last executing test programs: 4m12.650035103s ago: executing program 0 (id=98): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) 4m11.800394705s ago: executing program 0 (id=101): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4m11.737938056s ago: executing program 0 (id=104): r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x0) ftruncate(r0, 0x7f) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 4m11.725962277s ago: executing program 0 (id=105): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2082, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 4m11.664311978s ago: executing program 0 (id=108): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 4m11.56932198s ago: executing program 0 (id=111): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) ptrace(0x11, r1) 4m11.569216431s ago: executing program 32 (id=111): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) ptrace(0x11, r1) 3m47.285558503s ago: executing program 4 (id=405): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 3m47.254212244s ago: executing program 4 (id=406): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x7}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 3m47.237772054s ago: executing program 4 (id=407): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456}) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m47.093667348s ago: executing program 4 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m47.062467519s ago: executing program 4 (id=409): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002180)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) lgetxattr(&(0x7f0000002040)='./file0\x00', &(0x7f0000002140)=@known='system.posix_acl_default\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x200, 0x81}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r2}, 0x10) 3m46.777627066s ago: executing program 4 (id=410): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) clock_nanosleep(0x1, 0xca9a3b, &(0x7f00000001c0)={0x77359400}, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 3m46.770634987s ago: executing program 33 (id=410): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) clock_nanosleep(0x1, 0xca9a3b, &(0x7f00000001c0)={0x77359400}, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 2.916375436s ago: executing program 5 (id=5562): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.073600657s ago: executing program 5 (id=5577): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x3, 0x0) bind$bt_hci(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) rt_sigpending(0x0, 0xfffffffffffffe03) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000140)='f2fs\x00', 0x2103088, 0x0) r3 = open$dir(&(0x7f00000000c0)='./sys/bus/platform/drivers_probe\x00', 0x100, 0x4) r4 = openat(r3, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x20) write(r4, &(0x7f00000001c0)='serial8250', 0xa) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x208e, 0x68) 2.021423219s ago: executing program 5 (id=5578): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x6, 0x409}, 0x2a, [0x0, 0x1000000, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x4, 0x7ffeffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x4000, 0x20, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040000, 0xffffffff, 0x100, 0x8, 0xfffffffe, 0x0, 0x2, 0x5, 0x400000, 0xf16, 0x0, 0x0, 0x9, 0xfffffff2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x99, 0x800000, 0x0, 0x7f, 0xa, 0x0, 0xfffffffc, 0x6, 0x5f1, 0x6], [0xfffffff6, 0x0, 0x22, 0x1, 0x0, 0x5, 0x0, 0x9d, 0x0, 0x7, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x3, 0x0, 0x7, 0xfffffffa, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x5, 0x10002000, 0x0, 0x0, 0x800, 0x0, 0x6, 0x404, 0x0, 0x4, 0x1, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffc, 0x7ff, 0x32, 0x1, 0x0, 0x80000, 0x85, 0xfffffffd, 0x0, 0x8, 0x0, 0x8, 0x10, 0x20000000, 0x0, 0x3, 0x2], [0x204, 0xfc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x10000000, 0x0, 0xfffffffc, 0x4, 0x7fffffff, 0x80, 0x149e1cbc, 0x31d, 0x3, 0xffffffff, 0x5, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0xffffffff, 0x3, 0x0, 0x6, 0x8, 0x0, 0xbda6, 0x1, 0x0, 0x0, 0x0, 0x463db3a7, 0x0, 0x800, 0x0, 0x0, 0xf, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x1, 0x0, 0x0, 0x8], [0x7, 0x0, 0x635, 0x10000, 0x8000000, 0x7, 0x8, 0x7d, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x1, 0x7fff, 0x0, 0x0, 0x18, 0x8000000, 0xfffffffd, 0x6, 0x9, 0x101, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x10000, 0x0, 0xb, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x4000, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, 0x0}, 0x0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) unshare(0x60000600) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a80)=""/4094, 0xffe}, {&(0x7f0000002e40)=""/200, 0xc8}, {&(0x7f00000004c0)=""/264, 0x108}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000880)=""/227, 0xe3}, {&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000000)=""/78, 0x4e}], 0x9}, 0x1207}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) sendto(0xffffffffffffffff, &(0x7f00000002c0)="cde5e79eab350f4b29c251db8a37a78d491a4cac790adf23d02cfd5c849ae2eb8b19801d361e4602cad3574348283128b0b2f9e917d25e9beb8de11375577aa9d06a58c333f3ea416421a80a231eb00db542341dc685247edb88aeaed358d9fc0dbcf1117a54c12c0d17612d1f9b54206b9714282d08115368b40e5b39a87a7e4ac185afbead16648ad16e60d9c4d3aad77c3c90368fc501e31233a847a798f4074217dd92cdc3c156433b4f7325c411a93b7202b49142a121e0a5e522908af12fe8f05fc6013f335bbb939d4b3c3e704e57012ffdb04a3c39e79060b29067bb984bfd7429528eea4d9dbf70138ce68e95f5362c820e5309393c8d7ad3f70ad7a7", 0x101, 0x8000, 0x0, 0x0) syz_usb_connect$uac3(0x2, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000206307151040000102030109028e000301ff6009080b0002010130070904000000010130000a2401042a00080000001324030400060001400d"], 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x3, 0x1c3}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r5, r9, &(0x7f0000000380)={0x0, 0xcc45, 0x800, 0xffffffff, 0x242, 0x0, r5}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e1d, 0x2000, 0x3, 0x3ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8, 0x0, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x2000, 0x2, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd8bd, 0x10, 0x1, 0x260, 0x0, r5}}], 0x4, &(0x7f0000001540)={0x2e, 0x25, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x0, 0xb81, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) r10 = openat$incfs(r4, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r10, 0xc058671e, &(0x7f00000000c0)) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101202) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 1.404007925s ago: executing program 2 (id=5586): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x19}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) 1.387580215s ago: executing program 2 (id=5587): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x2c, r2, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x94) r4 = fsmount(r0, 0x0, 0xa) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1c8080, 0x81) getdents64(r5, 0x0, 0x4f) 1.309633647s ago: executing program 2 (id=5588): r0 = epoll_create1(0x80000) r1 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000004}) mlockall(0x7) munlockall() epoll_wait(r0, &(0x7f0000000240)=[{}], 0x1, 0xfffffffc) 1.240233898s ago: executing program 2 (id=5589): process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000b40)={0x0, 0x14, 0x4}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000f40)={r1, 0x8, 0x0, [0xeb, 0xc71, 0x3, 0xfffffffffffffff8, 0x2], [0x0, 0x7, 0x6, 0x41ef6f89, 0x187b, 0x8000000000000000, 0xfffffffffffffe00, 0x6, 0x7, 0x9da, 0x5, 0x1, 0xffffffffffffca9b, 0xc000, 0x4, 0x9, 0xfff, 0x9, 0x5, 0x8, 0x40, 0x6, 0x6, 0x0, 0x2e, 0x9, 0x81, 0x2, 0x7fffffffffffffff, 0x1, 0x4, 0x3, 0x8, 0x5, 0x9, 0x5, 0x832, 0x3, 0x7, 0x80, 0x8, 0xfffffffffffffff8, 0x8000000000000001, 0x8, 0x8, 0x3, 0x8, 0x5, 0x2, 0x100000001, 0x1, 0x0, 0x2c4, 0x1, 0xffffffffffffff7f, 0x5, 0x8001, 0x9f8, 0x8000000000000000, 0x0, 0x9, 0x3, 0x7, 0x8000000000000000, 0x9, 0x8, 0x8, 0x2, 0x1, 0x1, 0x3ff, 0x3, 0x6, 0xd, 0x7a, 0x800, 0x6, 0x5, 0x5, 0x7fff00, 0x3, 0x1, 0x3, 0x10001, 0x9e, 0x3, 0x0, 0xddd, 0x0, 0x8000000000000000, 0x10001, 0x867, 0x18000000000000, 0x5, 0x7, 0x2, 0xe, 0xfff, 0x1ff, 0x4545, 0x5, 0x4, 0x8, 0xd, 0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x3, 0xf91, 0x5, 0x8, 0x6, 0x8, 0x40, 0x10, 0xffff, 0x6, 0x5]}) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) close(0x3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x800, 0x4) io_setup(0x3, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xe11, r3, 0x0, 0x0, 0x4, 0x0, 0x0, r3}]) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/19, 0x13) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x7d, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="40242800000028231ba54f1e07d695f268e872852700b2974b1fc634f26cda14d95e6688adb1e581080b"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r6, r6, 0x0, 0x2000009) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x61ae, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x80, 0x4, "", [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x1, 0x3, 0x66, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0xec8}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xcd, 0x2}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x10, 0x2, 0x8, 0x40, 0xae}, 0x1e, &(0x7f00000003c0)=ANY=[@ANYBLOB="050f1e00030b10010c08df000501003f03100b0bad10010e4e0003940d00213845d8a43e27be79e0d6e511716003d8735a9204ad49aeb69c5b86bf471367ed139aa4b9bb0d6c7a202e0563b47846ace954561dafbf8286962c1d288651f7d34ca5284d44d242ebc009f5bbf445c17b4945ecee40a4eaa47bb7d2159d57848b42db12446953aec0eb3c668b438d4083f710439332a7bd7dfb366aa452b26cf2e18312bf2a9c5b657f586aa8e0c9e09e561a60c5"], 0x5, [{0xc, &(0x7f0000000140)=@string={0xc, 0x3, "19ab93f34f698d5074d4"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xc7, &(0x7f0000000200)=@string={0xc7, 0x3, "fb88ff69208bdb0789ad7b08b4da8eebe7142225f5e3300bef2d99a05b6a5b49b1377f00776e3816e6bd4e2ae19a86c1248a1d510c50db9ea88cecf83d67c8c4e73682b88b5a6ab3d82bf8ccb454cc64822c97408398bfa9eec291935d4f9cb94c41a5cfa48e1283915bcecb184a09c0262199f692dc8e61a67ad95a8102970a4ef5d9da30fcb1256338fd575331d6d1111c05f1ceda2eedf22516f48f1ccfe8b03fc59440e217b707ca0c15f05572917ba81c7066e3dd45b47bb73de0c003e177b61a696d"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x401}}]}) 1.225524469s ago: executing program 5 (id=5590): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) 1.093571353s ago: executing program 1 (id=5593): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1d) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_elf32(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x10, 0xb3, 0x35, 0x1, 0x2, 0x3, 0x9, 0x1fb, 0x38, 0x3c6, 0x10, 0xfff7, 0x20, 0x4, 0xb5e3, 0x8, 0x5}, [{0x2, 0x8, 0xd, 0x6f, 0xe, 0x455d, 0xcd, 0x8}, {0x6, 0x4, 0x5, 0x7, 0x80, 0x58a52bb4, 0x2, 0x7}, {0x3, 0x6, 0x10, 0x2, 0x4, 0xce, 0x8, 0x5}, {0x4, 0x1000, 0x7, 0x81, 0x3, 0xfffffff6, 0x6, 0x9}], "12c985907a97cefa0f723c51f2c522782132f46f01d029bd34fb01410d4f02665fbfd7f4ea094dcbdc2af6738a9c30943a340cf5ff9dff3ecd57ee64fbae2ef2a2eb0a88f218caf9d6a676675bb61d11a414373539f2ee8bd5662bdd3ea82644016fc306dd", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x91d) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)={0x118, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xe0, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6f45}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @mcast1, 0x3}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e1f, 0x53, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x491a}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x58e}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x4}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xced1, @mcast1, 0x7f}}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x24000010) fchownat(r1, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 1.054947803s ago: executing program 5 (id=5595): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 968.226405ms ago: executing program 1 (id=5596): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x63, 0x31, 0x30, 0x63, 0x34, 0x30, 0x34, 0x30, 0x30, 0x64, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x31, 0x30, 0x63, 0x66, 0x30, 0x30, 0x61, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x4000000, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r0) 897.453978ms ago: executing program 1 (id=5597): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x184, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_aead={0x4c, 0x12, {{'ccm(xtea)\x00'}, 0x0, 0xc0}}]}, 0x184}}, 0x44050) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r2) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'veth1_macvtap\x00', 0x72}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000240)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x184, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_aead={0x4c, 0x12, {{'ccm(xtea)\x00'}, 0x0, 0xc0}}]}, 0x184}}, 0x44050) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup2(r0, r2) (async) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'veth1_macvtap\x00', 0x72}) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000240)) (async) 888.099078ms ago: executing program 1 (id=5598): listen(0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000001b80)=[{&(0x7f0000000040)=""/93, 0x5d}], 0x1, 0x76, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0xcf, 0x4000}, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}], 0x20}, 0x8841) setpriority(0x2, 0x0, 0x1) r4 = fsopen(&(0x7f0000000100)='reiserfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x81) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) fchdir(r5) r7 = socket$packet(0x11, 0x3, 0x300) close(r7) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$packet_int(r7, 0x65, 0x3, 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000000140), 0x0, 0x0, 0x2) getrlimit(0xc, &(0x7f0000000000)) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) r9 = socket$igmp(0x2, 0x3, 0x2) close(r9) 827.664679ms ago: executing program 5 (id=5599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a0090000180c200000300000000000086dd694fd2cd00143afffe8000000000000000000000000000bbff020000000000000000000000000001", @ANYRES32=r1, @ANYBLOB="d3cd7c5ed8d0062065707e88ee321ed448fac9ac6f1525f18912ab8b2482872678b1ad755f492c94e91b14d0e85d2e0bab00294e59cac8dfe2006516333db4863955701604804b4f404b917c24f970e84620e3374df3fed07bd1f386dc692e40a72eb78737ab6aa07833048230f92d94fb9912bbce460cad6cb680b27b63fb4fcfc600dd9c749e1b44713a7112c0a9549b507761fbe3819c035d497a0b5059c0b48259ef5706f3963669fb0a670e64632934053d95cd48b8ad0a09fd3b4f7fd3c278e836d4b3f09477ca5de9d8f107b2a39d80135cb38207904c34a9254877a64313998625e049c3d9", @ANYRES32=r0, @ANYRESDEC=r2, @ANYRESDEC=r1], 0x4e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r6, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r5, 0x407, 0x4100004) write$eventfd(r5, &(0x7f0000001100)=0xffffffffffffffff, 0x8) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 537.564187ms ago: executing program 2 (id=5600): syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000001709024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a090401000268a811cc7dff615700"], 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a00000380179a2870000000"], 0x1c}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000001c0)={{r0}, "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"}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_open_pts(r2, 0x202040) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4e02989d0efeea7b, 0x4010, r1, 0x9af48000) 225.772175ms ago: executing program 3 (id=5602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x88e5}, @void, @eth={@random="414f670bc70e", @remote, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "e8f4da", 0x1d8, 0x11, 0xff, @empty, @mcast2, {[@routing={0x3c, 0xa, 0x1, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00']}, @dstopts={0x84, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @pad1, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x100}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3e}}]}, @hopopts={0x16, 0x10, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x3, 0x1000, [0x40000000000, 0x0, 0x3, 0xfffffffffffffff9, 0xfff]}}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x2a}, @calipso={0x7, 0x40, {0x3, 0xe, 0xf8, 0x6, [0x4, 0x100, 0x3, 0x339, 0x5, 0x7, 0x10]}}, @ra={0x5, 0x2, 0x2}]}, @routing={0x3a, 0x14, 0x3, 0x2b, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1, @mcast2, @private2, @local, @dev={0xfe, 0x80, '\x00', 0x2c}, @private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}, @fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1d, 0x65}], {0x4e23, 0x7f, 0x8}}}}}}}, 0x212) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000005c0)) 205.632705ms ago: executing program 3 (id=5603): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) 205.246325ms ago: executing program 3 (id=5604): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0xff7f00000000, &(0x7f0000000000)) 149.693497ms ago: executing program 3 (id=5605): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x800, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20040000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}], [], 0x6b}}) 136.659277ms ago: executing program 3 (id=5606): r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) close(r0) r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1d) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') fstat(r3, &(0x7f0000000d40)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100090c10000000000000000000", 0x58}], 0x1) r6 = getegid() fchownat(r2, &(0x7f0000000080)='.