last executing test programs: 36.111354055s ago: executing program 2 (id=543): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000380)={0x1fd, 0x6, 0xf000, 0x1000, &(0x7f0000ffe000/0x1000)=nil, 0x10001, r5}) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0) (rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) (async, rerun: 32) r11 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000080)="4d01000000000000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x34, 0x81, &(0x7f0000000340)={0x11, 0x0, r12, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r12}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ce8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5e5}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x2004c040) (async) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) (async) close_range(r0, 0xffffffffffffffff, 0x0) 36.060899049s ago: executing program 2 (id=547): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e51000) syz_create_resource$binfmt(0x0) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8000000000000008, 0x8, 0x7, 0x800000000000009, 0x0, 0x1001, 0x10000, 0x100, 0x9004, 0x40000000000000, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x4, 0xb, 0x8000000008, 0x4391, 0x1c1, 0x1000000003, 0x2, 0x2, 0x9, 0x7, 0x95, 0xffffffff, 0xffffffff00000001, 0x0, 0x9, 0xf, 0x23b, 0x3, 0x2, 0x8890, 0x8, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x4, 0x8, 0x5c3e, 0x622, 0x1, 0x5, 0xfffffffffffffffa, 0xffffffffffffffff, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0xa, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x8, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x8000000, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0x8000000000000000, 0x5, 0xff8, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x7, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x2, 0x2293332f, 0x6, 0x34, 0x0, 0xd, 0x6, 0x4000005, 0x2, 0x2, 0x7, 0x8, 0xfffd, 0x80000010, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x401, 0x3, 0x8000000000005, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x4005, 0x0, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x100000000000bdb], 0x100000, 0x124182}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000700)={[0x6, 0x1000000000, 0x9d, 0x43, 0x46, 0x20002, 0x2004cb, 0x5, 0x400000001000000, 0x6903, 0x5, 0xdda, 0x3, 0x0, 0x1, 0x10000000000000], 0xdddd1000, 0x212}) ioctl$KVM_RUN(r3, 0xae80, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000a70000/0x2000)=nil, 0x2000, 0xb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x13, 0x0, &(0x7f0000000240)=0xffffffffffffff94) r5 = userfaultfd(0x1) socket$inet6(0xa, 0x6, 0x200) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x390}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 36.05132076s ago: executing program 2 (id=549): r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}}, 0x4040) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x8ca0726ad8bf8490, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4230000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r3) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000011) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r6, 0x10, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xf8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r3) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r7, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r8, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4048000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r10, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "540bfcabc7fdf35e70abd980e8dd2e84a5915eb281da6af9"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x20000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r12, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, 0x2, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2bd4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x100400}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xf}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000bc0)={0x0, 0x2, 0xc4d71004, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, r14, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2, 0x9, 0x1, 0x2, 0x5, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d4, 0x4d2}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x28}}, 0x20000000) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x34, r8, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x4009000) 35.969071106s ago: executing program 2 (id=551): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x7c}, {0x6, 0x0, 0x0, 0x7ffffffb}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x189882, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xf) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000100)="66baa000b8090000000f23c80f21f835040040000f23f8670f01c20f20e035000400000f22e02e360f22d266baa100b0e7ee66baf80cb8e348f28cef66bafc0cb00beeb8010000000f01c16604e80cb821b82a81ef66bafc0cb007f08033062e3edde1", 0x63}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000300)={0xc7, 0x0, 0x20000000001}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 35.966225796s ago: executing program 2 (id=553): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x12, r0, 0x57788000) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg$unix(r2, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x0, 0x1000}, 0x20) 35.955163828s ago: executing program 2 (id=555): r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='rootcontext', &(0x7f0000000300)='--^$-\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 20.798467754s ago: executing program 32 (id=555): r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='rootcontext', &(0x7f0000000300)='--^$-\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 9.112308119s ago: executing program 0 (id=906): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7ffffffff"], 0x24}], 0x1}, 0x0) fstat(r0, &(0x7f0000000700)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r2, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) 9.111739369s ago: executing program 1 (id=907): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mknod(0x0, 0x836fac3ed7542db, 0x2) r1 = syz_clone(0x40800, &(0x7f0000000040)="1cbceb4d89248c1248669a4dfddbf238f92636cf9ca2dc1e97039406cc32a8dc8de7f049845cb18a18d9e7544e5f3b56ba7340370e8fea8c55beaffb1087657cb565d45d83d94f2f3ffe16ec52e2c890876522060bda9f", 0x57, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="83acb56ad9fa7a56476fb2c71fef5be091539b291168a96f7c60853acef76f3cb9d4b57332dce07ca9e2e475949efba536348e9df9262f3cc65d939aca8ed00bdf0783a8f4d68835b1165119934a7dae43ef63813202d64aacb57e3135ad4da92c1bd4") statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000015c0)={0x569, 0xa0, 0x7fffffffffffffff, 0x9, 0x0, 0x5d9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) signalfd4(r4, &(0x7f0000000000), 0x8, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000001640)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000001740)={@local, @loopback}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0) preadv2(r7, &(0x7f0000002380)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x8000, 0x2, 0x12) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x3, &(0x7f0000001580)=0xf40, 0x4) recvmmsg(r9, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}}], 0x4000000000000a8, 0x0, 0x0) sendto$packet(r2, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x0, r1}) 9.065026493s ago: executing program 3 (id=908): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup(r1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) dup(r1) (async) 7.490477469s ago: executing program 0 (id=909): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x501101, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @local, 0x9}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000240), 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r5, 0x10e, 0x3, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = eventfd(0x800) r9 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00') openat2(r10, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)={0x10c00, 0x0, 0x8}, 0x18) r11 = eventfd(0x3) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000040)={r11, 0x7, 0x2, r8}) dup3(r8, r7, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r12, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r12, &(0x7f0000000100)={&(0x7f00000002c0)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x5}, 0x1c, 0x0}, 0x810) 7.490006009s ago: executing program 1 (id=910): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)=@x86={0x4, 0xa, 0x0, 0x0, 0x207, 0xb3, 0x6, 0x3, 0x43, 0x7, 0x9, 0x0, 0x0, 0x7, 0x5, 0xff, 0xa, 0x4, 0x5, '\x00', 0x3b, 0xfffffffffffffffb}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0x170001, 0x0, [0xfffffffffffffff7, 