last executing test programs: 18.767043339s ago: executing program 3 (id=2219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x47) cachestat(r1, &(0x7f0000000040)={0x1, 0x8}, 0x0, 0x20) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 18.68223988s ago: executing program 3 (id=2221): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)={0x8000000, 0x4000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0xeeef0000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x6000, 0x7000}) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xeeee0000}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 18.596439052s ago: executing program 3 (id=2223): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000080)) 18.565752722s ago: executing program 3 (id=2224): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80080, 0x0) ioctl$TUNSETQUEUE(r1, 0x5450, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000240)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x400, 0x6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x10000a}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000200)=0x976) ptrace$setregset(0x4205, r6, 0x202, &(0x7f00000004c0)={0x0}) renameat2(r3, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000140)='./file1\x00', 0x1) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="e1c194c07314197567609163a955a737cfdca424e4fc4ea388b431c78b32749341c73f7b7c51446e6bbf7f1de6a8ca5eb7372e3b24ef390ae15b6574683711fa3caff8f4fb3d0ca15b91526634d34eb3"}) socket$inet6(0xa, 0x9, 0x7) 18.357951376s ago: executing program 3 (id=2225): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xa0a00, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4e20, 0x5, 0x4e23, 0xf17, 0xa, 0xa0, 0x20, 0x29}, {0x7, 0x9, 0x1, 0xb2, 0x5, 0x5, 0x3c46, 0xce}, {0x5, 0x1, 0x10001, 0x6}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x8, 0x4, 0x8001, 0x7d9}}, 0xe8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005200016d"], 0x18}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x30}, 0x401, 0x2, 0xff, 0x9, 0x9, 0x1}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x300002, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x4, 0x0, 0x0, 0x3, 0x7}, 0x20) lseek(r6, 0x400000005, 0x0) 18.307549716s ago: executing program 3 (id=2226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 18.136410429s ago: executing program 32 (id=2226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 3.409402077s ago: executing program 1 (id=2485): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x1c76e3, 0x182) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', r6, 0x2f, 0x5, 0x0, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x9, 0x2}}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000810}, 0x24000001) clock_gettime(0x0, &(0x7f0000009640)={0x0, 0x0}) recvmmsg(r7, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000007f40)=[{&(0x7f0000006d40)=""/220, 0xdc}, {&(0x7f0000006e40)=""/4096, 0x1000}, {&(0x7f0000007e40)=""/25, 0x19}, {&(0x7f0000007e80)=""/182, 0xb6}], 0x4, &(0x7f0000007f80)=""/116, 0x74}, 0x3ff}, {{&(0x7f0000008000)=@nfc, 0x80, &(0x7f00000086c0)=[{&(0x7f0000008080)=""/111, 0x6f}, {&(0x7f0000008100)=""/133, 0x85}, {&(0x7f00000081c0)=""/75, 0x4b}, {&(0x7f0000008240)=""/125, 0x7d}, {&(0x7f00000082c0)=""/200, 0xc8}, {&(0x7f00000083c0)=""/240, 0xf0}, {&(0x7f00000084c0)=""/205, 0xcd}, {&(0x7f00000085c0)=""/204, 0xcc}], 0x8}, 0x8}, {{0x0, 0x0, &(0x7f0000008c00)=[{&(0x7f0000008740)=""/75, 0x4b}, {&(0x7f00000087c0)=""/205, 0xcd}, {&(0x7f00000088c0)=""/104, 0x68}, {&(0x7f0000008940)=""/246, 0xf6}, {&(0x7f0000008a40)=""/169, 0xa9}, {&(0x7f0000008b00)=""/58, 0x3a}, {&(0x7f0000008b40)=""/116, 0x74}, {&(0x7f0000008bc0)=""/9, 0x9}], 0x8, &(0x7f0000008c80)=""/185, 0xb9}, 0x8}, {{&(0x7f0000008d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000008f00)=[{&(0x7f0000008dc0)=""/35, 0x23}, {&(0x7f0000008e00)=""/204, 0xcc}], 0x2, &(0x7f0000008f40)=""/86, 0x56}, 0x8000}, {{&(0x7f0000008fc0)=@caif=@dgm, 0x80, &(0x7f0000009140)=[{&(0x7f0000009040)=""/170, 0xaa}, {&(0x7f0000009100)=""/50, 0x32}], 0x2, &(0x7f0000009180)=""/90, 0x5a}, 0x3}, {{&(0x7f0000009200)=@un=@abs, 0x80, &(0x7f00000093c0)=[{&(0x7f0000009280)=""/133, 0x85}, {&(0x7f0000009340)=""/115, 0x73}], 0x2, &(0x7f0000009400)=""/171, 0xab}, 0x7}], 0x6, 0x80000020, &(0x7f0000009680)={r8, r9+60000000}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r11 = accept$unix(r3, &(0x7f0000000040)=@abs, &(0x7f0000000140)=0x6e) clock_gettime(0x0, &(0x7f0000006cc0)={0x0, 0x0}) recvmmsg$unix(r11, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f00000003c0)=""/48, 0x30}, {&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f0000000cc0)=""/116, 0x74}, {&(0x7f0000000d40)=""/98, 0x62}, {&(0x7f0000000dc0)=""/20, 0x14}, {&(0x7f0000000e00)=""/41, 0x29}, {&(0x7f0000000e40)=""/207, 0xcf}, {&(0x7f0000000f40)=""/195, 0xc3}], 0x9}}, {{&(0x7f0000001100), 0x6e, &(0x7f0000001480)=[{&(0x7f0000001180)=""/51, 0x33}, {&(0x7f00000011c0)=""/105, 0x69}, {&(0x7f0000001240)=""/87, 0x57}, {&(0x7f00000012c0)=""/149, 0x95}, {&(0x7f0000001380)=""/243, 0xf3}], 0x5, &(0x7f0000001500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001580), 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001600)=""/229, 0xe5}, {&(0x7f0000001700)=""/168, 0xa8}, {&(0x7f00000017c0)=""/129, 0x81}, {&(0x7f0000001880)=""/196, 0xc4}, {&(0x7f0000001980)=""/85, 0x55}, {&(0x7f0000001a00)=""/47, 0x2f}, {&(0x7f0000001a40)=""/64, 0x40}, {&(0x7f0000001a80)=""/116, 0x74}, {&(0x7f0000001b00)=""/222, 0xde}], 0x9, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000001d80)=@abs, 0x6e, &(0x7f0000004080)=[{&(0x7f0000001e00)=""/237, 0xed}, {&(0x7f0000001f00)=""/151, 0x97}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/132, 0x84}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000004100)=""/167, 0xa7}, {&(0x7f00000041c0)=""/191, 0xbf}, {&(0x7f0000004280)=""/185, 0xb9}], 0x3, &(0x7f0000004380)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000004400)=@abs, 0x6e, &(0x7f0000006540)=[{&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/147, 0x93}], 0x3, &(0x7f0000006580)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000006600)=@abs, 0x6e, &(0x7f0000006a00)=[{&(0x7f0000006680)=""/180, 0xb4}, {&(0x7f0000006740)=""/28, 0x1c}, {&(0x7f0000006780)=""/86, 0x56}, {&(0x7f0000006800)=""/106, 0x6a}, {&(0x7f0000006880)=""/247, 0xf7}, {&(0x7f0000006980)=""/90, 0x5a}], 0x6, &(0x7f0000006a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x7, 0x2, &(0x7f0000006d00)={r12, r13+60000000}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 2.451141852s ago: executing program 2 (id=2496): getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@rand_addr, @private}, &(0x7f0000000040)=0x8) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00', {0x0, 0x0, 0x4}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) (async) ioctl$UI_SET_PROPBIT(r1, 0x5501, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f00000001c0)=0x1, 0x4) (async) ioctl$UI_SET_RELBIT(r1, 0x8000552c, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFULA_CFG_MODE={0xa, 0x2, {0x249}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x400c800) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000500)=0x5, 0x4) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fallocate(r5, 0x2, 0x1, 0x4) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) preadv2(r6, &(0x7f0000000340)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1, 0xfffffff9, 0x7, 0xd) 2.384456103s ago: executing program 1 (id=2487): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)) 2.324152333s ago: executing program 1 (id=2497): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x10001, 0x20) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0xfffffffffffffc96, 0x2, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 2.302933394s ago: executing program 1 (id=2500): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b0000007691"]) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b0000007691"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000180)={0x1}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x17, 0x0, 0x0) unshare(0x62040200) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x12, r0, 0x75c5c000) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x12, r0, 0x75c5c000) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000580)="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") (async) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000580)="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") r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) read$FUSE(r8, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x50) r12 = syz_open_procfs(r11, &(0x7f0000000080)='smaps\x00') connect$bt_l2cap(r12, &(0x7f0000000140)={0x1f, 0x8001, @any, 0xcdf2, 0x1}, 0xe) syz_fuse_handle_req(r8, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0xfffffffd, 0x0, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x3, 0x2, 0x0, 0x0, 0xc000, 0x0, r10, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = dup(r3) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) syz_open_dev$hidraw(&(0x7f0000000240), 0x0, 0x200) (async) syz_open_dev$hidraw(&(0x7f0000000240), 0x0, 0x200) setresuid(r10, r14, 0xee01) 2.213672855s ago: executing program 2 (id=2502): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x9, 0x2}) epoll_create1(0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0x11101000, 0x0, r6}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x40, 0xf, 0x4, "8d1a2e0d"}, 0x0, 0x0, 0x0, 0x0}) close(r5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x12000001c}) unshare(0x22020600) epoll_wait(r0, &(0x7f0000004140)=[{}], 0x1, 0x4000005) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 2.112847637s ago: executing program 0 (id=2503): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x8, 0x7fffffffffffffff}) syz_usb_connect(0x3, 0x1b, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x8f, 0xb0, 0xa7, 0x20, 0x1199, 0x9061, 0xe134, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x9, 0x0, 0x0, 0x6}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x2d8, r5, 0x428, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x401}, {0x8, 0xb, 0x81}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3ff}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x800}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff1574}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x81}, {0x6, 0x16, 0x7ff}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x95d}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x9}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x40}, 0x4001) r6 = memfd_create(&(0x7f0000000000)=']\x00', 0x3) io_setup(0x2adf, &(0x7f0000000180)=0x0) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x7fff, r6, 0x0}]) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000000, 0x11, r0, 0x0) 1.742025543s ago: executing program 1 (id=2504): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20131f000000a99537adfa87d1321ea86271d6bdf45964f8ed54ae42ba61658cf535ffc652"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@remote, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfef2, 0xfffffffffffffffd, 0x40000000000}, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3ffffd}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(0xffffffffffffffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') ioctl$FITHAW(r2, 0xc0045878) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r3, &(0x7f0000000540)=[{{&(0x7f0000000280)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/9, 0x9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000003c0)=""/215, 0xd7}], 0x3, &(0x7f0000000500)=""/15, 0xf}, 0x40}], 0x1, 0x62, &(0x7f0000000580)={0x0, 0x3938700}) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) 1.515211516s ago: executing program 4 (id=2505): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = epoll_create(0x3d) r2 = socket$can_bcm(0x1d, 0x2, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x8}) fsopen(&(0x7f0000000000)='befs\x00', 0x1) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)='e', 0x1}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) dup3(r0, r4, 0x80000) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.461066107s ago: executing program 4 (id=2506): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x2, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 1.378319828s ago: executing program 4 (id=2507): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x33, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x0, 0x3507}]}, 0x70}, 0x1, 0x7}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x110a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 1.28768624s ago: executing program 4 (id=2508): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x2}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x8000011) (async) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) truncate(&(0x7f0000000100)='./file0\x00', 0x70) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) 1.239325631s ago: executing program 4 (id=2509): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)={0x10, 0x1a, 0x1, 0xfffffffd, 0x25dfdc01}, 0x10}], 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) ppoll(&(0x7f00000000c0)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x0) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0xfffffffffffffc96, 0x2, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 478.128822ms ago: executing program 0 (id=2510): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r2, &(0x7f0000000080)=""/93, 0xffffff6c) 386.716783ms ago: executing program 4 (id=2511): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x171, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/369], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) (async) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x1}}, 0x10) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2020) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 281.676865ms ago: executing program 0 (id=2512): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x580107, r3}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 221.940746ms ago: executing program 0 (id=2513): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 218.855296ms ago: executing program 0 (id=2514): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x9e, 0x0, 0x4}]}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) unshare(0x5000000) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x1000000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x100010, r3, 0x52ed4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x7, &(0x7f0000000200)={0x0, 0x8000028, 0x2, @thr={0x0, &(0x7f0000000380)="c21bab4f322313db88c71225fc33a1745244984792be79a2b64d5310812c88aa20fc112552555266f0f9737e0683a3da61730100008000000000b2a54da0fc7816dbede997a6f34a1c51d17647303e37e5092d10589144e724f48b20a93f98fee5245e46d458bc283847f8e3fef0460e3bd3285313f3bb0f9d0d8b3f8c9d1fc5562c82702b493a3e95cdb46ce871c498aec0eac7cedc50ae5c19ad49dabef676d1cb566e32ffbfe1a87f95c4a34d15beb1246dc66c0935b3db2e4c8b9dec601e0aaa4e7c4e6e8ee91baf96650d6af4e50ad178d6a4cde58345028ef3570df7bc963d45bf017e18991a1b0f967466cf3007e67d4ddbc94fdf66a251ecf02fe587bb6794240de9cdb3aa50f5a04e7fe335ac9922409f0620b356d1"}}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r6 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) close(0x3) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r7, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000040), 0x4) shutdown(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="580000000101010200000000000000000a000004300002802c000180140003000000000000000000000000000000962764126bb780f000000000000000000000000001010c0019800800020022034000"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r8, 