\x00', 0x0, r6, 0x1000) 107.217088ms ago: executing program 3 (id=5607): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 37.487989ms ago: executing program 2 (id=5608): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000000340)=0x80000001, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b0001000000000904"], 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r4 = inotify_init() r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) io_submit(r2, 0x1, &(0x7f0000000940)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x1, 0x106, r4, 0x0, 0x0, 0xffffffffffffffff}]) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_cmd={0x2e, 0x80000000, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x2, 0x6, 0xff, 0x0, 0xfffffeff, [0xfffffffd]}}) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) r9 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r10 = request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)='\x00\x00\x00\xb6\x88\x18\x05\x84\xeb\xd9\x18\"\x9eVJ\x89\xc91U\xb2\xcb\x176PZ\xf7\xaf\x06\xdd=l-\x96`u>\xab\aR\xadU\xba\xb55\n!\x1e3b\xaa\xd8\xa2\xc6e\x84\x17\x96;\xff\bJ&\x8bO\xdf\x19\x8a\x00\x83\xa5P\ro\xd8NQ:\xe6&\xc8\xd8\xb7\xf4\xa5\x00\xa83\xc3\xa9\x15lNb-\xea\xeeGQ\xf1xE\xf1\x1b\xf1\x85=\x1av\x90N[\v1\xa70w\x9e\xad+\x83\x8d\x12\xdd\f\xbb\xb8l\xa1<\xa8\x8b#\xe5t\x9e\xf3\x16\xb7\xa6%\xc8\x04\x91\xca\xb4\x10]nwl\x86Cs}7v7\xf5\x8a\x87i\xce\xac\x11\xd3t\xf7\x1c(\xcaL \x10}\xa6\xaa\xe9\x04\xae\xfa\x0e6:\x81\x1e\xa2\x123\xd2\xb2\x95\xb4\xfb\xf6k\x9b\xb3J\xa8hh\x8d\x128\xb7\xde\x15Jz\x10\xde\xa3\x19\r\x14\xa8S:\xfd\xc2\x05\xc1\xeb\x88\xa0\xea\x1c|b\xbd{_<\xb01D\xf5\x8d\x88r\xbcI\x1d\xfb\x14Bsi\x89\x98k\xc8d\xce?\xcb5\x13\x17\x02\x9a)\x1c\xf8\xe8r\x80h\xedc\xb4t\xf0V4\x91?a\xac\xab\xdcZ\x93\xc3o\xde\x1a\x80km\xad\x84\x86i\xdc>\xb4x(\xaa\x8cT\xa7\xa6w\x12M\x82}/\xe1\x9b\xff\xb2\xd9\xd5\xb2a\xab\x9e%5w\x93nt\xa9T\x1bu\xf2F\x8b\xafO`S8)j\xfdp\"+s\xaem\xf5\xf8\xdc\x91\xfc1o\x00'/365, r9) r11 = request_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='>%\x00', 0xfffffffffffffff9) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140004"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) keyctl$search(0xa, r10, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, r11) 36.776939ms ago: executing program 1 (id=5609): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 0s ago: executing program 1 (id=5610): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): th="/15/tracing/events/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 32.383349][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 32.394453][ T311] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.407127][ T311] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 32.416803][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.425445][ T311] usb 2-1: Product: syz [ 32.429930][ T311] usb 2-1: Manufacturer: syz [ 32.434579][ T311] usb 2-1: SerialNumber: syz [ 32.455401][ T311] usb 2-1: config 0 descriptor?? [ 32.486451][ T311] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22 [ 32.506689][ T36] audit: type=1400 audit(1786027557.910:208): avc: denied { execute } for pid=709 comm="syz.3.132" path="/memory.swap.current" dev="ramfs" ino=6515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 32.749493][ T311] usb 2-1: USB disconnect, device number 2 [ 32.767281][ T36] audit: type=1400 audit(1786027558.170:209): avc: denied { mount } for pid=720 comm="syz.3.137" name="/" dev="configfs" ino=2495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.830813][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 32.892925][ T725] tipc: Failed to remove unknown binding: 66,1,1/1:4130051611/4130051613 [ 32.989350][ T36] audit: type=1400 audit(1786027558.390:210): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 33.011137][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 33.028386][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 33.038179][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 33.055590][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.084851][ T9] usb 5-1: config 0 descriptor?? [ 33.384624][ T309] tipc: Subscription rejected, illegal request [ 33.496936][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0xd [ 33.516180][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0xd [ 33.530278][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0x7 [ 33.546016][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 33.553482][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 33.562514][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 33.569907][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 33.577456][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 33.584785][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 33.591685][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 33.601549][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 33.608817][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 33.617406][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 33.624689][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 33.631677][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 33.639168][ T9] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 33.661380][ T9] wacom 0003:056A:0057.0002: hidraw0: USB HID v0.81 Device [HID 056a:0057] on usb-dummy_hcd.4-1/input0 [ 33.746593][ T311] usb 5-1: USB disconnect, device number 2 [ 34.113191][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.263115][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 34.275332][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 34.303687][ T781] batadv_slave_1: entered promiscuous mode [ 34.311341][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 34.332471][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.365709][ T9] usb 3-1: config 0 descriptor?? [ 34.403466][ T779] batadv_slave_1: left promiscuous mode [ 34.477191][ T792] capability: warning: `syz.3.166' uses deprecated v2 capabilities in a way that may be insecure [ 34.633610][ T65] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 34.793223][ T65] usb 5-1: Using ep0 maxpacket: 32 [ 34.811457][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.831295][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.861908][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 34.868069][ T65] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.881200][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 34.902648][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.912213][ T9] usb 3-1: USB disconnect, device number 4 [ 34.931816][ T65] usb 5-1: config 0 descriptor?? [ 34.944346][ T65] hub 5-1:0.0: USB hub found [ 35.147627][ T65] hub 5-1:0.0: 1 port detected [ 35.764024][ T65] hub 5-1:0.0: activate --> -90 [ 36.336132][ T839] virtio-fs: tag not found [ 36.362877][ T839] virtio-fs: tag not found [ 36.383673][ T839] virtio-fs: tag not found [ 36.569488][ T65] usb 5-1-port1: over-current condition [ 36.778744][ T10] usb 5-1: USB disconnect, device number 3 [ 36.784819][ T65] usb 5-1-port1: cannot disable (err = -71) [ 37.089351][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 37.089370][ T36] audit: type=1400 audit(1786027562.490:217): avc: denied { remount } for pid=871 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.120687][ T36] audit: type=1400 audit(1786027562.490:218): avc: denied { create } for pid=871 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 37.367998][ T36] audit: type=1400 audit(1786027562.770:219): avc: denied { map } for pid=880 comm="syz.4.193" path="socket:[7233]" dev="sockfs" ino=7233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.378387][ T878] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.398454][ T878] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.406094][ T878] bridge_slave_0: entered allmulticast mode [ 37.413485][ T878] bridge_slave_0: entered promiscuous mode [ 37.420534][ T878] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.441033][ T878] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.448603][ T878] bridge_slave_1: entered allmulticast mode [ 37.455564][ T878] bridge_slave_1: entered promiscuous mode [ 37.474115][ T36] audit: type=1400 audit(1786027562.770:220): avc: denied { read } for pid=880 comm="syz.4.193" path="socket:[7233]" dev="sockfs" ino=7233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.544967][ T878] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.552128][ T878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.559518][ T878] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.566621][ T878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.610047][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.618257][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.630287][ T504] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.637427][ T504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.655738][ T504] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.662900][ T504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.719121][ T878] veth0_vlan: entered promiscuous mode [ 37.750906][ T878] veth1_macvtap: entered promiscuous mode [ 37.823088][ T36] audit: type=1400 audit(1786027563.220:221): avc: denied { mounton } for pid=878 comm="syz-executor" path="/root/syzkaller.d36MjK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 37.902613][ T36] audit: type=1400 audit(1786027563.300:222): avc: denied { mounton } for pid=902 comm="syz.4.199" path="/14/file0" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 38.560274][ T916] capability: warning: `syz.3.205' uses 32-bit capabilities (legacy support in use) [ 38.880145][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 38.891389][ T929] coredump: 109(syz.2.209): Core dump to core aborted: cannot preserve file permissions [ 39.033078][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 39.039971][ T31] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 39.048790][ T31] usb 4-1: config 0 has no interface number 0 [ 39.055227][ T31] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 39.065819][ T31] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 39.078032][ T31] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 39.087733][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.096464][ T31] usb 4-1: Product: syz [ 39.101000][ T31] usb 4-1: Manufacturer: syz [ 39.105892][ T31] usb 4-1: SerialNumber: syz [ 39.112149][ T31] usb 4-1: config 0 descriptor?? [ 39.117958][ T923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 39.125714][ T923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 39.339930][ T923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 39.348068][ T923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 39.578974][ T31] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 39.664180][ T948] bridge0: port 3(dummy0) entered blocking state [ 39.671050][ T948] bridge0: port 3(dummy0) entered disabled state [ 39.678595][ T948] dummy0: entered allmulticast mode [ 39.685163][ T948] dummy0: entered promiscuous mode [ 39.690671][ T948] bridge0: port 3(dummy0) entered blocking state [ 39.697687][ T948] bridge0: port 3(dummy0) entered forwarding state [ 39.708992][ T948] dummy0: left allmulticast mode [ 39.714587][ T948] dummy0: left promiscuous mode [ 39.719943][ T948] bridge0: port 3(dummy0) entered disabled state [ 39.789053][ T950] netlink: 'syz.1.218': attribute type 28 has an invalid length. [ 39.808016][ T950] netlink: 'syz.1.218': attribute type 32 has an invalid length. [ 40.393385][ T31] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 40.407956][ T31] asix 4-1:0.34: probe with driver asix failed with error -71 [ 40.424690][ T31] usb 4-1: USB disconnect, device number 2 [ 40.961115][ T36] audit: type=1400 audit(1786027566.360:223): avc: denied { write } for pid=967 comm="syz.3.224" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.025549][ T972] netlink: 'syz.3.226': attribute type 4 has an invalid length. [ 41.026194][ T36] audit: type=1400 audit(1786027566.360:224): avc: denied { open } for pid=967 comm="syz.3.224" path="/65/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.092326][ T972] netlink: 'syz.3.226': attribute type 4 has an invalid length. [ 41.099763][ T36] audit: type=1400 audit(1786027566.400:225): avc: denied { ioctl } for pid=967 comm="syz.3.224" path="/65/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.140352][ T36] audit: type=1400 audit(1786027566.410:226): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 41.274895][ T990] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.542919][ T1005] netlink: 'syz.2.240': attribute type 13 has an invalid length. [ 42.289876][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 42.289895][ T36] audit: type=1400 audit(1786027567.690:253): avc: denied { getopt } for pid=1042 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.019635][ T371] bridge_slave_1: left allmulticast mode [ 43.026799][ T371] bridge_slave_1: left promiscuous mode [ 43.043315][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.060561][ T371] bridge_slave_0: left allmulticast mode [ 43.067242][ T371] bridge_slave_0: left promiscuous mode [ 43.074626][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.173429][ T481] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 43.189958][ T371] veth1_macvtap: left promiscuous mode [ 43.347900][ T481] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.372849][ T481] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 43.390755][ T481] usb 2-1: can't read configurations, error -71 [ 44.897398][ T36] audit: type=1400 audit(1786027570.300:254): avc: denied { cmd } for pid=1153 comm="iou-wrk-1154" path="socket:[7747]" dev="sockfs" ino=7747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 45.401252][ T1160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 45.657697][ T36] audit: type=1400 audit(1786027571.060:255): avc: denied { name_bind } for pid=1167 comm="syz.3.281" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 45.853063][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 46.028339][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 46.054708][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.075944][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.103060][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 46.123351][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.140694][ T9] usb 2-1: config 0 descriptor?? [ 46.560514][ T9] savu 0003:1E7D:2D5A.