last executing test programs: 1m49.687406525s ago: executing program 1 (id=36): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/11, 0xb}], 0x1, 0x25, 0x10000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1m49.50247005s ago: executing program 1 (id=43): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) sendmmsg$unix(r1, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) 1m49.459530431s ago: executing program 1 (id=45): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000560ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1m49.342017874s ago: executing program 1 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone3(&(0x7f0000000340)={0x23820000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2165099, 0x0) 1m49.326551903s ago: executing program 1 (id=49): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="f333", 0x2}], 0x1, 0x0, 0x0, 0x11000000}, 0x4000001) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 1m49.191246427s ago: executing program 1 (id=54): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 1m49.178972327s ago: executing program 32 (id=54): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 28.773332979s ago: executing program 0 (id=1444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x17}) close_range(r0, 0xffffffffffffffff, 0x0) 28.634871582s ago: executing program 0 (id=1447): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x2000, 0x1}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 28.208145132s ago: executing program 0 (id=1452): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b00)="98", 0x1}], 0x1}}], 0x1, 0x2400c090) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) 28.176798013s ago: executing program 0 (id=1455): prctl$PR_SET_SECUREBITS(0x1c, 0x38) setuid(0xee00) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='personality\x00') read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) 28.155273823s ago: executing program 0 (id=1456): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x80}, 0xc) r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) 27.47571534s ago: executing program 0 (id=1468): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df69b29", "ae7ebfdf4de38175"}, 0x28) recvmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1}, 0x10040) 27.370532472s ago: executing program 33 (id=1468): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df69b29", "ae7ebfdf4de38175"}, 0x28) recvmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1}, 0x10040) 1.999521021s ago: executing program 5 (id=1812): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) userfaultfd(0x80001) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$tipc(0x1e, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x100, 0x2, 0xc3}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10, 0x2, 0x318, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2, 0x1, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4aaa, 0x10, 0x0, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5fb, 0x2000, 0x2, 0x40021a, 0x0, r0}}], 0x17, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x7, 0x48b, 0x0, 0x0}}, 0x0) 1.845174975s ago: executing program 4 (id=1813): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101442, 0x1e3) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x82000, 0xe1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb, 0x12, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1.844586295s ago: executing program 4 (id=1814): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000240)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000002c0)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x3, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0xf, 0x6, 0x5, 0x3, 0x1002, 0x9, 0x1, 0x3, 0x800, 0x3, 0xe3bc, 0x6, 0x9, 0x4, 0x7, 0x5, 0x8, 0x0, 0x40, 0xd, 0xe, 0x1, 0x0, 0x4, 0x1bfe, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x7, 0x5, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x0, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0xaf5, 0xaa, 0x101, 0xfffffffe, 0x180001, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x6, 0x9, 0x4, 0x6, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x4000008, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xfffffffd, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x0, 0x2, 0x84, 0x100, 0x7, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x0, 0xd9a, 0x10000d, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0xffffff95, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x6, 0x100, 0x80066cd, 0x2c, 0x8, 0x1, 0x0, 0xc5c, 0x3ff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.775471547s ago: executing program 4 (id=1815): socket$netlink(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) fsopen(&(0x7f0000000680)='sockfs\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket(0x10, 0x2, 0x0) syz_ublk_add_dev(r0, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r7, r6, &(0x7f0000000480)={0x0, 0x18c2, 0x800, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x43}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x200019b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x4000, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x1, 0xd55, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x16, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 1.63318861s ago: executing program 5 (id=1817): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d5, 0x5}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1.542722922s ago: executing program 5 (id=1818): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x108, 0x4) ptrace$pokeuser(0x6, r2, 0x118, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x9000}, 0x20044884) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.374565516s ago: executing program 5 (id=1819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setuid(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r2 = dup(r1) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 1.283038189s ago: executing program 4 (id=1820): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.048760384s ago: executing program 4 (id=1821): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001500)=""/77, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a00)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.047116464s ago: executing program 5 (id=1829): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = epoll_create1(0x0) epoll_pwait2(r3, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 544.410447ms ago: executing program 3 (id=1822): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000140)='./file1\x00') 531.542497ms ago: executing program 3 (id=1823): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 476.058588ms ago: executing program 2 (id=1825): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) 475.774458ms ago: executing program 3 (id=1826): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x40, r1}) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22001, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 475.511708ms ago: executing program 3 (id=1827): r0 = userfaultfd(0x80001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfe48) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 475.036208ms ago: executing program 3 (id=1835): socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x20008080) 446.701849ms ago: executing program 2 (id=1828): preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 446.456429ms ago: executing program 3 (id=1830): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 407.96609ms ago: executing program 2 (id=1832): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 397.30427ms ago: executing program 2 (id=1833): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fef, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x7, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0x0, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0x80000000, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 367.194501ms ago: executing program 2 (id=1834): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 339.822562ms ago: executing program 2 (id=1836): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 111.342407ms ago: executing program 5 (id=1837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323bac0c45b45602067fffffff81004e22030d00ff00289242a8002000eaa57b00090080020e1b05000000000000ff0004f0c70f000800ffffffffffffffffff0300e7ee0000000000000000020000", 0x58}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x401, 0x81) write(r4, &(0x7f0000000600)='dummy_udc.0\n', 0xc) 0s ago: executing program 4 (id=1838): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001500)=""/77, 0x0, 0x2000}) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a00)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. [ 21.269710][ T36] audit: type=1400 audit(1785264213.580:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.270811][ T286] cgroup: Unknown subsys name 'net' [ 21.292409][ T36] audit: type=1400 audit(1785264213.580:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.319667][ T36] audit: type=1400 audit(1785264213.610:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.319858][ T286] cgroup: Unknown subsys name 'devices' [ 21.436882][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.442654][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.534592][ T36] audit: type=1400 audit(1785264213.840:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.557849][ T36] audit: type=1400 audit(1785264213.840:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.565853][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.582755][ T36] audit: type=1400 audit(1785264213.840:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.614256][ T36] audit: type=1400 audit(1785264213.910:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.639669][ T36] audit: type=1400 audit(1785264213.910:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 21.722245][ T36] audit: type=1400 audit(1785264214.030:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.747837][ T36] audit: type=1400 audit(1785264214.030:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.748118][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.188932][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.196030][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.203128][ T295] bridge_slave_0: entered allmulticast mode [ 23.209479][ T295] bridge_slave_0: entered promiscuous mode [ 23.216058][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.223088][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.230411][ T295] bridge_slave_1: entered allmulticast mode [ 23.236716][ T295] bridge_slave_1: entered promiscuous mode [ 23.290772][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.297982][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.305083][ T296] bridge_slave_0: entered allmulticast mode [ 23.311281][ T296] bridge_slave_0: entered promiscuous mode [ 23.318699][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.325754][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.332842][ T296] bridge_slave_1: entered allmulticast mode [ 23.339600][ T296] bridge_slave_1: entered promiscuous mode [ 23.359385][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.366491][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.373564][ T294] bridge_slave_0: entered allmulticast mode [ 23.379936][ T294] bridge_slave_0: entered promiscuous mode [ 23.388859][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.396074][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.403239][ T294] bridge_slave_1: entered allmulticast mode [ 23.409541][ T294] bridge_slave_1: entered promiscuous mode [ 23.462009][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.469292][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.476367][ T293] bridge_slave_0: entered allmulticast mode [ 23.482498][ T293] bridge_slave_0: entered promiscuous mode [ 23.515422][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.522492][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.529807][ T293] bridge_slave_1: entered allmulticast mode [ 23.535971][ T293] bridge_slave_1: entered promiscuous mode [ 23.593688][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.600782][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.608103][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.615152][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.629661][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.636812][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.644206][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.651328][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.680284][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.687390][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.694683][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.701740][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.733871][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.741468][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.748795][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.756314][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.763482][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.770864][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.785620][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.792665][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.800381][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.807452][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.843002][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.850191][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.865650][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.872708][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.897045][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.904095][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.911771][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.918828][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.926917][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.933944][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.941936][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.948985][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.975688][ T295] veth0_vlan: entered promiscuous mode [ 23.992793][ T293] veth0_vlan: entered promiscuous mode [ 24.009919][ T296] veth0_vlan: entered promiscuous mode [ 24.029021][ T294] veth0_vlan: entered promiscuous mode [ 24.038290][ T293] veth1_macvtap: entered promiscuous mode [ 24.045252][ T296] veth1_macvtap: entered promiscuous mode [ 24.052993][ T295] veth1_macvtap: entered promiscuous mode [ 24.075553][ T294] veth1_macvtap: entered promiscuous mode [ 24.105894][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.468540][ T341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 24.636531][ T353] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.673842][ T355] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.455412][ T391] syzkaller1: entered promiscuous mode [ 25.466631][ T391] syzkaller1: entered allmulticast mode [ 25.556771][ T394] netlink: 'syz.2.31': attribute type 1 has an invalid length. [ 25.564369][ T394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 25.660781][ T396] syzkaller0: entered promiscuous mode [ 25.671489][ T396] syzkaller0: entered allmulticast mode [ 26.405536][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.412664][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.419776][ T451] bridge_slave_0: entered allmulticast mode [ 26.427387][ T451] bridge_slave_0: entered promiscuous mode [ 26.434050][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.441294][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.448460][ T451] bridge_slave_1: entered allmulticast mode [ 26.454783][ T451] bridge_slave_1: entered promiscuous mode [ 26.533455][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.540553][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.580174][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.587270][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.596418][ T36] kauditd_printk_skb: 94 callbacks suppressed [ 26.596435][ T36] audit: type=1400 audit(1785264218.890:168): avc: denied { create } for pid=455 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 26.626235][ T451] veth0_vlan: entered promiscuous mode [ 26.635121][ T36] audit: type=1400 audit(1785264218.900:169): avc: denied { write } for pid=455 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 26.660742][ T451] veth1_macvtap: entered promiscuous mode [ 27.103872][ T36] audit: type=1400 audit(1785264219.410:170): avc: denied { mounton } for pid=496 comm="syz.0.61" path="/proc/26/task" dev="proc" ino=4435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 27.335048][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.485131][ T310] usb 1-1: Using ep0 maxpacket: 8 [ 27.491378][ T310] usb 1-1: config 0 has no interfaces? [ 27.498381][ T310] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 27.507593][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.515724][ T310] usb 1-1: Product: syz [ 27.519912][ T310] usb 1-1: Manufacturer: syz [ 27.524545][ T310] usb 1-1: SerialNumber: syz [ 27.543036][ T310] usb 1-1: config 0 descriptor?? [ 27.558592][ T36] audit: type=1400 audit(1785264219.870:171): avc: denied { execute } for pid=502 comm="syz.4.63" path=2F6D656D66643AF365099F9138C07901831F6E7578202864656C6574656429 dev="tmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 27.613124][ T36] audit: type=1400 audit(1785264219.920:172): avc: denied { read append } for pid=504 comm="syz.4.64" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.636731][ T36] audit: type=1400 audit(1785264219.920:173): avc: denied { open } for pid=504 comm="syz.4.64" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.665989][ T36] audit: type=1400 audit(1785264219.930:174): avc: denied { map } for pid=504 comm="syz.4.64" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.690917][ T36] audit: type=1400 audit(1785264219.930:175): avc: denied { execute } for pid=504 comm="syz.4.64" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.714935][ T36] audit: type=1400 audit(1785264219.980:176): avc: denied { mount } for pid=506 comm="syz.2.65" name="/" dev="ramfs" ino=5134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 27.737260][ T36] audit: type=1400 audit(1785264219.980:177): avc: denied { read write } for pid=504 comm="syz.4.64" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.770051][ T45] usb 1-1: USB disconnect, device number 2 [ 27.811006][ T513] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.811136][ T513] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.946844][ T297] bridge_slave_1: left allmulticast mode [ 27.959121][ T297] bridge_slave_1: left promiscuous mode [ 27.964831][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.972902][ T297] bridge_slave_0: left allmulticast mode [ 27.978851][ T297] bridge_slave_0: left promiscuous mode [ 27.984558][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.058740][ T530] syzkaller0: entered promiscuous mode [ 28.064360][ T530] syzkaller0: entered allmulticast mode [ 28.082095][ T297] veth1_macvtap: left promiscuous mode [ 28.090147][ T297] veth0_vlan: left promiscuous mode [ 28.798487][ T633] process 'syz.3.97' launched './file1' with NULL argv: empty string added [ 28.937966][ T639] kvm: kvm [638]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 28.959454][ T646] cgroup: fork rejected by pids controller in /syz4 [ 29.074369][ T315] bridge_slave_1: left allmulticast mode [ 29.080389][ T315] bridge_slave_1: left promiscuous mode [ 29.086148][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.105155][ T315] bridge_slave_0: left allmulticast mode [ 29.110833][ T315] bridge_slave_0: left promiscuous mode [ 29.121120][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.238462][ T315] veth1_macvtap: left promiscuous mode [ 29.255507][ T315] veth0_vlan: left promiscuous mode [ 29.444584][ T662] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.454111][ T662] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.461557][ T662] bridge_slave_0: entered allmulticast mode [ 29.468289][ T662] bridge_slave_0: entered promiscuous mode [ 29.474961][ T662] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.482460][ T662] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.489768][ T662] bridge_slave_1: entered allmulticast mode [ 29.496928][ T662] bridge_slave_1: entered promiscuous mode [ 29.502970][ T677] netlink: 9 bytes leftover after parsing attributes in process `syz.0.113'. [ 29.522590][ T677] gretap0: entered promiscuous mode [ 29.538698][ T678] netlink: 5 bytes leftover after parsing attributes in process `syz.0.113'. [ 29.547996][ T678] 0{X: renamed from gretap0 [ 29.555761][ T678] 0{X: left promiscuous mode [ 29.565018][ T678] 0{X: entered allmulticast mode [ 29.578188][ T678] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 29.702059][ T662] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.709159][ T662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.716471][ T662] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.723503][ T662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.801291][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.812302][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.827374][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.834554][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.854356][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.861848][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.917429][ T662] veth0_vlan: entered promiscuous mode [ 29.929545][ T662] veth1_macvtap: entered promiscuous mode [ 29.971930][ T701] syzkaller1: entered promiscuous mode [ 29.977507][ T701] syzkaller1: entered allmulticast mode [ 30.115071][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 30.266442][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 30.274576][ T10] usb 3-1: config 0 has no interface number 0 [ 30.280903][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 30.289003][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 30.298179][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.307307][ T10] usb 3-1: Product: syz [ 30.311523][ T10] usb 3-1: Manufacturer: syz [ 30.315053][ T66] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.316568][ T10] usb 3-1: SerialNumber: syz [ 30.329730][ T10] usb 3-1: config 0 descriptor?? [ 30.465053][ T66] usb 5-1: Using ep0 maxpacket: 16 [ 30.471385][ T66] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 30.482467][ T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.493678][ T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.503447][ T66] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 30.516594][ T66] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 30.525880][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.534540][ T66] usb 5-1: config 0 descriptor?? [ 30.675050][ T316] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.836075][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.847084][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.856856][ T316] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 30.865931][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.874593][ T316] usb 1-1: config 0 descriptor?? [ 30.943361][ T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 30.948399][ T66] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0001/input/input4 [ 30.953925][ T10] usb 3-1: USB disconnect, device number 2 [ 30.984467][ T66] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0001/input/input5 [ 31.028473][ T66] kye 0003:0458:5013.0001: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 31.176142][ T712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.184853][ T712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.195756][ T66] usb 5-1: USB disconnect, device number 2 [ 31.282481][ T316] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 31.289596][ T316] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 31.296637][ T316] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 31.303645][ T316] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 31.310705][ T316] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 31.317711][ T316] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 31.324685][ T316] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 31.332258][ T316] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 31.421425][ T766] pim6reg1: entered promiscuous mode [ 31.426860][ T766] pim6reg1: entered allmulticast mode [ 31.483506][ T316] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 31.637114][ T775] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 31.656003][ T775] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1829905768 (58556984576 ns) > initial count (3218844672 ns). Using initial count to start timer. [ 31.741659][ T780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.154'. [ 31.766729][ T780] team_slave_1: entered promiscuous mode [ 31.772552][ T780] team_slave_1: entered allmulticast mode [ 32.087547][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 32.087564][ T36] audit: type=1400 audit(1785264224.400:244): avc: denied { setopt } for pid=818 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.121484][ T36] audit: type=1400 audit(1785264224.400:245): avc: denied { read } for pid=818 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.192761][ T830] netlink: 'syz.4.167': attribute type 4 has an invalid length. [ 32.317749][ T66] usb 1-1: USB disconnect, device number 3 [ 32.835128][ T36] audit: type=1400 audit(1785264225.150:246): avc: denied { mount } for pid=865 comm="syz.0.180" name="/" dev="configfs" ino=2086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.895092][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.046719][ T66] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 33.058552][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 33.070503][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 33.072641][ T36] audit: type=1400 audit(1785264225.390:247): avc: denied { bpf } for pid=880 comm="syz.4.186" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.085025][ T66] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.115898][ T66] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.124951][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.135393][ T66] usb 4-1: config 0 descriptor?? [ 33.142911][ T864] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.203831][ T888] syzkaller1: entered promiscuous mode [ 33.209377][ T888] syzkaller1: entered allmulticast mode [ 33.254374][ T896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 33.288394][ T36] audit: type=1400 audit(1785264225.600:248): avc: denied { mounton } for pid=901 comm="syz.2.197" path="/54/file0" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 33.288409][ T902] fuse: Bad value for 'fd' [ 33.357706][ T36] audit: type=1400 audit(1785264225.670:249): avc: denied { view } for pid=915 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 33.381469][ T36] audit: type=1400 audit(1785264225.690:250): avc: denied { bind } for pid=917 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.555035][ T316] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.565354][ T36] audit: type=1400 audit(1785264225.880:251): avc: denied { create } for pid=937 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.585702][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.593220][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.600959][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.608461][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.615914][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.623323][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.630908][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.638434][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.645899][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.653490][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.660971][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.668413][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.676075][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.683463][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.690903][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.698590][ T66] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 33.707403][ T66] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 33.716191][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.731501][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.741957][ T316] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 33.751144][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.759901][ T316] usb 1-1: config 0 descriptor?? [ 33.805074][ T310] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 33.820055][ T36] audit: type=1400 audit(1785264226.130:252): avc: denied { write } for pid=863 comm="syz.3.179" name="hiddev0" dev="devtmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 33.875867][ T764] usb 4-1: USB disconnect, device number 2 [ 33.955069][ T310] usb 5-1: Using ep0 maxpacket: 16 [ 33.961263][ T310] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.972307][ T310] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.982584][ T310] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.991691][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.999885][ T310] usb 5-1: Product: syz [ 34.004073][ T310] usb 5-1: Manufacturer: syz [ 34.008703][ T310] usb 5-1: SerialNumber: syz [ 34.174278][ T316] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 34.181792][ T316] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 34.189429][ T316] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 34.197123][ T316] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 34.204542][ T316] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 34.213256][ T316] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 34.226301][ T941] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 34.235689][ T310] usb 5-1: 0:2 : does not exist [ 34.245357][ T310] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 34.257881][ T310] usb 5-1: USB disconnect, device number 3 [ 34.722488][ T36] audit: type=1326 audit(1785264227.030:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1027 comm="syz.2.219" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc66899de99 code=0x0 [ 34.779010][ T316] input: HID 054c:0df2 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0004/input/input6 [ 34.815060][ T316] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0004/input/input7 [ 34.847483][ T316] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0004/input/input8 [ 34.883739][ T316] playstation 0003:054C:0DF2.0004: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 34.895785][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.984167][ T764] usb 1-1: USB disconnect, device number 4 [ 35.056461][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.075358][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.089254][ T10] usb 4-1: string descriptor 0 read error: -22 [ 35.095774][ T10] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 35.104858][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.410899][ T1045] netlink: 'syz.2.224': attribute type 4 has an invalid length. [ 35.755083][ T764] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.905111][ T764] usb 1-1: Using ep0 maxpacket: 32 [ 35.911862][ T764] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 35.920444][ T764] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 35.929075][ T764] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 35.936983][ T31] usb 4-1: USB disconnect, device number 3 [ 35.938075][ T764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 35.955071][ T764] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 35.964741][ T764] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 35.977883][ T764] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 35.986955][ T764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.995632][ T764] usb 1-1: config 0 descriptor?? [ 36.057254][ T1056] fuse: root generation should be zero [ 36.213040][ T764] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 36.233646][ T764] usb 1-1: USB disconnect, device number 5 [ 36.241252][ T764] usblp0: removed [ 36.627388][ T1120] fuse: Bad value for 'fd' [ 36.675407][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 36.738982][ T1127] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.825022][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 36.831631][ T31] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 36.840250][ T31] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 36.849230][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 36.858411][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.868488][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 36.878497][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 36.891712][ T31] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 36.901101][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.910458][ T31] usb 1-1: config 0 descriptor?? [ 37.117649][ T31] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 37.328874][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 37.328890][ T36] audit: type=1400 audit(1785264229.640:259): avc: denied { read write } for pid=1047 comm="syz.0.225" name="lp0" dev="devtmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 37.358608][ T36] audit: type=1400 audit(1785264229.670:260): avc: denied { open } for pid=1047 comm="syz.0.225" path="/dev/usb/lp0" dev="devtmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 37.358922][ T31] usb 1-1: USB disconnect, device number 6 [ 37.392108][ T31] usblp0: removed [ 37.464187][ T36] audit: type=1400 audit(1785264229.770:261): avc: denied { create } for pid=1137 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 37.493923][ T36] audit: type=1400 audit(1785264229.770:262): avc: denied { sys_admin } for pid=1137 comm="syz.4.254" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 37.571598][ T1143] can0: slcan on ttyS3. [ 37.639076][ T1143] can0 (unregistered): slcan off ttyS3. [ 37.993384][ T36] audit: type=1400 audit(1785264230.300:263): avc: denied { accept } for pid=1193 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.021245][ T36] audit: type=1400 audit(1785264230.310:264): avc: denied { setopt } for pid=1193 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.042958][ T36] audit: type=1400 audit(1785264230.310:265): avc: denied { read } for pid=1193 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.076907][ T1199] netlink: 'syz.3.268': attribute type 12 has an invalid length. [ 38.087306][ T1197] kvm: pic: level sensitive irq not supported [ 38.087363][ T1197] kvm: pic: non byte read [ 38.593778][ T1213] overlayfs: failed to clone upperpath [ 39.118271][ T1232] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 39.158477][ T36] audit: type=1400 audit(1785264231.470:266): avc: denied { getopt } for pid=1233 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.183569][ T36] audit: type=1400 audit(1785264231.490:267): avc: denied { wake_alarm } for pid=1235 comm="syz.2.283" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.925042][ T764] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 40.085027][ T764] usb 5-1: Using ep0 maxpacket: 16 [ 40.091343][ T764] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 40.103419][ T764] usb 5-1: config 0 interface 0 has no altsetting 0 [ 40.110251][ T764] usb 5-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 40.125002][ T764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.144735][ T764] usb 5-1: config 0 descriptor?? [ 40.164118][ T36] audit: type=1400 audit(1785264232.470:268): avc: denied { search } for pid=1263 comm="syz.3.293" name="/" dev="configfs" ino=2086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.296673][ T1274] ======================================================= [ 40.296673][ T1274] WARNING: The mand mount option has been deprecated and [ 40.296673][ T1274] and is ignored by this kernel. Remove the mand [ 40.296673][ T1274] option from the mount to silence this warning. [ 40.296673][ T1274] ======================================================= [ 40.541362][ T1285] kvm: pic: non byte read [ 40.546118][ T1285] kvm: pic: non byte read [ 40.550726][ T1285] kvm: pic: non byte read [ 40.557467][ T1285] kvm: pic: non byte read [ 40.562070][ T1285] kvm: pic: non byte read [ 40.577358][ T1285] kvm: pic: non byte read [ 40.582219][ T1285] kvm: pic: non byte read [ 40.587521][ T1285] kvm: pic: non byte read [ 40.592261][ T1285] kvm: pic: non byte read [ 40.696175][ T954] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.704458][ T1298] Bluetooth: hci1: sending frame failed (-49) [ 40.710874][ T1296] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 40.863200][ T764] usbhid 5-1:0.0: can't add hid device: -71 [ 40.869221][ T764] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 40.877993][ T764] usb 5-1: USB disconnect, device number 4 [ 41.195140][ T45] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 41.346250][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 41.357122][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 41.368085][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 41.381115][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=0061, bcdDevice= 0.00 [ 41.390239][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.398820][ T45] usb 1-1: config 0 descriptor?? [ 41.404023][ T1318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 41.814315][ T45] wacom 0003:056A:0061.0005: item fetching failed at offset 5/6 [ 41.822250][ T45] wacom 0003:056A:0061.0005: parse failed [ 41.828098][ T45] wacom 0003:056A:0061.0005: probe with driver wacom failed with error -22 [ 42.020242][ T45] usb 1-1: USB disconnect, device number 7 [ 42.745046][ T1296] Bluetooth: hci0: command 0x1003 tx timeout [ 42.751309][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.777840][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 42.777856][ T36] audit: type=1400 audit(1785264235.090:280): avc: denied { remount } for pid=1334 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.537955][ T1374] mmap: syz.2.325 (1374) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.809069][ T36] audit: type=1400 audit(1785264236.120:281): avc: denied { read } for pid=1385 comm="syz.2.331" name="/" dev="configfs" ino=2086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.831088][ T36] audit: type=1400 audit(1785264236.120:282): avc: denied { open } for pid=1385 comm="syz.2.331" path="/" dev="configfs" ino=2086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.897157][ T36] audit: type=1400 audit(1785264236.210:283): avc: denied { setattr } for pid=1395 comm="syz.2.336" name="/" dev="configfs" ino=2086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.995068][ T764] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 44.156053][ T764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.175044][ T764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.195408][ T764] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.216202][ T764] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.230763][ T764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.247532][ T764] usb 1-1: config 0 descriptor?? [ 44.657860][ T764] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 44.670194][ T1425] overlayfs: failed to clone upperpath [ 44.671617][ T764] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 44.686734][ T764] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 44.702136][ T764] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 44.709834][ T764] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 44.717452][ T764] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 44.725212][ T764] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 44.732647][ T764] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 44.740629][ T764] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 44.748244][ T764] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 44.757553][ T764] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 44.765576][ T764] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 44.774762][ T36] audit: type=1400 audit(1785264237.080:284): avc: denied { associate } for pid=1430 comm="syz.2.348" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 