0x8004f50c, &(0x7f00000000c0)) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 109.901218ms ago: executing program 0 (id=2515): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x48b802, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x64, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xf8, 0x0, 0x1, [@generic="e02b4221d3c744305fd369f30020dc8fcc58a362542a963097bf883548fe5ae164e5e6f4e0fb772aa1dc9e0330c9c8d1a98a1e02167abc021907e655c6053ebde9f7c472a7"]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)={0x10, 0x25, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}], 0x1, &(0x7f00000018c0), 0x0, 0x20000801}, 0x40010) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}], 0x2}, 0x7}], 0x1, 0x8042, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xc9f40000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f0000000080)) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0xee00, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xc8, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000) keyctl$get_security(0x11, r5, 0x0, 0x0) r6 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x7, 0x2, {0x2, 0x8}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}}) socketpair(0x18, 0x800, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x3) write$uinput_user_dev(r9, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) keyctl$KEYCTL_MOVE(0x1e, r5, r8, r5, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x1, 0xc99b}], 0x1) 0s ago: executing program 1 (id=2516): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) geteuid() mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x8000, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0x5}}]}) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') pwritev(r0, 0x0, 0x0, 0x43b, 0xf) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): B HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.3-1/input0 [ 35.098468][ T584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 35.098524][ T584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:62 [ 35.109152][ T308] usb 4-1: USB disconnect, device number 4 [ 35.185789][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.335779][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 35.343613][ T31] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 35.352834][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.361592][ T31] usb 2-1: Product: syz [ 35.366447][ T31] usb 2-1: Manufacturer: syz [ 35.371091][ T31] usb 2-1: SerialNumber: syz [ 35.377462][ T31] usb 2-1: config 0 descriptor?? [ 35.584268][ T626] random: crng reseeded on system resumption [ 35.621372][ T626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.630659][ T626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.646156][ T639] binder: Unknown parameter 'fscontext?}' [ 35.653951][ T31] usb 2-1: MBOX3: Invalid descriptor size=18. [ 35.673162][ T31] usb 2-1: USB disconnect, device number 3 [ 35.725767][ T36] kauditd_printk_skb: 95 callbacks suppressed [ 35.725786][ T36] audit: type=1400 audit(1750683387.500:269): avc: denied { mount } for pid=644 comm="syz.3.107" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 35.765332][ T36] audit: type=1400 audit(1750683387.540:270): avc: denied { remount } for pid=644 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 35.789667][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 35.793012][ T36] audit: type=1400 audit(1750683387.540:271): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 35.803665][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0 [ 35.832688][ T653] rust_binder: Error while translating object. [ 35.832732][ T653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.838411][ T36] audit: type=1400 audit(1750683387.610:272): avc: denied { read } for pid=546 comm="syz.2.71" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.842576][ T653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 35.882289][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 35.901829][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffb9 [ 35.922864][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 35.935020][ T36] audit: type=1400 audit(1750683387.710:273): avc: denied { bind } for pid=663 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.944355][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 35.965881][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 35.979414][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 35.990575][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 35.990751][ T36] audit: type=1400 audit(1750683387.770:274): avc: denied { setopt } for pid=663 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.004513][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.031454][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.042038][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.053615][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.064196][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.074429][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.086428][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.096769][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.107355][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.119998][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.131088][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.142051][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.154191][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.165076][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.175622][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.190652][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.201347][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.211810][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.223168][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.233482][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.243775][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.256111][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.268601][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.269262][ T36] audit: type=1400 audit(1750683388.050:275): avc: denied { mounton } for pid=674 comm="syz.1.117" path="/proc/118/cgroup" dev="proc" ino=4747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 36.280449][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.314663][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.325185][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.335294][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.351813][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.362587][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.373206][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.386244][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.398861][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.409569][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.435857][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.448248][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.460082][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.478951][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.490107][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.501837][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.513662][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.529333][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.550163][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.571569][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.573512][ T710] rust_binder: Write failure EFAULT in pid:126 [ 36.586915][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.604690][ T712] overlayfs: failed to clone lowerpath [ 36.611808][ T36] audit: type=1400 audit(1750683388.390:276): avc: denied { getopt } for pid=711 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.614128][ T717] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.632103][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.636460][ T716] rust_binder: Write failure EINVAL in pid:128 [ 36.640340][ T712] tipc: Enabling of bearer rejected, media not registered [ 36.666314][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.677326][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.689687][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.698810][ T36] audit: type=1400 audit(1750683388.480:277): avc: denied { create } for pid=722 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 36.709858][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.736373][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.746930][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.761799][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.774262][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.785139][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.801138][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.812411][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.823334][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.829564][ T738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=738 comm=syz.0.138 [ 36.835021][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.857615][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.868592][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.880245][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.890608][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.901596][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.913766][ T36] audit: type=1400 audit(1750683388.690:278): avc: denied { mount } for pid=747 comm="syz.0.141" name="/" dev="ramfs" ino=5604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 36.914012][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.948889][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.959464][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 36.971065][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.982249][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.992324][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 37.003896][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 37.014408][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 37.025881][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 37.038661][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 37.049911][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 37.060580][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 37.072197][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 37.083382][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 37.093685][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 37.105506][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 37.116261][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 37.126532][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 37.138122][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 37.148299][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 37.158444][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 37.169949][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 37.181444][ T423] asix 3-1:0.0 (unnamed net_device) (uninitialized): Could not register MDIO bus (err -5) [ 37.191960][ T423] asix 3-1:0.0: probe with driver asix failed with error -5 [ 37.202610][ T423] usb 3-1: USB disconnect, device number 3 [ 37.345398][ T764] overlayfs: failed to clone upperpath [ 37.443583][ T778] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 38.212284][ T823] overlayfs: failed to clone upperpath [ 38.285847][ T838] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.303783][ T838] x_tables: duplicate underflow at hook 2 [ 38.317292][ T841] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 38.326274][ T841] rust_binder: Write failure EINVAL in pid:84 [ 38.455781][ T862] can: request_module (can-proto-0) failed. [ 39.236354][ T908] tipc: Enabling of bearer rejected, failed to enable media [ 40.238881][ T968] capability: warning: `syz.2.218' uses 32-bit capabilities (legacy support in use) [ 40.505803][ T308] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.647820][ T983] rust_binder: Write failure EFAULT in pid:148 [ 40.666913][ T308] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 40.677410][ T985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.686876][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 40.698538][ T985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.705086][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 40.721622][ T308] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.734615][ T308] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.743705][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.753357][ T308] usb 4-1: config 0 descriptor?? [ 40.818268][ T993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.226'. [ 40.906650][ T362] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 41.058202][ T362] usb 2-1: unable to get BOS descriptor or descriptor too short [ 41.067996][ T362] usb 2-1: too many configurations: 120, using maximum allowed: 8 [ 41.076556][ T362] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 41.084236][ T362] usb 2-1: can't read configurations, error -71 [ 41.372449][ T970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.381437][ T970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.513267][ T308] usbhid 4-1:0.0: can't add hid device: -71 [ 41.519317][ T308] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 41.528469][ T308] usb 4-1: USB disconnect, device number 5 [ 41.578348][ T1013] rust_binder: Write failure EFAULT in pid:158 [ 41.601812][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 41.601833][ T36] audit: type=1400 audit(1750683393.380:308): avc: denied { bind } for pid=1015 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.626390][ T1016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 41.634709][ T36] audit: type=1400 audit(1750683393.390:309): avc: denied { setopt } for pid=1015 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.665023][ T1016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 41.749451][ T1021] rust_binder: Error while translating object. [ 41.749535][ T1021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.756282][ T1021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 41.766679][ T1021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:163 [ 42.083799][ T36] audit: type=1400 audit(1750683393.860:310): avc: denied { create } for pid=1028 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 42.535542][ T36] audit: type=1326 audit(1750683394.310:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.2.251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9bd58e929 code=0x0 [ 42.620072][ T1077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 42.764637][ T1091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 42.773597][ T1091] IPv6: NLM_F_CREATE should be specified when creating new route [ 42.783936][ T1091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 42.794109][ T36] audit: type=1400 audit(1750683394.580:312): avc: denied { map } for pid=1090 comm="syz.3.260" path="socket:[6486]" dev="sockfs" ino=6486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.831753][ T36] audit: type=1400 audit(1750683394.580:313): avc: denied { read } for pid=1090 comm="syz.3.260" path="socket:[6486]" dev="sockfs" ino=6486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.875973][ T1095] can: request_module (can-proto-0) failed. [ 42.924857][ T36] audit: type=1400 audit(1750683394.700:314): avc: denied { accept } for pid=1098 comm="syz.3.