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 46.868184][ T481] usb 2-1: USB disconnect, device number 5 [ 47.428778][ T36] audit: type=1400 audit(1786027572.830:256): avc: denied { search } for pid=1193 comm="syz.3.298" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.483110][ T36] audit: type=1400 audit(1786027572.860:257): avc: denied { write } for pid=1193 comm="syz.3.298" name="instances" dev="tracefs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.543089][ T36] audit: type=1400 audit(1786027572.860:258): avc: denied { add_name } for pid=1193 comm="syz.3.298" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.593113][ T36] audit: type=1400 audit(1786027572.860:259): avc: denied { create } for pid=1193 comm="syz.3.298" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 47.653088][ T36] audit: type=1400 audit(1786027572.990:260): avc: denied { remove_name } for pid=1193 comm="syz.3.298" name="foo" dev="tracefs" ino=9025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.709168][ T36] audit: type=1400 audit(1786027572.990:261): avc: denied { rmdir } for pid=1193 comm="syz.3.298" name="foo" dev="tracefs" ino=9025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 48.163699][ T1235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.297'. [ 48.271319][ T36] audit: type=1400 audit(1786027573.670:262): avc: denied { write } for pid=1241 comm="syz.1.302" name="tcp" dev="proc" ino=4026532518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 49.254683][ T36] audit: type=1400 audit(1786027574.660:263): avc: denied { execute } for pid=1270 comm="syz.1.307" name="file0" dev="ramfs" ino=8133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 49.276931][ T1271] process 'syz.1.307' launched './file0' with NULL argv: empty string added [ 49.301046][ T36] audit: type=1400 audit(1786027574.700:264): avc: denied { execute_no_trans } for pid=1270 comm="syz.1.307" path="/file0" dev="ramfs" ino=8133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 49.510104][ T36] audit: type=1400 audit(1786027574.910:265): avc: denied { connect } for pid=1283 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.833764][ T1310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1310 comm=syz.3.328 [ 50.047965][ T1329] syz.2.336 uses obsolete (PF_INET,SOCK_PACKET) [ 50.576205][ T1355] netlink: 'syz.3.346': attribute type 4 has an invalid length. [ 50.627519][ T1355] netlink: 'syz.3.346': attribute type 4 has an invalid length. [ 50.697307][ T1359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 51.035201][ T1373] kvm: user requested TSC rate below hardware speed [ 51.076692][ T1373] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1998365705 (63947702560 ns) > initial count (22508260192 ns). Using initial count to start timer. [ 51.123909][ T1373] kvm: kvm [1372]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 51.142548][ T1373] kvm: kvm [1372]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 51.852506][ T1420] can: request_module (can-proto-6) failed. [ 51.894401][ T1425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.375'. [ 52.563038][ T1214] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.569043][ T1463] tipc: Started in network mode [ 52.576616][ T1463] tipc: Node identity 1, cluster identity 4711 [ 52.582970][ T1463] tipc: Node number set to 1 [ 52.592342][ T1463] tipc: Enabling of bearer rejected, failed to enable media [ 53.239073][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 53.239096][ T36] audit: type=1400 audit(1786027578.640:276): avc: denied { create } for pid=1480 comm="syz.1.397" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.266570][ T36] audit: type=1400 audit(1786027578.660:277): avc: denied { read } for pid=1480 comm="syz.1.397" name="file0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.297135][ T36] audit: type=1400 audit(1786027578.660:278): avc: denied { open } for pid=1480 comm="syz.1.397" path="/48/file0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.321442][ T36] audit: type=1400 audit(1786027578.660:279): avc: denied { ioctl } for pid=1480 comm="syz.1.397" path="/48/file0" dev="tmpfs" ino=270 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.346412][ T36] audit: type=1400 audit(1786027578.690:280): avc: denied { unlink } for pid=878 comm="syz-executor" name="file0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.543203][ T65] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 53.677679][ T1493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 53.704518][ T65] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 53.714219][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.726415][ T65] usb 2-1: config 0 descriptor?? [ 54.613149][ T1461] Bluetooth: hci0: command 0x1003 tx timeout [ 54.613150][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.884550][ T36] audit: type=1400 audit(1786027580.290:281): avc: denied { link } for pid=1508 comm="syz.4.408" name="#13" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 54.906682][ T36] audit: type=1400 audit(1786027580.290:282): avc: denied { rename } for pid=1508 comm="syz.4.408" name="#14" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.307227][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.315083][ T1511] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.322208][ T1511] bridge_slave_0: entered allmulticast mode [ 55.329371][ T1511] bridge_slave_0: entered promiscuous mode [ 55.336280][ T1511] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.343646][ T1511] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.350758][ T1511] bridge_slave_1: entered allmulticast mode [ 55.357466][ T1511] bridge_slave_1: entered promiscuous mode [ 55.408654][ T1511] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.416302][ T1511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.423860][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.431096][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.494053][ T1217] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.533402][ T1217] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.577147][ T1214] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.584264][ T1214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.594155][ T1217] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.601855][ T1217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.770969][ T1511] veth0_vlan: entered promiscuous mode [ 55.785724][ T1511] veth1_macvtap: entered promiscuous mode [ 55.902467][ T36] audit: type=1400 audit(1786027581.300:283): avc: denied { unmount } for pid=1518 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.956357][ T36] audit: type=1400 audit(1786027581.360:284): avc: denied { mount } for pid=1511 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.302607][ T10] usb 2-1: USB disconnect, device number 6 [ 56.341205][ T1543] Zero length message leads to an empty skb [ 57.211980][ T1549] tipc: Failed to remove unknown binding: 66,0,0/1:97243295/97243296 [ 57.232659][ T1549] tipc: Failed to remove unknown binding: 66,0,0/1:97243295/97243296 [ 57.475266][ T523] bridge_slave_1: left allmulticast mode [ 57.481724][ T523] bridge_slave_1: left promiscuous mode [ 57.503239][ T523] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.554383][ T523] bridge_slave_0: left allmulticast mode [ 57.571488][ T523] bridge_slave_0: left promiscuous mode [ 57.591857][ T523] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.974900][ T523] veth1_macvtap: left promiscuous mode [ 57.999535][ T523] veth0_vlan: left promiscuous mode [ 58.493064][ T36] audit: type=1400 audit(1786027583.890:285): avc: denied { read } for pid=1574 comm="syz.3.433" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.541776][ T1575] input: syz1 as /devices/virtual/input/input7 [ 58.542330][ T36] audit: type=1400 audit(1786027583.940:286): avc: denied { ioctl } for pid=1574 comm="syz.3.433" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.623330][ T36] audit: type=1400 audit(1786027584.000:287): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=462 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.689551][ T36] audit: type=1400 audit(1786027584.000:288): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=462 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.756665][ T36] audit: type=1400 audit(1786027584.000:289): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=462 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.133082][ T65] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 59.305574][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.337021][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.373050][ T65] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 59.393687][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.412926][ T65] usb 2-1: config 0 descriptor?? [ 59.835108][ T65] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 59.855401][ T65] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 59.862846][ T65] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 59.883120][ T65] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 59.906526][ T65] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 59.923120][ T65] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 59.951450][ T65] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 59.970405][ T65] steelseries 0003:1038:12B6.0004: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 60.040264][ T65] steelseries 0003:1038:12B6.0004: hid_hw_raw_request() failed with -71 [ 60.071330][ T65] usb 2-1: USB disconnect, device number 7 [ 60.449425][ T36] audit: type=1400 audit(1786027585.850:290): avc: denied { getopt } for pid=1590 comm="syz.5.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.655986][ T50] device offline error, dev sda, sector 1114478 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 60.666945][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139309) [ 60.679100][ T50] Buffer I/O error on device sda1, logical block 139271 [ 60.686285][ T50] device offline error, dev sda, sector 1114494 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 60.697675][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139311) [ 60.709644][ T50] Buffer I/O error on device sda1, logical block 139273 [ 60.716863][ T50] Buffer I/O error on device sda1, logical block 139274 [ 60.724060][ T50] device offline error, dev sda, sector 1114534 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 60.734998][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139316) [ 60.746780][ T50] Buffer I/O error on device sda1, logical block 139278 [ 60.753948][ T50] Buffer I/O error on device sda1, logical block 139279 [ 60.762832][ T50] device offline error, dev sda, sector 1114582 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 60.773585][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139322) [ 60.785318][ T50] Buffer I/O error on device sda1, logical block 139284 [ 60.794332][ T50] Buffer I/O error on device sda1, logical block 139285 [ 60.801573][ T50] device offline error, dev sda, sector 1114614 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 60.813026][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139326) [ 60.824985][ T50] Buffer I/O error on device sda1, logical block 139288 [ 60.832106][ T50] device offline error, dev sda, sector 1114630 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 60.842865][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139328) [ 60.855200][ T50] Buffer I/O error on device sda1, logical block 139290 [ 60.862173][ T50] Buffer I/O error on device sda1, logical block 139291 [ 60.869405][ T50] device offline error, dev sda, sector 1114654 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 60.880227][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139331) [ 60.893150][ T50] device offline error, dev sda, sector 1114670 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 60.904204][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139333) [ 60.916100][ T50] device offline error, dev sda, sector 1114702 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 60.926857][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139337) [ 60.939010][ T50] device offline error, dev sda, sector 1114750 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 60.949949][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139343) [ 60.969272][ T1595] Buffer I/O error on dev sda1, logical block 1, lost async page write [ 60.977983][ T73] Aborting journal on device sda1-8. [ 60.986770][ T1595] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 60.995787][ T286] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal [ 60.998573][ T73] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 61.021484][ T1595] Buffer I/O error on dev sda1, logical block 133, lost async page write [ 61.043197][ T1595] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 61.052278][ T73] JBD2: I/O error when updating journal superblock for sda1-8. [ 61.054366][ T1595] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 61.066693][ T286] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 61.069321][ T1595] Buffer I/O error on dev sda1, logical block 8212, lost async page write [ 61.085336][ T286] EXT4-fs (sda1): I/O error while writing superblock [ 61.086139][ T1595] Buffer I/O error on dev sda1, logical block 8213, lost async page write [ 61.101714][ T1595] Buffer I/O error on dev sda1, logical block 23725, lost async page write [ 61.101763][ T286] EXT4-fs (sda1): Remounting filesystem read-only [ 61.187412][ T1595] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 62.230675][ T1612] netlink: 'syz.5.445': attribute type 12 has an invalid length. [ 62.255747][ T1612] netlink: 'syz.5.445': attribute type 32 has an invalid length. [ 62.308203][ T36] audit: type=1400 audit(1786027587.720:291): avc: denied { wake_alarm } for pid=1607 comm="syz.3.444" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.393079][ T1615] tipc: Started in network mode [ 62.400349][ T36] audit: type=1400 audit(1786027587.800:292): avc: denied { read } for pid=1616 comm="syz.1.446" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.402273][ T1615] tipc: Node identity 4, cluster identity 4711 [ 62.423998][ T36] audit: type=1400 audit(1786027587.800:293): avc: denied { open } for pid=1616 comm="syz.1.446" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.500820][ T1615] tipc: Node number set to 4 [ 63.702257][ T1635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'. [ 63.706112][ T36] audit: type=1400 audit(1786027589.100:294): avc: denied { ioctl } for pid=1634 comm="syz.3.453" path="socket:[11410]" dev="sockfs" ino=11410 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.958445][ T36] audit: type=1400 audit(1786027589.360:295): avc: denied { associate } for pid=1653 comm="syz.2.458" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 64.224637][ T36] audit: type=1400 audit(1786027589.630:296): avc: denied { accept } for pid=1663 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.245976][ T1664] overlayfs: failed to resolve './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 64.463824][ T36] audit: type=1400 audit(1786027589.870:297): avc: denied { append } for pid=1670 comm="syz.1.465" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.583342][ T36] audit: type=1400 audit(1786027589.870:298): avc: denied { ioctl } for pid=1670 comm="syz.1.465" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.671394][ T36] audit: type=1400 audit(1786027590.070:299): avc: denied { map } for pid=1680 comm="syz.1.469" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 65.127317][ T1691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.474'. [ 65.172142][ T1691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.474'. [ 66.355699][ T1730] Write-error on swap-device (8:0:802814) [ 66.373254][ T1730] Write-error on swap-device (8:0:802822) Aug 6 14:46:31 syzkaller kern.alert kernel: [ 66.355699][ T1730] Write-error on swap-device (8:0:802814) Aug 6 14:46:31 syzkaller kern.alert kernel: [ 66.373254][ T1730] Write-error on swap-device (8:0:802822) [ 66.412671][ T1730] Write-error on swap-device (8:0:802830) Aug 6 14:46:31 syzkaller kern.alert kernel: [ 66.412671][ T1730] Write-error on swap-device (8:0:802830) [ 66.448504][ T1730] Write-error on swap-device (8:0:802838) Aug 6 14:46:31 syzkaller kern.alert kernel: [ 66.448504][ T1730] Write-error on swap-device (8:0:802838) [ 66.488201][ T1730] Write-error on swap-device (8:0:802846) Aug 6 14:46:31 syzkaller kern.alert kernel: [ 66.488201][ T1730] Write-error on swap-device (8:0:802846) [ 66.530694][ T1730] Write-error on swap-device (8:0:802854) Aug 6 14:46:31 syzkaller kern.alert kernel: [ 66.530694][ T1730] Write-error on swap-device (8:0:802854) [ 66.556029][ T1730] Write-error on swap-device (8:0:802862) Aug 6 14:46:31 syzkaller kern.alert kernel: [ 66.556029][ T1730] Write-error on swap-device (8:0:802862) [ 66.593487][ T1730] Write-error on swap-device (8:0:802870) Aug 6 14:46:32 syzkaller kern.alert kernel: [ 66.593487][ T1730] Write-error on swap-device (8:0:802870) [ 66.633291][ T1730] Write-error on swap-device (8:0:791662) Aug 6 14:46:32 syzkaller kern.alert kernel: [ 66.633291][ T1730] Write-error on swap-device (8:0:791662) [ 66.653162][ T1730] Write-error on swap-device (8:0:791670) Aug 6 14:46:32 syzkaller kern.alert kernel: [ 66.653162][ T1730] Write-error on swap-device (8:0:791670) [ 66.802080][ T1734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1734 comm=syz.5.487 [ 67.339943][ T1745] tipc: Enabling of bearer rejected, failed to enable media [ 67.395294][ T1745] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 67.416894][ T1745] tipc: Enabled bearer , priority 10 [ 67.458148][ T36] audit: type=1326 audit(1786027592.860:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1750 