44.805053][ T764] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 44.812878][ T764] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 44.820486][ T764] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 44.829243][ T764] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 44.840058][ T764] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 44.945638][ T764] usb 1-1: USB disconnect, device number 8 [ 44.964745][ T1439] capability: warning: `syz.2.352' uses deprecated v2 capabilities in a way that may be insecure [ 44.990470][ T1439] cgroup: Setting release_agent not allowed [ 45.332208][ T36] audit: type=1400 audit(1785264237.640:285): avc: denied { create } for pid=1449 comm="syz.3.356" name="#18" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.379758][ T36] audit: type=1400 audit(1785264237.640:286): avc: denied { link } for pid=1449 comm="syz.3.356" name="#18" dev="tmpfs" ino=506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.416218][ T36] audit: type=1400 audit(1785264237.640:287): avc: denied { rename } for pid=1449 comm="syz.3.356" name="#19" dev="tmpfs" ino=506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.463851][ T36] audit: type=1400 audit(1785264237.680:288): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 45.592039][ T1452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 45.622057][ T36] audit: type=1400 audit(1785264237.930:289): avc: denied { relabelfrom } for pid=1466 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 46.065520][ T417] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.082942][ T417] Bluetooth: hci1: Frame reassembly failed (-84) [ 46.255044][ T764] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 46.416063][ T764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.429596][ T764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.441713][ T764] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.465102][ T764] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.479630][ T764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.496332][ T764] usb 5-1: config 0 descriptor?? [ 46.909496][ T764] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.916998][ T764] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.924381][ T764] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.931871][ T764] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.939282][ T764] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.946704][ T764] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.954113][ T764] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.961519][ T764] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.968952][ T764] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.976370][ T764] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.983819][ T764] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.991313][ T764] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 46.998837][ T764] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 47.006324][ T764] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 47.013721][ T764] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 47.021492][ T764] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 47.030306][ T764] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 47.175638][ T45] usb 5-1: USB disconnect, device number 5 [ 47.373195][ T1506] bridge0: port 3(dummy0) entered blocking state [ 47.379673][ T1506] bridge0: port 3(dummy0) entered disabled state [ 47.387766][ T1506] dummy0: entered allmulticast mode [ 47.393487][ T1506] dummy0: entered promiscuous mode [ 47.399120][ T1506] bridge0: port 3(dummy0) entered blocking state [ 47.405545][ T1506] bridge0: port 3(dummy0) entered forwarding state [ 47.415326][ T1506] dummy0: left allmulticast mode [ 47.420292][ T1506] dummy0: left promiscuous mode [ 47.425480][ T1506] bridge0: port 3(dummy0) entered disabled state [ 47.651648][ T1522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 47.771872][ T1531] bridge0: port 3(dummy0) entered blocking state [ 47.778308][ T1531] bridge0: port 3(dummy0) entered disabled state [ 47.784735][ T1531] dummy0: entered allmulticast mode [ 47.795253][ T1531] dummy0: entered promiscuous mode [ 47.800522][ T1531] bridge0: port 3(dummy0) entered blocking state [ 47.806902][ T1531] bridge0: port 3(dummy0) entered forwarding state [ 47.823363][ T1531] dummy0: left allmulticast mode [ 47.832316][ T1531] dummy0: left promiscuous mode [ 47.837276][ T1531] bridge0: port 3(dummy0) entered disabled state [ 47.846025][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 47.846040][ T36] audit: type=1400 audit(1785264240.160:294): avc: denied { setopt } for pid=1543 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.933466][ T36] audit: type=1400 audit(1785264240.240:295): avc: denied { bind } for pid=1543 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.020530][ T1549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 48.105046][ T1296] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 48.111323][ T1298] Bluetooth: hci1: command 0x1003 tx timeout [ 48.117423][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.123725][ T1298] Bluetooth: hci0: command 0x1003 tx timeout [ 48.245968][ T36] audit: type=1400 audit(1785264240.550:296): avc: denied { read write } for pid=1555 comm="syz.0.397" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 48.325283][ T36] audit: type=1400 audit(1785264240.560:297): avc: denied { open } for pid=1555 comm="syz.0.397" path="/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 48.380725][ T36] audit: type=1400 audit(1785264240.600:298): avc: denied { create } for pid=1557 comm="syz.2.399" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.455012][ T36] audit: type=1400 audit(1785264240.600:299): avc: denied { mounton } for pid=1557 comm="syz.2.399" path="/135/file0" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.522486][ T36] audit: type=1400 audit(1785264240.600:300): avc: denied { read write } for pid=1557 comm="syz.2.399" name="file0" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.605013][ T36] audit: type=1400 audit(1785264240.600:301): avc: denied { open } for pid=1557 comm="syz.2.399" path="/135/file0" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.669058][ T36] audit: type=1400 audit(1785264240.620:302): avc: denied { unlink } for pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.826169][ T985] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.119868][ T1616] overlayfs: failed to clone upperpath [ 50.905042][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 50.911099][ T1298] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.507632][ T1671] netlink: 104 bytes leftover after parsing attributes in process `syz.2.438'. [ 51.516713][ T36] audit: type=1400 audit(1785264243.820:303): avc: denied { nlmsg_read } for pid=1669 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.550890][ T1668] kvm: kvm [1666]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 52.112301][ T1703] netlink: 104 bytes leftover after parsing attributes in process `syz.0.450'. [ 52.666252][ T1730] tipc: Started in network mode [ 52.679972][ T1730] tipc: Node identity 7f000001, cluster identity 4711 [ 52.703866][ T1730] tipc: Enabled bearer , priority 10 [ 52.727415][ T1730] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 52.755194][ T1730] tipc: Enabled bearer , priority 10 [ 53.395521][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 53.395537][ T36] audit: type=1326 audit(1785264245.710:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1745 comm="syz.0.467" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7faa2893f219 code=0x0 [ 53.825058][ T10] tipc: Node number set to 2130706433 [ 54.247845][ T36] audit: type=1400 audit(1785264246.560:309): avc: denied { read } for pid=1764 comm="syz.3.476" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.465057][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 54.625073][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 54.631429][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.643193][ T10] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 54.652302][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.660324][ T10] usb 1-1: Product: syz [ 54.664511][ T10] usb 1-1: Manufacturer: syz [ 54.669115][ T10] usb 1-1: SerialNumber: syz [ 54.674181][ T10] usb 1-1: config 0 descriptor?? [ 54.679950][ T10] sr9700 1-1:0.0: probe with driver sr9700 failed with error -22 [ 54.886399][ T10] usb 1-1: USB disconnect, device number 9 [ 55.582339][ T1788] af_packet: tpacket_rcv: packet too big, clamped from 65526 to 4. macoff=68 [ 55.592255][ T1784] dummy_hcd dummy_hcd.0: remove, state 4 [ 55.597982][ T1784] usb usb1: USB disconnect, device number 1 [ 55.615639][ T1784] dummy_hcd dummy_hcd.0: stopped [ 55.622428][ T1784] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 55.629602][ T36] audit: type=1326 audit(1785264247.940:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1790 comm="syz.2.487" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc66899de99 code=0x0 [ 55.766607][ T1799] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 55.965557][ T36] audit: type=1400 audit(1785264248.280:311): avc: denied { getopt } for pid=1808 comm="syz.0.494" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.260032][ T36] audit: type=1400 audit(1785264248.570:312): avc: denied { getopt } for pid=1822 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.875413][ T36] audit: type=1326 audit(1785264249.190:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1858 comm="syz.3.515" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0c3d9de99 code=0x0 [ 57.958735][ T36] audit: type=1400 audit(1785264250.270:314): avc: denied { watch watch_reads } for pid=1907 comm="syz.2.530" path="/184" dev="tmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.025241][ T36] audit: type=1400 audit(1785264250.330:315): avc: denied { sqpoll } for pid=1909 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.155038][ T310] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 58.583280][ T310] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 58.592641][ T310] usb 5-1: config 0 has no interface number 0 [ 58.599188][ T310] usb 5-1: config 0 interface 41 has no altsetting 0 [ 58.608609][ T310] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 58.626834][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.634860][ T310] usb 5-1: Product: syz [ 58.639061][ T310] usb 5-1: Manufacturer: syz [ 58.645102][ T310] usb 5-1: SerialNumber: syz [ 58.655212][ T310] usb 5-1: config 0 descriptor?? [ 58.914056][ T1954] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 59.279549][ T310] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 59.289412][ T310] usb 5-1: USB disconnect, device number 6 [ 60.581847][ T2017] overlayfs: failed to clone upperpath [ 60.623906][ T36] audit: type=1400 audit(1785264252.930:316): avc: denied { remount } for pid=2023 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 60.786557][ T36] audit: type=1400 audit(1785264253.100:317): avc: denied { getopt } for pid=2029 comm="syz.0.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.806384][ T36] audit: type=1400 audit(1785264253.120:318): avc: denied { shutdown } for pid=2029 comm="syz.0.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.301549][ T2053] netlink: 'syz.0.587': attribute type 27 has an invalid length. [ 61.316232][ T2053] 0{X: left allmulticast mode [ 61.329904][ T2053] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.337147][ T2053] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.493105][ T2060] syzkaller0: entered promiscuous mode [ 61.656518][ T2075] loop6: detected capacity change from 0 to 7 [ 61.822165][ T36] audit: type=1400 audit(1785264254.130:319): avc: denied { write } for pid=2084 comm="syz.0.592" name="unix" dev="proc" ino=4026532375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.883989][ T36] audit: type=1400 audit(1785264254.190:320): avc: denied { setopt } for pid=2090 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.915336][ T36] audit: type=1400 audit(1785264254.210:321): avc: denied { mount } for pid=2093 comm="syz.3.597" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 61.955204][ T36] audit: type=1400 audit(1785264254.210:322): avc: denied { read } for pid=2093 comm="syz.3.597" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 61.993119][ T36] audit: type=1400 audit(1785264254.270:323): avc: denied { mount } for pid=2096 comm="syz.2.598" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.027494][ T36] audit: type=1400 audit(1785264254.340:324): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 62.250976][ T2125] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 62.709976][ T2169] syzkaller0: entered promiscuous mode [ 62.725067][ T2169] syzkaller0: entered allmulticast mode [ 63.427128][ T36] audit: type=1400 audit(1785264255.740:325): avc: denied { mount } for pid=2195 comm="syz.2.638" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 64.668904][ T2230] kvm: user requested TSC rate below hardware speed [ 65.919228][ T2292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2292 comm=syz.2.674 [ 65.933242][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 65.933257][ T36] audit: type=1400 audit(1785264258.250:327): avc: denied { write } for pid=2290 comm="syz.0.673" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 65.972054][ T36] audit: type=1400 audit(1785264258.280:328): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.806021][ T36] audit: type=1400 audit(1785264259.120:329): avc: denied { map } for pid=2340 comm="syz.3.694" path="socket:[19627]" dev="sockfs" ino=19627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.836153][ T36] audit: type=1400 audit(1785264259.120:330): avc: denied { read } for pid=2340 comm="syz.3.694" path="socket:[19627]" dev="sockfs" ino=19627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.920603][ T2348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.697'. [ 67.117717][ T36] audit: type=1326 audit(1785264259.430:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2364 comm="syz.0.705" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa2899de99 code=0x0 [ 67.255068][ T316] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 67.405010][ T316] usb 4-1: Using ep0 maxpacket: 16 [ 67.411586][ T316] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 67.419800][ T316] usb 4-1: config 0 has no interface number 0 [ 67.426003][ T316] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 67.433169][ T36] audit: type=1326 audit(1785264259.740:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2378 comm="syz.2.709" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc66899de99 code=0x0 [ 67.436029][ T316] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 67.471916][ T316] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 67.480990][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.488999][ T316] usb 4-1: Product: syz [ 67.493156][ T316] usb 4-1: Manufacturer: syz [ 67.497755][ T316] usb 4-1: SerialNumber: syz [ 67.503072][ T316] usb 4-1: config 0 descriptor?? [ 67.508362][ T2358] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 67.515684][ T2358] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 67.726899][ T2358] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 67.734689][ T2358] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 67.948027][ T316] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 67.961156][ T36] audit: type=1400 audit(1785264260.270:333): avc: denied { ioctl } for pid=2399 comm="syz.0.716" path="socket:[20616]" dev="sockfs" ino=20616 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.986505][ T36] audit: type=1400 audit(1785264260.270:334): avc: denied { getopt } for pid=2399 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.457719][ T2424] syz.2.726: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 68.493312][ T2424] CPU: 1 UID: 0 PID: 2424 Comm: syz.2.726 Not tainted syzkaller #0 52d57b431c43020f0342b1af6a326091b8e30d09 [ 68.493350][ T2424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.493370][ T2424] Call Trace: [ 68.493377][ T2424] [ 68.493385][ T2424] __dump_stack+0x21/0x30 [ 68.493424][ T2424] dump_stack_lvl+0x140/0x1c0 [ 68.493451][ T2424] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.493477][ T2424] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 68.493501][ T2424] dump_stack+0x19/0x20 [ 68.493525][ T2424] warn_alloc+0x1e7/0x2c0 [ 68.493550][ T2424] ? stack_depot_save_flags+0x38/0x800 [ 68.493574][ T2424] ? __cfi_warn_alloc+0x10/0x10 [ 68.493600][ T2424] ? kasan_save_track+0x3e/0x80 [ 68.493621][ T2424] ? kasan_save_alloc_info+0x3a/0x50 [ 68.493648][ T2424] ? xsk_init_queue+0xb2/0x120 [ 68.493671][ T2424] ? xsk_setsockopt+0x4c5/0x760 [ 68.493693][ T2424] ? do_sock_setsockopt+0x27c/0x410 [ 68.493711][ T2424] ? __x64_sys_setsockopt+0x1b7/0x250 [ 68.493734][ T2424] ? x64_sys_call+0x2adc/0x2ee0 [ 68.493752][ T2424] ? do_syscall_64+0x57/0xf0 [ 68.493772][ T2424] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.493797][ T2424] __vmalloc_node_range_noprof+0x136/0x1300 [ 68.493829][ T2424] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 68.493857][ T2424] ? kasan_save_alloc_info+0x3a/0x50 [ 68.493884][ T2424] ? __kasan_kmalloc+0x96/0xb0 [ 68.493906][ T2424] ? __kmalloc_cache_noprof+0x23c/0x470 [ 68.493927][ T2424] vmalloc_user_noprof+0x77/0x90 [ 68.493954][ T2424] ? xskq_create+0xdb/0x290 [ 68.493977][ T2424] xskq_create+0xdb/0x290 [ 68.494000][ T2424] xsk_init_queue+0xb2/0x120 [ 68.494023][ T2424] xsk_setsockopt+0x4c5/0x760 [ 68.494045][ T2424] ? __cfi_xsk_setsockopt+0x10/0x10 [ 68.494067][ T2424] ? do_futex+0x32a/0x510 [ 68.494091][ T2424] ? file_init_path+0x434/0x590 [ 68.494115][ T2424] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 68.494138][ T2424] ? security_socket_setsockopt+0x3d/0x100 [ 68.494163][ T2424] ? __cfi_xsk_setsockopt+0x10/0x10 [ 68.494186][ T2424] do_sock_setsockopt+0x27c/0x410 [ 68.494204][ T2424] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 68.494222][ T2424] ? __fget_files+0x2bc/0x330 [ 68.494245][ T2424] __x64_sys_setsockopt+0x1b7/0x250 [ 68.494273][ T2424] x64_sys_call+0x2adc/0x2ee0 [ 68.494292][ T2424] do_syscall_64+0x57/0xf0 [ 68.494312][ T2424] ? clear_bhb_loop+0x50/0xa0 [ 68.494338][ T2424] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.494364][ T2424] RIP: 0033:0x7fc66899de99 [ 68.494382][ T2424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.494398][ T2424] RSP: 002b:00007fc66981a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 68.494420][ T2424] RAX: ffffffffffffffda RBX: 00007fc668c25fa0 RCX: 00007fc66899de99 [ 68.494435][ T2424] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 68.494447][ T2424] RBP: 00007fc668a33eaf R08: 0000000000000004 R09: 0000000000000000 [ 68.494460][ T2424] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 68.494474][ T2424] R13: 00007fc668c26038 R14: 00007fc668c25fa0 R15: 00007fff90cdac68 [ 68.494490][ T2424] [ 68.494505][ T2424] Mem-Info: [ 68.829630][ T2424] active_anon:59915 inactive_anon:210 isolated_anon:0 [ 68.829630][ T2424] active_file:21079 inactive_file:2333 isolated_file:0 [ 68.829630][ T2424] unevictable:16932 dirty:147 writeback:0 [ 68.829630][ T2424] slab_reclaimable:5240 slab_unreclaimable:72020 [ 68.829630][ T2424] mapped:24355 shmem:52398 pagetables:1153 [ 68.829630][ T2424] sec_pagetables:0 bounce:0 [ 68.829630][ T2424] kernel_misc_reclaimable:0 [ 68.829630][ T2424] free:1448693 free_pcp:5170 free_cma:0 [ 68.879667][ T2424] Node 0 active_anon:225860kB inactive_anon:840kB active_file:84316kB inactive_file:9332kB unevictable:67728kB isolated(anon):0kB isolated(file):0kB mapped:97420kB dirty:588kB writeback:0kB shmem:195792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6720kB pagetables:4612kB sec_pagetables:0kB all_unreclaimable? no [ 68.915052][ T2424] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963400kB mlocked:0kB bounce:0kB free_pcp:5236kB local_pcp:5236kB free_cma:0kB [ 68.945912][ T316] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 68.967173][ T316] asix 4-1:0.34: probe with driver asix failed with error -71 [ 68.980444][ T2424] lowmem_reserve[]: 0 3921 3921 [ 68.998081][ T2424] Normal free:2887840kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:206260kB inactive_anon:840kB active_file:84316kB inactive_file:9332kB unevictable:67728kB writepending:588kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 69.036929][ T316] usb 4-1: USB disconnect, device number 4 [ 69.075005][ T2424] lowmem_reserve[]: 0 0 0 [ 69.079414][ T2424] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 69.135034][ T2424] Normal: 1439*4kB (UME) 492*8kB (UME) 180*16kB (UME) 99*32kB (UME) 97*64kB (UME) 42*128kB (UME) 137*256kB (UME) 49*512kB (UME) 47*1024kB (UME) 15*2048kB (ME) 666*4096kB (UME) = 2894268kB [ 69.174185][ T2424] 77596 total pagecache pages [ 69.179198][ T2424] 220 pages in swap cache [ 69.183650][ T36] audit: type=1400 audit(1785264261.490:335): avc: denied { bind } for pid=2428 comm="syz.4.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.194260][ T2424] Free swap = 56340kB [ 69.215041][ T2424] Total swap = 124996kB [ 69.225371][ T2424] 2097051 pages RAM [ 69.229203][ T2424] 0 pages HighMem/MovableOnly [ 69.233870][ T2424] 352235 pages reserved [ 69.257112][ T2424] 0 pages cma reserved [ 69.263245][ T2424] Memory allocations: [ 69.268436][ T2424] 0 B 0 init/main.c:1477 func:do_initcalls [ 69.290138][ T2424] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 69.298569][ T2424] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 69.307048][ T2424] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 69.315238][ T2424] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 69.323202][ T2424] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 69.332144][ T2424] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 69.340240][ T2424] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 69.354530][ T2424] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 69.362940][ T2424] 0 B 0 init/initramfs.c:101 func:find_link [ 69.424021][ T36] audit: type=1400 audit(1785264261.730:336): avc: denied { associate } for pid=2433 comm="syz.4.729" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.916404][ T2458] virtio-fs: tag not found [ 69.922242][ T2458] virtio-fs: tag not found [ 69.927713][ T2458] virtio-fs: tag not found [ 70.048231][ T2465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 71.049137][ T2517] netlink: 'syz.0.759': attribute type 4 has an invalid length. [ 71.157499][ T2534] kvm: pic: level sensitive irq not supported [ 71.157548][ T2534] picdev_read: 5 callbacks suppressed [ 71.157557][ T2534] kvm: pic: non byte read [ 71.204888][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 71.204904][ T36] audit: type=1400 audit(1785264263.510:339): avc: denied { create } for pid=2536 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.231699][ T36] audit: type=1400 audit(1785264263.530:340): avc: denied { read } for pid=2538 comm="syz.0.774" path="socket:[19914]" dev="sockfs" ino=19914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.605533][ T2605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2605 comm=syz.2.792 [ 74.878039][ T2626] kvm: pic: single mode not supported [ 74.878216][ T2626] kvm: pic: level sensitive irq not supported [ 74.883664][ T2626] kvm: pic: single mode not supported [ 75.040693][ T36] audit: type=1400 audit(1785264267.350:341): avc: denied { cmd } for pid=2634 comm="syz.4.804" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 75.077330][ T36] audit: type=1400 audit(1785264267.350:342): avc: denied { map } for pid=2634 comm="syz.4.804" path="/dev/ublkc0" dev="devtmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.175384][ T2646] syzkaller1: entered promiscuous mode [ 75.181051][ T2646] syzkaller1: entered allmulticast mode [ 75.346623][ T2675] fuse: Bad value for 'fd' [ 75.412377][ T2684] netlink: 'syz.4.826': attribute type 28 has an invalid length. [ 75.420278][ T2684] netlink: 'syz.4.826': attribute type 32 has an invalid length. [ 75.522333][ T2692] fuse: Bad value for 'fd' [ 75.535783][ T2694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'. [ 75.584893][ T36] audit: type=1400 audit(1785264267.890:343): avc: denied { setopt } for pid=2699 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.697868][ T2713] fuse: Bad value for 'fd' [ 76.041825][ T36] audit: type=1400 audit(1785264268.350:344): avc: denied { write } for pid=2729 comm="syz.2.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.196352][ T2739] netlink: 'syz.0.846': attribute type 27 has an invalid length. [ 76.498369][ T2756] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 77.423914][ T2835] netlink: 'syz.0.884': attribute type 32 has an invalid length. [ 77.582900][ T2848] fuse: Bad value for 'fd' [ 77.725393][ T2854] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 78.112469][ T2899] fuse: Bad value for 'fd' [ 78.210698][ T2905] netlink: 'syz.0.913': attribute type 25 has an invalid length. [ 78.218578][ T2905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 79.011917][ T2946] syz.2.929 uses obsolete (PF_INET,SOCK_PACKET) [ 79.075670][ T36] audit: type=1400 audit(1785264271.390:345): avc: denied { listen } for pid=2954 comm="syz.2.