][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.215882][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.307732][ T36] audit: type=1400 audit(1790038756.020:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.327878][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.330918][ T36] audit: type=1400 audit(1790038756.020:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.364447][ T36] audit: type=1400 audit(1790038756.030:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.365644][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.387591][ T36] audit: type=1400 audit(1790038756.060:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.421641][ T36] audit: type=1400 audit(1790038756.060:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.447214][ T36] audit: type=1400 audit(1790038756.080:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.472698][ T36] audit: type=1400 audit(1790038756.080:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.197730][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.204904][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.211991][ T293] bridge_slave_0: entered allmulticast mode [ 23.218343][ T293] bridge_slave_0: entered promiscuous mode [ 23.225714][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.232764][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.239809][ T293] bridge_slave_1: entered allmulticast mode [ 23.246073][ T293] bridge_slave_1: entered promiscuous mode [ 23.284567][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.291770][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.298843][ T296] bridge_slave_0: entered allmulticast mode [ 23.304947][ T296] bridge_slave_0: entered promiscuous mode [ 23.312811][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.319864][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.327001][ T296] bridge_slave_1: entered allmulticast mode [ 23.333234][ T296] bridge_slave_1: entered promiscuous mode [ 23.356665][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.363889][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.371004][ T295] bridge_slave_0: entered allmulticast mode [ 23.377108][ T295] bridge_slave_0: entered promiscuous mode [ 23.384398][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.391450][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.398517][ T295] bridge_slave_1: entered allmulticast mode [ 23.404615][ T295] bridge_slave_1: entered promiscuous mode [ 23.457917][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.464996][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.472121][ T294] bridge_slave_0: entered allmulticast mode [ 23.478258][ T294] bridge_slave_0: entered promiscuous mode [ 23.494670][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.501811][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.508887][ T294] bridge_slave_1: entered allmulticast mode [ 23.515355][ T294] bridge_slave_1: entered promiscuous mode [ 23.585206][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.592262][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.599540][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.606551][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.616825][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.623888][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.631164][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.638187][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.646492][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.653529][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.660784][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.667886][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.722439][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.729505][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.736818][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.743879][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.766668][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.774372][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.781740][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.789594][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.796756][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.804001][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.811557][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.818793][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.832576][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.839610][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.847209][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.854251][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.863028][