0x7ffd, 0xf7, 0x2000001ff, 0x2, 0x200000000000006, 0x10005, 0x319]}) r4 = eventfd2(0x4, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x6, 0x0, 0x6, r4, 0x1}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="93fb26bd7000fcdb9f2505"], 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r5, 0x8ee49000) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000380)={&(0x7f000041c000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/213, 0xd5, 0x1, &(0x7f0000000140)=""/136, 0x88}, &(0x7f00000003c0)=0x40) 7.489195259s ago: executing program 3 (id=911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20000, 0x87) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0xe7edd000) getrandom(&(0x7f0000000240)=""/278, 0x12c, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$incfs(r1, &(0x7f0000000100)='.pending_reads\x00', 0x60882, 0x40) r2 = getpid() syz_pidfd_open(r2, 0x0) 5.752169679s ago: executing program 0 (id=912): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) setpriority(0x1, 0x0, 0xe) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) madvise(&(0x7f00009d4000/0x1000)=nil, 0x1000, 0xd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000100)=ANY=[@ANYBLOB="686300001e00000003848c0009818487098e00e30309888b8309040e8d89000e8c8b8c020709"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r3, 0xa, 0x1c) sendmmsg$unix(r2, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) write$binfmt_elf64(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xc, 0xd5, 0x0, 0x4, 0x3, 0x6, 0x81, 0x0, 0x40, 0xff, 0x4, 0xffff, 0x38, 0x3, 0x0, 0xfff, 0x81}, [{0x6474e551, 0x80000000, 0x6, 0x2, 0x0, 0x2, 0x8f6, 0xe79}, {0x1, 0x5a, 0xff, 0x5, 0x4, 0x5, 0x4, 0x7f}, {0x4, 0x0, 0x100000000, 0x6, 0x101, 0x1, 0x40, 0x2}], "", ['\x00', '\x00']}, 0x2e8) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2d}, @dev={0xfe, 0x80, '\x00', 0x20}, @private0, 0x80000001, 0x6, 0x0, 0x100, 0x6, 0x110022, r5}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.751846559s ago: executing program 1 (id=913): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000204) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c2600b, 0x40010, r0, 0x22e7c000) sync_file_range(r0, 0x1, 0x816, 0x2) 5.701099233s ago: executing program 3 (id=914): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x1, 0x18c) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000817000/0x3000)=nil, 0xfffffffffffffd51, &(0x7f0000000400)='{\x00') (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="b8b1000f00d064f0826800ceff370f326565f30f5ac1bad004ed66b9a80200000f326f0f01c30fc013", 0x29}], 0x1, 0x2e, &(0x7f0000000100), 0x0) 3.937126324s ago: executing program 0 (id=915): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) getdents64(r0, 0xfffffffffffffffe, 0xffffffffffffff15) lseek(r0, 0x5be, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 3.936726245s ago: executing program 1 (id=916): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66742, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) madvise(&(0x7f000019c000/0x4000)=nil, 0x4000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0x2000000, 0x10000, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0xff}) write(r0, &(0x7f0000001c00)="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", 0xfffffdbf) 3.931256355s ago: executing program 3 (id=917): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) poll(&(0x7f0000000000)=[{r0, 0x40}, {}, {0xffffffffffffffff, 0x8000}], 0x3, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001080)='./binderfs/binder0\x00', 0x1, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000001180)='./bus\x00') (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') (async, rerun: 32) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) (rerun: 32) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000080)={{r1}, "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"}) ioctl$KVM_CREATE_VCPU(r1, 0x40047705, 0x2) 2.024229058s ago: executing program 0 (id=918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10202, 0x0) write$tun(r0, &(0x7f0000000480)={@val={0x0, 0x22f0}, @void, @x25={0x1, 0x4, 0xf3, "dcf351025cd23eaa25f277bf7f080e42fe67d79fa7f2b087232c4f53d337177894ff745803577adfa67ffeb4e332a0df1ed5662605f0a13108b54c291ea42fac604a618be0"}}, 0x4c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x73, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1b"}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.022299508s ago: executing program 1 (id=919): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x1f000) 1.977009852s ago: executing program 3 (id=920): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x1, 0x6, @multicast}, 0x14) getsockname$unix(r0, 0x0, &(0x7f00000008c0)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = open(&(0x7f0000000000)='./file0\x00', 0x181ff, 0x1) vmsplice(r6, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 9.446569ms ago: executing program 0 (id=921): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x49, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003500), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)=ANY=[@ANYBLOB="14000020", @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf2530000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001, 0x2, 0x3, 0x5, 0x0, 0x6}, &(0x7f0000000040)=0x20) fallocate(r2, 0x54, 0x80000000, 0x2) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0x8, 0xd) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) memfd_secret(0x80000) read$FUSE(r6, &(0x7f0000001180)={0x2020}, 0x2020) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r8, &(0x7f00000005c0)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 8.709119ms ago: executing program 1 (id=922): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = syz_usb_connect$cdc_ecm(0x3, 0x5e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0xc, {{0x6, 0x24, 0x6, 0x0, 0x0, 'j'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x6, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xd4, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1, 0xf, 0x4f}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r1, 0x3, 0x0, 0x0) memfd_secret(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) pipe2(&(0x7f0000000000), 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 3 (id=923): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000007880)='ns/pid_for_children\x00') r2 = open$dir(0x0, 0x408000, 0x5) mount_setattr(r2, 0x0, 0x9800, &(0x7f0000008f40)={0x100000, 0xc, 0x100000, {r1}}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000000)=0x7, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 22.230219][ T36] audit: type=1400 audit(1756288777.610:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.231655][ T281] cgroup: Unknown subsys name 'net' [ 22.252935][ T36] audit: type=1400 audit(1756288777.610:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.280149][ T36] audit: type=1400 audit(1756288777.640:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.280459][ T281] cgroup: Unknown subsys name 'devices' [ 22.443479][ T281] cgroup: Unknown subsys name 'hugetlb' [ 22.449111][ T281] cgroup: Unknown subsys name 'rlimit' [ 22.583936][ T36] audit: type=1400 audit(1756288777.970:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.607147][ T36] audit: type=1400 audit(1756288777.970:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.621874][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.632020][ T36] audit: type=1400 audit(1756288777.970:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.663538][ T36] audit: type=1400 audit(1756288778.020:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.664592][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.688958][ T36] audit: type=1400 audit(1756288778.020:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.723233][ T36] audit: type=1400 audit(1756288778.050:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.748793][ T36] audit: type=1400 audit(1756288778.050:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.862173][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.869279][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.878745][ T288] bridge_slave_0: entered allmulticast mode [ 23.885367][ T288] bridge_slave_0: entered promiscuous mode [ 23.892996][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.900051][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.907161][ T288] bridge_slave_1: entered allmulticast mode [ 23.914092][ T288] bridge_slave_1: entered promiscuous mode [ 24.047823][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.054946][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.062329][ T293] bridge_slave_0: entered allmulticast mode [ 24.068537][ T293] bridge_slave_0: entered promiscuous mode [ 