comm="syz.2.494" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e0f19e0d9 code=0x0 [ 67.511292][ T36] audit: type=1326 audit(1786027592.910:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1750 comm="syz.2.494" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0f19e0d9 code=0x7ffc0000 [ 67.552205][ T36] audit: type=1326 audit(1786027592.910:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1750 comm="syz.2.494" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0f19e0d9 code=0x7ffc0000 [ 67.582612][ T36] audit: type=1326 audit(1786027592.910:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1750 comm="syz.2.494" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0f19e0d9 code=0x7ffc0000 [ 68.329137][ T1769] netlink: 'syz.2.500': attribute type 4 has an invalid length. [ 68.346747][ T1772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.501'. [ 68.423310][ T1769] netlink: 'syz.2.500': attribute type 4 has an invalid length. [ 68.522214][ T1769] netlink: 'syz.2.500': attribute type 4 has an invalid length. [ 69.062439][ T36] kauditd_printk_skb: 547 callbacks suppressed [ 69.062458][ T36] audit: type=1400 audit(1786027594.460:851): avc: denied { accept } for pid=1788 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.528176][ T1794] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 69.604535][ T1796] netlink: 'syz.2.511': attribute type 11 has an invalid length. [ 69.973081][ T36] audit: type=1400 audit(1786027595.370:852): avc: denied { ioctl } for pid=1802 comm="syz.1.514" path="socket:[11987]" dev="sockfs" ino=11987 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.575305][ T1853] futex_wake_op: syz.3.524 tries to shift op by 144; fix this program [ 72.487992][ T36] audit: type=1400 audit(1786027597.890:853): avc: denied { listen } for pid=1874 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.542746][ T36] audit: type=1400 audit(1786027597.940:854): avc: denied { accept } for pid=1874 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.736647][ T1886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.538'. [ 72.753313][ T1886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.538'. [ 72.811092][ T1888] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -5 [ 72.822645][ T1888] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -5 [ 72.843680][ T1888] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -5 [ 72.854671][ T1888] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5 [ 72.878817][ T1888] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5 [ 73.054461][ T36] audit: type=1400 audit(1786027598.460:855): avc: denied { bind } for pid=1897 comm="syz.5.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.120746][ T36] audit: type=1400 audit(1786027598.460:856): avc: denied { node_bind } for pid=1897 comm="syz.5.543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 73.134890][ T1899] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.178565][ T1899] netlink: 'syz.5.543': attribute type 1 has an invalid length. [ 73.182947][ T36] audit: type=1400 audit(1786027598.500:857): avc: denied { getattr } for pid=1900 comm="syz.2.544" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.244465][ T1899] netlink: 9 bytes leftover after parsing attributes in process `syz.5.543'. [ 73.673322][ T36] audit: type=1400 audit(1786027599.080:858): avc: denied { execute_no_trans } for pid=1922 comm="syz.5.552" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.703268][ T36] audit: type=1326 audit(1786027599.080:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1922 comm="syz.5.552" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50f59e0d9 code=0x50000 [ 73.728678][ T36] audit: type=1326 audit(1786027599.080:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1922 comm="syz.5.552" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50f59e0d9 code=0x50000 [ 74.063033][ T36] kauditd_printk_skb: 1647 callbacks suppressed [ 74.063052][ T36] audit: type=1326 audit(1786027599.460:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1922 comm="syz.5.552" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50f59e0d9 code=0x50000 [ 74.113057][ T36] audit: type=1326 audit(1786027599.460:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1922 comm="syz.5.552" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50f59e0d9 code=0x50000 [ 74.143228][ T36] audit: type=1326 audit(1786027599.460:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1922 comm="syz.5.552" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50f59e0d9 code=0x50000 [ 74.193047][ T36] audit: type=1326 audit(1786027599.460:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1922 comm="syz.5.552" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50f59e0d9 code=0x50000 [ 74.230654][ T36] audit: type=1326 audit(1786027599.460:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1922 comm="syz.5.552" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50f59e0d9 code=0x50000 [ 74.283060][ T36] audit: type=1326 audit(1786027599.460:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1922 comm="syz.5.552" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50f59e0d9 code=0x50000 [ 74.314445][ T1934] netlink: 'syz.1.556': attribute type 32 has an invalid length. [ 74.323724][ T36] audit: type=1326 audit(1786027599.460:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1922 comm="syz.5.552" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50f59e0d9 code=0x50000 [ 74.349056][ T36] audit: type=1326 audit(1786027599.460:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1922 comm="syz.5.552" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50f59e0d9 code=0x50000 [ 74.393170][ T36] audit: type=1326 audit(1786027599.460:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1922 comm="syz.5.552" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50f59e0d9 code=0x50000 [ 74.449768][ T36] audit: type=1326 audit(1786027599.460:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1922 comm="syz.5.552" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50f59e0d9 code=0x50000 [ 74.828701][ T1940] tipc: Failed to remove unknown binding: 66,0,0/1:2023825472/2023825474 [ 74.853084][ T1940] tipc: Failed to remove unknown binding: 66,0,0/1:2023825472/2023825473 [ 74.875721][ T1940] tipc: Failed to remove unknown binding: 66,0,0/1:2023825472/2023825474 [ 74.893139][ T1940] tipc: Failed to remove unknown binding: 66,0,0/1:2023825472/2023825473 [ 75.233069][ T65] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 75.383062][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 75.389711][ T65] usb 2-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 75.402386][ T65] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 75.418303][ T65] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 75.433101][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.444286][ T65] usb 2-1: config 0 descriptor?? [ 75.464648][ T110] udevd[110]: worker [314] terminated by signal 7 (Bus error) [ 75.474549][ T110] udevd[110]: worker [314] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 76.861129][ T1965] fuse: Bad value for 'fd' [ 76.867844][ T1965] fuseblk: Bad value for 'fd' [ 76.911328][ T1969] netlink: 17 bytes leftover after parsing attributes in process `syz.2.569'. [ 77.068158][ T110] udevd[110]: worker [324] terminated by signal 7 (Bus error) [ 77.083173][ T110] udevd[110]: worker [324] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 77.303083][ T311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.483931][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 77.493955][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 77.508454][ T311] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 77.519756][ T311] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 77.535035][ T311] usb 4-1: Product: syz [ 77.542106][ T311] usb 4-1: Manufacturer: syz [ 77.550738][ T311] usb 4-1: SerialNumber: syz [ 77.586945][ T110] udevd[110]: worker [717] terminated by signal 7 (Bus error) [ 77.596978][ T1991] __end_swap_bio_write: 26 callbacks suppressed [ 77.596999][ T1991] Write-error on swap-device (8:0:803278) Aug 6 14:46:43 [ 77.609498][ T110] udevd[110]: worker [717] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' syzkaller kern.alert kernel: [ 77.596999][ T1991] Write-error on swap-device (8:0:803278) [ 77.695575][ T110] udevd[110]: worker [485] terminated by signal 7 (Bus error) [ 77.703957][ T110] udevd[110]: worker [485] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 77.722086][ T110] udevd[110]: worker [1999] terminated by signal 7 (Bus error) [ 77.730204][ T110] udevd[110]: worker [1999] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0' [ 77.993116][ T311] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 78.033680][ T65] usb 2-1: USB disconnect, device number 8 [ 78.091153][ T2009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.584'. [ 78.142401][ T2012] Need at least one configuration in g1. [ 78.143109][ T311] usb 6-1: Using ep0 maxpacket: 8 [ 78.148271][ T2012] udc dummy_udc.0: failed to start g1: -22 [ 78.154964][ T311] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 78.159467][ T2012] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 78.170386][ T311] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 78.180407][ T2012] UDC core: g1: couldn't find an available UDC or it's busy [ 78.187923][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.203589][ T311] usb 6-1: Product: syz [ 78.207773][ T311] usb 6-1: Manufacturer: syz [ 78.212384][ T311] usb 6-1: SerialNumber: syz [ 78.220424][ T311] usb 6-1: config 0 descriptor?? [ 78.480615][ T65] usb 6-1: USB disconnect, device number 2 [ 78.503231][ T2020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.587'. [ 78.531619][ T2022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 80.359954][ T65] usb 4-1: USB disconnect, device number 3 [ 80.422708][ T36] kauditd_printk_skb: 15017 callbacks suppressed [ 80.422728][ T36] audit: type=1400 audit(1786027605.820:17535): avc: denied { bind } for pid=2034 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.464938][ T36] audit: type=1400 audit(1786027605.820:17536): avc: denied { listen } for pid=2034 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.140497][ T2054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 81.403157][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.624420][ T31] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 81.643126][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.663146][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 81.685661][ T31] usb 4-1: config 1 has no interface number 1 [ 81.697677][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 81.724421][ T31] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.742709][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.753421][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.756353][ T2065] netlink: 104 bytes leftover after parsing attributes in process `syz.5.602'. [ 81.779162][ T31] usb 4-1: Product: syz [ 81.784389][ T31] usb 4-1: Manufacturer: syz [ 81.789688][ T31] usb 4-1: SerialNumber: syz [ 82.671513][ T36] audit: type=1400 audit(1786027608.070:17537): avc: denied { read } for pid=2069 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.879225][ T31] usb 4-1: MIDIStreaming interface descriptor not found [ 82.933648][ T31] usb 4-1: USB disconnect, device number 4 [ 83.256082][ T36] audit: type=1400 audit(1786027608.650:17538): avc: denied { accept } for pid=2084 comm="syz.5.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 84.036206][ T36] audit: type=1400 audit(1786027609.440:17539): avc: denied { create } for pid=2104 comm="syz.2.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 85.420281][ T2119] bridge0: entered allmulticast mode [ 85.429375][ T2119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'. [ 85.439370][ T2119] bridge_slave_1: left allmulticast mode [ 85.541555][ T2119] bridge_slave_1: left promiscuous mode [ 85.565626][ T2119] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.618784][ T2121] tipc: Failed to remove unknown binding: 66,0,0/4:3257273668/3257273669 [ 85.640189][ T2121] tipc: Failed to remove unknown binding: 66,0,0/4:3257273668/3257273669 [ 85.664882][ T2119] bridge_slave_0: left allmulticast mode [ 85.670773][ T2119] bridge_slave_0: left promiscuous mode [ 85.692267][ T2119] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.952200][ T2119] bridge0 (unregistering): left allmulticast mode [ 86.564289][ T2143] mmap: syz.2.633 (2143): VmData 29073408 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 87.127812][ T36] audit: type=1400 audit(1786027612.530:17540): avc: denied { name_bind } for pid=2145 comm="syz.5.634" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 87.198003][ T2146] batadv_slave_1: entered promiscuous mode [ 87.313965][ T2146] netlink: 148 bytes leftover after parsing attributes in process `syz.5.634'. [ 87.551771][ T2150] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 87.613903][ T2154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2154 comm=syz.2.637 [ 87.633275][ T2154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2154 comm=syz.2.637 [ 87.642676][ T2145] batadv_slave_1: left promiscuous mode [ 87.646658][ T2154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2154 comm=syz.2.637 [ 87.664309][ T2154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2154 comm=syz.2.637 [ 87.676935][ T2154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2154 comm=syz.2.637 [ 87.689760][ T2154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2154 comm=syz.2.637 [ 87.702753][ T2154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2154 comm=syz.2.637 [ 87.715713][ T2154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2154 comm=syz.2.637 [ 87.729233][ T2154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2154 comm=syz.2.637 [ 87.749080][ T2154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2154 comm=syz.2.637 [ 87.755061][ T2156] netlink: 12 bytes leftover after parsing attributes in process `syz.5.638'. [ 87.827106][ T36] audit: type=1400 audit(1786027613.230:17541): avc: denied { append } for pid=2159 comm="syz.1.640" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 88.582689][ T36] audit: type=1400 audit(1786027613.970:17542): avc: denied { cmd } for pid=2162 comm="iou-wrk-2163" path="socket:[18899]" dev="sockfs" ino=18899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.443577][ T36] audit: type=1400 audit(1786027614.850:17543): avc: denied { create } for pid=2189 comm="syz.3.