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 43.404822][ T36] audit: type=1400 audit(1750683395.180:315): avc: denied { sqpoll } for pid=1117 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.445780][ T36] audit: type=1400 audit(1750683395.210:316): avc: denied { nlmsg_read } for pid=1121 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 43.484749][ T36] audit: type=1400 audit(1750683395.260:317): avc: denied { bind } for pid=1127 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.982180][ T1139] fuse: Bad value for 'fd' [ 43.987464][ T1140] fuse: Bad value for 'user_id' [ 43.993239][ T1140] fuse: Bad value for 'user_id' [ 44.108285][ T1160] /dev/rnullb0: Can't lookup blockdev [ 44.226235][ T1166] netlink: 'syz.2.287': attribute type 4 has an invalid length. [ 44.233937][ T1166] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.287'. [ 44.256588][ T1166] netlink: 296 bytes leftover after parsing attributes in process `syz.2.287'. [ 44.316591][ T1168] overlay: Unknown parameter 'subj_user' [ 44.326833][ T1168] overlay: Unknown parameter 'subj_user' [ 44.635458][ T1178] wg2: entered promiscuous mode [ 44.656006][ T1178] wg2: entered allmulticast mode [ 44.822754][ T1187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.835511][ T1187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.918657][ T1200] fuse: Bad value for 'fd' [ 44.923898][ T1200] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 44.944172][ T1204] netlink: 104 bytes leftover after parsing attributes in process `syz.3.301'. [ 44.978732][ T1207] binder: Unknown parameter 'measure' [ 45.055799][ T387] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 45.185903][ T387] usb 2-1: device descriptor read/64, error -71 [ 45.425800][ T387] usb 2-1: device descriptor read/64, error -71 [ 45.665804][ T387] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 45.725479][ T1245] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 45.805829][ T387] usb 2-1: device descriptor read/64, error -71 [ 45.847826][ T1263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 46.045813][ T387] usb 2-1: device descriptor read/64, error -71 [ 46.155895][ T387] usb usb2-port1: attempt power cycle [ 46.451529][ T1290] syz.3.333(1290): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 46.496170][ T387] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 46.516838][ T387] usb 2-1: device descriptor read/8, error -71 [ 46.646812][ T387] usb 2-1: device descriptor read/8, error -71 [ 46.885805][ T387] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 46.907011][ T387] usb 2-1: device descriptor read/8, error -71 [ 47.036808][ T387] usb 2-1: device descriptor read/8, error -71 [ 47.145981][ T387] usb usb2-port1: unable to enumerate USB device [ 47.545158][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 47.545178][ T36] audit: type=1400 audit(1750683399.320:330): avc: denied { getopt } for pid=1334 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.571166][ T36] audit: type=1400 audit(1750683399.350:331): avc: denied { relabelfrom } for pid=1334 comm="syz.2.348" name="" dev="pipefs" ino=7633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 47.631947][ T36] audit: type=1400 audit(1750683399.410:332): avc: denied { remount } for pid=1344 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.651801][ T36] audit: type=1400 audit(1750683399.410:333): avc: denied { mount } for pid=1344 comm="syz.2.351" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 47.673887][ T36] audit: type=1400 audit(1750683399.440:334): avc: denied { bind } for pid=1348 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.831256][ T36] audit: type=1400 audit(1750683399.610:335): avc: denied { create } for pid=1362 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 47.860033][ T1365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.860072][ T1365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176 [ 47.886737][ T1367] netlink: 56 bytes leftover after parsing attributes in process `syz.1.360'. [ 47.926727][ T1369] incfs: ino conflict with backing FS 1 [ 47.937512][ T36] audit: type=1400 audit(1750683399.720:336): avc: denied { read write } for pid=1368 comm="syz.1.361" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.975922][ T36] audit: type=1400 audit(1750683399.720:337): avc: denied { open } for pid=1368 comm="syz.1.361" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.000816][ T36] audit: type=1400 audit(1750683399.750:338): avc: denied { ioctl } for pid=1368 comm="syz.1.361" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x552d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.104541][ T36] audit: type=1400 audit(1750683399.880:339): avc: denied { execute } for pid=1382 comm="syz.1.366" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.311468][ T1405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.373'. [ 48.360292][ T1413] netlink: 'syz.2.376': attribute type 11 has an invalid length. [ 48.368214][ T1413] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.376'. [ 48.565777][ T362] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 48.599126][ T1437] veth1_macvtap: left promiscuous mode [ 48.605037][ T1437] macsec0: entered allmulticast mode [ 48.735769][ T362] usb 2-1: Using ep0 maxpacket: 16 [ 48.746519][ T362] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 48.754721][ T362] usb 2-1: config 0 has no interface number 0 [ 48.775801][ T362] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 48.795775][ T362] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 48.807634][ T362] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 48.816980][ T362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.825108][ T362] usb 2-1: Product: syz [ 48.829667][ T362] usb 2-1: Manufacturer: syz [ 48.834335][ T362] usb 2-1: SerialNumber: syz [ 48.840059][ T362] usb 2-1: config 0 descriptor?? [ 48.848969][ T1407] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 48.856414][ T1407] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 49.065069][ T1407] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 49.072593][ T1407] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 49.281134][ T1407] rust_binder: Write failure EFAULT in pid:194 [ 49.282220][ T362] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 49.299837][ T362] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 49.309872][ T362] asix 2-1:0.251: probe with driver asix failed with error -5 [ 49.319650][ T362] usb 2-1: USB disconnect, device number 10 [ 49.817197][ T1477] binder: Bad value for 'stats' [ 61.959223][ T1491] rust_binder: Error while translating object. [ 61.959255][ T1491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.963037][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 61.963072][ T36] audit: type=1400 audit(1750683413.740:371): avc: denied { checkpoint_restore } for pid=1486 comm="syz.2.403" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.965490][ T1491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205 [ 61.985800][ T1489] >: renamed from veth0_vlan (while UP) [ 62.017810][ T36] audit: type=1400 audit(1750683413.740:372): avc: denied { shutdown } for pid=1484 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.050894][ T1489] overlayfs: failed to clone upperpath [ 62.067801][ T1500] can: request_module (can-proto-0) failed. [ 62.074599][ T36] audit: type=1400 audit(1750683413.850:373): avc: denied { accept } for pid=1499 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.586272][ T36] audit: type=1400 audit(1750683414.370:374): avc: denied { map } for pid=1521 comm="syz.0.415" path="socket:[6956]" dev="sockfs" ino=6956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 62.730955][ T36] audit: type=1400 audit(1750683414.500:375): avc: denied { audit_read } for pid=1541 comm="syz.2.421" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.773267][ T1547] netlink: 57 bytes leftover after parsing attributes in process `syz.3.423'. [ 62.849600][ T1555] raw_sendmsg: syz.3.427 forgot to set AF_INET. Fix it! [ 73.751136][ T36] audit: type=1400 audit(1750683425.530:376): avc: denied { ioctl } for pid=1599 comm="syz.0.441" path="socket:[7064]" dev="sockfs" ino=7064 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.085936][ T423] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 74.215913][ T423] usb 2-1: device descriptor read/64, error -71 [ 74.284407][ T36] audit: type=1400 audit(1750683426.060:377): avc: denied { mount } for pid=1631 comm="syz.3.453" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 74.455865][ T423] usb 2-1: device descriptor read/64, error -71 [ 74.621021][ T36] audit: type=1400 audit(1750683426.400:378): avc: denied { getattr } for pid=1649 comm="syz.0.460" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.705824][ T423] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 74.835889][ T423] usb 2-1: device descriptor read/64, error -71 [ 74.844157][ T36] audit: type=1326 audit(1750683426.620:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1668 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c58e929 code=0x7ffc0000 [ 74.867664][ T36] audit: type=1326 audit(1750683426.640:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1668 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c58e929 code=0x7ffc0000 [ 74.891700][ T36] audit: type=1326 audit(1750683426.640:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1668 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f808c58e929 code=0x7ffc0000 [ 74.915593][ T36] audit: type=1326 audit(1750683426.640:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1668 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c58e929 code=0x7ffc0000 [ 74.939261][ T36] audit: type=1326 audit(1750683426.640:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1668 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f808c58e929 code=0x7ffc0000 [ 74.962765][ T36] audit: type=1326 audit(1750683426.640:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1668 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c58e929 code=0x7ffc0000 [ 74.987732][ T36] audit: type=1326 audit(1750683426.640:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1668 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f808c58e929 code=0x7ffc0000 [ 75.095799][ T423] usb 2-1: device descriptor read/64, error -71 [ 75.197965][ T1690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 75.205965][ T423] usb usb2-port1: attempt power cycle [ 75.545835][ T423] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 75.566948][ T423] usb 2-1: device descriptor read/8, error -71 [ 75.656185][ T1724] overlayfs: failed to clone upperpath [ 75.696889][ T423] usb 2-1: device descriptor read/8, error -71 [ 75.945763][ T423] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 75.958172][ T1735] incfs: Options parsing error. -22 [ 75.963561][ T1735] incfs: mount failed -22 [ 75.969049][ T423] usb 2-1: device descriptor read/8, error -71 [ 75.991388][ T1737] /dev/rnullb0: Can't lookup blockdev [ 76.012188][ T1739] syz.2.491 uses obsolete (PF_INET,SOCK_PACKET) [ 76.056161][ T1744] overlayfs: failed to clone upperpath [ 76.116796][ T423] usb 2-1: device descriptor read/8, error -71 [ 76.124692][ T1753] netlink: 'syz.2.495': attribute type 4 has an invalid length. [ 76.132494][ T1753] netlink: 'syz.2.495': attribute type 27 has an invalid length. [ 76.140612][ T1753] netlink: 3609 bytes leftover after parsing attributes in process `syz.2.495'. [ 76.150872][ T1753] overlayfs: missing 'workdir' [ 76.235878][ T423] usb usb2-port1: unable to enumerate USB device [ 76.728086][ T1825] overlayfs: failed to clone upperpath [ 77.205776][ T423] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 77.357057][ T423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.368234][ T423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.378338][ T423] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 77.388005][ T423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.397888][ T423] usb 2-1: config 0 descriptor?? [ 77.603890][ T1828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.612558][ T1828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.620711][ T1828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.629281][ T1828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.638269][ T1828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.646831][ T1828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.655083][ T1828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.664035][ T1828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.672331][ T1828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.680892][ T1828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.814486][ T423] usbhid 2-1:0.0: can't add hid device: -32 [ 77.820563][ T423] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 77.984022][ T387] usb 2-1: USB disconnect, device number 15 [ 78.054649][ T1864] netlink: 'syz.3.532': attribute type 8 has an invalid length. [ 78.128017][ T1877] binder: Unknown parameter 'rw ' [ 78.419412][ T1933] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55466 sclass=netlink_xfrm_socket pid=1933 comm=syz.0.560 [ 78.433410][ T1933] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55466 sclass=netlink_xfrm_socket pid=1933 comm=syz.0.560 [ 78.878219][ T1983] can: request_module (can-proto-0) failed. [ 78.923899][ T36] kauditd_printk_skb: 133 callbacks suppressed [ 78.923918][ T36] audit: type=1400 audit(1750683430.700:519): avc: denied { remount } for pid=1988 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.127975][ T36] audit: type=1326 audit(1750683430.910:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1915 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c58e929 code=0x7fc00000 [ 80.169057][ T36] audit: type=1400 audit(1750683431.950:521): avc: denied { mount } for pid=2071 comm="syz.3.609" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.204231][ T36] audit: type=1400 audit(1750683431.980:522): avc: denied { ioctl } for pid=2081 comm="syz.3.611" path="socket:[9628]" dev="sockfs" ino=9628 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.269885][ T2091] 9pnet_fd: Insufficient options for proto=fd [ 80.315533][ T2097] sit0: entered promiscuous mode [ 80.322123][ T2097] netlink: 'syz.3.618': attribute type 1 has an invalid length. [ 80.330027][ T2097] netlink: 9 bytes leftover after parsing attributes in process `syz.3.618'. [ 80.353543][ T36] audit: type=1400 audit(1750683432.130:523): avc: denied { listen } for pid=2098 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.458440][ T2151] tipc: Enabling of bearer rejected, media not registered [ 81.558379][ T2165] netlink: 'syz.1.645': attribute type 4 has an invalid length. [ 81.566145][ T2165] netlink: 3581 bytes leftover after parsing attributes in process `syz.1.645'. [ 82.214711][ T36] audit: type=1400 audit(1750683433.990:524): avc: denied { create } for pid=2170 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.023383][ T36] audit: type=1400 audit(1750683434.800:525): avc: denied { write } for pid=2220 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.085405][ T36] audit: type=1400 audit(1750683434.860:526): avc: denied { create } for pid=2248 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.115881][ T36] audit: type=1326 audit(1750683434.890:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2060 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9209b8e929 code=0x7fc00000 [ 83.224760][ T36] audit: type=1326 audit(1750683435.000:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2172 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bd58e929 code=0x7fc00000 [ 83.315624][ T2279] process 'syz.3.687' launched '/dev/fd/3' with NULL argv: empty string added [ 83.860861][ T2297] overlay: ./file0 is not a directory [ 83.992428][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 83.992447][ T36] audit: type=1400 audit(1750683435.770:532): avc: denied { connect } for pid=2311 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.430357][ T36] audit: type=1326 audit(1750683436.210:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2335 comm="syz.3.705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f808c58e929 code=0x0 [ 84.481830][ T36] audit: type=1400 audit(1750683436.260:534): avc: denied { map } for pid=2339 comm="syz.1.707" path="/117" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.477607][ T36] audit: type=1326 audit(1750683437.260:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2400 comm="syz.3.727" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f808c58e929 code=0x0 [ 85.794862][ T2414] fuse: Bad value for 'group_id' [ 85.800051][ T2414] fuse: Bad value for 'group_id' [ 86.381753][ T2449] netlink: 60 bytes leftover after parsing attributes in process `syz.2.743'. [ 86.660783][ T36] audit: type=1400 audit(1750683438.440:536): avc: denied { sqpoll } for pid=2457 comm="syz.1.