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.142211][ T36] audit: type=1400 audit(1785264271.450:346): avc: denied { ioctl } for pid=2962 comm="syz.3.938" path="socket:[22977]" dev="sockfs" ino=22977 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.722338][ T3010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'. [ 79.938747][ T36] audit: type=1400 audit(1785264272.250:347): avc: denied { create } for pid=3017 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 81.425021][ T316] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 81.498960][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 81.585036][ T316] usb 5-1: Using ep0 maxpacket: 32 [ 81.591574][ T316] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 81.600082][ T316] usb 5-1: config 0 has no interface number 0 [ 81.607944][ T316] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 81.617669][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.635101][ T316] usb 5-1: Product: syz [ 81.639510][ T316] usb 5-1: Manufacturer: syz [ 81.644141][ T316] usb 5-1: SerialNumber: syz [ 81.770147][ T3123] : renamed from vlan0 [ 81.788662][ T3125] tipc: Started in network mode [ 81.793564][ T3125] tipc: Node identity 4, cluster identity 4711 [ 81.800067][ T3125] tipc: Node number set to 4 [ 81.828713][ T3129] netlink: 'syz.0.1003': attribute type 4 has an invalid length. [ 81.960050][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 81.968128][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.978661][ T316] usb 5-1: config 0 descriptor?? [ 81.983687][ T10] usb 4-1: config 0 has no interfaces? [ 81.989452][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 81.990012][ T316] smsc95xx v2.0.0 [ 82.002727][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.011714][ T10] usb 4-1: config 0 descriptor?? [ 82.573785][ T3155] syzkaller1: entered promiscuous mode [ 82.579499][ T3155] syzkaller1: entered allmulticast mode [ 82.704318][ T36] audit: type=1400 audit(1785264275.010:348): avc: denied { remount } for pid=3169 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 82.750042][ T3176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1022'. [ 82.792054][ T316] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 82.803042][ T316] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 82.811785][ T3182] VFS: Mount too revealing [ 83.229351][ T316] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 83.242782][ T316] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 83.251988][ T316] usb 5-1: USB disconnect, device number 7 [ 83.351212][ T36] audit: type=1326 audit(1785264275.660:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3218 comm="syz.2.1040" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc66899de99 code=0x0 [ 84.205813][ T36] audit: type=1326 audit(1785264276.520:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.0.1051" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2899de99 code=0x50000 [ 84.230842][ T36] audit: type=1326 audit(1785264276.520:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.0.1051" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2899de99 code=0x50000 [ 84.256138][ T36] audit: type=1326 audit(1785264276.530:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.0.1051" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa2895e6ce code=0x50000 [ 84.288730][ T36] audit: type=1326 audit(1785264276.530:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.0.1051" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa2895e6ce code=0x50000 [ 84.320929][ T36] audit: type=1326 audit(1785264276.530:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.0.1051" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa2895e6ce code=0x50000 [ 84.345989][ T36] audit: type=1326 audit(1785264276.530:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.0.1051" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa2895e6ce code=0x50000 [ 84.371190][ T36] audit: type=1326 audit(1785264276.530:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.0.1051" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa2895e6ce code=0x50000 [ 84.396548][ T36] audit: type=1326 audit(1785264276.530:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.0.1051" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa2895e6ce code=0x50000 [ 84.421792][ T36] audit: type=1326 audit(1785264276.530:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.0.1051" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa2895e6ce code=0x50000 [ 84.427367][ T316] usb 4-1: USB disconnect, device number 5 [ 84.447026][ T36] audit: type=1326 audit(1785264276.530:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.0.1051" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa2895e6ce code=0x50000 [ 85.635013][ T310] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 85.785093][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 85.793086][ T310] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.813501][ T310] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 85.824506][ T310] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 85.833781][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.851956][ T310] usb 4-1: Product: syz [ 85.858981][ T310] usb 4-1: Manufacturer: syz [ 85.874890][ T310] usb 4-1: SerialNumber: syz [ 85.884468][ T310] usb 4-1: config 0 descriptor?? [ 86.094085][ T310] usb 4-1: USB disconnect, device number 6 [ 87.169284][ T3380] kvm: pic: level sensitive irq not supported [ 87.329446][ T3393] loop6: detected capacity change from 0 to 7 [ 87.345862][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.355040][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.363075][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.372233][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.380079][ T3393] loop6: unable to read partition table [ 87.401247][ T3393] loop_reread_partitions: partition scan of loop6 ([{BѷMܾ`*Z5]z(Ť4+hGpXgm [ 87.401247][ T3393] .BL_se) failed (rc=-5) [ 87.417515][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.426682][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.434755][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.443925][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.460852][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.470020][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.483803][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.492979][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.505046][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.514218][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.532178][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.541343][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.554459][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.558991][ T3400] netlink: 'syz.2.1111': attribute type 4 has an invalid length. [ 87.563620][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.579439][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.588581][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.625277][ T310] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 87.775022][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 87.783968][ T310] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 87.795228][ T310] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 87.808101][ T310] usb 4-1: config 0 interface 0 has no altsetting 0 [ 87.814686][ T310] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 87.823795][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.832489][ T310] usb 4-1: config 0 descriptor?? [ 88.248471][ T310] hid-generic 0003:0C45:760B.0008: hidraw0: USB HID v10.01 Device [HID 0c45:760b] on usb-dummy_hcd.3-1/input0 [ 88.452919][ T310] usb 4-1: USB disconnect, device number 7 [ 88.996388][ T3465] Zero length message leads to an empty skb [ 89.002702][ T3465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1136'. [ 89.229734][ T3471] netlink: 'syz.4.1138': attribute type 11 has an invalid length. [ 89.704199][ T3486] overlayfs: failed to clone upperpath [ 89.758080][ T36] kauditd_printk_skb: 20301 callbacks suppressed [ 89.758097][ T36] audit: type=1400 audit(1785264282.070:20661): avc: denied { accept } for pid=3490 comm="syz.2.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.818903][ T3494] overlayfs: failed to clone upperpath [ 90.795678][ T36] audit: type=1400 audit(1785264283.110:20662): avc: denied { read } for pid=3543 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.872851][ T36] audit: type=1400 audit(1785264283.180:20663): avc: denied { kill } for pid=3545 comm="syz.0.1169" capability=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 91.490402][ T3569] syz.3.1177: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 91.507692][ T3569] CPU: 1 UID: 0 PID: 3569 Comm: syz.3.1177 Not tainted syzkaller #0 52d57b431c43020f0342b1af6a326091b8e30d09 [ 91.507725][ T3569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 91.507737][ T3569] Call Trace: [ 91.507743][ T3569] [ 91.507751][ T3569] __dump_stack+0x21/0x30 [ 91.507784][ T3569] dump_stack_lvl+0x140/0x1c0 [ 91.507811][ T3569] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.507838][ T3569] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 91.507862][ T3569] dump_stack+0x19/0x20 [ 91.507886][ T3569] warn_alloc+0x1e7/0x2c0 [ 91.507915][ T3569] ? stack_depot_save_flags+0x38/0x800 [ 91.507942][ T3569] ? __cfi_warn_alloc+0x10/0x10 [ 91.507967][ T3569] ? kasan_save_track+0x3e/0x80 [ 91.507990][ T3569] ? kasan_save_alloc_info+0x3a/0x50 [ 91.508018][ T3569] ? xsk_init_queue+0xb2/0x120 [ 91.508042][ T3569] ? xsk_setsockopt+0x4c5/0x760 [ 91.508065][ T3569] ? do_sock_setsockopt+0x27c/0x410 [ 91.508084][ T3569] ? __x64_sys_setsockopt+0x1b7/0x250 [ 91.508103][ T3569] ? x64_sys_call+0x2adc/0x2ee0 [ 91.508122][ T3569] ? do_syscall_64+0x57/0xf0 [ 91.508143][ T3569] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.508169][ T3569] __vmalloc_node_range_noprof+0x136/0x1300 [ 91.508203][ T3569] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 91.508232][ T3569] ? kasan_save_alloc_info+0x3a/0x50 [ 91.508261][ T3569] ? __kasan_kmalloc+0x96/0xb0 [ 91.508284][ T3569] ? __kmalloc_cache_noprof+0x23c/0x470 [ 91.508308][ T3569] vmalloc_user_noprof+0x77/0x90 [ 91.508335][ T3569] ? xskq_create+0xdb/0x290 [ 91.508360][ T3569] xskq_create+0xdb/0x290 [ 91.508386][ T3569] xsk_init_queue+0xb2/0x120 [ 91.508410][ T3569] xsk_setsockopt+0x4c5/0x760 [ 91.508433][ T3569] ? __cfi_xsk_setsockopt+0x10/0x10 [ 91.508458][ T3569] ? do_futex+0x32a/0x510 [ 91.508485][ T3569] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 91.508509][ T3569] ? security_socket_setsockopt+0x3d/0x100 [ 91.508536][ T3569] ? __cfi_xsk_setsockopt+0x10/0x10 [ 91.508561][ T3569] do_sock_setsockopt+0x27c/0x410 [ 91.508581][ T3569] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 91.508599][ T3569] ? __fget_files+0x2bc/0x330 [ 91.508625][ T3569] __x64_sys_setsockopt+0x1b7/0x250 [ 91.508644][ T3569] x64_sys_call+0x2adc/0x2ee0 [ 91.508673][ T3569] do_syscall_64+0x57/0xf0 [ 91.508696][ T3569] ? clear_bhb_loop+0x50/0xa0 [ 91.508724][ T3569] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.508750][ T3569] RIP: 0033:0x7fe0c3d9de99 [ 91.508769][ T3569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.508786][ T3569] RSP: 002b:00007fe0c4d22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 91.508809][ T3569] RAX: ffffffffffffffda RBX: 00007fe0c4025fa0 RCX: 00007fe0c3d9de99 [ 91.508825][ T3569] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 91.508838][ T3569] RBP: 00007fe0c3e33eaf R08: 0000000000000004 R09: 0000000000000000 [ 91.508851][ T3569] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 91.508865][ T3569] R13: 00007fe0c4026038 R14: 00007fe0c4025fa0 R15: 00007ffc7d9641f8 [ 91.508881][ T3569] [ 91.508949][ T3569] Mem-Info: [ 91.820134][ T3569] active_anon:44541 inactive_anon:21 isolated_anon:0 [ 91.820134][ T3569] active_file:23649 inactive_file:2343 isolated_file:0 [ 91.820134][ T3569] unevictable:16449 dirty:233 writeback:0 [ 91.820134][ T3569] slab_reclaimable:4319 slab_unreclaimable:71953 [ 91.820134][ T3569] mapped:24390 shmem:36973 pagetables:1213 [ 91.820134][ T3569] sec_pagetables:0 bounce:0 [ 91.820134][ T3569] kernel_misc_reclaimable:0 [ 91.820134][ T3569] free:1461211 free_pcp:6464 free_cma:0 [ 91.866237][ T3569] Node 0 active_anon:178164kB inactive_anon:84kB active_file:94596kB inactive_file:9372kB unevictable:65796kB isolated(anon):0kB isolated(file):0kB mapped:97544kB dirty:932kB writeback:0kB shmem:147892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6692kB pagetables:4912kB sec_pagetables:0kB all_unreclaimable? no [ 91.901769][ T3569] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963400kB mlocked:0kB bounce:0kB free_pcp:5236kB local_pcp:0kB free_cma:0kB [ 91.932193][ T3569] lowmem_reserve[]: 0 3921 3921 [ 91.937325][ T3569] Normal free:2889804kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:177964kB inactive_anon:84kB active_file:94596kB inactive_file:9372kB unevictable:65796kB writepending:932kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:20480kB local_pcp:19056kB free_cma:0kB [ 91.945291][ T36] audit: type=1326 audit(1785264284.260:20664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3582 comm="syz.0.1183" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa2899de99 code=0x0 [ 91.969590][ T3569] lowmem_reserve[]: 0 0 0 [ 91.998616][ T3569] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 92.014215][ T3569] Normal: 198*4kB (UME) 106*8kB (UME) 142*16kB (UE) 116*32kB (UE) 399*64kB (UE) 287*128kB (UME) 137*256kB (UME) 41*512kB (UME) 19*1024kB (ME) 14*2048kB (ME) 663*4096kB (UME) = 2889736kB [ 92.032815][ T3569] 79435 total pagecache pages [ 92.037516][ T3569] 25 pages in swap cache [ 92.041744][ T3569] Free swap = 124644kB [ 92.046264][ T3569] Total swap = 124996kB [ 92.050460][ T3569] 2097051 pages RAM [ 92.054314][ T3569] 0 pages HighMem/MovableOnly [ 92.059167][ T3569] 352235 pages reserved [ 92.063389][ T3569] 0 pages cma reserved [ 92.068867][ T3569] Memory allocations: [ 92.072986][ T3569] 0 B 0 init/main.c:1477 func:do_initcalls [ 92.080235][ T3569] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 92.088560][ T3569] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 92.096223][ T3569] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 92.104170][ T3569] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 92.112130][ T3569] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 92.120780][ T3569] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 92.128705][ T3569] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 92.136647][ T3569] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 92.144525][ T3569] 0 B 0 init/initramfs.c:101 func:find_link [ 92.759694][ T3614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 92.770715][ T3614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 92.781701][ T3614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 93.211618][ T3630] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1203'. [ 93.223129][ T3632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3632 comm=syz.0.1204 [ 93.588766][ T36] audit: type=1400 audit(1785264285.900:20665): avc: denied { map } for pid=3644 