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 90.143064][ T2207] tipc: Can't bind to reserved service type 0 [ 91.323668][ T36] audit: type=1400 audit(1786027616.730:17544): avc: denied { name_bind } for pid=2234 comm="syz.2.668" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 91.383352][ T311] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 91.453472][ T36] audit: type=1400 audit(1786027616.860:17545): avc: denied { read } for pid=2242 comm="syz.1.671" name="/" dev="configfs" ino=2495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.508210][ T36] audit: type=1400 audit(1786027616.880:17546): avc: denied { open } for pid=2242 comm="syz.1.671" path="/" dev="configfs" ino=2495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.564382][ T311] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 91.584807][ T311] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 91.609398][ T311] usb 6-1: config 0 has no interface number 0 [ 91.624701][ T311] usb 6-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.656925][ T311] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 91.676314][ T311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.695746][ T311] usb 6-1: config 0 descriptor?? [ 91.725873][ T110] udevd[110]: worker [2004] terminated by signal 7 (Bus error) [ 91.743076][ T110] udevd[110]: worker [2004] failed while handling '/devices/platform/dummy_hcd.5/usb6/6-1' [ 91.751818][ T2250] netlink: 'syz.2.672': attribute type 11 has an invalid length. [ 91.908974][ T110] udevd[110]: worker [2003] terminated by signal 7 (Bus error) [ 91.953100][ T110] udevd[110]: worker [2003] failed while handling '/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120' [ 92.028764][ T802] usb 6-1: USB disconnect, device number 3 [ 92.056961][ T110] udevd[110]: worker [2002] terminated by signal 7 (Bus error) [ 92.073086][ T110] udevd[110]: worker [2002] failed while handling '/devices/platform/dummy_hcd.5/usb6/6-1' [ 92.215721][ T2262] usb usb8: usbfs: process 2262 (syz.3.677) did not claim interface 0 before use [ 93.093564][ T36] audit: type=1400 audit(1786027618.500:17547): avc: denied { read write } for pid=2301 comm="syz.1.695" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.163195][ T36] audit: type=1400 audit(1786027618.520:17548): avc: denied { open } for pid=2301 comm="syz.1.695" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.223089][ T36] audit: type=1400 audit(1786027618.530:17549): avc: denied { ioctl } for pid=2301 comm="syz.1.695" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.306093][ T36] audit: type=1400 audit(1786027618.710:17550): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 93.393157][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 93.543198][ T31] usb 2-1: device descriptor read/64, error -71 [ 93.793184][ T31] usb 2-1: device descriptor read/64, error -71 [ 93.906185][ T36] audit: type=1400 audit(1786027619.310:17551): avc: denied { mounton } for pid=2342 comm="syz.3.713" path="/199/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 93.953051][ T36] audit: type=1400 audit(1786027619.330:17552): avc: denied { remount } for pid=2342 comm="syz.3.713" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.043081][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 94.193146][ T31] usb 2-1: device descriptor read/64, error -71 [ 94.433090][ T31] usb 2-1: device descriptor read/64, error -71 [ 94.553406][ T31] usb usb2-port1: attempt power cycle [ 94.813093][ T36] audit: type=1400 audit(1786027620.210:17553): avc: denied { listen } for pid=2377 comm="syz.5.726" path="/78/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 94.903073][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 94.935343][ T31] usb 2-1: device descriptor read/8, error -71 [ 95.064478][ T31] usb 2-1: device descriptor read/8, error -71 [ 95.303084][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 95.344328][ T31] usb 2-1: device descriptor read/8, error -71 [ 95.424570][ T36] audit: type=1400 audit(1786027620.830:17554): avc: denied { write } for pid=2405 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 95.484251][ T31] usb 2-1: device descriptor read/8, error -71 [ 95.597240][ T31] usb usb2-port1: unable to enumerate USB device [ 96.811656][ T36] audit: type=1400 audit(1786027622.210:17555): avc: denied { write } for pid=2467 comm="syz.1.765" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.849784][ T36] audit: type=1400 audit(1786027622.210:17556): avc: denied { open } for pid=2467 comm="syz.1.765" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 100.202868][ T2557] tipc: Started in network mode [ 100.208159][ T2557] tipc: Node identity 4, cluster identity 4711 [ 100.216851][ T2557] tipc: Node number set to 4 [ 100.533077][ T31] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 100.715229][ T31] usb 6-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 100.730478][ T31] usb 6-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.744245][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 100.751188][ T31] usb 6-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 100.760522][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.770059][ T31] usb 6-1: config 0 descriptor?? [ 100.779470][ T2567] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 100.795018][ T110] udevd[110]: worker [2259] terminated by signal 7 (Bus error) [ 100.803134][ T110] udevd[110]: worker [2259] failed while handling '/devices/platform/dummy_hcd.5/usb6/6-1' [ 100.910560][ T110] udevd[110]: worker [2255] terminated by signal 7 (Bus error) [ 100.919252][ T110] udevd[110]: worker [2255] failed while handling '/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0' [ 101.596639][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 101.619198][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 101.645913][ T31] usb 6-1: USB disconnect, device number 4 [ 101.668786][ T110] udevd[110]: worker [2608] terminated by signal 7 (Bus error) [ 101.677665][ T110] udevd[110]: worker [2608] failed while handling '/devices/platform/dummy_hcd.5/usb6/6-1' [ 102.457935][ T2625] overlayfs: failed to resolve './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 104.084997][ T2672] selinux_netlink_send: 549 callbacks suppressed [ 104.085020][ T2672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2672 comm=syz.2.856 [ 104.636371][ T2696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 104.647062][ T2696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 105.919725][ T36] audit: type=1326 audit(1786027631.320:17557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.1.862" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6aa679e0d9 code=0x0 [ 105.985630][ T36] audit: type=1326 audit(1786027631.370:17558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.1.862" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 106.029773][ T36] audit: type=1326 audit(1786027631.370:17559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.1.862" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 106.061989][ T2721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2721 comm=syz.3.863 [ 106.074736][ T36] audit: type=1326 audit(1786027631.370:17560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.1.862" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 106.120715][ T36] audit: type=1326 audit(1786027631.370:17561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.1.862" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 106.167745][ T36] audit: type=1326 audit(1786027631.370:17562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.1.862" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 106.194301][ T36] audit: type=1326 audit(1786027631.370:17563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.1.862" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 106.221535][ T36] audit: type=1326 audit(1786027631.370:17565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.1.862" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 106.247944][ T36] audit: type=1326 audit(1786027631.370:17564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.1.862" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 106.274719][ T36] audit: type=1326 audit(1786027631.380:17566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.1.862" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 106.349912][ T2730] tipc: Failed to remove unknown binding: 66,0,0/4:4051568554/4051568555 [ 106.360451][ T2730] tipc: Failed to remove unknown binding: 66,0,0/4:4051568554/4051568555 [ 106.458384][ T2737] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 106.929474][ T822] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.944067][ T2753] Write-error on swap-device (8:0:803278) Aug 6 14:47:12 syzkaller kern.alert kernel: [ 106.944067][ T2753] Write-error on swap-device (8:0:803278) [ 107.051937][ T2753] Write-error on swap-device (8:0:803286) [ 107.069114][ T2753] Write-error on swap-device (8:0:803294) Aug 6 14:47:12 [ 107.076687][ T2753] Write-error on swap-device (8:0:803302) syzkaller kern.alert kernel: [ 107.051937][ T2753] Write-error on swap-device ([ 107.088492][ T2753] Write-error on swap-device (8:0:803310) 8:0:803286) Aug 6 14:47:12 syzkaller kern.alert kernel: [ 107.069114][ T2753] Write-error on swap-device (8:0[ 107.104285][ T2753] Write-error on swap-device (8:0:803318) :803294) Aug 6 14:47:12 syzkaller kern.alert kernel: [ 107.076687][ T2753] Write-error on swap-device (8:0:803302) Aug 6 14:47:12 syzkaller[ 107.123239][ T2753] Write-error on swap-device (8:0:803326) kern.alert kern[ 107.129493][ T2753] Write-error on swap-device (8:0:803334) el: [ 107.088492][ T2753] Write-error on swap-device (8:0:803310) Aug 6 14:47:12 syzkaller kern.alert kernel: [ 107.104285][ T2753] Write-error on swap-device (8:0:803318) Aug 6 14:47:12[ 107.153146][ T2753] Write-error on swap-device (8:0:803342) syzkaller kern.[ 107.158960][ T2753] Write-error on swap-device (8:0:803350) alert kernel: [ 107.123239][ T2753] Write-error on swap-device (8:0:803326) Aug 6 14:47:12 syzkaller kern.alert kernel: [ 107.129493][ T2753] Write-error on swap-device (8:0:803334) Aug 6 14:47:12 syzkaller kern.alert kernel: [ 107.153146][ T2753] Write-error on swap-device (8:0:803342) Aug 6 14:47:12 syzkaller kern.alert kernel: [ 107.158960][ T2753] Write-error on swap-device (8:0:803350) [ 108.207994][ T2790] netlink: 'syz.1.883': attribute type 4 has an invalid length. [ 108.269905][ T2790] netlink: 'syz.1.883': attribute type 4 has an invalid length. [ 108.283349][ T2790] netlink: 'syz.1.883': attribute type 4 has an invalid length. [ 108.933252][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.933405][ T1461] Bluetooth: hci0: command 0x1003 tx timeout [ 111.303109][ T2849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'. [ 111.347064][ T2849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'. [ 111.427612][ T2853] futex_wake_op: syz.2.910 tries to shift op by 144; fix this program [ 111.819095][ T2857] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -5 [ 111.852130][ T2857] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -5 [ 111.882641][ T2857] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -5 [ 111.913286][ T2857] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5 [ 111.943106][ T2857] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5 [ 112.124206][ T2859] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.159709][ T2859] netlink: 'syz.2.915': attribute type 1 has an invalid length. [ 112.195017][ T2859] netlink: 9 bytes leftover after parsing attributes in process `syz.2.915'. [ 112.406844][ T2878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.919'. [ 112.426622][ T2878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.919'. [ 112.517939][ T2883] netlink: 'syz.3.921': attribute type 32 has an invalid length. [ 112.559704][ T2886] tipc: Failed to remove unknown binding: 66,0,0/4:181629828/181629830 [ 112.573133][ T2886] tipc: Failed to remove unknown binding: 66,0,0/4:181629828/181629829 [ 112.591139][ T2886] tipc: Failed to remove unknown binding: 66,0,0/4:181629828/181629830 [ 112.600041][ T2886] tipc: Failed to remove unknown binding: 66,0,0/4:181629828/181629829 [ 113.508543][ T2910] netlink: 'syz.2.943': attribute type 32 has an invalid length. [ 113.983547][ T2950] __end_swap_bio_write: 747 callbacks suppressed [ 113.983563][ T2950] Write-error on swap-device (8:0:802902) Aug 6 14:47:19 syzkaller kern.alert kernel: [ 113.983563][ T2950] Write-error on swap-device (8:0:802902) [ 114.010821][ T2937] overlayfs: failed to clone upperpath [ 114.020550][ T2953] netlink: 17 bytes leftover after parsing attributes in process `syz.1.951'. [ 114.152682][ T2961] fuse: Bad value for 'fd' [ 114.190016][ T2963] netlink: 32 bytes leftover after parsing attributes in process `syz.2.956'. [ 114.667856][ T2981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.966'. [ 115.526113][ T2991] netlink: 17 bytes leftover after parsing attributes in process `syz.3.964'. [ 115.723675][ T2994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.965'. [ 116.824937][ T3002] netlink: 32 bytes leftover after parsing attributes in process `syz.3.969'. [ 116.834306][ T3008] Write-error on swap-device (8:0:802910) Aug 6 14:47:22 syzkaller kern.alert kernel: [ 116.834306][ T3008] Write-error on swap-device (8:0:802910) [ 117.123885][ T3023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.978'. [ 118.542155][ T3045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 118.759895][ T3052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 119.432744][ T3065] netlink: 104 bytes leftover after parsing attributes in process `syz.2.995'. [ 122.443732][ T3108] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1010'. [ 123.965018][ T3119] tipc: Failed to remove unknown binding: 66,0,0/4:255451427/255451428 [ 123.993344][ T3119] tipc: Failed to remove unknown binding: 66,0,0/4:255451427/255451428 [ 124.258798][ T3133] bridge0: entered allmulticast mode [ 124.268492][ T3133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 124.279155][ T3133] bridge_slave_1: left allmulticast mode [ 124.286760][ T3133] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.344005][ T3133] bridge_slave_0: left allmulticast mode [ 124.350114][ T3133] bridge_slave_0: left promiscuous mode [ 124.356532][ T3133] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.496441][ T3139] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1024'. [ 124.509351][ T3133] bridge0 (unregistering): left allmulticast mode [ 124.932842][ T3147] tipc: Failed to remove unknown binding: 66,0,0/1:1519758046/1519758047 [ 124.956898][ T3147] tipc: Failed to remove unknown binding: 66,0,0/1:1519758046/1519758047 [ 125.711181][ T3160] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 125.805295][ T3170] batadv_slave_1: entered promiscuous mode [ 125.829853][ T3170] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1034'. [ 126.679784][ T3162] batadv_slave_1: left promiscuous mode [ 126.807588][ T3191] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 126.910151][ T3210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3210 comm=syz.3.1054 [ 126.931003][ T3210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3210 comm=syz.3.1054 [ 126.947408][ T3210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3210 comm=syz.3.1054 [ 126.979518][ T3210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3210 comm=syz.3.1054 [ 126.992549][ T3210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3210 comm=syz.3.1054 [ 127.006441][ T3210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3210 comm=syz.3.1054 [ 127.023232][ T3210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3210 comm=syz.3.1054 [ 127.040917][ T3210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3210 comm=syz.3.1054 [ 127.055280][ T3210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3210 comm=syz.3.1054 [ 127.069505][ T3220] batadv_slave_1: entered promiscuous mode [ 127.069608][ T3210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3210 comm=syz.3.1054 [ 127.077747][ T3220] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1057'. [ 127.777951][ T3211] batadv_slave_1: left promiscuous mode [ 129.826666][ T3306] netlink: 'syz.5.1096': attribute type 11 has an invalid length. [ 130.586593][ T3335] netlink: 'syz.3.1099': attribute type 11 has an invalid length. [ 155.140466][ T4744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1718'. [ 155.857010][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1727'. [ 156.535872][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'. [ 156.970981][ T4817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1747'. [ 157.678771][ T4839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1758'. [ 158.557701][ T4865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1767'. [ 159.079539][ T4891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1777'. [ 159.431996][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1786'. [ 170.037598][ T36] kauditd_printk_skb: 886 callbacks suppressed [ 170.037648][ T36] audit: type=1400 audit(1786027695.440:18453): avc: denied { connect } for pid=5293 comm="syz.5.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 170.069668][ T36] audit: type=1400 audit(1786027695.470:18454): avc: denied { write } for pid=5293 comm="syz.5.1944" laddr=fe80::382d:48ff:fe1d:2cef lport=3 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 170.119785][ T36] audit: type=1400 audit(1786027695.470:18455): avc: denied { read } for pid=5293 comm="syz.5.1944" path="socket:[83095]" dev="sockfs" ino=83095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.183094][ T36] audit: type=1400 audit(1786027696.580:18456): avc: denied { getopt } for pid=5342 comm="syz.3.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 171.255583][ T5345] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 171.730654][ T36] audit: type=1400 audit(1786027697.130:18457): avc: denied { getopt } for pid=5398 comm="syz.3.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.895697][ T5420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2002'. [ 171.930696][ T36] audit: type=1400 audit(1786027697.330:18458): avc: denied { read } for pid=5427 comm="syz.1.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.997279][ T5438] fuse: Bad value for 'fd' [ 172.044914][ T5448] netlink: 'syz.3.2016': attribute type 2 has an invalid length. [ 172.405824][ T5494] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2036'. [ 172.425550][ T5496] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 172.434702][ T5496] overlayfs: missing 'lowerdir' [ 172.807350][ T36] audit: type=1400 audit(1786027698.210:18459): avc: denied { setopt } for pid=5536 comm="syz.2.