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.870065][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.891224][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.898254][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.905766][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.912797][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.920431][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.927437][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.936457][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.943498][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.961217][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.968254][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.004295][ T293] veth0_vlan: entered promiscuous mode [ 24.022763][ T293] veth1_macvtap: entered promiscuous mode [ 24.041404][ T296] veth0_vlan: entered promiscuous mode [ 24.047151][ T295] veth0_vlan: entered promiscuous mode [ 24.065835][ T296] veth1_macvtap: entered promiscuous mode [ 24.076009][ T294] veth0_vlan: entered promiscuous mode [ 24.086673][ T295] veth1_macvtap: entered promiscuous mode [ 24.114566][ T294] veth1_macvtap: entered promiscuous mode [ 24.123530][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.199817][ T319] FAULT_INJECTION: forcing a failure. [ 24.199817][ T319] name failslab, interval 1, probability 0, space 0, times 1 [ 24.215516][ T319] CPU: 0 UID: 0 PID: 319 Comm: syz.2.3 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 24.215543][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.215560][ T319] Call Trace: [ 24.215566][ T319] [ 24.215573][ T319] __dump_stack+0x21/0x30 [ 24.215606][ T319] dump_stack_lvl+0x140/0x1c0 [ 24.215626][ T319] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.215648][ T319] ? skb_put+0x10e/0x200 [ 24.215667][ T319] dump_stack+0x19/0x20 [ 24.215687][ T319] should_fail_ex+0x3c2/0x510 [ 24.215716][ T319] should_failslab+0xac/0x100 [ 24.215737][ T319] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 24.215757][ T319] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 24.215774][ T319] ? sidtab_sid2str_get+0x135/0x360 [ 24.215791][ T319] ? sidtab_sid2str_put+0x72e/0x750 [ 24.215807][ T319] kmemdup_noprof+0x31/0x80 [ 24.215824][ T319] sidtab_sid2str_get+0x135/0x360 [ 24.215841][ T319] security_sid_to_context_core+0x30d/0x5d0 [ 24.215866][ T319] security_sid_to_context+0x2e/0x50 [ 24.215889][ T319] avc_audit_post_callback+0x1a8/0x790 [ 24.215910][ T319] ? audit_log_n_string+0x35d/0x5b0 [ 24.215928][ T319] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 24.215950][ T319] ? print_ipv4_addr+0xf3/0x150 [ 24.215970][ T319] ? common_lsm_audit+0x18b0/0x18b0 [ 24.215989][ T319] ? audit_log_untrustedstring+0xea/0x100 [ 24.216007][ T319] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 24.216027][ T319] common_lsm_audit+0x14b9/0x18b0 [ 24.216046][ T319] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 24.216067][ T319] ? __cfi_common_lsm_audit+0x10/0x10 [ 24.216086][ T319] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 24.216104][ T319] ? call_rcu_hurry+0x30/0x30 [ 24.216122][ T319] ? __kasan_check_write+0x18/0x20 [ 24.216140][ T319] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 24.216157][ T319] ? avc_update_node+0x2fc/0x8a0 [ 24.216178][ T319] slow_avc_audit+0x19f/0x220 [ 24.216197][ T319] ? __cfi_slow_avc_audit+0x10/0x10 [ 24.216219][ T319] ? avc_has_perm_noaudit+0x2bc/0x360 [ 24.216241][ T319] avc_has_perm+0x1ec/0x240 [ 24.216261][ T319] ? __cfi_avc_has_perm+0x10/0x10 [ 24.216283][ T319] selinux_socket_sendmsg+0x281/0x380 [ 24.216307][ T319] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 24.216331][ T319] ? check_stack_object+0x10f/0x150 [ 24.216350][ T319] ? __check_object_size+0xdc/0x870 [ 24.216367][ T319] ? kasan_save_alloc_info+0x3a/0x50 [ 24.216385][ T319] ? __cfi___check_object_size+0x10/0x10 [ 24.216404][ T319] security_socket_sendmsg+0x5c/0x100 [ 24.216427][ T319] ____sys_sendmsg+0x533/0xa00 [ 24.216464][ T319] ? __sys_sendmsg_sock+0x50/0x50 [ 24.216488][ T319] ? import_iovec+0x80/0xb0 [ 24.216505][ T319] ___sys_sendmsg+0x2a6/0x370 [ 24.216528][ T319] ? __sys_sendmsg+0x260/0x260 [ 24.216551][ T319] ? proc_fail_nth_write+0x184/0x220 [ 24.216576][ T319] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 24.216603][ T319] ? __fget_files+0x2bc/0x330 [ 24.216626][ T319] __x64_sys_sendmsg+0x1be/0x2a0 [ 24.216648][ T319] ? fput+0x1a4/0x230 [ 24.216670][ T319] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 24.216694][ T319] ? ksys_write+0x1f3/0x260 [ 24.216720][ T319] ? __kasan_check_read+0x15/0x20 [ 24.216737][ T319] x64_sys_call+0x2a4c/0x2ee0 [ 24.216754][ T319] do_syscall_64+0x57/0xf0 [ 24.216772][ T319] ? clear_bhb_loop+0x50/0xa0 [ 24.216793][ T319] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.216813][ T319] RIP: 0033:0x7ff57e99e159 [ 24.216835][ T319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.216850][ T319] RSP: 002b:00007ff57f7d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 24.216878][ T319] RAX: ffffffffffffffda RBX: 00007ff57ec25fa0 RCX: 00007ff57e99e159 [ 24.216892][ T319] RDX: 000000000400c804 RSI: 0000200000000900 RDI: 0000000000000003 [ 24.216905][ T319] RBP: 00007ff57f7d0090 R08: 0000000000000000 R09: 0000000000000000 [ 24.216916][ T319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 24.216928][ T319] R13: 00007ff57ec26038 R14: 00007ff57ec25fa0 R15: 00007ffe68d1fd78 [ 24.216944][ T319] [ 24.221388][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.290195][ T327] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 24.412088][ T332] No source specified [ 24.588789][ T63] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.659245][ T326] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.807997][ T63] usb 4-1: Using ep0 maxpacket: 8 [ 24.813477][ T326] usb 2-1: Using ep0 maxpacket: 16 [ 24.819582][ T63] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 24.827885][ T63] usb 4-1: config 179 has no interface number 0 [ 24.840889][ T326] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 24.853052][ T326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.862328][ T63] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 24.873837][ T326] usb 2-1: Product: syz [ 24.878355][ T326] usb 2-1: Manufacturer: syz [ 24.883149][ T63] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 24.894431][ T326] usb 2-1: SerialNumber: syz [ 24.899505][ T63] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 24.912552][ T63] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 24.923991][ T63] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 24.948001][ T63] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 24.965394][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.974795][ T316] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 25.064546][ T376] ======================================================= [ 25.064546][ T376] WARNING: The mand mount option has been deprecated and [ 25.064546][ T376] and is ignored by this kernel. Remove the mand [ 25.064546][ T376] option from the mount to silence this warning. [ 25.064546][ T376] ======================================================= [ 25.413401][ T31] usb 4-1: USB disconnect, device number 2 [ 25.413430][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 25.427839][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 25.457598][ T377] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 25.999826][ T418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 26.230412][ T443] Zero length message leads to an empty skb [ 26.751389][ T482] tmpfs: Unknown parameter 'casefold' [ 27.163155][ T524] FAULT_INJECTION: forcing a failure. [ 27.163155][ T524] name fail_futex, interval 1, probability 0, space 0, times 1 [ 27.176057][ T524] CPU: 1 UID: 0 PID: 524 Comm: syz.2.93 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 27.176088][ T524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.176100][ T524] Call Trace: [ 27.176106][ T524] [ 27.176113][ T524] __dump_stack+0x21/0x30 [ 27.176146][ T524] dump_stack_lvl+0x140/0x1c0 [ 27.176172][ T524] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.176198][ T524] ? __kasan_check_write+0x18/0x20 [ 27.176218][ T524] dump_stack+0x19/0x20 [ 27.176241][ T524] should_fail_ex+0x3c2/0x510 [ 27.176264][ T524] should_fail+0xf/0x20 [ 27.176284][ T524] get_futex_key+0x178/0x940 [ 27.176308][ T524] ? ttwu_queue_wakelist+0x30f/0x4d0 [ 27.176330][ T524] ? __cfi_get_futex_key+0x10/0x10 [ 27.176352][ T524] ? __smp_call_single_queue+0xd5/0x380 [ 27.176382][ T524] ? ttwu_do_activate+0x620/0x620 [ 27.176404][ T524] ? ttwu_queue_wakelist+0x30f/0x4d0 [ 27.176426][ T524] futex_wait_setup+0xae/0x260 [ 27.176445][ T524] ? __cfi_futex_wait_setup+0x10/0x10 [ 27.176464][ T524] ? __asan_memcpy+0x5a/0x80 [ 27.176482][ T524] __futex_wait+0x12c/0x3d0 [ 27.176501][ T524] ? __cfi___futex_wait+0x10/0x10 [ 27.176519][ T524] ? __cfi_futex_wake_mark+0x10/0x10 [ 27.176537][ T524] ? futex_wake+0x666/0x950 [ 27.176555][ T524] futex_wait+0x128/0x7c0 [ 27.176572][ T524] ? __cfi_futex_wait+0x10/0x10 [ 27.176592][ T524] do_futex+0x32a/0x510 [ 27.176616][ T524] ? __cfi_do_futex+0x10/0x10 [ 27.176641][ T524] __se_sys_futex+0x13c/0x320 [ 27.176666][ T524] ? __x64_sys_futex+0x110/0x110 [ 27.176691][ T524] __x64_sys_futex+0xe9/0x110 [ 27.176714][ T524] x64_sys_call+0x227f/0x2ee0 [ 27.176731][ T524] do_syscall_64+0x57/0xf0 [ 27.176749][ T524] ? clear_bhb_loop+0x50/0xa0 [ 27.176772][ T524] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.176795][ T524] RIP: 0033:0x7ff57e99e159 [ 27.176812][ T524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.176827][ T524] RSP: 002b:00007ff57f7d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 27.176848][ T524] RAX: ffffffffffffffda RBX: 00007ff57ec25fa8 RCX: 00007ff57e99e159 [ 27.176863][ T524] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff57ec25fa8 [ 27.176875][ T524] RBP: 00007ff57ec25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 27.176888][ T524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.176900][ T524] R13: 00007ff57ec26038 R14: 00007ffe68d1fc90 R15: 00007ffe68d1fd78 [ 27.176916][ T524] [ 27.193359][ T326] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 27.288012][ T36] kauditd_printk_skb: 98 callbacks suppressed [ 27.288028][ T36] audit: type=1400 audit(1790038760.960:172): avc: denied { create } for pid=527 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 27.289070][ T326] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 27.320023][ T36] audit: type=1400 audit(1790038761.030:173): avc: denied { write } for pid=532 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.354328][ T326] usb 2-1: USB disconnect, device number 2 [ 27.443122][ T36] audit: type=1326 audit(1790038761.170:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=534 comm="syz.2.96" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57e99e159 code=0x7ffc0000 [ 27.443921][ T36] audit: type=1326 audit(1790038761.170:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=534 comm="syz.2.96" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff57e99e159 code=0x7ffc0000 [ 27.465792][ T540] process 'syz.3.100' launched '/dev/fd/3' with NULL argv: empty string added [ 27.489301][ T36] audit: type=1326 audit(1790038761.190:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=534 comm="syz.2.96" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57e99e159 code=0x7ffc0000 [ 27.553538][ T547] rust_binder: Write failure EFAULT in pid:14 [ 27.578771][ T36] audit: type=1326 audit(1790038761.190:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=534 comm="syz.2.96" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff57e99e159 code=0x7ffc0000 [ 27.613994][ T36] audit: type=1400 audit(1790038761.210:178): avc: denied { read } for pid=539 comm="syz.1.99" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.651345][ T36] audit: type=1400 audit(1790038761.210:179): avc: denied { open } for pid=539 comm="syz.1.99" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.659588][ T554] random: crng reseeded on system resumption [ 27.698633][ T36] audit: type=1400 audit(1790038761.220:180): avc: denied { ioctl } for pid=539 comm="syz.1.99" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.742637][ T36] audit: type=1400 audit(1790038761.220:181): avc: denied { set_context_mgr } for pid=539 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 28.051083][ T567] input: syz0 as /devices/virtual/input/input4 [ 28.300190][ T45] rust_binder: 539: undelivered freeze notification, 0000000000000000 [ 28.364480][ T598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 28.588986][ T618] FAULT_INJECTION: forcing a failure. [ 28.588986][ T618] name failslab, interval 1, probability 0, space 0, times 0 [ 28.601668][ T618] CPU: 0 UID: 60928 PID: 618 Comm: syz.0.134 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 28.601686][ T618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.601693][ T618] Call Trace: [ 28.601697][ T618] [ 28.601702][ T618] __dump_stack+0x21/0x30 [ 28.601720][ T618] dump_stack_lvl+0x140/0x1c0 [ 28.601741][ T618] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.601754][ T618] ? __kasan_check_write+0x18/0x20 [ 28.601766][ T618] ? _raw_spin_lock_irq+0x93/0x120 [ 28.601777][ T618] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 28.601786][ T618] dump_stack+0x19/0x20 [ 28.601798][ T618] should_fail_ex+0x3c2/0x510 [ 28.601812][ T618] should_failslab+0xac/0x100 [ 28.601824][ T618] kmem_cache_alloc_noprof+0x42/0x410 [ 28.601835][ T618] ? __kasan_check_write+0x18/0x20 [ 28.601844][ T618] ? copy_pid_ns+0x25a/0xa60 [ 28.601859][ T618] copy_pid_ns+0x25a/0xa60 [ 28.601872][ T618] ? __cfi_copy_pid_ns+0x10/0x10 [ 28.601885][ T618] ? __kasan_check_write+0x18/0x20 [ 28.601895][ T618] create_new_namespaces+0x275/0x6f0 [ 28.601909][ T618] unshare_nsproxy_namespaces+0x124/0x180 [ 28.601923][ T618] ksys_unshare+0x4f9/0x920 [ 28.601936][ T618] ? __cfi_ksys_unshare+0x10/0x10 [ 28.601949][ T618] ? __kasan_check_write+0x18/0x20 [ 28.601959][ T618] __x64_sys_unshare+0x3c/0x50 [ 28.601971][ T618] x64_sys_call+0x2998/0x2ee0 [ 28.601981][ T618] do_syscall_64+0x57/0xf0 [ 28.601990][ T618] ? clear_bhb_loop+0x50/0xa0 [ 28.602002][ T618] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.602013][ T618] RIP: 0033:0x7f0ec3b9e159 [ 28.602023][ T618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.602032][ T618] RSP: 002b:00007f0ec4a26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 28.602044][ T618] RAX: ffffffffffffffda RBX: 00007f0ec3e25fa0 RCX: 00007f0ec3b9e159 [ 28.602052][ T618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 28.602059][ T618] RBP: 00007f0ec3c3506b R08: 0000000000000000 R09: 0000000000000000 [ 28.602066][ T618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.602072][ T618] R13: 00007f0ec3e26038 R14: 00007f0ec3e25fa0 R15: 00007fffbf96fc98 [ 28.602080][ T618] [ 29.161712][ T662] input: syz1 as /devices/virtual/input/input5 [ 29.242507][ T669] loop8: detected capacity change from 0 to 86 [ 29.301379][ T679] tmpfs: Unknown parameter 'casefold' [ 30.873612][ T828] 9pnet: Could not find request transport: xen [ 30.994764][ T836] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 31.784113][ T855] ------------[ cut here ]------------ [ 31.789666][ T855] WARNING: CPU: 1 PID: 855 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 31.799125][ T855] Modules linked in: [ 31.803027][ T855] CPU: 1 UID: 0 PID: 855 Comm: syz.2.242 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4 [ 31.814445][ T855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.824528][ T855] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 31.830549][ T855] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e5 c8 0b 06 00 0f 85 c2 00 00 00 c6 05 d8 c8 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 31.850189][ T855] RSP: 0018:ffffc9000de078c0 EFLAGS: 00010246 [ 31.856266][ T855] RAX: 0000000000000000 RBX: 0000000000000013 RCX: 0000000000000000 [ 31.864272][ T855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000de07978 [ 31.872269][ T855] RBP: ffffc9000de079f0 R08: ffffc9000de07977 R09: 0000000000000000 [ 31.880273][ T855] R10: ffffc9000de07960 R11: fffff52001bc0f2f R12: ffffc9000de07900 [ 31.888268][ T855] R13: dffffc0000000000 R14: 1ffff92001bc0f1c R15: 0000000000000000 [ 31.896242][ T855] FS: 00007ff57f7d06c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.905182][ T855] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.911775][ T855] CR2: 000000110c34b2e4 CR3: 000000010966c000 CR4: 00000000003526b0 [ 31.919754][ T855] Call Trace: [ 31.923027][ T855] [ 31.925941][ T855] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 31.931675][ T855] ? plist_add+0x4d4/0x570 [ 31.936094][ T855] ? __futex_queue+0x19f/0x350 [ 31.940873][ T855] ___kmalloc_large_node+0x81/0x220 [ 31.946072][ T855] __kmalloc_large_node_noprof+0x1e/0xd0 [ 31.951739][ T855] __kmalloc_node_track_caller_noprof+0x30d/0x4f0 [ 31.958182][ T855] ? bitmap_parse_user+0x29/0x80 [ 31.963124][ T855] memdup_user_nul+0x40/0x1a0 [ 31.967779][ T855] ? bitmap_parse_user+0x1f/0x80 [ 31.972715][ T855] bitmap_parse_user+0x29/0x80 [ 31.977475][ T855] irq_affinity_proc_write+0x139/0x230 [ 31.982940][ T855] ? __cfi_irq_affinity_proc_write+0x10/0x10 [ 31.988941][ T855] ? futex_wait+0x2b8/0x7c0 [ 31.993452][ T855] ? __cfi_irq_affinity_proc_write+0x10/0x10 [ 31.999442][ T855] proc_reg_write+0x1fa/0x2f0 [ 32.004122][ T855] ? __cfi_proc_reg_write+0x10/0x10 [ 32.009326][ T855] vfs_write+0x3c1/0xfd0 [ 32.013570][ T855] ? __cfi_vfs_write+0x10/0x10 [ 32.018338][ T855] ? __kasan_check_write+0x18/0x20 [ 32.023453][ T855] ? mutex_lock+0x97/0x1d0 [ 32.027851][ T855] ? __cfi_mutex_lock+0x10/0x10 [ 32.032710][ T855] ksys_write+0x145/0x260 [ 32.037043][ T855] ? xfd_validate_state+0x68/0x140 [ 32.042166][ T855] ? __cfi_ksys_write+0x10/0x10 [ 32.047017][ T855] ? __kasan_check_write+0x18/0x20 [ 32.052139][ T855] ? fpregs_restore_userregs+0x11c/0x260 [ 32.057781][ T855] __x64_sys_write+0x7f/0x90 [ 32.062383][ T855] x64_sys_call+0x271c/0x2ee0 [ 32.067075][ T855] do_syscall_64+0x57/0xf0 [ 32.071499][ T855] ? clear_bhb_loop+0x50/0xa0 [ 32.076199][ T855] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.082093][ T855] RIP: 0033:0x7ff57e99e159 [ 32.086508][ T855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.106117][ T855] RSP: 002b:00007ff57f7d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 32.114550][ T855] RAX: ffffffffffffffda RBX: 00007ff57ec25fa0 RCX: 00007ff57e99e159 [ 32.122539][ T855] RDX: 00000000ffffffc4 RSI: 0000200000000040 RDI: 0000000000000003 [ 32.130524][ T855] RBP: 00007ff57ea3506b R08: 0000000000000000 R09: 0000000000000000 [ 32.138507][ T855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.146474][ T855] R13: 00007ff57ec26038 R14: 00007ff57ec25fa0 R15: 00007ffe68d1fd78 [ 32.154463][ T855] [ 32.157475][ T855] ---[ end trace 0000000000000000 ]---