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.680665][ T2458] netlink: 228 bytes leftover after parsing attributes in process `syz.1.745'. [ 86.695757][ T36] audit: type=1400 audit(1750683438.440:537): avc: denied { mounton } for pid=2459 comm="syz.2.746" path="/file0" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 86.798696][ T36] audit: type=1400 audit(1750683438.580:538): avc: denied { ioctl } for pid=2469 comm="syz.2.750" path="socket:[9209]" dev="sockfs" ino=9209 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.771775][ T2526] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž;KZì [ 87.924652][ T2531] netlink: 36 bytes leftover after parsing attributes in process `syz.0.773'. [ 88.523228][ T36] audit: type=1400 audit(1750683440.300:539): avc: denied { create } for pid=2557 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 88.544863][ T36] audit: type=1400 audit(1750683440.320:540): avc: denied { getopt } for pid=2557 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 88.747512][ T2595] lo: entered promiscuous mode [ 88.974157][ T2602] mmap: syz.1.797 (2602) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.226369][ T2614] lo: entered promiscuous mode [ 89.231713][ T2613] lo: left promiscuous mode [ 89.264448][ T2595] lo: left promiscuous mode [ 89.318188][ T36] audit: type=1400 audit(1750683441.100:541): avc: denied { connect } for pid=2625 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.708442][ T2661] overlayfs: failed to clone upperpath [ 89.765573][ T2665] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 89.776193][ T36] audit: type=1400 audit(1750683441.560:542): avc: denied { relabelto } for pid=2664 comm="syz.1.818" name="145" dev="tmpfs" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 89.820654][ T36] audit: type=1400 audit(1750683441.560:543): avc: denied { associate } for pid=2664 comm="syz.1.818" name="145" dev="tmpfs" ino=801 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 89.849526][ T36] audit: type=1400 audit(1750683441.590:544): avc: denied { write } for pid=291 comm="syz-executor" name="145" dev="tmpfs" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 89.883649][ T36] audit: type=1400 audit(1750683441.590:545): avc: denied { remove_name } for pid=291 comm="syz-executor" name="binderfs" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 89.912636][ T36] audit: type=1400 audit(1750683441.590:546): avc: denied { rmdir } for pid=291 comm="syz-executor" name="145" dev="tmpfs" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 89.985662][ T2678] sit0: entered promiscuous mode [ 89.992637][ T2678] netlink: 'syz.1.824': attribute type 1 has an invalid length. [ 90.000490][ T2678] netlink: 1 bytes leftover after parsing attributes in process `syz.1.824'. [ 90.033983][ T2680] lo: entered promiscuous mode [ 90.053835][ T2682] lo: left promiscuous mode [ 90.073801][ T2685] tc_dump_action: action bad kind [ 90.120849][ T36] audit: type=1400 audit(1750683441.900:547): avc: denied { accept } for pid=2704 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.707925][ T36] audit: type=1400 audit(1750683442.490:548): avc: denied { create } for pid=2760 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 90.818873][ T2778] overlayfs: disabling nfs_export due to verity=on [ 90.825605][ T2778] overlayfs: missing 'lowerdir' [ 90.864560][ T2787] overlayfs: failed to clone upperpath [ 90.892344][ T36] audit: type=1400 audit(1750683442.670:549): avc: denied { watch_reads } for pid=2791 comm="syz.3.864" path="/258" dev="tmpfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.946985][ T2796] netlink: 'syz.3.865': attribute type 4 has an invalid length. [ 90.958410][ T2796] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.865'. [ 91.207968][ T36] audit: type=1326 audit(1750683442.990:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c58e929 code=0x7ffc0000 [ 91.471107][ T2850] fuse: Unknown parameter 'fNC«“³#Š_F d90x0000000000000005 ' [ 91.533830][ T2858] overlayfs: failed to clone upperpath [ 91.576214][ T2858] overlayfs: failed to clone upperpath [ 91.587147][ T2863] lo: entered promiscuous mode [ 91.606317][ T2860] lo: left promiscuous mode [ 91.631506][ T2858] overlay: Unknown parameter 'mounts' [ 91.656482][ T2858] overlay: Unknown parameter 'mounts' [ 91.688412][ T2858] overlay: Unknown parameter 'mounts' [ 91.713980][ T2858] overlay: Unknown parameter 'mounts' [ 91.733585][ T2858] overlay: Unknown parameter 'mounts' [ 91.750469][ T2858] overlay: Unknown parameter 'mounts' [ 91.766086][ T2858] overlay: Unknown parameter 'mounts' [ 91.782050][ T2858] overlay: Unknown parameter 'mounts' [ 91.795939][ T2858] overlay: Unknown parameter 'mounts' [ 91.818876][ T2858] overlay: Unknown parameter 'mounts' [ 91.837387][ T2858] overlay: Unknown parameter 'mounts' [ 91.853530][ T2858] overlay: Unknown parameter 'mounts' [ 91.859598][ T2858] overlay: Unknown parameter 'mounts' [ 91.876767][ T2858] overlay: Unknown parameter 'mounts' [ 91.901470][ T2858] overlay: Unknown parameter 'mounts' [ 91.922563][ T2858] overlay: Unknown parameter 'mounts' [ 91.950835][ T2858] overlay: Unknown parameter 'mounts' [ 91.957814][ T2883] overlayfs: failed to clone upperpath [ 91.978154][ T2858] overlay: Unknown parameter 'mounts' [ 92.007763][ T2858] overlay: Unknown parameter 'mounts' [ 92.029107][ T2858] overlay: Unknown parameter 'mounts' [ 92.049248][ T2858] overlay: Unknown parameter 'mounts' [ 92.070508][ T2858] overlay: Unknown parameter 'mounts' [ 92.091390][ T2858] overlay: Unknown parameter 'mounts' [ 92.117069][ T2858] overlay: Unknown parameter 'mounts' [ 92.133995][ T2858] overlay: Unknown parameter 'mounts' [ 92.150400][ T2858] overlay: Unknown parameter 'mounts' [ 92.177103][ T2858] overlay: Unknown parameter 'mounts' [ 92.198203][ T2858] overlay: Unknown parameter 'mounts' [ 92.215935][ T2858] overlay: Unknown parameter 'mounts' [ 92.235899][ T2858] overlay: Unknown parameter 'mounts' [ 92.241274][ T2890] 9pnet_fd: Insufficient options for proto=fd [ 92.247722][ T2858] overlay: Unknown parameter 'mounts' [ 92.534271][ T2908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 92.575912][ T2912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 92.708793][ T2921] can: request_module (can-proto-6) failed. [ 92.747374][ T2923] netlink: 'syz.2.914': attribute type 4 has an invalid length. [ 92.755090][ T2923] netlink: 'syz.2.914': attribute type 21 has an invalid length. [ 92.795749][ T2923] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.914'. [ 93.660333][ T2957] Invalid ELF header len 16 [ 93.826432][ T2978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.933'. [ 94.411942][ T3052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.951'. [ 94.411977][ T3053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.951'. [ 94.448682][ T3055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 95.042896][ T3104] netlink: 60 bytes leftover after parsing attributes in process `syz.3.968'. [ 95.083767][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 95.083789][ T36] audit: type=1400 audit(1750683446.858:561): avc: denied { read } for pid=3108 comm="syz.3.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.878234][ T3134] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 95.886052][ T3134] netlink: 9 bytes leftover after parsing attributes in process `syz.3.978'. [ 96.062876][ T3158] netlink: 'syz.2.984': attribute type 4 has an invalid length. [ 96.073545][ T3158] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.984'. [ 96.391918][ T3179] overlayfs: missing 'lowerdir' [ 96.488416][ T3185] netlink: 'syz.1.991': attribute type 4 has an invalid length. [ 96.590216][ T3194] overlayfs: missing 'lowerdir' [ 96.619459][ T3197] overlayfs: failed to clone upperpath [ 97.208867][ T36] audit: type=1400 audit(1750683448.988:562): avc: denied { accept } for pid=3211 comm="syz.1.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.641893][ T36] audit: type=1400 audit(1750683449.418:563): avc: denied { setattr } for pid=3244 comm="syz.2.1016" name="NETLINK" dev="sockfs" ino=11857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.820343][ T3256] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 97.829038][ T3256] binder: Unknown parameter 'stits' [ 97.846308][ T36] audit: type=1326 audit(1750683449.628:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3257 comm="syz.1.1020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f359938e929 code=0x0 [ 98.586964][ T3310] __nla_validate_parse: 4 callbacks suppressed [ 98.586981][ T3310] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1042'. [ 99.275033][ T3354] syz.3.1057: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 99.295756][ T3354] CPU: 0 UID: 0 PID: 3354 Comm: syz.3.1057 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 99.295794][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.295814][ T3354] Call Trace: [ 99.295822][ T3354] [ 99.295831][ T3354] __dump_stack+0x21/0x30 [ 99.295868][ T3354] dump_stack_lvl+0x10c/0x190 [ 99.295896][ T3354] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.295924][ T3354] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 99.295962][ T3354] dump_stack+0x19/0x20 [ 99.295988][ T3354] warn_alloc+0x1bc/0x2a0 [ 99.296012][ T3354] ? __kasan_slab_free+0x5f/0x80 [ 99.296045][ T3354] ? __cfi_warn_alloc+0x10/0x10 [ 99.296067][ T3354] ? __get_vm_area_node+0x1dc/0x3a0 [ 99.296092][ T3354] ? xt_alloc_entry_offsets+0x56/0xe0 [ 99.296128][ T3354] __vmalloc_node_range_noprof+0x68e/0x1420 [ 99.296154][ T3354] ? __kernel_text_address+0x11/0x40 [ 99.296185][ T3354] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 99.296238][ T3354] ? __kmalloc_large_node_noprof+0x1e/0xe0 [ 99.296268][ T3354] ? __kmalloc_node_noprof+0x2a5/0x450 [ 99.296297][ T3354] ? nf_setsockopt+0x28d/0x2b0 [ 99.296325][ T3354] __kvmalloc_node_noprof+0xfc/0x300 [ 99.296353][ T3354] ? xt_alloc_entry_offsets+0x56/0xe0 [ 99.296387][ T3354] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 99.296424][ T3354] xt_alloc_entry_offsets+0x56/0xe0 [ 99.296459][ T3354] translate_table+0x19c/0x2050 [ 99.296495][ T3354] ? cred_has_capability+0x281/0x380 [ 99.296531][ T3354] ? ip6t_register_table+0x7c0/0x7c0 [ 99.296564][ T3354] ? __kmalloc_node_noprof+0x1b1/0x450 [ 99.296592][ T3354] ? __kvmalloc_node_noprof+0x11d/0x300 [ 99.296621][ T3354] ? __kvmalloc_node_noprof+0x168/0x300 [ 99.296649][ T3354] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 99.296676][ T3354] ? should_fail+0xf/0x20 [ 99.296702][ T3354] ? _copy_from_user+0x8b/0xb0 [ 99.296734][ T3354] ? copy_from_sockptr_offset+0x77/0xb0 [ 99.296769][ T3354] do_ip6t_set_ctl+0x6f6/0x8b0 [ 99.296803][ T3354] ? __cfi_do_ip6t_set_ctl+0x10/0x10 [ 99.296836][ T3354] ? avc_has_perm+0x144/0x220 [ 99.296861][ T3354] ? __cfi_avc_has_perm+0x10/0x10 [ 99.296886][ T3354] ? futex_wake+0x5fb/0x900 [ 99.296910][ T3354] ? __cfi_mutex_unlock+0x10/0x10 [ 99.296935][ T3354] ? selinux_socket_setsockopt+0x2ea/0x390 [ 99.296966][ T3354] nf_setsockopt+0x28d/0x2b0 [ 99.296994][ T3354] ipv6_setsockopt+0x130/0x170 [ 99.297028][ T3354] udpv6_setsockopt+0xa3/0xc0 [ 99.297054][ T3354] sock_common_setsockopt+0xb8/0xd0 [ 99.297085][ T3354] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 99.297116][ T3354] do_sock_setsockopt+0x26a/0x400 [ 99.297140][ T3354] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 99.297167][ T3354] __x64_sys_setsockopt+0x1b8/0x250 [ 99.297192][ T3354] x64_sys_call+0x2adc/0x2ee0 [ 99.297222][ T3354] do_syscall_64+0x58/0xf0 [ 99.297256][ T3354] ? clear_bhb_loop+0x50/0xa0 [ 99.297281][ T3354] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.297305][ T3354] RIP: 0033:0x7f808c58e929 [ 99.297337][ T3354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.297359][ T3354] RSP: 002b:00007f808d49d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 99.297386][ T3354] RAX: ffffffffffffffda RBX: 00007f808c7b5fa0 RCX: 00007f808c58e929 [ 99.297404][ T3354] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 99.297426][ T3354] RBP: 00007f808c610b39 R08: 00000000000d0060 R09: 0000000000000000 [ 99.297443][ T3354] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 99.297459][ T3354] R13: 0000000000000000 R14: 00007f808c7b5fa0 R15: 00007fff14a0b938 [ 99.297481][ T3354] [ 99.297493][ T3354] Mem-Info: [ 99.659091][ T3354] active_anon:8367 inactive_anon:368 isolated_anon:0 [ 99.659091][ T3354] active_file:13053 inactive_file:11082 isolated_file:0 [ 99.659091][ T3354] unevictable:0 dirty:34 writeback:0 [ 99.659091][ T3354] slab_reclaimable:5726 slab_unreclaimable:70279 [ 99.659091][ T3354] mapped:23729 shmem:3092 pagetables:973 [ 99.659091][ T3354] sec_pagetables:0 bounce:0 [ 99.659091][ T3354] kernel_misc_reclaimable:0 [ 99.659091][ T3354] free:1507527 free_pcp:12041 free_cma:0 [ 99.707605][ T3354] Node 0 active_anon:38888kB inactive_anon:1472kB active_file:52212kB inactive_file:44328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100416kB dirty:136kB writeback:0kB shmem:17868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:4568kB pagetables:3960kB sec_pagetables:0kB all_unreclaimable? no [ 99.740929][ T3354] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966012kB mlocked:0kB bounce:0kB free_pcp:5800kB local_pcp:0kB free_cma:0kB [ 99.771116][ T3354] lowmem_reserve[]: 0 3921 3921 [ 99.776049][ T3354] Normal free:3071472kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44972kB inactive_anon:1472kB active_file:52212kB inactive_file:44328kB unevictable:0kB writepending:136kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:29892kB local_pcp:27828kB free_cma:0kB [ 99.807874][ T3354] lowmem_reserve[]: 0 0 0 [ 99.812258][ T3354] DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 99.827820][ T3354] Normal: 175*4kB (UE) 146*8kB (UME) 262*16kB (UME) 64*32kB (UM) 517*64kB (UME) 122*128kB (UME) 60*256kB (UME) 38*512kB (UME) 26*1024kB (UME) 16*2048kB (UM) 713*4096kB (UM) = 3071468kB [ 99.846262][ T3354] 30489 total pagecache pages [ 99.850964][ T3354] 396 pages in swap cache [ 99.855285][ T3354] Free swap = 122908kB [ 99.859506][ T3354] Total swap = 124996kB [ 99.863671][ T3354] 2097051 pages RAM [ 99.867547][ T3354] 0 pages HighMem/MovableOnly [ 99.872260][ T3354] 351518 pages reserved [ 99.876539][ T3354] 0 pages cma reserved [ 99.882703][ T3354] Memory allocations: [ 99.886768][ T3354] 0 B 0 init/main.c:1370 func:do_initcalls [ 99.893986][ T3354] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 99.902090][ T3354] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 99.909760][ T3354] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 99.917691][ T3354] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 99.925604][ T3354] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 99.934234][ T3354] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 99.942301][ T3354] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 99.950478][ T3354] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 99.958993][ T3354] 0 B 0 init/initramfs.c:101 func:find_link [ 100.334100][ T3419] bpf: Bad value for 'mode' [ 100.340003][ T3420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 100.378636][ T3425] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1082'. [ 100.407339][ T3427] overlay: filesystem on ./bus is read-only [ 100.412374][ T36] audit: type=1400 audit(1750683452.188:565): avc: denied { mounton } for pid=3426 comm="syz.1.1083" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 100.593904][ T36] audit: type=1400 audit(1750683452.368:566): avc: denied { read } for pid=3435 comm="syz.3.1087" path="socket:[12706]" dev="sockfs" ino=12706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.637002][ T3439] overlayfs: failed to resolve './file0': -2 [ 100.726167][ T3455] incfs: Options parsing error. -22 [ 100.731840][ T3455] incfs: mount failed -22 [ 100.902665][ T3467] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3467 comm=syz.1.1096 [ 100.972754][ T3474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 100.983290][ T3477] 9pnet: Could not find request transport: v [ 100.992780][ T3469] fuse: Bad value for 'fd' [ 101.056599][ T3472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1098'. [ 101.073018][ T3489] overlayfs: failed to clone upperpath [ 101.080793][ T3489] overlayfs: failed to clone upperpath [ 101.113267][ T3495] tmpfs: Unknown parameter 'nuswap' [ 101.230143][ T3509] /dev/rnullb0: Can't lookup blockdev [ 101.272629][ T3522] /dev/rnullb0: Can't lookup blockdev [ 101.299165][ T3529] overlayfs: failed to clone upperpath [ 101.515013][ T36] audit: type=1400 audit(1750683453.286:567): avc: denied { setopt } for pid=3547 comm="syz.0.