comm="syz.2.1210" path="socket:[26112]" dev="sockfs" ino=26112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.667750][ T3653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3653 comm=syz.3.1214 [ 93.686678][ T36] audit: type=1326 audit(1785264286.000:20666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.0.1215" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa2899de99 code=0x0 [ 93.740139][ T36] audit: type=1326 audit(1785264286.050:20667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.0.1215" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2899de99 code=0x7ffc0000 [ 93.766369][ T36] audit: type=1326 audit(1785264286.050:20668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.0.1215" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2899de99 code=0x7ffc0000 [ 93.792164][ T36] audit: type=1326 audit(1785264286.050:20669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.0.1215" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2899de99 code=0x7ffc0000 [ 93.819219][ T36] audit: type=1326 audit(1785264286.050:20670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.0.1215" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2899de99 code=0x7ffc0000 [ 94.514359][ T3674] 9pnet_fd: p9_fd_create_tcp (3674): problem connecting socket to 127.0.0.1 [ 95.007446][ T3697] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 95.009138][ T3697] @0: renamed from bond_slave_1 [ 95.951630][ T3720] netlink: 'syz.2.1238': attribute type 12 has an invalid length. [ 95.985019][ T3720] netlink: 'syz.2.1238': attribute type 32 has an invalid length. [ 97.025582][ T3763] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 97.371128][ T3782] tipc: Failed to remove unknown binding: 66,0,0/0:1590015127/1590015128 [ 97.390419][ T3782] tipc: Failed to remove unknown binding: 66,0,0/0:1590015127/1590015128 [ 97.445497][ T3789] kvm: MWAIT instruction emulated as NOP! [ 98.600328][ T36] kauditd_printk_skb: 621 callbacks suppressed [ 98.600347][ T36] audit: type=1400 audit(1785264290.910:21292): avc: denied { read } for pid=3846 comm="syz.4.1294" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.633190][ T36] audit: type=1400 audit(1785264290.940:21293): avc: denied { open } for pid=3846 comm="syz.4.1294" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 99.429871][ T36] audit: type=1400 audit(1785264291.740:21294): avc: denied { getopt } for pid=3876 comm="syz.2.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.766063][ T36] audit: type=1400 audit(1785264292.080:21295): avc: denied { mounton } for pid=3892 comm="syz.3.1313" path="/257/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 100.555972][ T3917] bridge0: port 3(erspan0) entered blocking state [ 100.562482][ T3917] bridge0: port 3(erspan0) entered disabled state [ 100.569216][ T3917] erspan0: entered allmulticast mode [ 100.575024][ T3917] erspan0: entered promiscuous mode [ 100.831987][ T3941] tipc: Started in network mode [ 100.844995][ T3941] tipc: Node identity 7f000001, cluster identity 4711 [ 100.852010][ T3941] tipc: Enabled bearer , priority 10 [ 100.905823][ T3945] VFS: Mount too revealing [ 101.325400][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 101.485042][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 101.497818][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 101.524755][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.555010][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.563085][ T31] usb 5-1: SerialNumber: syz [ 101.705818][ T3973] tipc: New replicast peer: 255.255.255.255 [ 101.712109][ T3973] tipc: Enabled bearer , priority 10 [ 101.801616][ T36] audit: type=1326 audit(1785264294.110:21296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.3.1348" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe0c3d9de99 code=0x0 [ 101.855027][ T310] tipc: Node number set to 2130706433 [ 102.179800][ T31] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 102.686030][ T10] usb 5-1: USB disconnect, device number 8 [ 102.692353][ T10] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 102.777176][ T36] audit: type=1326 audit(1785264295.090:21297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.3.1356" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0c3d9de99 code=0x0 [ 102.817130][ T36] audit: type=1326 audit(1785264295.130:21298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.0.1357" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa2899de99 code=0x0 [ 103.387468][ T4079] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 103.766167][ T4102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1377'. [ 103.790121][ T4106] virtio-fs: tag not found [ 103.806331][ T4106] virtio-fs: tag not found [ 103.821979][ T4106] virtio-fs: tag not found [ 104.317575][ T4141] overlayfs: failed to clone lowerpath [ 105.330701][ T36] audit: type=1400 audit(1785264297.640:21299): avc: denied { mounton } for pid=4173 comm="syz.4.1402" path="/249/file0" dev="tmpfs" ino=1377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.938707][ T4207] syzkaller1: entered promiscuous mode [ 105.944679][ T4207] syzkaller1: entered allmulticast mode [ 106.083130][ T36] audit: type=1400 audit(1785264298.390:21300): avc: denied { execute } for pid=4214 comm="syz.0.1417" name="file0" dev="tmpfs" ino=2111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.371996][ T4247] netlink: 'syz.3.1433': attribute type 28 has an invalid length. [ 106.387875][ T4247] netlink: 'syz.3.1433': attribute type 32 has an invalid length. [ 107.175798][ T4296] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 107.356300][ T36] audit: type=1400 audit(1785264299.670:21301): avc: denied { ioctl } for pid=4314 comm="syz.4.1457" path="mnt:[4026532330]" dev="nsfs" ino=4026532330 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.851148][ T4342] netlink: 'syz.3.1475': attribute type 27 has an invalid length. [ 107.883072][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.890520][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.967178][ T4339] netlink: 'syz.4.1465': attribute type 25 has an invalid length. [ 107.986190][ T4339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1465'. [ 108.015827][ T426] erspan0: left allmulticast mode [ 108.031081][ T426] erspan0: left promiscuous mode [ 108.045075][ T426] bridge0: port 3(erspan0) entered disabled state [ 108.062238][ T426] bridge_slave_1: left allmulticast mode [ 108.071833][ T426] bridge_slave_1: left promiscuous mode [ 108.082658][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.090926][ T426] bridge_slave_0: left allmulticast mode [ 108.098071][ T426] bridge_slave_0: left promiscuous mode [ 108.104425][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.189023][ T426] tipc: Disabling bearer [ 108.195056][ T426] tipc: Left network mode [ 108.280714][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.295014][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.302104][ T4351] bridge_slave_0: entered allmulticast mode [ 108.317089][ T4351] bridge_slave_0: entered promiscuous mode [ 108.323608][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.330692][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.338112][ T4351] bridge_slave_1: entered allmulticast mode [ 108.344532][ T4351] bridge_slave_1: entered promiscuous mode [ 108.424793][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.431901][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.439254][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.446303][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.471638][ T981] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.479780][ T981] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.496878][ T978] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.503972][ T978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.515073][ T981] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.522143][ T981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.572264][ T4351] veth0_vlan: entered promiscuous mode [ 108.585015][ T4351] veth1_macvtap: entered promiscuous mode [ 108.606221][ T36] audit: type=1400 audit(1785264300.920:21302): avc: denied { mounton } for pid=4351 comm="syz-executor" path="/root/syzkaller.ixHFuX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 108.950306][ T36] audit: type=1400 audit(1785264301.260:21303): avc: denied { read write } for pid=4388 comm="syz.3.1480" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 108.975836][ T4391] netlink: 'syz.5.1479': attribute type 27 has an invalid length. [ 108.993760][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.001022][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.009004][ T36] audit: type=1400 audit(1785264301.260:21304): avc: denied { open } for pid=4388 comm="syz.3.1480" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 109.032503][ T4390] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 109.080578][ T4395] netlink: 'syz.3.1481': attribute type 32 has an invalid length. [ 109.449052][ T36] audit: type=1400 audit(1785264301.760:21305): avc: denied { map } for pid=4414 comm="syz.3.1487" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 110.875300][ T4470] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4023141031 (128740512992 ns) > initial count (86646874208 ns). Using initial count to start timer. [ 110.899905][ T4470] kvm: Disabled LAPIC found during irq injection [ 111.145943][ C0] blk_print_req_error: 2 callbacks suppressed [ 111.145963][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.161259][ C0] buffer_io_error: 2 callbacks suppressed [ 111.161278][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.176416][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.185599][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 111.193769][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.202967][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 111.210831][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.220076][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 111.227940][ C1] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.237095][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 111.244933][ C1] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.254087][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 111.261954][ C1] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.271088][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 111.280175][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.289324][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.297277][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.306511][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 111.314343][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.323497][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 111.331535][ T110] loop6: unable to read partition table [ 111.552958][ T4513] erofs: (device erofs): erofs_read_superblock: cannot read erofs superblock [ 111.938260][ T4541] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 112.623773][ T36] audit: type=1400 audit(1785264304.930:21306): avc: denied { mounton } for pid=4579 comm="syz.2.1562" path="/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 112.676711][ T36] audit: type=1400 audit(1785264304.990:21307): avc: denied { watch } for pid=4586 comm="syz.2.1556" path="/484/file3" dev="tmpfs" ino=2615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.676956][ T4587] overlayfs: failed to resolve './cgroup': -2 [ 113.669580][ T4643] kvm: pic: level sensitive irq not supported [ 113.975033][ T310] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 114.155013][ T310] usb 5-1: Using ep0 maxpacket: 32 [ 114.166094][ T310] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.186405][ T310] usb 5-1: config 0 has no interfaces? [ 114.191893][ T310] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.217392][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.228910][ T310] usb 5-1: config 0 descriptor?? [ 114.525042][ T316] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 114.685020][ T316] usb 6-1: Using ep0 maxpacket: 32 [ 114.691337][ T316] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.701788][ T316] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.712375][ T316] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 114.721584][ T316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.729627][ T316] usb 6-1: Product: syz [ 114.733787][ T316] usb 6-1: Manufacturer: syz [ 114.738398][ T316] usb 6-1: SerialNumber: syz [ 114.744107][ T316] usb 6-1: config 0 descriptor?? [ 114.866185][ T4667] syzkaller1: entered promiscuous mode [ 114.871936][ T4667] syzkaller1: entered allmulticast mode [ 114.957842][ T310] usb 6-1: USB disconnect, device number 2 [ 116.785809][ T316] usb 5-1: USB disconnect, device number 9 [ 116.987558][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 118.841959][ T4763] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1624'. [ 118.862357][ T4766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1626'. [ 118.874401][ T4766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1626'. [ 118.885589][ T4766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1626'. [ 119.207103][ T4797] overlayfs: failed to clone upperpath [ 121.036700][ T36] audit: type=1326 audit(1785264313.350:21308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.1642" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc66899de99 code=0x0 [ 121.425983][ T36] audit: type=1326 