24.078821][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.086073][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.093259][ T293] bridge_slave_1: entered allmulticast mode [ 24.099504][ T293] bridge_slave_1: entered promiscuous mode [ 24.136260][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.143328][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.150414][ T292] bridge_slave_0: entered allmulticast mode [ 24.156823][ T292] bridge_slave_0: entered promiscuous mode [ 24.163232][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.170276][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.177690][ T292] bridge_slave_1: entered allmulticast mode [ 24.183999][ T292] bridge_slave_1: entered promiscuous mode [ 24.196911][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.203975][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.211313][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.218346][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.263786][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.270852][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.277992][ T294] bridge_slave_0: entered allmulticast mode [ 24.284461][ T294] bridge_slave_0: entered promiscuous mode [ 24.290830][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.298059][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.305190][ T294] bridge_slave_1: entered allmulticast mode [ 24.312211][ T294] bridge_slave_1: entered promiscuous mode [ 24.407112][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.414513][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.440394][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.447477][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.467738][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.474818][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.535581][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.542654][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.557646][ T288] veth0_vlan: entered promiscuous mode [ 24.569365][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.576441][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.593975][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.601076][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.608664][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.615726][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.624070][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.631120][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.643038][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.650072][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.677427][ T288] veth1_macvtap: entered promiscuous mode [ 24.713358][ T293] veth0_vlan: entered promiscuous mode [ 24.720771][ T294] veth0_vlan: entered promiscuous mode [ 24.736516][ T292] veth0_vlan: entered promiscuous mode [ 24.747795][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.757987][ T292] veth1_macvtap: entered promiscuous mode [ 24.785346][ T293] veth1_macvtap: entered promiscuous mode [ 24.796921][ T294] veth1_macvtap: entered promiscuous mode [ 24.887679][ T341] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 232, size: 201) [ 24.887713][ T341] rust_binder: Error while translating object. [ 24.909928][ T341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.916993][ T341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 24.927439][ T345] fuse: Invalid rootmode [ 24.943276][ T347] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 24.962601][ T348] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.971436][ T347] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 24.993853][ T347] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 25.002776][ T347] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 25.091142][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.141145][ T329] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.241099][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 25.247377][ T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 25.256051][ T330] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 25.263613][ T31] usb 2-1: config 0 has no interface number 0 [ 25.269756][ T31] usb 2-1: config 0 interface 184 has no altsetting 0 [ 25.278404][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 25.287646][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.295880][ T329] usb 1-1: Using ep0 maxpacket: 16 [ 25.301077][ T31] usb 2-1: Product: syz [ 25.305321][ T31] usb 2-1: Manufacturer: syz [ 25.309936][ T31] usb 2-1: SerialNumber: syz [ 25.316014][ T329] usb 1-1: unable to get BOS descriptor or descriptor too short [ 25.324159][ T31] usb 2-1: config 0 descriptor?? [ 25.329898][ T329] usb 1-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 25.343941][ T31] smsc75xx v1.0.0 [ 25.347675][ T329] usb 1-1: config 1 interface 0 has no altsetting 0 [ 25.351121][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.355854][ T329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.370974][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.379081][ T329] usb 1-1: Product: syz [ 25.383276][ T329] usb 1-1: Manufacturer: syz [ 25.387899][ T329] usb 1-1: SerialNumber: syz [ 25.401140][ T330] usb 3-1: device descriptor read/64, error -71 [ 25.511164][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 25.517462][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.528423][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.538332][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 25.547440][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.556296][ T9] usb 4-1: config 0 descriptor?? [ 25.563173][ T9] hub 4-1:0.0: USB hub found [ 25.641126][ T330] usb 3-1: device descriptor read/64, error -71 [ 25.756424][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 25.764539][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 25.767352][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 25.784869][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 25.795214][ T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 25.881611][ T330] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 25.979131][ T9] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x7 [ 26.014790][ T9] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 26.041107][ T330] usb 3-1: device descriptor read/64, error -71 [ 26.164170][ T9] usb 2-1: USB disconnect, device number 2 [ 26.182334][ T355] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.204889][ T355] input: syz1 as /devices/virtual/input/input4 [ 26.301062][ T330] usb 3-1: device descriptor read/64, error -71 [ 26.381333][ T62] usb 4-1: USB disconnect, device number 2 [ 26.421407][ T330] usb usb3-port1: attempt power cycle [ 26.444758][ T329] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 26.455999][ T329] usb 1-1: USB disconnect, device number 2 [ 26.761107][ T330] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 26.788679][ T330] usb 3-1: device descriptor read/8, error -71 [ 26.793621][ T370] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 26.891752][ T377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 26.899628][ T377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:19 [ 26.922098][ T330] usb 3-1: device descriptor read/8, error -71 [ 26.941104][ T62] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.102186][ T62] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.113195][ T62] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 27.122467][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.131342][ T62] usb 2-1: config 0 descriptor?? [ 27.171165][ T330] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 27.192856][ T330] usb 3-1: device descriptor read/8, error -71 [ 27.322183][ T330] usb 3-1: device descriptor read/8, error -71 [ 27.431235][ T330] usb usb3-port1: unable to enumerate USB device [ 27.538370][ T62] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 27.547344][ T62] prodikeys 0003:041E:2801.0002: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 27.692711][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 27.692730][ T36] audit: type=1400 audit(1756288783.080:140): avc: denied { name_bind } for pid=384 comm="syz.3.15" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.720724][ T36] audit: type=1400 audit(1756288783.080:141): avc: denied { node_bind } for pid=384 comm="syz.3.15" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.743732][ T36] audit: type=1400 audit(1756288783.120:142): avc: denied { setopt } for pid=367 comm="syz.1.10" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.746557][ T330] usb 2-1: USB disconnect, device number 3 [ 27.783335][ T386] rust_binder: Error while translating object. [ 27.783379][ T386] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.795868][ T388] fuse: Invalid rootmode [ 27.801117][ T386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 27.998041][ T36] audit: type=1400 audit(1756288783.380:143): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.050548][ T405] input: syz1 as /devices/virtual/input/input5 [ 28.308938][ T36] audit: type=1400 audit(1756288783.690:144): avc: denied { ioctl } for pid=411 comm="syz.2.22" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3595 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.336034][ T36] audit: type=1400 audit(1756288783.720:145): avc: denied { create } for pid=411 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.355560][ T36] audit: type=1400 audit(1756288783.720:146): avc: denied { connect } for pid=411 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.375006][ T36] audit: type=1400 audit(1756288783.750:147): avc: denied { ioctl } for pid=411 comm="syz.2.22" path="socket:[4415]" dev="sockfs" ino=4415 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.454576][ T36] audit: type=1400 audit(1756288783.840:148): avc: denied { append } for pid=422 comm="syz.2.25" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.482211][ T36] audit: type=1400 audit(1756288783.870:149): avc: denied { write } for pid=422 comm="syz.2.25" path="socket:[3609]" dev="sockfs" ino=3609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.524971][ T428] Zero length message leads to an empty skb [ 28.662060][ T434] syz.3.29 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 28.704862][ T441] capability: warning: `syz.3.30' uses deprecated v2 capabilities in a way that may be insecure [ 28.771092][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 28.886998][ T445] syzkaller0: entered promiscuous mode [ 28.892558][ T445] syzkaller0: entered allmulticast mode [ 28.922178][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 28.944386][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.944969][ T449] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 28.961374][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 28.981248][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.983152][ T451] 9p: Unknown access argument wm8;( hmQ: -22 [ 29.004721][ T9] usb 1-1: config 0 descriptor?? [ 29.010068][ T428] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 29.204245][ T475] rust_binder: Write failure EFAULT in pid:45 [ 29.405981][ T488] ======================================================= [ 29.405981][ T488] WARNING: The mand mount option has been deprecated and [ 29.405981][ T488] and is ignored by this kernel. Remove the mand [ 29.405981][ T488] option from the mount to silence this warning. [ 29.405981][ T488] ======================================================= [ 29.448814][ T9] wacom 0003:056A:0020.0003: unknown main item tag 0x0 [ 29.461613][ T488] overlay: Unknown parameter '/' [ 29.469800][ T9] wacom 0003:056A:0020.0003: item fetching failed at offset 3/5 [ 29.492055][ T9] wacom 0003:056A:0020.0003: parse failed [ 29.497885][ T9] wacom 0003:056A:0020.0003: probe with driver wacom failed with error -22 [ 29.556576][ T491] binder: Bad value for 'stats' [ 29.571927][ T491] binder: Bad value for 'stats' [ 29.581237][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 29.650411][ T45] usb 1-1: USB disconnect, device number 4 [ 29.663065][ T496] rust_binder: Read failure Err(EFAULT) in pid:58 [ 29.742249][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 29.791068][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 29.814636][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.833166][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.853012][ T10] usb 2-1: Product: syz [ 29.857303][ T10] usb 2-1: Manufacturer: syz [ 29.876285][ T10] usb 2-1: SerialNumber: syz [ 29.900235][ T463] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 30.111866][ T463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.130784][ T463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.186131][ T10] cdc_ncm 2-1:1.0: bind() failure [ 30.194255][ T508] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.209386][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 30.225022][ T10] cdc_ncm 2-1:1.1: bind() failure [ 30.246714][ T10] usb 2-1: USB disconnect, device number 4 [ 30.481756][ T518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 30.481792][ T518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:71 [ 30.781097][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.926133][ T549] SELinux: policydb magic number 0x40 does not match expected magic number 0xf97cff8c [ 30.951085][ T549] SELinux: failed to load policy [ 30.961098][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 30.971799][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 30.980791][ T10] usb 1-1: config 1 has no interface number 1 [ 30.987012][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 31.002462][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.011985][ T550] sock: sock_set_timeout: `syz.2.63' (pid 550) tries to set negative timeout [ 31.022388][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.030454][ T10] usb 1-1: Product: syz [ 31.041088][ T10] usb 1-1: Manufacturer: syz [ 31.045799][ T10] usb 1-1: SerialNumber: syz [ 31.081105][ T330] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.221204][ T557] __vm_enough_memory: pid: 557, comm: syz.3.65, bytes: 18014402804453376 not enough memory for the allocation [ 31.233956][ T330] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 31.244808][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.259280][ T564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.259548][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.272950][ T564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.284822][ T330] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 31.298966][ T330] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 31.308612][ T330] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 31.310063][ T10] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 31.316739][ T330] usb 2-1: Manufacturer: syz [ 31.317601][ T330] usb 2-1: config 0 descriptor?? [ 31.326990][ T10] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 31.341907][ T10] usb 1-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 31.354940][ T10] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 31.361240][ T10] usb 1-1: 2:1 : invalid channels 0 [ 31.370154][ T10] usb 1-1: USB disconnect, device number 5 [ 31.379103][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.734070][ T330] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 31.741347][ T330] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 31.751380][ T330] appleir 0003:05AC:8243.0004: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 31.867795][ T595] syzkaller0: entered allmulticast mode [ 31.991623][ T330] usb 2-1: USB disconnect, device number 5 [ 32.031088][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 32.181083][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 32.187756][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.196396][ T10] usb 3-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 32.209367][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 32.217395][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.226544][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.234649][ T10] usb 3-1: Product: syz [ 32.238865][ T10] usb 3-1: Manufacturer: syz [ 32.243501][ T10] usb 3-1: SerialNumber: syz [ 32.561103][ T609] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.581240][ T613] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 32.741584][ T619] fuse: Unknown parameter 'use00000000000000000000' [ 32.931111][ T62] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 33.112517][ T62] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 33.141051][ T62] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 33.163261][ T62] usb 1-1: config 220 has no interface number 2 [ 33.169622][ T62] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 33.212371][ T62] usb 1-1: config 220 interface 0 has no altsetting 0 [ 33.229306][ T62] usb 1-1: config 220 interface 76 has no altsetting 0 [ 33.241366][ T62] usb 1-1: config 220 interface 1 has no altsetting 0 [ 33.257744][ T62] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 33.272368][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.289050][ T62] usb 1-1: Product: syz [ 33.297657][ T62] usb 1-1: Manufacturer: syz [ 33.309297][ T62] usb 1-1: SerialNumber: syz [ 33.431324][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 33.431351][ T36] audit: type=1400 audit(1756288788.820:204): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.527629][ T36] audit: type=1400 audit(1756288788.910:205): avc: denied { setopt } for pid=633 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.547391][ T616] SELinux: policydb magic number 0x112 does not match expected magic number 0xf97cff8c [ 33.571071][ T616] SELinux: failed to load policy [ 33.727589][ T62] usb 1-1: selecting invalid altsetting 0 [ 33.741128][ T62] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 33.758023][ T62] usb 1-1: No valid video chain found. [ 33.774783][ T62] usb 1-1: USB disconnect, device number 6 [ 33.821064][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.975260][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.994144][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.013964][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 34.028601][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 34.045361][ T9] usb 2-1: SerialNumber: syz [ 34.096667][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 34.111140][ T10] usb 3-1: USB disconnect, device number 6 [ 34.141767][ T36] audit: type=1400 audit(1756288789.530:206): avc: denied { nlmsg_write } for pid=626 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 34.162953][ T36] audit: type=1400 audit(1756288789.550:207): avc: denied { audit_write } for pid=626 comm="syz.3.83" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 34.184129][ T36] audit: type=1107 audit(1756288789.550:208): pid=626 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 34.204248][ T629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:125 [ 34.257978][ T36] audit: type=1400 audit(1756288789.640:209): avc: denied { getopt } for pid=635 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.258503][ T636] rust_binder: Write failure EFAULT in pid:35 [ 34.290888][ T9] usb 2-1: 0:2 : does not exist [ 34.304402][ T9] usb 2-1: USB disconnect, device number 6 [ 34.343441][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.376313][ T36] audit: type=1400 audit(1756288789.760:210): avc: denied { getattr } for pid=641 comm="syz.3.88" path="cgroup:[4026532406]" dev="nsfs" ino=4026532406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.400867][ T640] rust_binder: inc_ref_done called when no active inc_refs [ 34.400891][ T640] rust_binder: 37: no such ref 2 [ 34.415522][ T640] rust_binder: Write failure EINVAL in pid:37 [ 34.417037][ T36] audit: type=1400 audit(1756288789.800:211): avc: denied { mount } for pid=643 comm="syz.3.89" name="/" dev="ramfs" ino=5679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 34.525018][ T36] audit: type=1400 audit(1756288789.910:212): avc: denied { setopt } for pid=650 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.544639][ T36] audit: type=1400 audit(1756288789.910:213): avc: denied { write } for pid=650 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.597308][ T653] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 34.604957][ T653] SELinux: failed to load policy [ 34.700027][ T658] rust_binder: Write failure EFAULT in pid:101 [ 34.721061][ T330] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 34.736729][ T660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:103 [ 34.736811][ T660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:103 [ 34.812937][ T667] fuseblk: Bad value for 'user_id' [ 34.832926][ T667] fuseblk: Bad value for 'user_id' [ 34.892141][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.902366][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.914905][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.924752][ T330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.937662][ T330] usb 4-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00 [ 34.946828][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.958859][ T330] usb 4-1: config 0 descriptor?? [ 35.045036][ T695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 35.304240][ T709] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 35.369516][ T330] apple 0003:05AC:0225.0005: unknown main item tag 0x0 [ 35.376524][ T330] apple 0003:05AC:0225.0005: item fetching failed at offset 3/5 [ 35.384386][ T330] apple 0003:05AC:0225.0005: parse failed [ 35.390192][ T330] apple 0003:05AC:0225.0005: probe with driver apple failed with error -22 [ 35.405059][ T723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 35.691951][ T330] rust_binder: 668: removing orphan mapping 0:4096 [ 35.727021][ T741] rust_binder: Write failure EFAULT in pid:58 [ 35.763652][ T330] usb 4-1: USB disconnect, device number 3 [ 35.807999][ T749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:66 [ 35.821095][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.969510][ T762] overlayfs: failed to resolve './file1': -2 [ 36.001056][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 36.007490][ T10] usb 2-1: config index 0 descriptor too short (expected 8242, got 50) [ 36.017155][ T10] usb 2-1: config 0 has an invalid interface number: 234 but max is 0 [ 36.025401][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.035574][ T10] usb 2-1: config 0 has no interface number 0 [ 36.041730][ T10] usb 2-1: config 0 interface 234 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 36.051914][ T10] usb 2-1: config 0 interface 234 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 36.062128][ T10] usb 2-1: config 0 interface 234 has no altsetting 0 [ 36.070622][ T10] usb 2-1: New USB device found, idVendor=0781, idProduct=0200, bcdDevice=3c.a2 [ 36.076607][ T764] fuse: Unknown parameter 'user_id00000000000000000000' [ 36.081079][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.094780][ T10] usb 2-1: Product: syz [ 36.098999][ T10] usb 2-1: Manufacturer: syz [ 36.103750][ T10] usb 2-1: SerialNumber: syz [ 36.109197][ T10] usb 2-1: config 0 descriptor?? [ 36.122304][ T766] rust_binder: Failed to allocate buffer. len:192, is_oneway:false [ 36.136003][ T768] SELinux: failed to load policy [ 36.321187][ T10] ums-sddr09 2-1:0.234: USB Mass Storage device detected [ 36.361547][ T10] ums-sddr09 2-1:0.234: probe with driver ums-sddr09 failed with error -22 [ 36.530374][ T31] usb 2-1: USB disconnect, device number 7 [ 36.680960][ T330] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.830989][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 36.845831][ T330] usb 4-1: device descriptor read/all, error -71 [ 36.878695][ T802] mmap: syz.3.142 (802) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.905560][ T863] veth1_macvtap: left promiscuous mode [ 38.123985][ T868] netlink: 'syz.3.169': attribute type 6 has an invalid length. [ 38.268847][ T886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 38.283038][ T886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=886 comm=syz.2.176 [ 38.449084][ T36] kauditd_printk_skb: 258 callbacks suppressed [ 38.449104][ T36] audit: type=1400 audit(1756289053.824:472): avc: denied { read write } for pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 38.492127][ T36] audit: type=1400 audit(1756289053.864:473): avc: denied { read write } for pid=909 comm="syz.3.183" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 38.520205][ T36] audit: type=1400 audit(1756289053.864:474): avc: denied { read write } for pid=909 comm="syz.3.183" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 38.537765][ T913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=4116 sclass=netlink_tcpdiag_socket pid=913 comm=syz.3.184 [ 38.543847][ T36] audit: type=1400 audit(1756289053.864:475): avc: denied { mounton } for pid=909 comm="syz.3.183" path="/56/file0" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 38.578378][ T36] audit: type=1400 audit(1756289053.874:476): avc: denied { read } for pid=909 comm="syz.3.183" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 38.608935][ T36] audit: type=1400 audit(1756289053.874:477): avc: denied { read write } for pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 38.634817][ T36] audit: type=1400 audit(1756289053.904:478): avc: denied { create } for pid=911 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 38.655453][ T36] audit: type=1400 audit(1756289053.904:479): avc: denied { write } for pid=911 comm="syz.3.184" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 38.678577][ T36] audit: type=1400 audit(1756289053.904:480): avc: denied { create } for pid=911 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 38.698235][ T36] audit: type=1400 audit(1756289053.934:481): avc: denied { read } for pid=911 comm="syz.3.184" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 39.352662][ T970] netlink: 80 bytes leftover after parsing attributes in process `syz.1.201'. [ 39.362924][ T970] netlink: 80 bytes leftover after parsing attributes in process `syz.1.201'. [ 40.257081][ T998] netlink: 'syz.2.215': attribute type 4 has an invalid length. [ 42.261852][ T1137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 42.361983][ T1158] syzkaller0: entered allmulticast mode [ 42.715852][ T1216] netlink: 64 bytes leftover after parsing attributes in process `syz.0.293'. [ 42.998313][ T1231] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1231 comm=syz.3.299 [ 43.457875][ T36] kauditd_printk_skb: 767 callbacks suppressed [ 43.457894][ T36] audit: type=1400 audit(1756289058.835:1249): avc: denied { read write } for pid=1329 comm="syz.0.336" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 43.494175][ T36] audit: type=1400 audit(1756289058.865:1250): avc: denied { read } for pid=1331 comm="syz.1.337" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 43.515477][ T36] audit: type=1400 audit(1756289058.875:1251): avc: denied { mounton } for pid=1331 comm="syz.1.337" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 43.569456][ T36] audit: type=1400 audit(1756289058.875:1252): avc: denied { mounton } for pid=1331 comm="syz.1.337" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 43.596826][ T36] audit: type=1400 audit(1756289058.875:1253): avc: denied { mounton } for pid=1331 comm="syz.1.337" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 43.622921][ T36] audit: type=1400 audit(1756289058.875:1254): avc: denied { mounton } for pid=1331 comm="syz.1.337" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 43.647267][ T36] audit: type=1400 audit(1756289058.875:1255): avc: denied { mounton } for pid=1331 comm="syz.1.337" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 43.647341][ T1338] syz.3.339 uses obsolete (PF_INET,SOCK_PACKET) [ 43.677440][ T36] audit: type=1400 audit(1756289058.875:1256): avc: denied { mounton } for pid=1331 comm="syz.1.337" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 43.701406][ T36] audit: type=1400 audit(1756289058.875:1257): avc: denied { mounton } for pid=1331 comm="syz.1.337" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 43.760077][ T36] audit: type=1400 audit(1756289058.875:1258): avc: denied { mounton } for pid=1331 comm="syz.1.337" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 43.852746][ T1357] netlink: 'syz.1.346': attribute type 4 has an invalid length. [ 43.866852][ T1357] netlink: 'syz.1.346': attribute type 5 has an invalid length. [ 43.883868][ T1357] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.346'. [ 44.103556][ T1411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 44.903336][ T1493] capability: warning: `syz.1.396' uses 32-bit capabilities (legacy support in use) [ 45.162560][ T1530] netlink: 56 bytes leftover after parsing attributes in process `syz.2.410'. [ 45.761084][ T1552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=1552 comm=syz.2.419 [ 48.459478][ T36] kauditd_printk_skb: 26102 callbacks suppressed [ 48.459494][ T36] audit: type=1326 audit(1756289063.835:27361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x50000 [ 48.493194][ T36] audit: type=1326 audit(1756289063.875:27362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x50000 [ 48.516434][ T36] audit: type=1326 audit(1756289063.875:27363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x50000 [ 48.539744][ T36] audit: type=1326 audit(1756289063.875:27364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x50000 [ 48.563000][ T36] audit: type=1326 audit(1756289063.875:27365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x50000 [ 48.586140][ T36] audit: type=1326 audit(1756289063.875:27366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x50000 [ 48.609302][ T36] audit: type=1326 audit(1756289063.875:27367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x50000 [ 48.632469][ T36] audit: type=1326 audit(1756289063.875:27368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x50000 [ 48.655630][ T36] audit: type=1326 audit(1756289063.875:27369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x50000 [ 48.678852][ T36] audit: type=1326 audit(1756289063.875:27370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041dd8ebe9 code=0x50000 [ 64.754002][ T36] kauditd_printk_skb: 4276 callbacks suppressed [ 64.754020][ T36] audit: type=1400 audit(1756289080.137:31647): avc: denied { read write } for pid=1676 comm="syz.0.466" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 64.791423][ T36] audit: type=1400 audit(1756289080.137:31648): avc: denied { read write } for pid=1676 comm="syz.0.466" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 64.824112][ T36] audit: type=1400 audit(1756289080.137:31649): avc: denied { mounton } for pid=1676 comm="syz.0.466" path="/76/file0" dev="tmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 64.831622][ T1685] netlink: 'syz.1.467': attribute type 23 has an invalid length. [ 64.849356][ T36] audit: type=1400 audit(1756289080.137:31650): avc: denied { read append } for pid=1676 comm="syz.0.466" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 64.855265][ T1687] netlink: 'syz.1.467': attribute type 23 has an invalid length. [ 64.879867][ T36] audit: type=1400 audit(1756289080.177:31651): avc: denied { read write } for pid=1681 comm="syz.2.468" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 64.909518][ T36] audit: type=1400 audit(1756289080.177:31652): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 64.936745][ T1688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 64.953546][ T36] audit: type=1400 audit(1756289080.177:31653): avc: denied { read write } for pid=1681 comm="syz.2.468" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 64.995662][ T36] audit: type=1400 audit(1756289080.177:31654): avc: denied { create } for pid=1681 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 65.018133][ T36] audit: type=1400 audit(1756289080.177:31655): avc: denied { mounton } for pid=1681 comm="syz.2.468" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 65.042211][ T36] audit: type=1400 audit(1756289080.187:31656): avc: denied { read write } for pid=1680 comm="syz.1.467" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 65.164890][ T1717] netlink: 188 bytes leftover after parsing attributes in process `syz.0.478'. [ 65.353876][ T1737] FAULT_INJECTION: forcing a failure. [ 65.353876][ T1737] name failslab, interval 1, probability 0, space 0, times 1 [ 65.379016][ T1737] CPU: 0 UID: 0 PID: 1737 Comm: syz.2.486 Not tainted syzkaller #0 a29bcd2d578c4b9493db917853c72486663e8fa1 [ 65.379056][ T1737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.379078][ T1737] Call Trace: [ 65.379085][ T1737] [ 65.379094][ T1737] __dump_stack+0x21/0x30 [ 65.379129][ T1737] dump_stack_lvl+0x10c/0x190 [ 65.379158][ T1737] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.379188][ T1737] ? get_cached_acl+0x278/0x2c0 [ 65.379219][ T1737] dump_stack+0x19/0x20 [ 65.379247][ T1737] should_fail_ex+0x3d9/0x530 [ 65.379280][ T1737] should_failslab+0xac/0x100 [ 65.379303][ T1737] ? __cfi_shmem_initxattrs+0x10/0x10 [ 65.379333][ T1737] __kmalloc_noprof+0x69/0x450 [ 65.379364][ T1737] ? security_inode_init_security+0x120/0x560 [ 65.379399][ T1737] ? __cfi_shmem_initxattrs+0x10/0x10 [ 65.379428][ T1737] security_inode_init_security+0x120/0x560 [ 65.379462][ T1737] ? __cfi_shmem_initxattrs+0x10/0x10 [ 65.379491][ T1737] ? __cfi_security_inode_init_security+0x10/0x10 [ 65.379523][ T1737] ? __kasan_check_write+0x18/0x20 [ 65.379553][ T1737] ? set_cached_acl+0xe1/0x1a0 [ 65.379582][ T1737] ? simple_acl_create+0x190/0x1c0 [ 65.379614][ T1737] shmem_mknod+0xd5/0x200 [ 65.379643][ T1737] vfs_mknod+0x60b/0x6d0 [ 65.379670][ T1737] unix_bind+0x3fe/0x1160 [ 65.379693][ T1737] ? vfs_write+0x8ba/0xe80 [ 65.379713][ T1737] ? __cfi_unix_bind+0x10/0x10 [ 65.379746][ T1737] ? bpf_lsm_socket_bind+0xd/0x20 [ 65.379772][ T1737] ? security_socket_bind+0x33/0xd0 [ 65.379805][ T1737] __sys_bind+0x2ff/0x3f0 [ 65.379833][ T1737] ? __cfi___sys_bind+0x10/0x10 [ 65.379863][ T1737] ? __kasan_check_read+0x15/0x20 [ 65.379894][ T1737] __x64_sys_bind+0x7e/0x90 [ 65.379920][ T1737] x64_sys_call+0x1ffd/0x2ee0 [ 65.379952][ T1737] do_syscall_64+0x58/0xf0 [ 65.379979][ T1737] ? clear_bhb_loop+0x50/0xa0 [ 65.380002][ T1737] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.380057][ T1737] RIP: 0033:0x7fcaf698ebe9 [ 65.380083][ T1737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.380102][ T1737] RSP: 002b:00007fcaf7718038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 65.380130][ T1737] RAX: ffffffffffffffda RBX: 00007fcaf6bb5fa0 RCX: 00007fcaf698ebe9 [ 65.380148][ T1737] RDX: 000000000000006e RSI: 0000200000000100 RDI: 0000000000000003 [ 65.380163][ T1737] RBP: 00007fcaf7718090 R08: 0000000000000000 R09: 0000000000000000 [ 65.380179][ T1737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.380193][ T1737] R13: 00007fcaf6bb6038 R14: 00007fcaf6bb5fa0 R15: 00007fff43b6fd58 [ 65.380213][ T1737] [ 66.161768][ T1764] FAULT_INJECTION: forcing a failure. [ 66.161768][ T1764] name failslab, interval 1, probability 0, space 0, times 0 [ 