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.123031][ T36] audit: type=1400 audit(1786027698.520:18460): avc: denied { shutdown } for pid=5559 comm="syz.1.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.679915][ T5594] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2082'. [ 174.535922][ T5687] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2126'. [ 174.545208][ T5687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2126'. [ 174.554416][ T5687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2126'. [ 174.732442][ T36] audit: type=1400 audit(1786027700.130:18461): avc: denied { getopt } for pid=5704 comm="syz.1.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 174.774881][ T36] audit: type=1400 audit(1786027700.180:18462): avc: denied { getopt } for pid=5706 comm="syz.1.2136" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.173586][ T5747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2154'. [ 176.181006][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2206'. [ 176.713452][ T5904] ip6gretap0: entered promiscuous mode [ 176.719096][ T5904] ip6gretap0: entered allmulticast mode [ 176.985783][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2245'. [ 177.130063][ T36] audit: type=1400 audit(1786027702.530:18463): avc: denied { execute } for pid=5966 comm="syz.3.2253" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 177.151989][ T36] audit: type=1400 audit(1786027702.530:18464): avc: denied { execute_no_trans } for pid=5966 comm="syz.3.2253" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 177.526687][ T36] audit: type=1400 audit(1786027702.930:18465): avc: denied { getopt } for pid=6003 comm="syz.3.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.776874][ T6094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2315'. [ 178.792631][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2315'. [ 178.801781][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2315'. [ 178.810995][ T6094] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2315'. [ 179.153643][ T36] audit: type=1400 audit(1786027704.550:18466): avc: denied { mount } for pid=6133 comm="syz.5.2332" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 180.224647][ T36] audit: type=1400 audit(1786027705.630:18467): avc: denied { listen } for pid=6209 comm="syz.2.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.338784][ T6226] Write-error on swap-device (8:0:804374) [ 180.345067][ T6226] Write-error on swap-device (8:0:804382) [ 180.352279][ T6226] Write-error on swap-device (8:0:804390) [ 180.358603][ T6226] Write-error on swap-device (8:0:804398) Aug 6 14:48:25 [ 180.364726][ T6226] Write-error on swap-device (8:0:804406) syzkaller kern.a[ 180.372029][ T6226] Write-error on swap-device (8:0:804414) lert kernel: [ [ 180.379588][ T6226] Write-error on swap-device (8:0:804422) 180.338784][ T6226] Write-error [ 180.388236][ T6226] Write-error on swap-device (8:0:804430) on swap-device ([ 180.396062][ T6226] Write-error on swap-device (8:0:804438) 8:0:804374) Aug[ 180.402681][ T6226] Write-error on swap-device (8:0:804446) 6 14:48:25 syzkaller kern.alert kernel: [ 180.345067][ T6226] Write-error on swap-device (8:0:804382) Aug 6 14:48:25 syzkaller kern.alert kernel: [ 180.352279][ T6226] Write-error on swap-device (8:0:804390) Aug 6 14:48:25 syzkaller kern.alert kernel: [ 180.358603][ T6226] Write-error on swap-device (8:0:804398) Aug 6 14:48:25 syzkaller kern.alert kernel: [ 180.364726][ T6226] Write-error on swap-device (8:0:804406) Aug 6 14:48:25 syzkaller kern.alert kernel: [ 180.372029][ T6226] Write-error on swap-device (8:0:804414) Aug 6 14:48:25 syzkaller kern.alert kernel: [ 180.379588][ T6226] Write-error on swap-device (8:0:804422) Aug 6 14:48:25 syzkaller kern.alert kernel: [ 180.388236][ T6226] Write-error on swap-device (8:0:804430) Aug 6 14:48:25 syzkaller kern.alert kernel: [ 180.396062][ T6226] Write-error on swap-device (8:0:804438) Aug 6 14:48:25 syzkaller kern.alert kernel: [ 180.402681][ T6226] Write-error on swap-device (8:0:804446) [ 180.997460][ T36] audit: type=1400 audit(1786027706.400:18468): avc: denied { mounton } for pid=6277 comm="syz.2.2395" path="/605/file0" dev="tmpfs" ino=3190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 181.553835][ T6289] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2399'. [ 182.359549][ T36] audit: type=1400 audit(1786027707.760:18469): avc: denied { lock } for pid=6395 comm="syz.3.2451" path="socket:[86237]" dev="sockfs" ino=86237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 183.846615][ T6525] netlink: 'syz.1.2512': attribute type 8 has an invalid length. [ 183.854824][ T6525] netlink: 'syz.1.2512': attribute type 32 has an invalid length. [ 184.523809][ T6559] netlink: 1343 bytes leftover after parsing attributes in process `syz.1.2526'. [ 186.616922][ T6760] overlayfs: failed to clone upperpath [ 186.904788][ T6794] overlayfs: failed to clone upperpath [ 187.005799][ T6809] overlayfs: failed to clone lowerpath [ 187.394834][ T6853] 9pnet_fd: Insufficient options for proto=fd [ 188.194803][ T6930] netlink: 'syz.3.2697': attribute type 4 has an invalid length. [ 188.910265][ T6984] overlayfs: failed to clone upperpath [ 189.134804][ T7012] overlayfs: failed to resolve './cgroup': -2 [ 189.569354][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2747'. [ 190.864995][ T7118] netlink: 'syz.3.2775': attribute type 4 has an invalid length. [ 191.216549][ T7152] overlayfs: failed to clone upperpath [ 191.756613][ T7192] overlayfs: failed to clone upperpath [ 192.072562][ T7217] overlayfs: failed to clone upperpath [ 192.105139][ T7221] tipc: Enabling of bearer rejected, failed to enable media [ 192.138592][ T7227] overlayfs: failed to resolve './cgroup': -2 [ 193.236386][ T7321] tipc: Enabling of bearer rejected, failed to enable media [ 193.367704][ T7339] overlayfs: failed to clone upperpath [ 194.245719][ T7381] overlayfs: failed to resolve './cgroup': -2 [ 194.401591][ T36] audit: type=1400 audit(1786027719.807:18470): avc: denied { write } for pid=7405 comm="syz.2.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.493775][ T7403] overlayfs: failed to resolve './cgroup': -2 [ 195.071452][ T7436] overlayfs: failed to clone upperpath [ 195.251411][ T7464] overlayfs: failed to clone upperpath [ 195.776190][ T7514] overlayfs: failed to clone upperpath [ 196.412895][ T36] audit: type=1326 audit(1786027721.817:18471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.2.2979" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e0f19e0d9 code=0x0 [ 196.971122][ T7606] overlayfs: failed to clone lowerpath [ 197.278791][ T36] audit: type=1400 audit(1786027722.687:18472): avc: denied { remount } for pid=7638 comm="syz.5.3003" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 197.457363][ T7649] overlayfs: failed to clone upperpath [ 197.911435][ T7672] tipc: Enabling of bearer rejected, failed to enable media [ 198.071035][ T7688] overlayfs: failed to clone upperpath [ 198.124192][ T36] audit: type=1400 audit(1786027723.537:18473): avc: denied { rename } for pid=7687 comm="syz.3.3022" name="file0" dev="tmpfs" ino=3857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 198.426500][ T7705] netlink: 'syz.5.3031': attribute type 32 has an invalid length. [ 198.487378][ T36] audit: type=1326 audit(1786027723.897:18474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.5.3033" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc50f59e0d9 code=0x0 [ 199.144576][ T36] audit: type=1400 audit(1786027724.557:18475): avc: denied { setopt } for pid=7741 comm="syz.1.3044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 199.531131][ T7750] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 199.828010][ T7775] overlayfs: failed to clone upperpath [ 200.047276][ T7788] tipc: New replicast peer: 255.255.255.255 [ 200.063705][ T7788] tipc: Enabled bearer , priority 10 [ 200.254683][ T7805] overlayfs: failed to clone upperpath [ 200.464307][ T7823] __end_swap_bio_write: 4 callbacks suppressed [ 200.464330][ T7823] Write-error on swap-device (8:0:802918) Aug 6 14:48:45 [ 200.478804][ T7823] Write-error on swap-device (8:0:803014) syzkaller kern.a[ 200.479626][ T7833] 9pnet_virtio: no channels available for device syz lert kernel: [ 200.464330][ T7823] Write-error on swap-device (8:0:802918) Aug 6 14:48:45 syzkaller kern.alert kernel: [ 200.478804][ T7823] Write-error on swap-device (8:0:803014) [ 201.123949][ T7868] sit0: entered promiscuous mode [ 201.133542][ T7868] netlink: 'syz.5.3100': attribute type 1 has an invalid length. [ 201.141805][ T7868] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3100'. [ 202.812494][ T7970] GUP no longer grows the stack in syz.5.3147 (7970): 200000005000-200000008000 (200000004000) [ 202.823181][ T7970] CPU: 0 UID: 0 PID: 7970 Comm: syz.5.3147 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 202.823216][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.823232][ T7970] Call Trace: [ 202.823238][ T7970] [ 202.823255][ T7970] __dump_stack+0x21/0x30 [ 202.823280][ T7970] dump_stack_lvl+0x140/0x1c0 [ 202.823295][ T7970] ? __cfi_dump_stack_lvl+0x10/0x10 [ 202.823310][ T7970] ? find_vma+0xd3/0x120 [ 202.823322][ T7970] dump_stack+0x19/0x20 [ 202.823335][ T7970] fixup_user_fault+0x616/0x6a0 [ 202.823349][ T7970] fault_in_user_writeable+0x75/0xe0 [ 202.823362][ T7970] futex_lock_pi+0x2ed/0xa70 [ 202.823377][ T7970] ? __cfi_futex_lock_pi+0x10/0x10 [ 202.823391][ T7970] ? kvm_sched_clock_read+0x15/0x30 [ 202.823408][ T7970] ? __cfi_futex_wake_mark+0x10/0x10 [ 202.823423][ T7970] ? __kasan_check_read+0x15/0x20 [ 202.823433][ T7970] ? rb_commit+0x753/0x7b0 [ 202.823445][ T7970] do_futex+0x270/0x510 [ 202.823459][ T7970] ? __cfi_do_futex+0x10/0x10 [ 202.823474][ T7970] __se_sys_futex+0x13c/0x320 [ 202.823489][ T7970] ? __x64_sys_futex+0x110/0x110 [ 202.823510][ T7970] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 202.823528][ T7970] __x64_sys_futex+0xe9/0x110 [ 202.823542][ T7970] x64_sys_call+0x227f/0x2ee0 [ 202.823553][ T7970] do_syscall_64+0x57/0xf0 [ 202.823566][ T7970] ? clear_bhb_loop+0x50/0xa0 [ 202.823580][ T7970] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 202.823593][ T7970] RIP: 0033:0x7fc50f59e0d9 [ 202.823609][ T7970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.823619][ T7970] RSP: 002b:00007fc510456028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 202.823636][ T7970] RAX: ffffffffffffffda RBX: 00007fc50f825fa0 RCX: 00007fc50f59e0d9 [ 202.823646][ T7970] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 202.823654][ T7970] RBP: 00007fc50f635024 R08: 0000000000000000 R09: 0000000000000001 [ 202.823663][ T7970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.823670][ T7970] R13: 00007fc50f826038 R14: 00007fc50f825fa0 R15: 00007fff0302a0c8 [ 202.823680][ T7970] [ 202.838463][ T7972] overlayfs: failed to clone upperpath [ 203.804426][ T36] audit: type=1400 audit(1786027729.207:18476): avc: denied { mount } for pid=8025 comm="syz.3.3170" name="/" dev="ramfs" ino=95727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 203.833001][ T8029] tipc: Enabling of bearer rejected, failed to enable media [ 205.561075][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3188'. [ 205.650574][ T8074] overlayfs: failed to clone upperpath [ 205.715757][ T8080] netlink: 'syz.5.3193': attribute type 4 has an invalid length. [ 205.740772][ T8084] overlayfs: failed to clone upperpath [ 205.767616][ T8080] netlink: 'syz.5.3193': attribute type 4 has an invalid length. [ 206.553592][ T8140] futex_wake_op: syz.1.3216 tries to shift op by 144; fix this program [ 210.055241][ T8280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3277'. [ 210.065378][ T36] audit: type=1400 audit(1786027735.477:18477): avc: denied { map } for pid=8279 comm="syz.2.3277" path="socket:[97063]" dev="sockfs" ino=97063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 210.089245][ T36] audit: type=1400 audit(1786027735.477:18478): avc: denied { accept } for pid=8279 comm="syz.2.3277" path="socket:[97063]" dev="sockfs" ino=97063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 210.208896][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3279'. [ 210.493801][ T8323] netlink: 364 bytes leftover after parsing attributes in process `syz.1.3298'. [ 210.714220][ T8351] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3312'. [ 210.723520][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3312'. [ 210.733209][ T8351] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3312'. [ 210.742305][ T8351] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3312'. [ 210.777915][ T8361] fuse: blksize only supported for fuseblk [ 211.400663][ T8514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3392'. [ 211.538539][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3404'. [ 211.721061][ T8561] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3413'. [ 212.477899][ T36] audit: type=1400 audit(1786027737.887:18479): avc: denied { accept } for pid=8716 comm="syz.2.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 212.977809][ T8822] overlayfs: conflicting options: userxattr,redirect_dir=on [ 213.055966][ T8836] netlink: 'syz.3.3550': attribute type 12 has an invalid length. [ 213.090182][ T8844] netlink: 'syz.5.3554': attribute type 1 has an invalid length. [ 214.502538][ T8921] exfat: Deprecated parameter 'debug' [ 214.508197][ T8921] No source specified [ 214.896158][ T9013] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -5 [ 214.908227][ T9013] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -5 [ 214.918456][ T9013] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -5 [ 214.928955][ T9013] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5 [ 214.938647][ T9013] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5 [ 215.074216][ T9043] __nla_validate_parse: 6 callbacks suppressed [ 215.074239][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3647'. [ 216.741072][ T525] tipc: Subscription rejected, illegal request [ 216.754615][ T9166] Write-error on swap-device (8:0:804486) [ 216.768943][ T9166] Write-error on swap-device (8:0:804494) Aug 6 14:49:02 syzkaller kern.a[ 216.778217][ T9166] Write-error on swap-device (8:0:804502) lert kernel: [ 216.754615][ T91[ 216.787832][ T9166] Write-error on swap-device (8:0:804510) 66] Write-error [ 216.794388][ T9166] Write-error on swap-device (8:0:804518) on swap-device ([ 216.801679][ T9166] Write-error on swap-device (8:0:804526) 8:0:804486) Aug[ 216.809042][ T9166] Write-error on swap-device (8:0:804534) 6 14:49:02 syzkaller kern.alert kernel: [ 216.768943][ T9166] Write-error on swap-device (8:0[ 216.822084][ T9166] Write-error on swap-device (8:0:804542) :804494) Aug 6[ 216.829937][ T9166] Write-error on swap-device (8:0:804550) 14:49:02 syzkal[ 216.836908][ T9166] Write-error on swap-device (8:0:804558) ler kern.alert kernel: [ 216.778217][ T9166] Write-error on swap-device (8:0:804502) Aug 6 14:49:02 syzkaller kern.alert kernel: [ 216.787832][ T9166] Write-error on swap-device (8:0:804510) Aug 6 14:49:02 syzkaller kern.alert kernel: [ 216.794388][ T9166] Write-error on swap-device (8:0:804518) Aug 6 14:49:02 syzkaller kern.alert kernel: [ 216.801679][ T9166] Write-error on swap-device (8:0:804526) Aug 6 14:49:02 syzkaller kern.alert kernel: [ 216.809042][ T9166] Write-error on swap-device (8:0:804534) Aug 6 14:49:02 syzkaller kern.alert kernel: [ 216.822084][ T9166] Write-error on swap-device (8:0:804542) Aug 6 14:49:02 syzkaller kern.alert kernel: [ 216.829937][ T9166] Write-error on swap-device (8:0:804550) Aug 6 14:49:02 syzkaller kern.alert kernel: [ 216.836908][ T9166] Write-error on swap-device (8:0:804558) [ 217.316688][ T36] audit: type=1326 audit(1786027742.727:18480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9197 comm="syz.5.3714" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc50f59e0d9 code=0x0 [ 219.080060][ T9342] process '/newroot/875/file0' started with executable stack [ 219.299819][ T9364] overlayfs: failed to clone upperpath [ 219.989970][ T9414] netlink: 'syz.5.3813': attribute type 12 has an invalid length. [ 220.067834][ T9430] overlayfs: failed to clone lowerpath [ 221.112523][ T9534] overlayfs: failed to clone upperpath [ 221.178587][ T9548] overlayfs: failed to clone upperpath [ 223.123043][ T36] audit: type=1400 audit(1786027748.520:18481): avc: denied { read write } for pid=9704 comm="syz.3.3942" name="file0" dev="tmpfs" ino=4943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 223.183222][ T36] audit: type=1400 audit(1786027748.520:18482): avc: denied { open } for pid=9704 comm="syz.3.3942" path="/934/file0" dev="tmpfs" ino=4943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 223.375277][ T9718] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -5 [ 223.388624][ T9718] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -5 [ 223.399706][ T9718] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -5 [ 223.410853][ T9718] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5 [ 223.410876][ T9720] overlayfs: failed to clone upperpath [ 223.437801][ T9718] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5 [ 223.514305][ T9734] overlayfs: failed to clone upperpath [ 223.581415][ T9748] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -5 [ 223.592885][ T9748] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -5 [ 223.606318][ T9748] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -5 [ 223.620063][ T9748] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5 [ 223.629568][ T9748] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5 [ 223.646150][ T9757] tipc: Enabling of bearer rejected, failed to enable media [ 223.930451][ T9793] overlayfs: failed to resolve './cgroup': -2 [ 224.200427][ T9821] tipc: Enabling of bearer rejected, failed to enable media [ 224.465585][ T9861] overlayfs: failed to clone upperpath [ 225.175425][ T9910] netlink: 'syz.2.4033': attribute type 4 has an invalid length. [ 225.466135][ T9935] overlayfs: failed to resolve './cgroup': -2 [ 225.604645][ T9945] overlayfs: failed to clone upperpath [ 225.707328][ T9949] overlayfs: failed to clone upperpath [ 226.206820][T10002] overlayfs: failed to clone upperpath [ 226.324646][T10004] cgroup: fork rejected by pids controller in /syz5 [ 226.482124][T10048] overlayfs: failed to clone upperpath [ 226.827725][T10075] overlayfs: failed to resolve './cgroup': -2 [ 227.225070][T10111] overlayfs: failed to clone upperpath [ 228.436891][T10205] fuse: Bad value for 'fd' [ 230.291533][T10302] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 230.316714][T10306] overlayfs: failed to resolve './cgroup': -2 [ 230.540115][ T481] kernel write not supported for file /newroot/980/file0 (pid: 481 comm: kworker/1:3) [ 230.569777][T10340] overlayfs: failed to clone upperpath [ 230.727684][T10357] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 231.258335][T10368] overlayfs: failed to clone upperpath [ 231.501365][T10385] tipc: New replicast peer: 255.255.255.255 [ 231.507791][T10385] tipc: Enabled bearer , priority 9 [ 231.661482][T10399] overlayfs: failed to clone upperpath [ 232.037171][T10448] overlayfs: failed to clone upperpath [ 232.285549][T10471] overlayfs: failed to clone lowerpath [ 232.614753][ T36] audit: type=1400 audit(1786027758.020:18483): avc: denied { create } for pid=10494 comm="syz.2.4285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 233.190503][T10510] overlayfs: failed to clone upperpath [ 233.215630][ T36] audit: type=1326 audit(1786027758.620:18484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.2.4293" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e0f19e0d9 code=0x0 [ 233.307316][ T36] audit: type=1326 audit(1786027758.710:18485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.3.4300" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadbab9e0d9 code=0x0 [ 235.982541][ T36] audit: type=1400 audit(1786027761.380:18486): avc: denied { setopt } for pid=10641 comm="syz.2.4351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.015876][ T36] audit: type=1326 audit(1786027761.420:18487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.5.4353" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc50f59e0d9 code=0x0 [ 238.619313][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4389'. [ 239.751592][ T36] audit: type=1400 audit(1786027765.150:18488): avc: denied { ioctl } for pid=10808 comm="syz.2.4431" path="socket:[104352]" dev="sockfs" ino=104352 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 240.130943][T10833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4435'. [ 240.361300][T10847] tipc: Trying to set illegal importance in message [ 240.461535][T10863] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4450'. [ 240.470674][T10863] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4450'. [ 240.479855][T10863] netlink: 'syz.2.4450': attribute type 5 has an invalid length. [ 240.487743][T10863] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4450'. [ 240.658121][T10901] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4469'. [ 240.737338][T10919] netlink: 324 bytes leftover after parsing attributes in process `syz.5.4478'. [ 240.943862][T10969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4503'. [ 241.103204][T11008] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4522'. [ 241.365792][ T36] audit: type=1400 audit(1786027766.770:18489): avc: denied { bind } for pid=11076 comm="syz.2.4556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 241.526181][T11113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4575'. [ 241.830353][T11193] overlayfs: missing 'lowerdir' [ 243.732659][T11383] selinux_netlink_send: 1643 callbacks suppressed [ 243.732681][T11383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11383 comm=syz.3.4709 [ 244.496275][T11459] overlayfs: failed to clone lowerpath [ 244.884044][T11527] overlayfs: failed to clone upperpath [ 245.317615][T11577] fuse: Bad value for 'fd' [ 245.456018][T11602] 9pnet_fd: Insufficient options for proto=fd [ 246.973688][T11690] __end_swap_bio_write: 1482 callbacks suppressed [ 246.973712][T11690] Write-error on swap-device (8:0:805638) Aug 6 14:49:32 syzkaller kern.alert kernel: [ 246.973712][T11690] Write-error on swap-device (8:0:805638) [ 247.098756][T11690] Write-error on swap-device (8:0:794342) [ 247.117344][T11690] Write-error on swap-device (8:0:794350) Aug 6 14:49:32 syzkaller kern.alert kernel: [ 247.098756][T11690] Write-error on swap-device (8:0:794342) Aug[ 247.136116][T11690] Write-error on swap-device (8:0:794358) 6 14:49:32 syzkaller kern.alert kernel: [ 247.117344][T11690] Write-error on swap-device (8:0:794350) Aug 6[ 247.151342][T11690] Write-error on swap-device (8:0:794366) 14:49:32 syzkaller kern.alert k[ 247.160209][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4862'. ernel: [ 247.13[ 247.160371][T11690] Write-error on swap-device (8:0:794374) 6116][T11690] Write-error on swap-device (8:0:794358) Aug 6 14[ 247.182457][T11690] Write-error on swap-device (8:0:794382) :49:32 syzkaller[ 247.189755][T11690] Write-error on swap-device (8:0:794390) kern.alert kernel: [ 247.15134[ 247.197744][T11690] Write-error on swap-device (8:0:794398) 2][T11690] Write-error on swap-device (8:0:794366) Aug 6 14:49:32 syzkaller kern.alert kernel: [ 247.160371][T11690] Write-error on swap-device (8:0:794374) Aug 6 14:49:32 syzkaller kern.alert kernel: [ [ 247.223656][T11690] Write-error on swap-device (8:0:794406) 247.182457][T11690] Write-error[ 247.232506][T11701] overlayfs: failed to clone upperpath on swap-device (8:0:794382) Aug 6 14:49:32 syzkaller kern.alert kernel: [ 247.189755][T11690] Write-error on swap-device (8:0:794390) Aug 6 14:49:32 syzkaller kern.alert kernel: [ 247.197744][T11690] Write-error on swap-device (8:0:794398) Aug 6 14:49:32 syzkaller kern.alert kernel: [ 247.223656][T11690] Write-error on swap-device (8:0:794406) [ 248.084710][T11756] overlayfs: failed to resolve './cgroup': -2 [ 248.140032][T11762] overlayfs: failed to clone upperpath [ 248.246479][T11778] overlayfs: failed to clone upperpath [ 248.557974][T11810] overlayfs: failed to clone upperpath [ 248.566844][T11813] overlayfs: failed to resolve './cgroup': -2 [ 248.804281][T11834] overlayfs: failed to resolve './cgroup': -2 [ 249.904435][T11933] tipc: Enabling of bearer rejected, failed to enable media [ 250.013751][T11948] fuse: Bad value for 'fd' [ 250.144428][T11963] overlayfs: failed to clone upperpath [ 250.379320][T11989] overlayfs: failed to clone upperpath [ 250.577762][T12011] overlayfs: failed to clone upperpath [ 250.655137][T12015] overlayfs: failed to clone upperpath [ 250.849354][ T65] kernel write not supported for file /newroot/1298/file0 (pid: 65 comm: kworker/0:2) [ 251.117557][T12040] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 251.165845][T12049] overlayfs: failed to resolve './cgroup': -2 [ 251.259486][T12061] overlayfs: failed to clone upperpath [ 251.374088][T12087] overlayfs: failed to clone upperpath [ 251.563811][T12110] overlayfs: failed to clone upperpath [ 251.685292][T12131] 9pnet_virtio: no channels available for device syz [ 251.974910][T12140] overlayfs: failed to clone upperpath [ 253.324515][T12215] overlayfs: failed to clone upperpath [ 253.887081][ T36] audit: type=1326 audit(1786027779.290:18490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.5124" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6aa679e0d9 code=0x0 [ 254.224762][T12270] tipc: Enabling of bearer rejected, failed to enable media [ 254.815134][T12295] overlayfs: failed to clone upperpath [ 254.875651][T12298] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5142'. [ 254.957905][T12314] overlayfs: failed to clone upperpath [ 255.370423][T12329] __end_swap_bio_write: 93 callbacks suppressed [ 255.370448][T12329] Write-error on swap-device (8:0:800558) Aug 6 14:49:40 syzkaller kern.a[ 255.385976][T12329] Write-error on swap-device (8:0:800566) lert kernel: [ [ 255.392668][T12329] Write-error on swap-device (8:0:800574) 255.370448][T123[ 255.400647][T12329] Write-error on swap-device (8:0:800582) 29] Write-error [ 255.407725][T12329] Write-error on swap-device (8:0:800590) on swap-device ([ 255.414786][T12329] Write-error on swap-device (8:0:800598) 8:0:800558) Aug 6 14:49:40 syz[ 255.422669][T12329] Write-error on swap-device (8:0:800606) kaller kern.alert kernel: [ 255[ 255.431686][T12329] Write-error on swap-device (8:0:800614) .385976][T12329][ 255.439413][T12329] Write-error on swap-device (8:0:800622) Write-error on swap-device (8:0:800566) Aug 6 14:49:40 syzkal[ 255.449799][T12329] Write-error on swap-device (8:0:800630) ler kern.alert kernel: [ 255.392668][T12329] Write-error on swap-device (8:0:800574) Aug 6 14:49:40 syzkaller kern.alert kernel: [ 255.400647][T12329] Write-error on swap-device (8:0:800582) Aug 6 14:49:40 syzkaller kern.alert kernel: [ 255.407725][T12329] Write-error on swap-device (8:0:800590) Aug 6 14:49:40 syzkaller kern.alert kernel: [ 255.414786][T12329] Write-error on swap-device (8:0:800598) Aug 6 14:49:40 syzkaller kern.alert kernel: [ 255.422669][T12329] Write-error on swap-device (8:0:800606) Aug 6 14:49:40 syzkaller kern.alert kernel: [ 255.431686][T12329] Write-error on swap-device (8:0:800614) Aug 6 14:49:40 syzkaller kern.alert kernel: [ 255.439413][T12329] Write-error on swap-device (8:0:800622) Aug 6 14:49:40 syzkaller kern.alert kernel: [ 255.449799][T12329] Write-error on swap-device (8:0:800630) [ 255.546425][T12335] overlayfs: failed to clone upperpath [ 255.668639][T12343] overlayfs: failed to clone upperpath [ 256.392694][T12368] overlayfs: failed to clone upperpath [ 259.138159][T12513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12513 comm=syz.5.5218 [ 259.873861][ T36] audit: type=1400 audit(1786027785.270:18491): avc: denied { mount } for pid=12545 comm="syz.1.5230" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 259.975126][ T36] audit: type=1400 audit(1786027785.380:18492): avc: denied { create } for pid=12556 comm="syz.5.5233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 259.976880][T12557] netlink: 'syz.5.5233': attribute type 4 has an invalid length. [ 260.003151][T12557] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5233'. [ 260.487077][ T36] audit: type=1326 audit(1786027785.880:18493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.1.5253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6aa679e0d9 code=0x0 [ 260.538184][ T36] audit: type=1326 audit(1786027785.940:18494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.1.5253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 260.571326][ T36] audit: type=1326 audit(1786027785.940:18495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.1.5253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 260.608135][ T36] audit: type=1326 audit(1786027785.940:18496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.1.5253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 260.637146][ T36] audit: type=1326 audit(1786027785.940:18497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.1.5253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 260.657622][T12609] overlayfs: failed to clone upperpath [ 260.668894][ T36] audit: type=1326 audit(1786027785.940:18498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.1.5253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 260.694741][ T36] audit: type=1326 audit(1786027785.940:18499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.1.5253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 260.727908][T12612] SELinux: Context K is not valid (left unmapped). [ 260.741879][ T36] audit: type=1326 audit(1786027785.940:18500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.1.5253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 260.892052][T12626] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5262'. [ 260.901943][T12626] netlink: 35 bytes leftover after parsing attributes in process `syz.2.5262'. [ 260.911248][T12626] netlink: 'syz.2.5262': attribute type 6 has an invalid length. [ 260.919464][T12626] netlink: 'syz.2.5262': attribute type 4 has an invalid length. [ 260.931708][T12630] netlink: 'syz.3.5264': attribute type 6 has an invalid length. [ 260.947242][T12630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5264'. [ 262.468743][T12690] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5290'. [ 262.478031][T12690] z00X: renamed from gretap0 (while UP) [ 262.516236][T12690] z00X: entered allmulticast mode [ 262.538629][T12699] netlink: 'syz.1.5295': attribute type 29 has an invalid length. [ 262.546723][T12699] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.5295'. [ 263.124964][T12739] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5312'. [ 263.153345][T12739] gretap0: entered promiscuous mode [ 263.161713][T12739] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5312'. [ 263.170998][T12739] 0{X: renamed from gretap0 [ 263.219130][T12739] 0{X: left promiscuous mode [ 263.224287][T12739] 0{X: entered allmulticast mode [ 263.230656][T12739] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 263.265877][T12743] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5314'. [ 263.426530][T12749] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5314'. [ 264.200933][T12794] netlink: 'syz.5.5331': attribute type 4 has an invalid length. [ 264.335638][T12799] veth0_to_bond: mtu less than device minimum [ 264.883394][ T36] kauditd_printk_skb: 1025 callbacks suppressed [ 264.883408][ T36] audit: type=1326 audit(1786027790.290:19526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.2.5333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 264.915255][ T36] audit: type=1326 audit(1786027790.290:19527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.2.5333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 264.941723][ T36] audit: type=1326 audit(1786027790.290:19528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.2.5333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 264.967464][ T36] audit: type=1326 audit(1786027790.290:19529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.2.5333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 264.993187][ T36] audit: type=1326 audit(1786027790.290:19530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.2.5333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 265.018908][ T36] audit: type=1326 audit(1786027790.290:19531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.2.5333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 265.045610][ T36] audit: type=1326 audit(1786027790.290:19532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.2.5333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 265.071844][ T36] audit: type=1326 audit(1786027790.290:19533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.2.5333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 265.098167][ T36] audit: type=1326 audit(1786027790.300:19534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.2.5333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 265.123848][ T36] audit: type=1326 audit(1786027790.300:19535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.2.5333" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 265.306904][T12825] fuse: Unknown parameter 'pd.0x0000000000000003' [ 265.428439][T12833] overlayfs: conflicting options: userxattr,metacopy=on [ 267.091742][T12906] netlink: 'syz.1.5379': attribute type 1 has an invalid