audit(1785264313.730:21309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.1642" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66899de99 code=0x7ffc0000 [ 121.488285][ T36] audit: type=1326 audit(1785264313.730:21310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.1642" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66899de99 code=0x7ffc0000 [ 121.514242][ T36] audit: type=1326 audit(1785264313.730:21311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.1642" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66899de99 code=0x7ffc0000 [ 121.540235][ T36] audit: type=1326 audit(1785264313.730:21312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.1642" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66899de99 code=0x7ffc0000 [ 121.565865][ T36] audit: type=1326 audit(1785264313.730:21313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.1642" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc66899de99 code=0x7ffc0000 [ 121.593090][ T36] audit: type=1326 audit(1785264313.730:21314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.1642" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66899de99 code=0x7ffc0000 [ 121.619321][ T36] audit: type=1326 audit(1785264313.730:21315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.1642" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66899de99 code=0x7ffc0000 [ 121.645212][ T36] audit: type=1326 audit(1785264313.730:21316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.1642" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66899de99 code=0x7ffc0000 [ 121.671017][ T36] audit: type=1326 audit(1785264313.730:21317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.2.1642" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66899de99 code=0x7ffc0000 [ 122.665032][ T310] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 122.816121][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.827507][ T310] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.836662][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.847478][ T310] usb 5-1: config 0 descriptor?? [ 123.001079][ T4880] bridge0: port 3(erspan0) entered blocking state [ 123.007615][ T4880] bridge0: port 3(erspan0) entered disabled state [ 123.014142][ T4880] erspan0: entered allmulticast mode [ 123.020122][ T4880] erspan0: entered promiscuous mode [ 123.273843][ T310] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 123.290043][ T310] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0009/input/input9 [ 123.378051][ T310] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 124.087371][ T4932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4932 comm=syz.2.1689 [ 124.363457][ T4937] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 124.473011][ T4947] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 125.033732][ T4981] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 126.593288][ T5011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1717'. [ 127.443064][ T5036] file system registered [ 127.455041][ T36] kauditd_printk_skb: 168 callbacks suppressed [ 127.455058][ T36] audit: type=1400 audit(1785264319.760:21486): avc: denied { mount } for pid=5034 comm="syz.4.1732" name="/" dev="functionfs" ino=37319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 127.484425][ T662] ffs_data_put(): freeing [ 127.484809][ T36] audit: type=1400 audit(1785264319.770:21487): avc: denied { unmount } for pid=662 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 127.517845][ T5042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.526500][ T5042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.554171][ T36] audit: type=1400 audit(1785264319.860:21488): avc: denied { create } for pid=5043 comm="syz.2.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.554902][ T5044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1727'. [ 127.574564][ T36] audit: type=1400 audit(1785264319.860:21489): avc: denied { write } for pid=5043 comm="syz.2.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.603887][ T36] audit: type=1400 audit(1785264319.860:21490): avc: denied { nlmsg_read } for pid=5043 comm="syz.2.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.237143][ T36] audit: type=1400 audit(1785264320.540:21491): avc: denied { execmem } for pid=5060 comm="syz.5.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 128.407355][ T5069] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.515136][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.676120][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.687676][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.697702][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.710834][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.720227][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.731859][ T10] usb 4-1: config 0 descriptor?? [ 128.749928][ T5087] netlink: 'syz.4.1744': attribute type 4 has an invalid length. [ 128.758120][ T5087] netlink: 'syz.4.1744': attribute type 4 has an invalid length. [ 128.768351][ T5087] netlink: 'syz.4.1744': attribute type 4 has an invalid length. [ 129.143615][ T10] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 129.160312][ T10] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 129.263888][ T5118] overlayfs: missing 'lowerdir' [ 130.259019][ T36] audit: type=1400 audit(1785264322.490:21492): avc: denied { mount } for pid=5133 comm="syz.2.1761" name="/" dev="ramfs" ino=37628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 130.316237][ T4351] ffs_data_put(): freeing [ 130.430031][ T36] audit: type=1400 audit(1785264322.740:21493): avc: denied { nlmsg_write } for pid=5139 comm="syz.2.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.137419][ T5153] netlink: 'syz.5.1774': attribute type 4 has an invalid length. [ 131.147424][ T5153] netlink: 'syz.5.1774': attribute type 4 has an invalid length. [ 131.157919][ T5153] netlink: 'syz.5.1774': attribute type 4 has an invalid length. [ 131.395387][ T764] usb 4-1: USB disconnect, device number 8 [ 132.073958][ T5188] netlink: 'syz.3.1779': attribute type 4 has an invalid length. [ 132.084987][ T5188] netlink: 'syz.3.1779': attribute type 4 has an invalid length. [ 132.097242][ T5188] netlink: 'syz.3.1779': attribute type 4 has an invalid length. [ 132.167817][ T5196] kvm: kvm [5193]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 132.176712][ T5196] kvm: kvm [5193]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 133.458889][ T5259] tipc: Failed to remove unknown binding: 66,0,0/0:367886688/367886690 [ 133.489120][ T5259] tipc: Failed to remove unknown binding: 66,0,0/0:367886688/367886689 [ 133.515516][ T5259] tipc: Failed to remove unknown binding: 66,0,0/0:367886688/367886690 [ 133.531128][ T5259] tipc: Failed to remove unknown binding: 66,0,0/0:367886688/367886689 [ 135.010128][ T36] audit: type=1400 audit(1785264327.320:21494): avc: denied { accept } for pid=5317 comm="syz.3.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 135.058898][ T5325] netlink: 'syz.2.1833': attribute type 28 has an invalid length. [ 135.066987][ T5325] netlink: 'syz.2.1833': attribute type 32 has an invalid length. [ 135.673338][ T36] audit: type=1400 audit(1785264327.980:21495): avc: denied { append } for pid=5337 comm="syz.5.1837" name="UDC" dev="configfs" ino=44226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 135.673587][ T5338] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 135.708546][ T5338] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 135.717013][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.5.1837 Not tainted syzkaller #0 52d57b431c43020f0342b1af6a326091b8e30d09 [ 135.728582][ T5338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.738643][ T5338] RIP: 0010:dummy_set_selfpowered+0xc0/0x160 [ 135.744658][ T5338] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5a ce 26 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 41 ce 26 fe 41 be 58 11 00 00 4d [ 135.764279][ T5338] RSP: 0018:ffffc9000a0af738 EFLAGS: 00010246 [ 135.770359][ T5338] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 135.778337][ T5338] RDX: ffff8881260a3900 RSI: 0000000000000003 RDI: 0000000000000005 [ 135.786320][ T5338] RBP: ffffc9000a0af758 R08: ffff888101650467 R09: 1ffff110202ca08c [ 135.794305][ T5338] R10: 0000000000000000 R11: ffffffff83b962b0 R12: dffffc0000000000 [ 135.802286][ T5338] R13: ffff8881336dd4f0 R14: ffff8881043cd160 R15: 0000000000000000 [ 135.810274][ T5338] FS: 00007fc4eb6436c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 135.819220][ T5338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.825899][ T5338] CR2: 000000110c308532 CR3: 0000000139f40000 CR4: 00000000003526b0 [ 135.833879][ T5338] Call Trace: [ 135.837164][ T5338] [ 135.840098][ T5338] ? __cfi_dummy_set_selfpowered+0x10/0x10 [ 135.845925][ T5338] usb_gadget_set_selfpowered+0x84/0x1a0 [ 135.848464][ T36] audit: type=1400 audit(1785264328.160:21496): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 135.851569][ T5338] composite_dev_prepare+0x2f8/0x3e0 [ 135.875315][ T36] audit: type=1400 audit(1785264328.190:21497): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.878767][ T5338] ? up_write+0x66/0x280 [ 135.900630][ T36] audit: type=1400 audit(1785264328.190:21498): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.904518][ T5338] configfs_composite_bind+0xa8/0x15f0 [ 135.926236][ T36] audit: type=1400 audit(1785264328.190:21499): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.931294][ T5338] ? __kasan_check_write+0x18/0x20 [ 135.931321][ T5338] ? mutex_unlock+0x90/0x240 [ 135.958582][ T36] audit: type=1400 audit(1785264328.190:21500): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.961592][ T5338] ? kernfs_put+0x314/0x360 [ 135.982449][ T36] audit: type=1400 audit(1785264328.190:21501): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.986629][ T5338] ? __cfi_configfs_composite_bind+0x10/0x10 [ 135.986660][ T5338] gadget_bind_driver+0x304/0x9c0 [ 136.010026][ T36] audit: type=1400 audit(1785264328.190:21502): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.015597][ T5338] ? sysfs_create_link+0x6c/0x90 [ 136.015624][ T5338] ? __cfi_gadget_bind_driver+0x10/0x10 [ 136.053696][ T5338] really_probe+0x2e1/0x8b0 [ 136.058212][ T5338] __driver_probe_device+0x193/0x280 [ 136.063516][ T5338] driver_probe_device+0x54/0x3f0 [ 136.068568][ T5338] __driver_attach+0x422/0x5e0 [ 136.073347][ T5338] bus_for_each_dev+0x249/0x2d0 [ 136.078232][ T5338] ? __cfi___driver_attach+0x10/0x10 [ 136.083513][ T5338] ? __cfi_bus_for_each_dev+0x10/0x10 [ 136.088874][ T5338] ? _raw_spin_unlock+0x45/0x60 [ 136.093754][ T5338] ? klist_add_tail+0x1dd/0x220 [ 136.098613][ T5338] driver_attach+0x46/0x50 [ 136.103044][ T5338] bus_add_driver+0x393/0x730 [ 136.107730][ T5338] driver_register+0x2b7/0x3c0 [ 136.112476][ T5338] usb_gadget_register_driver_owner+0xfc/0x270 [ 136.118620][ T5338] gadget_dev_desc_UDC_store+0x224/0x350 [ 136.124244][ T5338] configfs_write_iter+0x32c/0x490 [ 136.129361][ T5338] ? __cfi_gadget_dev_desc_UDC_store+0x10/0x10 [ 136.135508][ T5338] vfs_write+0x762/0xfd0 [ 136.139738][ T5338] ? __cfi_vfs_write+0x10/0x10 [ 136.144509][ T5338] ? __cfi_mutex_lock+0x10/0x10 [ 136.149361][ T5338] ksys_write+0x145/0x260 [ 136.153681][ T5338] ? xfd_validate_state+0x68/0x140 [ 136.158782][ T5338] ? __cfi_ksys_write+0x10/0x10 [ 136.163625][ T5338] ? __kasan_check_write+0x18/0x20 [ 136.169002][ T5338] ? fpregs_restore_userregs+0x11c/0x260 [ 136.174647][ T5338] __x64_sys_write+0x7f/0x90 [ 136.179237][ T5338] x64_sys_call+0x271c/0x2ee0 [ 136.183949][ T5338] do_syscall_64+0x57/0xf0 [ 136.188377][ T5338] ? clear_bhb_loop+0x50/0xa0 [ 136.193061][ T5338] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 136.198965][ T5338] RIP: 0033:0x7fc4ea79de99 [ 136.203383][ T5338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.222988][ T5338] RSP: 002b:00007fc4eb643028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.231399][ T5338] RAX: ffffffffffffffda RBX: 00007fc4eaa25fa0 RCX: 00007fc4ea79de99 [ 136.239373][ T5338] RDX: 000000000000000c RSI: 0000200000000600 RDI: 0000000000000005 [ 136.247340][ T5338] RBP: 00007fc4ea833eaf R08: 0000000000000000 R09: 0000000000000000 [ 136.255296][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.263256][ T5338] R13: 00007fc4eaa26038 R14: 00007fc4eaa25fa0 R15: 00007ffd8382a118 [ 136.271257][ T5338] [ 136.274276][ T5338] Modules linked in: [ 136.278511][ T5338] ---[ end trace 0000000000000000 ]--- [ 136.284070][ T5338] RIP: 0010:dummy_set_selfpowered+0xc0/0x160 [ 136.296032][ T5338] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5a ce 26 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 41 ce 26 fe 41 be 58 11 00 00 4d [ 136.319261][ T5338] RSP: 0018:ffffc9000a0af738 EFLAGS: 00010246 [ 136.325408][ T5338] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 136.333406][ T5338] RDX: ffff8881260a3900 RSI: 0000000000000003 RDI: 0000000000000005 [ 136.341428][ T5338] RBP: ffffc9000a0af758 R08: ffff888101650467 R09: 1ffff110202ca08c [ 136.349425][ T5338] R10: 0000000000000000 R11: ffffffff83b962b0 R12: dffffc0000000000 [ 136.357411][ T5338] R13: ffff8881336dd4f0 R14: ffff8881043cd160 R15: 0000000000000000 [ 136.365425][ T5338] FS: 00007fc4eb6436c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 136.374361][ T5338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.380971][ T5338] CR2: 000000110c308532 CR3: 0000000139f40000 CR4: 00000000003526b0 [ 136.388996][ T5338] Kernel panic - not syncing: Fatal exception [ 136.395337][ T5338] Kernel Offset: disabled [ 136.399649][ T5338] Rebooting in 86400 seconds..