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 101.720832][ T3552] netlink: 'syz.0.1126': attribute type 12 has an invalid length. [ 101.973874][ T36] audit: type=1400 audit(1750683453.746:568): avc: denied { setopt } for pid=3572 comm="syz.2.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.012108][ T3583] 9pnet_fd: Insufficient options for proto=fd [ 102.018437][ T36] audit: type=1400 audit(1750683453.786:569): avc: denied { mounton } for pid=3581 comm="syz.3.1136" path="/353/file0" dev="tmpfs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.042040][ T36] audit: type=1400 audit(1750683453.826:571): avc: denied { setattr } for pid=3581 comm="syz.3.1136" name="file0" dev="tmpfs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.065451][ T36] audit: type=1400 audit(1750683453.826:570): avc: denied { write } for pid=3581 comm="syz.3.1136" name="file0" dev="tmpfs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.091078][ T36] audit: type=1400 audit(1750683453.826:572): avc: denied { open } for pid=3581 comm="syz.3.1136" path="/353/file0" dev="tmpfs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.119446][ T3591] can: request_module (can-proto-0) failed. [ 102.273497][ T3600] fuse: blksize only supported for fuseblk [ 102.296539][ T36] audit: type=1400 audit(1750683454.076:573): avc: denied { read } for pid=3601 comm="syz.3.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.348044][ T3603] overlayfs: failed to clone lowerpath [ 102.519672][ T3608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1144'. [ 102.524282][ T3612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1146'. [ 102.576903][ T36] audit: type=1326 audit(1750683454.356:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9209b8e929 code=0x7fc00000 [ 102.687249][ T3639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1156'. [ 102.989615][ T3680] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 103.739306][ T3731] netlink: 'syz.2.1191': attribute type 4 has an invalid length. [ 103.749944][ T3731] netlink: 'syz.2.1191': attribute type 4 has an invalid length. [ 103.957617][ T3761] overlayfs: failed to clone upperpath [ 104.762394][ T3821] overlayfs: failed to clone upperpath [ 104.941480][ T3836] overlayfs: failed to clone upperpath [ 105.069096][ T3853] netlink: 'syz.1.1231': attribute type 4 has an invalid length. [ 105.077047][ T3853] netlink: 'syz.1.1231': attribute type 5 has an invalid length. [ 105.085622][ T3853] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1231'. [ 105.096833][ T3853] lo: entered promiscuous mode [ 105.102410][ T3852] lo: left promiscuous mode [ 105.553128][ T3905] batadv_slave_0: entered promiscuous mode [ 105.563454][ T3904] batadv_slave_0: left promiscuous mode [ 105.569573][ T3907] batadv_slave_1: entered promiscuous mode [ 105.607674][ T3906] batadv_slave_1: left promiscuous mode [ 105.708976][ T3920] netlink: 'syz.0.1259': attribute type 1 has an invalid length. [ 105.759345][ T3934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1265'. [ 105.826567][ T3939] overlayfs: failed to clone lowerpath [ 105.992061][ T3954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1274'. [ 106.001555][ T3954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1274'. [ 106.067346][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 106.067365][ T36] audit: type=1400 audit(1750683457.846:610): avc: denied { map } for pid=3967 comm="syz.3.1278" path="socket:[13690]" dev="sockfs" ino=13690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 106.137606][ T3979] overlayfs: failed to clone upperpath [ 106.554284][ T36] audit: type=1400 audit(1750683458.326:611): avc: denied { accept } for pid=4043 comm="syz.1.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.601009][ T4053] overlayfs: failed to clone upperpath [ 106.696031][ T4064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1302'. [ 106.719922][ T4068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 106.753993][ T4077] overlayfs: failed to clone upperpath [ 106.892905][ T36] audit: type=1400 audit(1750683458.666:612): avc: denied { getopt } for pid=4115 comm="syz.3.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.089360][ T4160] netlink: 'syz.2.1336': attribute type 4 has an invalid length. [ 107.097573][ T4160] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.1336'. [ 107.368198][ T36] audit: type=1400 audit(1750683459.146:613): avc: denied { setattr } for pid=4177 comm="syz.0.1343" name="" dev="pipefs" ino=13934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 107.391683][ T36] audit: type=1326 audit(1750683459.176:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.0.1343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9209b8e929 code=0x0 [ 107.443039][ T36] audit: type=1326 audit(1750683459.216:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.0.1343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9209b8e929 code=0x0 [ 107.581990][ T4194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 107.624208][ T4199] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1348'. [ 107.690393][ T36] audit: type=1326 audit(1750683459.466:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.3.1352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f808c58e929 code=0x0 [ 107.713319][ T36] audit: type=1326 audit(1750683459.466:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.3.1352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f808c58e929 code=0x0 [ 108.023130][ T4230] tmpfs: Bad value for 'nr_inodes' [ 108.143416][ T4245] fuse: Unknown parameter 'appraise_type' [ 108.186108][ T4253] lo: entered promiscuous mode [ 108.192465][ T4251] lo: left promiscuous mode [ 109.444406][ T4334] binder: Bad value for 'max' [ 109.491298][ T4343] overlayfs: failed to clone upperpath [ 109.753187][ T4362] overlayfs: failed to resolve './file0': -2 [ 109.806351][ T4378] /dev/rnullb0: Can't lookup blockdev [ 109.857086][ T4383] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 109.994896][ T4405] binder: Unknown parameter 'obj_role' [ 110.829235][ T36] audit: type=1400 audit(1750683462.606:618): avc: denied { create } for pid=4441 comm="syz.1.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 110.863488][ T36] audit: type=1400 audit(1750683462.636:619): avc: denied { accept } for pid=4445 comm="syz.1.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.727901][ T4478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'. [ 111.855602][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 111.855622][ T36] audit: type=1326 audit(1750683463.626:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4495 comm="syz.1.1454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f359938e929 code=0x0 [ 111.912617][ T4503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=256 sclass=netlink_tcpdiag_socket pid=4503 comm=syz.0.1456 [ 111.980779][ T4517] /dev/rnullb0: Can't lookup blockdev [ 112.022761][ T4524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4524 comm=syz.0.1461 [ 112.056759][ T4524] overlayfs: failed to clone upperpath [ 112.193087][ T4533] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1465'. [ 112.228067][ T4536] netlink: 424 bytes leftover after parsing attributes in process `syz.3.1466'. [ 113.228971][ T4562] /dev/rnullb0: Can't lookup blockdev [ 113.273276][ T4570] batadv_slave_0: entered promiscuous mode [ 113.281144][ T4569] batadv_slave_0: left promiscuous mode [ 113.306501][ T4576] overlayfs: failed to clone upperpath [ 113.334099][ T4587] fuse: Unknown parameter 'gr_id' [ 113.334099][ T4586] fuse: Unknown parameter 'gr_id' [ 113.393318][ T4597] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1487'. [ 113.405681][ T4597] overlay: ./file0 is not a directory [ 113.852570][ T4609] bpf: Bad value for 'uid' [ 113.910150][ T4611] lo: entered promiscuous mode [ 113.929497][ T4610] lo: left promiscuous mode [ 113.998190][ T4615] overlayfs: cannot append lower layer [ 114.619974][ T4637] binder: Unknown parameter 'stal' [ 114.638643][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1503'. [ 114.661032][ T36] audit: type=1400 audit(1750683466.436:622): avc: denied { write } for pid=4640 comm="syz.1.1504" name="file0" dev="tmpfs" ino=1892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.663172][ T4641] 9pnet_fd: Insufficient options for proto=fd [ 114.684214][ T36] audit: type=1400 audit(1750683466.436:623): avc: denied { open } for pid=4640 comm="syz.1.1504" path="/345/file0" dev="tmpfs" ino=1892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.750552][ T4647] overlay: Unknown parameter 'mounts' [ 115.239453][ T4661] netlink: 'syz.3.1510': attribute type 1 has an invalid length. [ 115.248237][ T4661] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1510'. [ 115.259178][ T4661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'. [ 115.268858][ T4661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4661 comm=syz.3.1510 [ 115.855665][ T4693] tipc: Can't bind to reserved service type 1 [ 115.878708][ T4695] overlayfs: failed to resolve './file1': -2 [ 116.416264][ T36] audit: type=1400 audit(1750683468.196:624): avc: denied { write } for pid=4705 comm="syz.0.1524" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.198875][ T36] audit: type=1400 audit(1750683468.976:625): avc: denied { unmount } for pid=4738 comm="syz.0.1535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 117.250558][ T36] audit: type=1400 audit(1750683469.026:626): avc: denied { create } for pid=4745 comm="syz.0.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.394601][ T4775] can: request_module (can-proto-0) failed. [ 117.426637][ T4777] overlayfs: failed to clone upperpath [ 117.826539][ T4796] netlink: 'syz.2.1553': attribute type 4 has an invalid length. [ 117.967409][ T4809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1556'. [ 118.023468][ T4815] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1559'. [ 118.633053][ T36] audit: type=1326 audit(1750683470.406:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4791 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c58e929 code=0x7fc00000 [ 118.656649][ T36] audit: type=1326 audit(1750683470.406:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4791 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f808c58e929 code=0x7fc00000 [ 118.680049][ T36] audit: type=1326 audit(1750683470.406:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4791 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c58e929 code=0x7fc00000 [ 118.703535][ T36] audit: type=1326 audit(1750683470.406:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4791 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c58e929 code=0x7fc00000 [ 118.726955][ T36] audit: type=1326 audit(1750683470.406:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4791 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c58e929 code=0x7fc00000 [ 118.750382][ T36] audit: type=1326 audit(1750683470.406:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4791 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c58e929 code=0x7fc00000 [ 118.773799][ T36] audit: type=1326 audit(1750683470.406:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4791 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c58e929 code=0x7fc00000 [ 118.798399][ T36] audit: type=1326 audit(1750683470.406:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4791 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c58e929 code=0x7fc00000 [ 118.956268][ T4843] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1567'. [ 119.330659][ T4863] overlayfs: failed to clone upperpath [ 119.582115][ T4877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 119.752732][ T46] tipc: Subscription rejected, illegal request [ 119.879732][ T4929] overlayfs: failed to clone upperpath [ 120.009415][ T4958] overlayfs: failed to clone lowerpath [ 120.403271][ T4967] /dev/rnullb0: Can't lookup blockdev [ 120.588097][ T5007] /dev/rnullb0: Can't lookup blockdev [ 120.622936][ T5010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5010 comm=syz.1.1628 [ 120.637978][ T5010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5010 comm=syz.1.1628 [ 120.652512][ T5010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5010 comm=syz.1.1628 [ 120.665436][ T5010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5010 comm=syz.1.1628 [ 120.678519][ T5010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5010 comm=syz.1.1628 [ 120.692342][ T5010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5010 comm=syz.1.1628 [ 120.718982][ T5010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5010 comm=syz.1.1628 [ 120.897991][ T5018] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1630'. [ 120.907541][ T5018] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1630'. [ 120.917175][ T5018] netlink: 'syz.0.1630': attribute type 6 has an invalid length. [ 120.925621][ T5018] netlink: 'syz.0.1630': attribute type 5 has an invalid length. [ 120.933824][ T5018] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1630'. [ 120.965978][ T5020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1631'. [ 121.186815][ T5051] tipc: Enabling of bearer rejected, failed to enable media [ 121.216768][ T5059] /dev/rnullb0: Can't lookup blockdev [ 122.861303][ T5122] overlayfs: failed to clone upperpath [ 123.465530][ T5167] /dev/rnullb0: Can't lookup blockdev [ 123.472015][ T5168] /dev/rnullb0: Can't lookup blockdev [ 123.545086][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 123.545105][ T36] audit: type=1400 audit(1750683475.316:704): avc: denied { map } for pid=5181 comm="syz.2.1686" path="socket:[16264]" dev="sockfs" ino=16264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.582885][ T36] audit: type=1326 audit(1750683475.356:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.2.