length. [ 268.604683][T12964] veth0_vlan: left promiscuous mode [ 269.318116][T12974] x_tables: duplicate underflow at hook 2 [ 269.507285][T12988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.514631][T12988] IPv6: NLM_F_CREATE should be set when creating new route [ 269.521875][T12988] IPv6: NLM_F_CREATE should be set when creating new route [ 269.893219][ T36] kauditd_printk_skb: 2363 callbacks suppressed [ 269.893288][ T36] audit: type=1326 audit(1786027795.290:21899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.2.5390" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 269.929977][ T36] audit: type=1326 audit(1786027795.300:21900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.2.5390" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 269.942240][T12990] netlink: 'syz.5.5411': attribute type 16 has an invalid length. [ 269.955531][ T36] audit: type=1326 audit(1786027795.300:21901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.2.5390" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 269.955574][ T36] audit: type=1326 audit(1786027795.300:21902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.2.5390" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 269.955603][ T36] audit: type=1326 audit(1786027795.300:21903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.2.5390" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 270.041301][ T36] audit: type=1326 audit(1786027795.300:21904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.2.5390" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 270.068392][ T36] audit: type=1326 audit(1786027795.300:21905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.2.5390" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 270.094682][ T36] audit: type=1326 audit(1786027795.300:21906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.2.5390" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 270.121543][ T36] audit: type=1326 audit(1786027795.300:21907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.2.5390" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 270.147933][ T36] audit: type=1326 audit(1786027795.310:21908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.2.5390" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e0f15e90e code=0x7ffc0000 [ 270.439740][T13010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5421'. [ 270.903681][T13038] coredump: 3161(syz.2.5430): Core dump to core aborted: cannot preserve file permissions [ 271.715238][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5448'. [ 272.266227][T13098] 9pnet_fd: Insufficient options for proto=fd [ 272.272387][T13100] syz.1.5458 (13100): attempted to duplicate a private mapping with mremap. This is not supported. [ 272.543492][T13110] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 272.553852][T13110] netlink: 'syz.3.5462': attribute type 1 has an invalid length. [ 272.626979][T13115] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 272.636356][T13115] overlayfs: missing 'lowerdir' [ 272.826972][T13124] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5466'. [ 274.934154][T13203] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5498'. [ 275.827185][ T36] kauditd_printk_skb: 473 callbacks suppressed [ 275.827205][ T36] audit: type=1400 audit(1786027801.230:22382): avc: denied { create } for pid=13216 comm="syz.3.5503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 275.862145][T13222] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 275.873122][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5504'. [ 276.238439][ T36] audit: type=1326 audit(1786027801.640:22383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.1.5511" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6aa679e0d9 code=0x0 [ 276.290639][ T36] audit: type=1326 audit(1786027801.690:22384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.1.5511" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 276.316342][ T36] audit: type=1326 audit(1786027801.690:22385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.1.5511" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 276.342316][ T36] audit: type=1326 audit(1786027801.690:22386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.1.5511" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 276.368135][ T36] audit: type=1326 audit(1786027801.690:22387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.1.5511" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 276.394042][ T36] audit: type=1326 audit(1786027801.690:22388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.1.5511" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 276.419670][ T36] audit: type=1326 audit(1786027801.690:22389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.1.5511" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 276.445575][ T36] audit: type=1326 audit(1786027801.690:22390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.1.5511" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 276.476237][ T36] audit: type=1326 audit(1786027801.690:22391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.1.5511" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa679e0d9 code=0x7ffc0000 [ 277.920829][T13302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5534'. [ 278.824132][T13351] netlink: 'syz.2.5551': attribute type 1 has an invalid length. [ 278.955881][T13364] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 279.012391][T13376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5560'. [ 279.124827][T13386] overlayfs: failed to clone upperpath [ 279.159770][T13386] fuse: Bad value for 'group_id' [ 279.164950][T13386] fuse: Bad value for 'group_id' [ 279.189896][T13394] netlink: 'syz.2.5569': attribute type 13 has an invalid length. [ 279.225333][T13394] erspan0: refused to change device tx_queue_len [ 280.265936][T13422] netlink: 'syz.1.5580': attribute type 49 has an invalid length. [ 280.329351][T13428] fuse: Bad value for 'rootmode' [ 280.373293][T13422] team_slave_1: entered promiscuous mode [ 280.384107][T13422] team_slave_1: entered allmulticast mode [ 280.516072][T13441] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5584'. [ 281.010489][ T36] kauditd_printk_skb: 485 callbacks suppressed [ 281.010507][ T36] audit: type=1400 audit(1786027806.410:22877): avc: denied { ioctl } for pid=13476 comm="syz.1.5597" path="socket:[111197]" dev="sockfs" ino=111197 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 281.684904][T13490] @0Lzzn: renamed from bridge_slave_0 (while UP) SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 281.991175][ T36] audit: type=1400 audit(1786027807.390:22878): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2975]" dev="pipefs" ino=2975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 283.123328][ T503] tipc: Disabling bearer [ 283.128843][ T503] tipc: Left network mode [ 283.263380][ T503] veth1_macvtap: left promiscuous mode [ 283.268895][ T503] veth0_vlan: left promiscuous mode [ 283.894412][ T503] ------------[ cut here ]------------ [ 283.899892][ T503] WARNING: CPU: 1 PID: 503 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 283.909956][ T503] Modules linked in: [ 283.913908][ T503] CPU: 1 UID: 0 PID: 503 Comm: kworker/u8:10 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 283.925676][ T503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.935786][ T503] Workqueue: netns cleanup_net [ 283.940564][ T503] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 283.946622][ T503] Code: e8 c1 62 d6 fc 4b 83 3c 3e 00 75 19 e8 45 9e 7d fc 49 81 ff f8 07 00 00 74 1b e8 37 9e 7d fc 49 83 c7 08 eb c9 e8 2c 9e 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 283.966292][ T503] RSP: 0018:ffffc9000c72fb90 EFLAGS: 00010293 [ 283.972459][ T503] RAX: ffffffff8509d394 RBX: ffff88811fa9c700 RCX: ffff88811872b900 [ 283.980561][ T503] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881330047e0 [ 283.988580][ T503] RBP: ffffc9000c72fbb0 R08: ffffffff87d427e7 R09: 1ffffffff0fa84fc [ 283.996603][ T503] R10: dffffc0000000000 R11: fffffbfff0fa84fd R12: dffffc0000000000 [ 284.004643][ T503] R13: dffffc0000000000 R14: ffff888133004000 R15: 00000000000007e0 [ 284.012615][ T503] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 284.021579][ T503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.028235][ T503] CR2: 00007fff2cfb60b0 CR3: 000000010cb2c000 CR4: 00000000003526b0 [ 284.036263][ T503] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 284.044275][ T503] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 284.052279][ T503] Call Trace: [ 284.055607][ T503] [ 284.058535][ T503] cleanup_net+0x6ba/0xc90 [ 284.063001][ T503] ? __cfi_cleanup_net+0x10/0x10 [ 284.067942][ T503] ? kick_pool+0xb9/0x540 [ 284.072259][ T503] process_scheduled_works+0x7f7/0x1060 [ 284.077836][ T503] worker_thread+0xc99/0x13f0 [ 284.082529][ T503] kthread+0x2c7/0x360 [ 284.086650][ T503] ? __cfi_worker_thread+0x10/0x10 [ 284.091770][ T503] ? __cfi_kthread+0x10/0x10 [ 284.096428][ T503] ret_from_fork+0x67/0xa0 [ 284.100860][ T503] ? __cfi_kthread+0x10/0x10 [ 284.105496][ T503] ret_from_fork_asm+0x1a/0x30 [ 284.110266][ T503] [ 284.113402][ T503] ---[ end trace 0000000000000000 ]--- [ 284.119081][ T503] ------------[ cut here ]------------ [ 284.124576][ T503] WARNING: CPU: 0 PID: 503 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 284.134779][ T503] Modules linked in: [ 284.138677][ T503] CPU: 0 UID: 0 PID: 503 Comm: kworker/u8:10 Tainted: G W syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 284.152016][ T503] Tainted: [W]=WARN [ 284.155870][ T503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.166018][ T503] Workqueue: netns cleanup_net [ 284.170823][ T503] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 284.176969][ T503] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 9d 7d fc 49 81 ff f8 07 00 00 74 1b e8 e2 9d 7d fc 49 83 c7 08 eb c5 e8 d7 9d 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 9d 7d fc 5b 41 5c 41 5e 41 [ 284.196632][ T503] RSP: 0018:ffffc9000c72fb90 EFLAGS: 00010293 [ 284.202690][ T503] RAX: ffffffff8509d3e9 RBX: ffff888133004800 RCX: ffff88811872b900 [ 284.210793][ T503] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888133004808 [ 284.218847][ T503] RBP: ffffc9000c72fbb0 R08: ffffffff87d427e7 R09: 1ffffffff0fa84fc [ 284.226890][ T503] R10: dffffc0000000000 R11: fffffbfff0fa84fd R12: dffffc0000000000 [ 284.234920][ T503] R13: dffffc0000000000 R14: ffff888133004000 R15: 0000000000000008 [ 284.242980][ T503] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 284.251915][ T503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.258800][ T503] CR2: 00007fff2cfb60b0 CR3: 000000010cb2c000 CR4: 00000000003526b0 [ 284.266847][ T503] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 284.274883][ T503] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 284.282856][ T503] Call Trace: [ 284.286202][ T503] [ 284.289133][ T503] cleanup_net+0x6ba/0xc90 [ 284.293609][ T503] ? __cfi_cleanup_net+0x10/0x10 [ 284.298550][ T503] ? kick_pool+0xb9/0x540 [ 284.302941][ T503] process_scheduled_works+0x7f7/0x1060 [ 284.308491][ T503] worker_thread+0xc99/0x13f0 [ 284.313232][ T503] kthread+0x2c7/0x360 [ 284.317303][ T503] ? __cfi_worker_thread+0x10/0x10 [ 284.322407][ T503] ? __cfi_kthread+0x10/0x10 [ 284.327476][ T503] ret_from_fork+0x67/0xa0 [ 284.331912][ T503] ? __cfi_kthread+0x10/0x10 [ 284.336720][ T503] ret_from_fork_asm+0x1a/0x30 [ 284.341519][ T503] [ 284.344655][ T503] ---[ end trace 0000000000000000 ]--- [ 284.403693][ T503] ------------[ cut here ]------------ [ 284.409180][ T503] WARNING: CPU: 0 PID: 503 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 284.418971][ T503] Modules linked in: [ 284.422938][ T503] CPU: 0 UID: 0 PID: 503 Comm: kworker/u8:10 Tainted: G W syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 284.436278][ T503] Tainted: [W]=WARN [ 284.440365][ T503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.450499][ T503] Workqueue: netns cleanup_net [ 284.455645][ T503] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 284.461281][ T503] Code: 3c 20 00 74 08 48 89 df e8 ff 20 f1 fc 48 8b 3b e8 27 13 dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 89 b7 00 cc e8 72 5c 98 fc <0f> 0b e9 b0 fd ff ff e8 66 5c 98 fc 0f 0b e9 18 fe ff ff e8 5a 5c [ 284.480957][ T503] RSP: 0018:ffffc9000c72fb70 EFLAGS: 00010293 [ 284.487080][ T503] RAX: ffffffff84ef154e RBX: ffff88811fa9c700 RCX: ffff88811872b900 [ 284.495208][ T503] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88811872b900 [ 284.503261][ T503] RBP: ffffc9000c72fb98 R08: ffffffff87d427e7 R09: 1ffffffff0fa84fc [ 284.511264][ T503] R10: dffffc0000000000 R11: fffffbfff0fa84fd R12: 1ffffffff0fa8250 [ 284.519336][ T503] R13: dffffc0000000000 R14: ffff88811fa9d300 R15: dffffc0000000000 [ 284.527366][ T503] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 284.536349][ T503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.542979][ T503] CR2: 00007fff2cfb60b0 CR3: 000000010cb2c000 CR4: 00000000003526b0 [ 284.550954][ T503] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 284.558963][ T503] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 284.566983][ T503] Call Trace: [ 284.570291][ T503] [ 284.573258][ T503] xfrm_net_exit+0x31/0x80 [ 284.577704][ T503] cleanup_net+0x6ba/0xc90 [ 284.582113][ T503] ? __cfi_cleanup_net+0x10/0x10 [ 284.587087][ T503] ? kick_pool+0xb9/0x540 [ 284.591422][ T503] process_scheduled_works+0x7f7/0x1060 [ 284.597008][ T503] worker_thread+0xc99/0x13f0 [ 284.601720][ T503] kthread+0x2c7/0x360 [ 284.605826][ T503] ? __cfi_worker_thread+0x10/0x10 [ 284.610961][ T503] ? __cfi_kthread+0x10/0x10 [ 284.615650][ T503] ret_from_fork+0x67/0xa0 [ 284.620084][ T503] ? __cfi_kthread+0x10/0x10 [ 284.624707][ T503] ret_from_fork_asm+0x1a/0x30 [ 284.629494][ T503] [ 284.632498][ T503] ---[ end trace 0000000000000000 ]--- [ 284.943587][ T503] bridge_slave_1: left allmulticast mode [ 284.949245][ T503] bridge_slave_1: left promiscuous mode [ 284.954940][ T503] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.983399][ T503] bridge_slave_0: left allmulticast mode [ 284.989143][ T503] bridge_slave_0: left promiscuous mode [ 284.994843][ T503] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.203297][ T503] tipc: Left network mode [ 285.343323][ T503] veth1_macvtap: left promiscuous mode [ 285.983443][ T503] ------------[ cut here ]------------ [ 285.988924][ T503] WARNING: CPU: 1 PID: 503 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 285.998491][ T503] Modules linked in: [ 286.002400][ T503] CPU: 1 UID: 0 PID: 503 Comm: kworker/u8:10 Tainted: G W syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 286.015637][ T503] Tainted: [W]=WARN [ 286.019438][ T503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.029537][ T503] Workqueue: netns cleanup_net [ 286.034360][ T503] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 286.039912][ T503] Code: 3c 20 00 74 08 48 89 df e8 ff 20 f1 fc 48 8b 3b e8 27 13 dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 89 b7 00 cc e8 72 5c 98 fc <0f> 0b e9 b0 fd ff ff e8 66 5c 98 fc 0f 0b e9 18 fe ff ff e8 5a 5c [ 286.059660][ T503] RSP: 0018:ffffc9000c72fb70 EFLAGS: 00010293 [ 286.065832][ T503] RAX: ffffffff84ef154e RBX: ffff88811cb76a80 RCX: ffff88811872b900 [ 286.073838][ T503] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88811872b900 [ 286.081811][ T503] RBP: ffffc9000c72fb98 R08: ffffffff87d427e7 R09: 1ffffffff0fa84fc [ 286.089922][ T503] R10: dffffc0000000000 R11: fffffbfff0fa84fd R12: 1ffffffff0fa8250 [ 286.097969][ T503] R13: dffffc0000000000 R14: ffff88811cb77680 R15: dffffc0000000000 [ 286.106029][ T503] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 286.115191][ T503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.121775][ T503] CR2: 000056357430c660 CR3: 000000011e2a2000 CR4: 00000000003526b0 [ 286.129802][ T503] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.137838][ T503] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 286.145863][ T503] Call Trace: [ 286.149144][ T503] [ 286.152061][ T503] xfrm_net_exit+0x31/0x80 [ 286.156572][ T503] cleanup_net+0x6ba/0xc90 [ 286.161016][ T503] ? __cfi_cleanup_net+0x10/0x10 [ 286.166023][ T503] ? kick_pool+0xb9/0x540 [ 286.170363][ T503] process_scheduled_works+0x7f7/0x1060 [ 286.175989][ T503] worker_thread+0xc99/0x13f0 [ 286.180680][ T503] kthread+0x2c7/0x360 [ 286.184819][ T503] ? __cfi_worker_thread+0x10/0x10 [ 286.189939][ T503] ? __cfi_kthread+0x10/0x10 [ 286.194654][ T503] ret_from_fork+0x67/0xa0 [ 286.199077][ T503] ? __cfi_kthread+0x10/0x10 [ 286.203708][ T503] ret_from_fork_asm+0x1a/0x30 [ 286.208477][ T503] [ 286.211489][ T503] ---[ end trace 0000000000000000 ]---