66.174502][ T1764] CPU: 0 UID: 0 PID: 1764 Comm: syz.1.497 Not tainted syzkaller #0 a29bcd2d578c4b9493db917853c72486663e8fa1 [ 66.174537][ T1764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.174551][ T1764] Call Trace: [ 66.174565][ T1764] [ 66.174574][ T1764] __dump_stack+0x21/0x30 [ 66.174609][ T1764] dump_stack_lvl+0x10c/0x190 [ 66.174638][ T1764] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.174673][ T1764] dump_stack+0x19/0x20 [ 66.174701][ T1764] should_fail_ex+0x3d9/0x530 [ 66.174732][ T1764] should_failslab+0xac/0x100 [ 66.174755][ T1764] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 66.174790][ T1764] ? __x64_sys_bind+0x7e/0x90 [ 66.174816][ T1764] ? sidtab_sid2str_get+0x139/0x370 [ 66.174841][ T1764] kmemdup_noprof+0x31/0x80 [ 66.174872][ T1764] sidtab_sid2str_get+0x139/0x370 [ 66.174896][ T1764] security_sid_to_context_core+0x30d/0x5d0 [ 66.174930][ T1764] security_sid_to_context_force+0x31/0x40 [ 66.174964][ T1764] selinux_inode_init_security+0x602/0x930 [ 66.174988][ T1764] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 66.175011][ T1764] ? shmem_tmpfile+0x110/0x150 [ 66.175041][ T1764] security_inode_init_security+0x1b4/0x560 [ 66.175075][ T1764] ? __cfi_shmem_initxattrs+0x10/0x10 [ 66.175104][ T1764] ? __cfi_security_inode_init_security+0x10/0x10 [ 66.175137][ T1764] ? __kasan_check_write+0x18/0x20 [ 66.175167][ T1764] ? set_cached_acl+0xe1/0x1a0 [ 66.175196][ T1764] ? simple_acl_create+0x190/0x1c0 [ 66.175228][ T1764] shmem_mknod+0xd5/0x200 [ 66.175265][ T1764] vfs_mknod+0x60b/0x6d0 [ 66.175294][ T1764] unix_bind+0x3fe/0x1160 [ 66.175316][ T1764] ? vfs_write+0x8ba/0xe80 [ 66.175337][ T1764] ? __cfi_unix_bind+0x10/0x10 [ 66.175360][ T1764] ? bpf_lsm_socket_bind+0xd/0x20 [ 66.175385][ T1764] ? security_socket_bind+0x33/0xd0 [ 66.175418][ T1764] __sys_bind+0x2ff/0x3f0 [ 66.175445][ T1764] ? __cfi___sys_bind+0x10/0x10 [ 66.175474][ T1764] ? __kasan_check_read+0x15/0x20 [ 66.175506][ T1764] __x64_sys_bind+0x7e/0x90 [ 66.175533][ T1764] x64_sys_call+0x1ffd/0x2ee0 [ 66.175565][ T1764] do_syscall_64+0x58/0xf0 [ 66.175594][ T1764] ? clear_bhb_loop+0x50/0xa0 [ 66.175616][ T1764] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.175651][ T1764] RIP: 0033:0x7f041dd8ebe9 [ 66.175675][ T1764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.175694][ T1764] RSP: 002b:00007f041ebef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 66.175718][ T1764] RAX: ffffffffffffffda RBX: 00007f041dfb5fa0 RCX: 00007f041dd8ebe9 [ 66.175735][ T1764] RDX: 000000000000006e RSI: 0000200000000100 RDI: 0000000000000003 [ 66.175750][ T1764] RBP: 00007f041ebef090 R08: 0000000000000000 R09: 0000000000000000 [ 66.175765][ T1764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.175779][ T1764] R13: 00007f041dfb6038 R14: 00007f041dfb5fa0 R15: 00007ffd53823338 [ 66.175799][ T1764] [ 66.719089][ T1809] FAULT_INJECTION: forcing a failure. [ 66.719089][ T1809] name failslab, interval 1, probability 0, space 0, times 0 [ 66.731944][ T1809] CPU: 0 UID: 0 PID: 1809 Comm: syz.2.514 Not tainted syzkaller #0 a29bcd2d578c4b9493db917853c72486663e8fa1 [ 66.731977][ T1809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.731992][ T1809] Call Trace: [ 66.731999][ T1809] [ 66.732008][ T1809] __dump_stack+0x21/0x30 [ 66.732043][ T1809] dump_stack_lvl+0x10c/0x190 [ 66.732072][ T1809] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.732101][ T1809] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 66.732132][ T1809] dump_stack+0x19/0x20 [ 66.732158][ T1809] should_fail_ex+0x3d9/0x530 [ 66.732191][ T1809] should_failslab+0xac/0x100 [ 66.732231][ T1809] __kmalloc_node_noprof+0x6c/0x450 [ 66.732264][ T1809] ? __kvmalloc_node_noprof+0x11d/0x300 [ 66.732296][ T1809] __kvmalloc_node_noprof+0x11d/0x300 [ 66.732328][ T1809] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 66.732361][ T1809] ? __kasan_check_write+0x18/0x20 [ 66.732392][ T1809] ? _raw_spin_lock+0x8c/0x120 [ 66.732420][ T1809] ? __cfi__raw_spin_lock+0x10/0x10 [ 66.732448][ T1809] simple_xattr_alloc+0x68/0x150 [ 66.732472][ T1809] shmem_initxattrs+0x24f/0x540 [ 66.732501][ T1809] ? shmem_tmpfile+0x110/0x150 [ 66.732531][ T1809] security_inode_init_security+0x387/0x560 [ 66.732567][ T1809] ? __cfi_shmem_initxattrs+0x10/0x10 [ 66.732597][ T1809] ? __cfi_security_inode_init_security+0x10/0x10 [ 66.732632][ T1809] ? __kasan_check_write+0x18/0x20 [ 66.732670][ T1809] ? set_cached_acl+0xe1/0x1a0 [ 66.732699][ T1809] ? simple_acl_create+0x190/0x1c0 [ 66.732731][ T1809] shmem_mknod+0xd5/0x200 [ 66.732760][ T1809] vfs_mknod+0x60b/0x6d0 [ 66.732787][ T1809] unix_bind+0x3fe/0x1160 [ 66.732810][ T1809] ? vfs_write+0x8ba/0xe80 [ 66.732830][ T1809] ? __cfi_unix_bind+0x10/0x10 [ 66.732853][ T1809] ? bpf_lsm_socket_bind+0xd/0x20 [ 66.732878][ T1809] ? security_socket_bind+0x33/0xd0 [ 66.732924][ T1809] __sys_bind+0x2ff/0x3f0 [ 66.732950][ T1809] ? __cfi___sys_bind+0x10/0x10 [ 66.732978][ T1809] ? __kasan_check_read+0x15/0x20 [ 66.733008][ T1809] __x64_sys_bind+0x7e/0x90 [ 66.733034][ T1809] x64_sys_call+0x1ffd/0x2ee0 [ 66.733065][ T1809] do_syscall_64+0x58/0xf0 [ 66.733092][ T1809] ? clear_bhb_loop+0x50/0xa0 [ 66.733115][ T1809] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.733154][ T1809] RIP: 0033:0x7fcaf698ebe9 [ 66.733172][ T1809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.733190][ T1809] RSP: 002b:00007fcaf7718038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 66.733214][ T1809] RAX: ffffffffffffffda RBX: 00007fcaf6bb5fa0 RCX: 00007fcaf698ebe9 [ 66.733231][ T1809] RDX: 000000000000006e RSI: 0000200000000100 RDI: 0000000000000003 [ 66.733246][ T1809] RBP: 00007fcaf7718090 R08: 0000000000000000 R09: 0000000000000000 [ 66.733260][ T1809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.733274][ T1809] R13: 00007fcaf6bb6038 R14: 00007fcaf6bb5fa0 R15: 00007fff43b6fd58 [ 66.733292][ T1809] [ 67.208404][ T1858] netlink: 'syz.1.531': attribute type 10 has an invalid length. [ 67.286849][ T1865] x_tables: duplicate underflow at hook 4 [ 67.620862][ T1910] netlink: 'syz.1.552': attribute type 12 has an invalid length. [ 67.645161][ T1917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1917 comm=syz.1.554 [ 68.451446][ T1969] netlink: 'syz.0.572': attribute type 6 has an invalid length. [ 69.757033][ T36] kauditd_printk_skb: 11295 callbacks suppressed [ 69.757054][ T36] audit: type=1400 audit(1756289085.148:42859): avc: denied { setattr } for pid=293 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 69.771691][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 69.793194][ T293] audit: audit_lost=32 audit_rate_limit=0 audit_backlog_limit=64 [ 69.801995][ T294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 69.803398][ T293] audit: backlog limit exceeded [ 69.814273][ T294] audit: audit_lost=33 audit_rate_limit=0 audit_backlog_limit=64 [ 69.815949][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 69.823137][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 69.830741][ T293] audit: audit_lost=34 audit_rate_limit=0 audit_backlog_limit=64 [ 69.835479][ T294] audit: backlog limit exceeded [ 73.970403][ T2246] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 74.766727][ T36] kauditd_printk_skb: 30372 callbacks suppressed [ 74.766747][ T36] audit: type=1400 audit(1756289091.145:73031): avc: denied { setattr } for pid=293 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 74.777134][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 74.803422][ T293] audit: audit_lost=102 audit_rate_limit=0 audit_backlog_limit=64 [ 74.807256][ T2304] audit: audit_backlog=65 > audit_backlog_limit=64 [ 74.816486][ T293] audit: backlog limit exceeded [ 74.819781][ T2304] audit: audit_lost=103 audit_rate_limit=0 audit_backlog_limit=64 [ 74.823561][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 74.830906][ T2304] audit: backlog limit exceeded [ 74.839222][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 74.841899][ T36] audit: type=1400 audit(1756289091.155:73032): avc: denied { setattr } for pid=293 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 76.208910][ T2398] veth1_macvtap: left promiscuous mode [ 78.407670][ T2569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.786'. [ 79.776530][ T36] kauditd_printk_skb: 26258 callbacks suppressed [ 79.776548][ T36] audit: type=1400 audit(1756289096.155:97901): avc: denied { setattr } for pid=293 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 79.786890][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 79.812666][ T293] audit: audit_lost=568 audit_rate_limit=0 audit_backlog_limit=64 [ 79.820933][ T293] audit: backlog limit exceeded [ 79.826002][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 79.832843][ T293] audit: audit_lost=569 audit_rate_limit=0 audit_backlog_limit=64 [ 79.836504][ T36] audit: type=1400 audit(1756289096.165:97902): avc: denied { setattr } for pid=293 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 79.840929][ T293] audit: backlog limit exceeded [ 79.869265][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 79.875788][ T293] audit: audit_lost=570 audit_rate_limit=0 audit_backlog_limit=64 [ 82.989118][ T328] bridge_slave_1: left allmulticast mode [ 82.995745][ T328] bridge_slave_1: left promiscuous mode [ 83.001694][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.010783][ T328] bridge_slave_0: left allmulticast mode [ 83.016574][ T328] bridge_slave_0: left promiscuous mode [ 83.022272][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.189878][ T328] veth1_macvtap: left promiscuous mode [ 83.195511][ T328] veth0_vlan: left promiscuous mode [ 85.152223][ T36] kauditd_printk_skb: 10101 callbacks suppressed [ 85.152242][ T36] audit: type=1400 audit(1756289101.535:107877): avc: denied { execmem } for pid=2835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 85.196591][ T36] audit: type=1400 audit(1756289101.545:107878): avc: denied { read } for pid=2837 comm="syz.0.880" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 85.219456][ T36] audit: type=1400 audit(1756289101.545:107879): avc: denied { read } for pid=2837 comm="syz.0.880" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.243195][ T36] audit: type=1400 audit(1756289101.545:107880): avc: denied { read } for pid=2837 comm="syz.0.880" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 85.266090][ T36] audit: type=1400 audit(1756289101.565:107881): avc: denied { read write } for pid=2840 comm="syz.3.882" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 85.289367][ T36] audit: type=1400 audit(1756289101.565:107882): avc: denied { read append } for pid=2840 comm="syz.3.882" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 85.312813][ T36] audit: type=1400 audit(1756289101.575:107883): avc: denied { read write } for pid=2836 comm="syz.1.881" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 85.336732][ T36] audit: type=1400 audit(1756289101.575:107884): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.361248][ T36] audit: type=1400 audit(1756289101.575:107885): avc: denied { read write } for pid=2845 comm="syz.0.883" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 85.384497][ T36] audit: type=1400 audit(1756289101.575:107886): avc: denied { create } for pid=2845 comm="syz.0.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 90.262524][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 90.262544][ T36] audit: type=1400 audit(1756289362.643:107949): avc: denied { execmem } for pid=2884 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 90.290695][ T36] audit: type=1400 audit(1756289362.643:107950): avc: denied { read write } for pid=2886 comm="syz.1.897" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 90.330930][ T36] audit: type=1400 audit(1756289362.643:107951): avc: denied { create } for pid=2886 comm="syz.1.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 90.351654][ T36] audit: type=1400 audit(1756289362.643:107952): avc: denied { read write } for pid=2886 comm="syz.1.897" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 90.375006][ T36] audit: type=1400 audit(1756289362.683:107953): avc: denied { create } for pid=2889 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 90.395565][ T36] audit: type=1400 audit(1756289362.683:107954): avc: denied { read } for pid=2889 comm="syz.3.898" dev="nsfs" ino=4026532569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 90.416804][ T36] audit: type=1400 audit(1756289362.683:107955): avc: denied { create } for pid=2889 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 90.437437][ T36] audit: type=1400 audit(1756289362.713:107956): avc: denied { read write } for pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.462082][ T36] audit: type=1400 audit(1756289362.713:107957): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.486835][ T36] audit: type=1400 audit(1756289362.713:107958): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.587881][ T2900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 96.134480][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 96.134498][ T36] audit: type=1400 audit(1756289368.513:108012): avc: denied { execmem } for pid=2926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 96.165104][ T36] audit: type=1400 audit(1756289368.543:108013): avc: denied { read } for pid=2927 comm="syz.0.909" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 96.196652][ T36] audit: type=1400 audit(1756289368.543:108014): avc: denied { read } for pid=2929 comm="syz.3.911" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 96.219724][ T36] audit: type=1400 audit(1756289368.543:108015): avc: denied { read write } for pid=2929 comm="syz.3.911" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 96.243471][ T36] audit: type=1400 audit(1756289368.543:108016): avc: denied { read } for pid=2928 comm="syz.1.910" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 96.266678][ T36] audit: type=1400 audit(1756289368.553:108017): avc: denied { read write } for pid=2928 comm="syz.1.910" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 96.290275][ T36] audit: type=1400 audit(1756289368.553:108018): avc: denied { create } for pid=2928 comm="syz.1.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 96.311627][ T36] audit: type=1400 audit(1756289368.553:108019): avc: denied { create } for pid=2928 comm="syz.1.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 96.332338][ T36] audit: type=1400 audit(1756289368.553:108020): avc: denied { write } for pid=2928 comm="syz.1.910" name="001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 96.355429][ T36] audit: type=1400 audit(1756289368.583:108021): avc: denied { read write } for pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.603949][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 101.603968][ T36] audit: type=1400 audit(1756289373.983:108048): avc: denied { execmem } for pid=2951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 101.630878][ T36] audit: type=1400 audit(1756289374.023:108049): avc: denied { execmem } for pid=2952 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 101.650659][ T36] audit: type=1400 audit(1756289374.023:108050): avc: denied { create } for pid=2954 comm="syz.3.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 101.671347][ T36] audit: type=1400 audit(1756289374.023:108051): avc: denied { read } for pid=2953 comm="syz.0.918" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 101.694080][ T36] audit: type=1400 audit(1756289374.023:108052): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.718407][ T36] audit: type=1400 audit(1756289374.023:108053): avc: denied { create } for pid=2952 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 101.739159][ T36] audit: type=1400 audit(1756289374.023:108054): avc: denied { create } for pid=2952 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 101.758954][ T36] audit: type=1400 audit(1756289374.043:108055): avc: denied { create } for pid=2954 comm="syz.3.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 101.779580][ T36] audit: type=1400 audit(1756289374.043:108056): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.803897][ T36] audit: type=1400 audit(1756289374.043:108057): avc: denied { read write } for pid=2954 comm="syz.3.920" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 103.884031][ T328] bridge_slave_1: left allmulticast mode [ 103.903110][ T328] bridge_slave_1: left promiscuous mode [ 103.913874][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.937015][ T328] bridge_slave_0: left allmulticast mode [ 103.942699][ T328] bridge_slave_0: left promiscuous mode [ 103.956577][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.169515][ T328] veth1_macvtap: left promiscuous mode [ 104.175053][ T328] veth0_vlan: left promiscuous mode [ 104.468480][ T328] bridge_slave_1: left allmulticast mode [ 104.474144][ T328] bridge_slave_1: left promiscuous mode [ 104.479869][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.487393][ T328] bridge_slave_0: left allmulticast mode [ 104.493030][ T328] bridge_slave_0: left promiscuous mode [ 104.498797][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.506616][ T328] bridge_slave_1: left allmulticast mode [ 104.512267][ T328] bridge_slave_1: left promiscuous mode [ 104.517977][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.525420][ T328] bridge_slave_0: left allmulticast mode [ 104.531227][ T328] bridge_slave_0: left promiscuous mode [ 104.536946][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.720004][ T328] veth0_vlan: left promiscuous mode [ 104.725426][ T328] veth0_vlan: left promiscuous mode