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 123.606883][ T5186] TCP: TCP_TX_DELAY enabled [ 123.630723][ T36] audit: type=1326 audit(1750683475.356:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.2.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 123.668378][ T36] audit: type=1326 audit(1750683475.356:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.2.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 123.693097][ T36] audit: type=1326 audit(1750683475.356:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.2.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 123.700212][ T5192] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1690'. [ 123.718576][ T36] audit: type=1326 audit(1750683475.356:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.2.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 123.752417][ T36] audit: type=1326 audit(1750683475.356:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.2.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 123.800502][ T36] audit: type=1326 audit(1750683475.356:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.2.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 123.825877][ T36] audit: type=1326 audit(1750683475.356:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.2.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 123.851785][ T36] audit: type=1326 audit(1750683475.356:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.2.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 124.332554][ T5239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1705'. [ 124.442946][ T5244] netlink: 'syz.2.1707': attribute type 12 has an invalid length. [ 124.503436][ T5257] can: request_module (can-proto-0) failed. [ 124.862540][ T5304] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1729'. [ 125.742671][ T5371] bpf: Bad value for 'mode' [ 125.783714][ T5379] netlink: 'syz.0.1755': attribute type 3 has an invalid length. [ 125.802873][ T5382] netlink: 'syz.1.1756': attribute type 19 has an invalid length. [ 125.830069][ T5388] >: renamed from veth0_vlan (while UP) [ 126.464873][ T5409] tmpfs: Invalid gid '0x00000000ffffffff' [ 126.810362][ T5425] overlayfs: failed to resolve './bus': -2 [ 126.862878][ T46] tipc: Subscription rejected, illegal request [ 127.142395][ T5478] 9pnet: Could not find request transport: v [ 127.478207][ T5508] overlay: Unknown parameter 'mask' [ 127.513649][ T5514] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1801'. [ 127.571078][ T5518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1803'. [ 127.894046][ T5537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=5537 comm=syz.2.1810 [ 127.907015][ T5538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=5538 comm=syz.2.1810 [ 127.920064][ T5537] SELinux: Context system_u:object_r:public_content_t:s0 is not valid (left unmapped). [ 127.931077][ T5537] 9pnet_virtio: no channels available for device ./file0 [ 128.151456][ T5555] /dev/rnullb0: Can't lookup blockdev [ 128.846191][ T5573] 9pnet_fd: Insufficient options for proto=fd [ 129.304611][ T46] tipc: Subscription rejected, illegal request [ 129.376334][ T5657] tipc: Enabling of bearer rejected, failed to enable media [ 129.450925][ T5676] 9pnet_fd: Insufficient options for proto=fd [ 129.480422][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 129.480443][ T36] audit: type=1400 audit(1750683481.256:760): avc: denied { module_load } for pid=5680 comm="syz.2.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 129.493167][ T5681] Invalid ELF header type: 2 != 1 [ 129.554986][ T5691] /dev/rnullb0: Can't lookup blockdev [ 129.923477][ T36] audit: type=1400 audit(1750683481.696:761): avc: denied { execute } for pid=5720 comm="syz.1.1871" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 130.107088][ T5743] overlayfs: failed to clone lowerpath [ 130.590513][ T36] audit: type=1326 audit(1750683482.366:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.1.1893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f359938e929 code=0x0 [ 130.726883][ T36] audit: type=1400 audit(1750683482.506:763): avc: denied { write } for pid=5782 comm="syz.3.1896" path="socket:[18009]" dev="sockfs" ino=18009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.166614][ T5802] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1904'. [ 131.489629][ T5812] 8021q: VLANs not supported on ip6gre0 [ 132.226597][ T5839] overlayfs: failed to clone upperpath [ 132.239530][ T36] audit: type=1326 audit(1750683484.016:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5838 comm="syz.3.1917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f808c58e929 code=0x0 [ 132.813091][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1932'. [ 132.835379][ T5886] overlayfs: failed to resolve './file1': -2 [ 133.260280][ T5935] overlayfs: failed to clone upperpath [ 133.363399][ T5956] binder: Unknown parameter 'st!ts' [ 133.852839][ T5994] overlayfs: failed to clone upperpath [ 133.856395][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1969'. [ 133.950975][ T36] audit: type=1400 audit(1750683485.726:765): avc: denied { shutdown } for pid=6015 comm="syz.0.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.000054][ T36] audit: type=1400 audit(1750683485.776:766): avc: denied { create } for pid=6020 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 134.463456][ T36] audit: type=1400 audit(1750683486.236:767): avc: denied { lock } for pid=6050 comm="syz.1.1988" path="socket:[18352]" dev="sockfs" ino=18352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.784220][ T36] audit: type=1326 audit(1750683486.556:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 134.807878][ T36] audit: type=1326 audit(1750683486.556:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 134.838413][ T36] audit: type=1326 audit(1750683486.556:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 134.867345][ T36] audit: type=1326 audit(1750683486.556:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 134.890757][ T36] audit: type=1326 audit(1750683486.556:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 134.914233][ T36] audit: type=1326 audit(1750683486.556:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 134.926170][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1999'. [ 134.937836][ T36] audit: type=1326 audit(1750683486.556:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 134.948584][ T6082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6082 comm=syz.3.1999 [ 134.970402][ T36] audit: type=1326 audit(1750683486.556:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 135.006321][ T36] audit: type=1326 audit(1750683486.556:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 135.030194][ T36] audit: type=1326 audit(1750683486.556:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9bd58e929 code=0x7ffc0000 [ 135.170147][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2007'. [ 135.269028][ T6109] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 137.122407][ T6187] 9pnet_fd: Insufficient options for proto=fd [ 137.140605][ T6187] overlayfs: failed to clone upperpath [ 137.159681][ T6189] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2036'. [ 137.393953][ T6209] tmpfs: Bad value for 'size' [ 137.399220][ T6209] cgroup2: Unknown parameter 'net_prio' [ 137.528616][ T6224] /dev/rnullb0: Can't lookup blockdev [ 137.613075][ T6234] overlay: Unknown parameter 'pcr' [ 138.258545][ T6255] netlink: 57 bytes leftover after parsing attributes in process `syz.1.2062'. [ 138.307854][ T6260] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 138.318173][ T6260] overlayfs: missing 'lowerdir' [ 138.343522][ T6263] fuse: Unknown parameter '0x0000000000000007' [ 138.422631][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2072'. [ 138.436310][ T6278] netlink: 'syz.2.2072': attribute type 63 has an invalid length. [ 138.444852][ T6278] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2072'. [ 138.455532][ T6278] gretap0: entered allmulticast mode [ 138.461276][ T6278] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 139.316079][ T6320] incfs: Error accessing: ./file0. [ 139.321285][ T6320] incfs: mount failed -2 [ 139.417451][ T6327] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2089'. [ 157.890041][ T6345] /dev/rnullb0: Can't lookup blockdev [ 157.942805][ T6355] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2100'. [ 158.052208][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 158.052226][ T36] audit: type=1400 audit(1750683509.826:788): avc: denied { relabelfrom } for pid=6371 comm="syz.0.2108" name="UNIX" dev="sockfs" ino=20749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 158.086047][ T36] audit: type=1401 audit(1750683509.826:789): op=setxattr invalid_context="" [ 158.145217][ T6374] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaa [ 158.380360][ T6381] syz.3.2112 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 158.583835][ T36] audit: type=1326 audit(1750683510.356:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6407 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359938e929 code=0x7ffc0000 [ 158.608306][ T36] audit: type=1326 audit(1750683510.356:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6407 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359938e929 code=0x7ffc0000 [ 158.633686][ T36] audit: type=1326 audit(1750683510.356:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6407 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f359938e929 code=0x7ffc0000 [ 158.657329][ T36] audit: type=1326 audit(1750683510.356:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6407 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359938e929 code=0x7ffc0000 [ 158.681079][ T36] audit: type=1326 audit(1750683510.356:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6407 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f359938d290 code=0x7ffc0000 [ 158.704794][ T36] audit: type=1326 audit(1750683510.356:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6407 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359938e929 code=0x7ffc0000 [ 158.728510][ T36] audit: type=1326 audit(1750683510.356:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6407 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f359938e52b code=0x7ffc0000 [ 158.751864][ T36] audit: type=1326 audit(1750683510.356:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6407 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359938e929 code=0x7ffc0000 [ 159.718467][ T6467] overlayfs: failed to clone upperpath [ 159.953872][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.961272][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.078826][ T6495] overlayfs: failed to clone lowerpath [ 160.311484][ T6541] tmpfs: Unknown parameter 'Tize' [ 161.457596][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2193'. [ 162.084511][ T6677] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 162.093338][ T6677] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 162.130543][ T6681] cgroup: Bad value for 'name' [ 162.163597][ T6676] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.175702][ T6676] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.184311][ T6676] bridge_slave_0: entered allmulticast mode [ 162.192355][ T6676] bridge_slave_0: entered promiscuous mode [ 162.206070][ T6676] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.215711][ T6676] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.227453][ T6676] bridge_slave_1: entered allmulticast mode [ 162.234052][ T6676] bridge_slave_1: entered promiscuous mode [ 162.352453][ T6699] overlayfs: failed to clone upperpath [ 162.426863][ T6676] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.433975][ T6676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.441319][ T6676] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.448397][ T6676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.513774][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.522025][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.542077][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.549187][ T6205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.567770][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.574884][ T6205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.639290][ T6676] veth0_vlan: entered promiscuous mode [ 162.659937][ T6676] veth1_macvtap: entered promiscuous mode [ 163.060875][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 163.060899][ T36] audit: type=1400 audit(1750683514.836:815): avc: denied { create } for pid=6720 comm="syz.3.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.185954][ T36] audit: type=1400 audit(1750683514.966:816): avc: denied { append } for pid=6728 comm="syz.3.2221" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.367759][ T36] audit: type=1400 audit(1750683515.146:817): avc: denied { getattr } for pid=6744 comm="syz.3.2224" name="/" dev="incremental-fs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 163.367788][ T6745] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 163.579526][ T46] bridge_slave_1: left allmulticast mode [ 163.605723][ T46] bridge_slave_1: left promiscuous mode [ 163.611637][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.646415][ T46] bridge_slave_0: left allmulticast mode [ 163.665726][ T46] bridge_slave_0: left promiscuous mode [ 163.671679][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.848851][ T46] veth1_macvtap: left promiscuous mode [ 163.866155][ T46] veth0_vlan: left promiscuous mode [ 164.229668][ T6760] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.255774][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.262947][ T6760] bridge_slave_0: entered allmulticast mode [ 164.300035][ T6760] bridge_slave_0: entered promiscuous mode [ 164.338767][ T6760] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.365720][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.385769][ T6760] bridge_slave_1: entered allmulticast mode [ 164.396235][ T6760] bridge_slave_1: entered promiscuous mode [ 164.519308][ T6741] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2222'. [ 164.576225][ T36] audit: type=1400 audit(1750683516.356:818): avc: denied { accept } for pid=6740 comm="syz.0.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 164.603356][ T6760] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.611422][ T6760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.619035][ T6760] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.626317][ T6760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.657156][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.664768][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.675871][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.683017][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.695076][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2233'. [ 164.695373][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.711564][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.719809][ T36] audit: type=1400 audit(1750683516.496:819): avc: denied { watch watch_reads } for pid=6769 comm="syz.2.2233" path="/512/file0" dev="tmpfs" ino=2814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.807070][ T6760] veth0_vlan: entered promiscuous mode [ 164.825417][ T6760] veth1_macvtap: entered promiscuous mode [ 164.935148][ T6784] tipc: Enabling of bearer rejected, media not registered [ 165.125757][ T362] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.286988][ T362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.306020][ T362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.324141][ T362] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.340893][ T362] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.351148][ T362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.361846][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2245'. [ 165.375810][ T362] usb 5-1: config 0 descriptor?? [ 165.407133][ T6806] @: renamed from vlan0 (while UP) [ 165.458725][ T6810] binder: Unknown parameter 'smackfsdef' [ 165.506798][ T6815] overlayfs: failed to clone upperpath [ 165.785649][ T362] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 165.811081][ T362] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 165.837439][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.844559][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.859758][ T6831] bridge_slave_0: entered allmulticast mode [ 165.866612][ T6831] bridge_slave_0: entered promiscuous mode [ 165.873601][ T6831] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.881335][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.888635][ T6831] bridge_slave_1: entered allmulticast mode [ 165.895104][ T6831] bridge_slave_1: entered promiscuous mode [ 165.975209][ T6864] tmpfs: Unsupported parameter 'mpol' [ 166.001803][ T6831] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.008942][ T6831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.016303][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.023364][ T6831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.057423][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.065203][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.080800][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.087907][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.097395][ T6876] /dev/loop0: Can't lookup blockdev [ 166.102673][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.109781][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.116546][ T36] audit: type=1400 audit(1750683517.896:820): avc: denied { map } for pid=6878 comm="syz.2.2273" path="socket:[21880]" dev="sockfs" ino=21880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 166.210175][ T6831] veth0_vlan: entered promiscuous mode [ 166.223613][ T36] audit: type=1326 audit(1750683517.996:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.2278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f359938e929 code=0x0 [ 166.256319][ T6831] veth1_macvtap: entered promiscuous mode [ 166.293859][ T36] audit: type=1400 audit(1750683518.066:822): avc: denied { search } for pid=6901 comm="syz.1.2279" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 166.319388][ T36] audit: type=1400 audit(1750683518.096:823): avc: denied { read } for pid=6901 comm="syz.1.2279" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 166.362443][ T36] audit: type=1400 audit(1750683518.096:824): avc: denied { open } for pid=6901 comm="syz.1.2279" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 166.492766][ T6914] overlayfs: failed to clone upperpath [ 166.604926][ T6921] rust_binder: Failed copying remainder into alloc: EFAULT [ 166.604957][ T6921] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 166.612468][ T6921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 166.620855][ T6921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:5 [ 166.687423][ T6929] rust_binder: Read failure Err(EAGAIN) in pid:13 [ 166.910800][ T6963] binder: Unknown parameter 'mah' [ 166.972822][ T6967] FAT-fs (rnullb0): bogus number of reserved sectors [ 166.979933][ T6967] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 167.355907][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 167.517052][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.528363][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.538603][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.552897][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.563067][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.572537][ T31] usb 1-1: config 0 descriptor?? [ 167.980492][ T31] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 167.995421][ T31] plantronics 0003:047F:FFFF.0006: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 168.055714][ T45] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 168.185778][ T45] usb 5-1: device descriptor read/64, error -71 [ 168.197309][ T6971] rust_binder: Write failure EINVAL in pid:33 [ 168.198134][ T387] usb 1-1: USB disconnect, device number 3 [ 168.310625][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 168.310700][ T36] audit: type=1400 audit(1750683520.086:833): avc: denied { ioctl } for pid=7018 comm="syz.1.2320" path="/" dev="configfs" ino=1915 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.435724][ T45] usb 5-1: device descriptor read/64, error -71 [ 168.524211][ T7028] overlayfs: failed to clone upperpath [ 168.675716][ T45] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 168.765847][ T7039] bpf: Bad value for 'uid' [ 168.825966][ T45] usb 5-1: device descriptor read/64, error -71 [ 169.065950][ T45] usb 5-1: device descriptor read/64, error -71 [ 169.097756][ T36] audit: type=1400 audit(1750683520.876:834): avc: denied { audit_write } for pid=7049 comm="syz.1.2334" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 169.119263][ T36] audit: type=1107 audit(1750683520.876:835): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=' [ 169.119263][ T36] ÿÔ-egÂ%d˜@ö' [ 169.305799][ T45] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 169.326929][ T45] usb 5-1: device descriptor read/8, error -71 [ 169.456837][ T45] usb 5-1: device descriptor read/8, error -71 [ 169.500624][ T7055] overlayfs: failed to clone upperpath [ 169.695740][ T45] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 169.726527][ T45] usb 5-1: device descriptor read/8, error -71 [ 169.826527][ T7081] input: syz0 as /devices/virtual/input/input7 [ 169.857564][ T7084] binder: Unknown parameter 'ú' [ 169.863283][ T45] usb 5-1: device descriptor read/8, error -71 [ 169.880678][ T7086] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2346'. [ 169.889975][ T7086] gretap0: entered promiscuous mode [ 169.901449][ T7086] overlayfs: failed to clone upperpath [ 169.916866][ T7086] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2346'. [ 169.926081][ T7086] 0ªî{X¹¦: renamed from gretap0 [ 169.932087][ T7086] 0ªî{X¹¦: left promiscuous mode [ 169.937237][ T7086] 0ªî{X¹¦: entered allmulticast mode [ 169.943553][ T7086] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 169.965203][ T7089] binder: Unknown parameter 'defcontext01777777777777777777777' [ 169.975905][ T308] usb 5-1: USB disconnect, device number 2 [ 169.991477][ T36] audit: type=1400 audit(1750683521.766:836): avc: denied { map } for pid=7090 comm="syz.1.2348" path="pipe:[23000]" dev="pipefs" ino=23000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 170.109813][ T7098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 170.110578][ T7098] netlink: 'syz.0.2351': attribute type 4 has an invalid length. [ 170.127633][ T308] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 170.166523][ T7102] input: syz1 as /devices/virtual/input/input8 [ 170.265744][ T308] usb 5-1: device descriptor read/64, error -71 [ 170.505934][ T423] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 170.515904][ T308] usb 5-1: device descriptor read/64, error -71 [ 170.657478][ T423] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.666181][ T423] usb 1-1: not running at top speed; connect to a high speed hub [ 170.677225][ T423] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 170.686707][ T423] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 170.697484][ T423] usb 1-1: config 4 has no interface number 0 [ 170.705252][ T423] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 170.716396][ T423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.735284][ T423] usb 1-1: Product: syz [ 170.739680][ T423] usb 1-1: Manufacturer: syz [ 170.744352][ T423] usb 1-1: SerialNumber: syz [ 171.093237][ T423] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 171.102426][ T423] usb 1-1: No valid video chain found. [ 171.118143][ T423] usb 1-1: USB disconnect, device number 4 [ 171.449728][ T7157] cgroup: name respecified [ 171.531080][ T7152] rust_binder: Write failure EFAULT in pid:37 [ 171.716091][ T7167] rust_binder: Error while translating object. [ 171.745795][ T7167] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.752036][ T7167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 171.805725][ T7171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 171.915388][ T7177] tipc: Started in network mode [ 171.965478][ T7177] tipc: Node identity 920acbd38d7a, cluster identity 4711 [ 171.976012][ T7177] tipc: Enabled bearer , priority 0 [ 171.986336][ T7188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 172.007100][ T7184] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.017083][ T7185] tipc: Disabling bearer [ 172.060555][ T7191] batadv_slave_1: entered promiscuous mode [ 172.067653][ T7190] batadv_slave_1: left promiscuous mode [ 172.073344][ T36] audit: type=1400 audit(1750683523.846:837): avc: denied { setattr } for pid=7190 comm="syz.2.2378" name="NETLINK" dev="sockfs" ino=23628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.129853][ T7195] overlay: ./file0 is not a directory [ 172.225721][ T360] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 172.234294][ T7205] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 172.261713][ T7209] rust_binder: inc_ref_done called when no active inc_refs [ 172.281245][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 172.355760][ T360] usb 5-1: device descriptor read/64, error -71 [ 172.605726][ T360] usb 5-1: device descriptor read/64, error -71 [ 172.855729][ T360] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 172.971036][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2394'. [ 172.981229][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2394'. [ 172.995991][ T360] usb 5-1: device descriptor read/64, error -71 [ 173.245791][ T360] usb 5-1: device descriptor read/64, error -71 [ 173.311450][ T7237] overlayfs: failed to clone upperpath [ 173.356715][ T360] usb usb5-port1: attempt power cycle [ 173.695775][ T360] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 173.716830][ T360] usb 5-1: device descriptor read/8, error -71 [ 173.846981][ T360] usb 5-1: device descriptor read/8, error -71 [ 174.058324][ T7264] fuse: Bad value for 'fd' [ 174.085742][ T360] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 174.100433][ T7270] netlink: 'syz.1.2408': attribute type 4 has an invalid length. [ 174.108279][ T7270] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2408'. [ 174.109426][ T360] usb 5-1: device descriptor read/8, error -71 [ 174.246943][ T360] usb 5-1: device descriptor read/8, error -71 [ 174.345791][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 174.345809][ T7216] Bluetooth: hci0: command 0x1003 tx timeout [ 174.358377][ T360] usb usb5-port1: unable to enumerate USB device [ 174.373987][ T7278] binder: Binderfs stats mode cannot be changed during a remount [ 174.399560][ T7280] rust_binder: Write failure EFAULT in pid:82 [ 174.500618][ T7298] 9pnet_fd: Insufficient options for proto=fd [ 174.544578][ T7303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 174.546860][ T36] audit: type=1400 audit(1750683526.326:838): avc: denied { setopt } for pid=7302 comm="syz.0.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 174.639732][ T7322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:103 [ 174.723313][ T7331] fuse: Bad value for 'fd' [ 174.997028][ T36] audit: type=1400 audit(1750683526.776:839): avc: denied { write } for pid=7338 comm="syz.4.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 175.022031][ T7339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 175.022058][ T7339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:55 [ 175.066337][ T36] audit: type=1326 audit(1750683526.846:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cd78e929 code=0x7ffc0000 [ 175.079078][ T7344] 9pnet_fd: Insufficient options for proto=fd [ 175.099922][ T36] audit: type=1326 audit(1750683526.846:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cd78e929 code=0x7ffc0000 [ 175.111803][ T7344] binder: Unknown parameter 'context€' [ 175.130062][ T36] audit: type=1326 audit(1750683526.856:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86cd78e929 code=0x7ffc0000 [ 175.160251][ T36] audit: type=1326 audit(1750683526.856:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cd78e929 code=0x7ffc0000 [ 175.186721][ T36] audit: type=1326 audit(1750683526.856:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f86cd78e929 code=0x7ffc0000 [ 175.211886][ T36] audit: type=1326 audit(1750683526.856:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cd78e929 code=0x7ffc0000 [ 175.236189][ T36] audit: type=1326 audit(1750683526.856:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f86cd78e929 code=0x7ffc0000 [ 175.281869][ T36] audit: type=1326 audit(1750683526.856:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cd78e929 code=0x7ffc0000 [ 175.304315][ T7358] overlayfs: failed to clone upperpath [ 175.313779][ T7362] Invalid logical block size (18) [ 175.342453][ T7361] fuse: Bad value for 'fd' [ 175.875728][ T362] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 176.005727][ T362] usb 5-1: device descriptor read/64, error -71 [ 176.150061][ T7399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 176.150586][ T7399] rust_binder: Error while translating object. [ 176.160361][ T7399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 176.166791][ T7399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 176.177036][ T7399] rust_binder: Write failure EFAULT in pid:112 [ 176.258241][ T7404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2456'. [ 176.275720][ T362] usb 5-1: device descriptor read/64, error -71 [ 176.505784][ T387] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 176.525728][ T362] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 176.655785][ T387] usb 1-1: Using ep0 maxpacket: 32 [ 176.661004][ T362] usb 5-1: device descriptor read/64, error -71 [ 176.668544][ T387] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 176.677201][ T387] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 176.685961][ T387] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 176.694938][ T387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.704612][ T387] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 176.714321][ T387] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 176.727384][ T387] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 176.736481][ T387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.745487][ T387] usb 1-1: config 0 descriptor?? [ 176.905756][ T362] usb 5-1: device descriptor read/64, error -71 [ 176.952181][ T387] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 177.015804][ T362] usb usb5-port1: attempt power cycle [ 177.154392][ T360] usb 1-1: USB disconnect, device number 5 [ 177.161666][ T360] usblp0: removed [ 177.355786][ T362] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 177.376817][ T362] usb 5-1: device descriptor read/8, error -71 [ 177.506732][ T362] usb 5-1: device descriptor read/8, error -71 [ 177.722537][ T7461] rust_binder: Write failure EINVAL in pid:121 [ 177.745781][ T362] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 177.781192][ T362] usb 5-1: device descriptor read/8, error -71 [ 177.921939][ T362] usb 5-1: device descriptor read/8, error -71 [ 178.061673][ T387] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 178.069407][ T362] usb usb5-port1: unable to enumerate USB device [ 178.101552][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.109287][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.116587][ T7478] bridge_slave_0: entered allmulticast mode [ 178.123157][ T7478] bridge_slave_0: entered promiscuous mode [ 178.130167][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.137972][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.145083][ T7478] bridge_slave_1: entered allmulticast mode [ 178.151715][ T7478] bridge_slave_1: entered promiscuous mode [ 178.221626][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.227506][ T387] usb 1-1: config 1 interface 0 has no altsetting 0 [ 178.228739][ T7478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.236912][ T387] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 178.242628][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.258632][ T7478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.261817][ T387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.285368][ T387] usb 1-1: Product: syz [ 178.291147][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.299927][ T387] usb 1-1: Manufacturer: syz [ 178.304571][ T387] usb 1-1: SerialNumber: syz [ 178.310476][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.317582][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.363161][ T7478] veth0_vlan: entered promiscuous mode [ 178.380181][ T7478] veth1_macvtap: entered promiscuous mode [ 178.451496][ T7485] cgroup: none used incorrectly [ 178.460620][ T7485] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 178.541165][ T7491] lo: entered promiscuous mode [ 178.725137][ T7498] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 178.811982][ T7491] lo: left promiscuous mode [ 178.834731][ T6205] bridge_slave_1: left allmulticast mode [ 178.854472][ T6205] bridge_slave_1: left promiscuous mode [ 178.862651][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.872201][ T6205] bridge_slave_0: left allmulticast mode [ 178.877984][ T6205] bridge_slave_0: left promiscuous mode [ 178.883746][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.902483][ T7509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:9 [ 178.903016][ T7509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.080716][ T387] usb 1-1: USB disconnect, device number 6 [ 179.142513][ T7503] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.150895][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.158824][ T7503] bridge_slave_0: entered allmulticast mode [ 179.165375][ T7503] bridge_slave_0: entered promiscuous mode [ 179.175486][ T6205] veth1_macvtap: left promiscuous mode [ 179.181196][ T6205] veth0_vlan: left promiscuous mode [ 179.235386][ T7503] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.242655][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.249783][ T7503] bridge_slave_1: entered allmulticast mode [ 179.256323][ T7503] bridge_slave_1: entered promiscuous mode [ 179.282311][ T7525] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.282350][ T7525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 179.339746][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.355884][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.365144][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.372254][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.415207][ T7503] veth0_vlan: entered promiscuous mode [ 179.454420][ T7503] veth1_macvtap: entered promiscuous mode [ 179.455629][ T7534] input: syz1 as /devices/virtual/input/input12 [ 179.498457][ T7531] input: syz0 as /devices/virtual/input/input13 [ 179.513404][ T7531] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 179.528221][ T7531] rust_binder: Write failure EINVAL in pid:101 [ 179.533782][ T7541] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 179.540122][ T7541] rust_binder: Error while translating object. [ 179.552991][ T7541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.559540][ T7541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 179.631881][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 179.631902][ T36] audit: type=1400 audit(1750683531.406:884): avc: denied { add_name } for pid=7550 comm="syz.0.2501" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.703731][ T36] audit: type=1400 audit(1750683531.406:885): avc: denied { create } for pid=7550 comm="syz.0.2501" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 179.745236][ T6205] bridge_slave_1: left allmulticast mode [ 179.749375][ T36] audit: type=1400 audit(1750683531.406:886): avc: denied { associate } for pid=7550 comm="syz.0.2501" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 179.759110][ T6205] bridge_slave_1: left promiscuous mode [ 179.780254][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.788493][ T6205] bridge_slave_0: left allmulticast mode [ 179.794264][ T6205] bridge_slave_0: left promiscuous mode [ 179.804437][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.981144][ T6205] veth1_macvtap: left promiscuous mode [ 179.987011][ T6205] >: left promiscuous mode [ 180.045720][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 180.065741][ T362] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 180.215871][ T362] usb 1-1: Using ep0 maxpacket: 32 [ 180.215936][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 180.227465][ T45] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.236510][ T362] usb 1-1: config 9 has no interfaces? [ 180.239203][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 180.245914][ T362] usb 1-1: New USB device found, idVendor=1199, idProduct=9061, bcdDevice=e1.34 [ 180.256176][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.267588][ T362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.277850][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 180.284939][ T362] usb 1-1: Product: syz [ 180.293635][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.297205][ T362] usb 1-1: Manufacturer: syz [ 180.309844][ T362] usb 1-1: SerialNumber: syz [ 180.311250][ T45] usb 3-1: config 0 descriptor?? [ 180.320214][ T7558] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.328049][ T45] hub 3-1:0.0: USB hub found [ 180.345842][ T360] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 180.447130][ T7568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.447170][ T7568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 180.497174][ T360] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 180.515122][ T360] usb 2-1: config 1 has no interface number 0 [ 180.522625][ T360] usb 2-1: config 1 interface 105 has no altsetting 0 [ 180.530979][ T45] hub 3-1:0.0: 2 ports detected [ 180.536884][ T360] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 180.549703][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.557870][ T360] usb 2-1: Product: syz [ 180.562087][ T360] usb 2-1: Manufacturer: syz [ 180.566766][ T360] usb 2-1: SerialNumber: syz [ 180.623010][ T7573] input: syz1 as /devices/virtual/input/input14 [ 180.664885][ T7578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.665791][ T7580] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 180.740276][ T423] usb 1-1: USB disconnect, device number 7 [ 181.380723][ T360] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 181.392700][ T360] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 181.403968][ T360] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 181.417559][ T360] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f6:9e:01:30:7c:39 [ 181.432220][ T360] usb 2-1: USB disconnect, device number 16 [ 181.438859][ T360] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 181.458780][ T36] audit: type=1400 audit(1750683533.236:887): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 181.526391][ T360] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 181.535985][ T360] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 181.545510][ T360] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 181.656102][ T7593] overlayfs: overlapping lowerdir path [ 181.665052][ T7593] 9pnet_fd: Insufficient options for proto=fd [ 181.671766][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'. [ 181.681808][ T36] audit: type=1400 audit(1750683533.456:888): avc: denied { remove_name } for pid=7592 comm="syz.0.2514" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.712578][ T36] audit: type=1400 audit(1750683533.456:889): avc: denied { unlink } for pid=7592 comm="syz.0.2514" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 181.758174][ T362] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 181.793318][ T7595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7595 comm=syz.0.2515 [ 181.899383][ T7503] ------------[ cut here ]------------ [ 181.905005][ T7503] WARNING: CPU: 0 PID: 7503 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 181.913201][ T7503] Modules linked in: [ 181.917195][ T7503] CPU: 0 UID: 0 PID: 7503 Comm: syz-executor Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 181.930908][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.941027][ T7503] RIP: 0010:drop_nlink+0xce/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 181.946276][ T7503] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a2 5f 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 181.966858][ T7503] RSP: 0018:ffffc9000f7afa80 EFLAGS: 00010293 [ 181.973351][ T7503] RAX: ffffffff81ed3bbe RBX: ffff888131943480 RCX: ffff8881336adf00 [ 181.978844][ T36] audit: type=1400 audit(1750683533.726:890): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[3154]" dev="pipefs" ino=3154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 181.981455][ T7503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.012485][ T7503] RBP: ffffc9000f7afaa8 R08: 0000000000000003 R09: 0000000000000004 [ 182.020584][ T7503] R10: dffffc0000000000 R11: fffff52001ef5f40 R12: dffffc0000000000 [ 182.028812][ T7503] R13: 1ffff11026328699 R14: ffff8881319434c8 R15: 0000000000000000 [ 182.036869][ T7503] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 182.045859][ T7503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.052485][ T7503] CR2: 00007fba374e8710 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 182.060566][ T7503] Call Trace: [ 182.063877][ T7503] [ 182.067062][ T7503] shmem_rmdir+0x5f/0x90 [ 182.071353][ T7503] vfs_rmdir+0x3dd/0x560 [ 182.075640][ T7503] incfs_kill_sb+0x109/0x230 [ 182.080295][ T7503] deactivate_locked_super+0xd5/0x2a0 [ 182.085746][ T7503] deactivate_super+0xb8/0xe0 [ 182.090730][ T7503] cleanup_mnt+0x3f1/0x480 [ 182.095194][ T7503] __cleanup_mnt+0x1d/0x40 [ 182.099716][ T7503] task_work_run+0x1e0/0x250 [ 182.104348][ T7503] ? __cfi_task_work_run+0x10/0x10 [ 182.109699][ T7503] ? free_nsproxy+0x223/0x290 [ 182.111984][ T360] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 182.114420][ T7503] do_exit+0x9b4/0x2630 [ 182.126131][ T7503] ? __cfi_do_exit+0x10/0x10 [ 182.130761][ T7503] ? __kasan_check_write+0x18/0x20 [ 182.135937][ T7503] ? _raw_spin_lock_irq+0x8d/0x120 [ 182.141097][ T7503] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 182.146741][ T7503] ? __cfi_ksys_write+0x10/0x10 [ 182.151635][ T7503] ? zap_other_threads+0x334/0x370 [ 182.156836][ T7503] do_group_exit+0x22a/0x300 [ 182.161470][ T7503] __x64_sys_exit_group+0x43/0x50 [ 182.166569][ T7503] x64_sys_call+0x2ed2/0x2ee0 [ 182.171300][ T7503] do_syscall_64+0x58/0xf0 [ 182.175795][ T7503] ? clear_bhb_loop+0x50/0xa0 [ 182.180513][ T7503] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 182.186766][ T7503] RIP: 0033:0x7fba3678e929 [ 182.191226][ T7503] Code: Unable to access opcode bytes at 0x7fba3678e8ff. [ 182.198302][ T7503] RSP: 002b:00007fff4e5c1a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 182.206803][ T7503] RAX: ffffffffffffffda RBX: 00007fba36810997 RCX: 00007fba3678e929 [ 182.214809][ T7503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 182.222865][ T7503] RBP: 0000000000000016 R08: 00007fff4e5bf836 R09: 00007fff4e5c2d50 [ 182.230918][ T7503] R10: 000000000000000a R11: 0000000000000246 R12: 00007fff4e5c2d50 [ 182.238981][ T7503] R13: 00007fba36810925 R14: 000055556d2214a8 R15: 00007fff4e5c6000 [ 182.247031][ T7503] [ 182.250076][ T7503] ---[ end trace 0000000000000000 ]--- [ 182.255679][ T362] usb 5-1: Using ep0 maxpacket: 16 [ 182.263446][ T362] usb 5-1: device descriptor read/all, error -71 [ 182.270318][ T7503] ================================================================== [ 182.278429][ T7503] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 182.284724][ T7503] Write of size 4 at addr 0000000000000168 by task syz-executor/7503 [ 182.292831][ T7503] [ 182.295182][ T7503] CPU: 1 UID: 0 PID: 7503 Comm: syz-executor Tainted: G W 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 182.295221][ T7503] Tainted: [W]=WARN [ 182.295229][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.295243][ T7503] Call Trace: [ 182.295250][ T7503] [ 182.295259][ T7503] __dump_stack+0x21/0x30 [ 182.295289][ T7503] dump_stack_lvl+0x10c/0x190 [ 182.295315][ T7503] ? __cfi_dump_stack_lvl+0x10/0x10 [ 182.295343][ T7503] print_report+0x3d/0x70 [ 182.295364][ T7503] kasan_report+0x163/0x1a0 [ 182.295398][ T7503] ? ihold+0x24/0x70 [ 182.295430][ T7503] ? _raw_spin_unlock+0x45/0x60 [ 182.295463][ T7503] ? ihold+0x24/0x70 [ 182.295495][ T7503] kasan_check_range+0x299/0x2a0 [ 182.295530][ T7503] __kasan_check_write+0x18/0x20 [ 182.295558][ T7503] ihold+0x24/0x70 [ 182.295590][ T7503] vfs_rmdir+0x26a/0x560 [ 182.295615][ T7503] incfs_kill_sb+0x109/0x230 [ 182.295643][ T7503] deactivate_locked_super+0xd5/0x2a0 [ 182.295665][ T7503] deactivate_super+0xb8/0xe0 [ 182.295685][ T7503] cleanup_mnt+0x3f1/0x480 [ 182.295715][ T7503] __cleanup_mnt+0x1d/0x40 [ 182.295744][ T7503] task_work_run+0x1e0/0x250 [ 182.295767][ T7503] ? __cfi_task_work_run+0x10/0x10 [ 182.295788][ T7503] ? free_nsproxy+0x223/0x290 [ 182.295821][ T7503] do_exit+0x9b4/0x2630 [ 182.295845][ T7503] ? __cfi_do_exit+0x10/0x10 [ 182.295867][ T7503] ? __kasan_check_write+0x18/0x20 [ 182.295891][ T7503] ? _raw_spin_lock_irq+0x8d/0x120 [ 182.295921][ T7503] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 182.295953][ T7503] ? __cfi_ksys_write+0x10/0x10 [ 182.295981][ T7503] ? zap_other_threads+0x334/0x370 [ 182.296002][ T7503] do_group_exit+0x22a/0x300 [ 182.296026][ T7503] __x64_sys_exit_group+0x43/0x50 [ 182.296051][ T7503] x64_sys_call+0x2ed2/0x2ee0 [ 182.296082][ T7503] do_syscall_64+0x58/0xf0 [ 182.296114][ T7503] ? clear_bhb_loop+0x50/0xa0 [ 182.296139][ T7503] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 182.296163][ T7503] RIP: 0033:0x7fba3678e929 [ 182.296182][ T7503] Code: Unable to access opcode bytes at 0x7fba3678e8ff. [ 182.296194][ T7503] RSP: 002b:00007fff4e5c1a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 182.296219][ T7503] RAX: ffffffffffffffda RBX: 00007fba36810997 RCX: 00007fba3678e929 [ 182.296238][ T7503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 182.296254][ T7503] RBP: 0000000000000016 R08: 00007fff4e5bf836 R09: 00007fff4e5c2d50 [ 182.296272][ T7503] R10: 000000000000000a R11: 0000000000000246 R12: 00007fff4e5c2d50 [ 182.296288][ T7503] R13: 00007fba36810925 R14: 000055556d2214a8 R15: 00007fff4e5c6000 [ 182.296311][ T7503] [ 182.296320][ T7503] ================================================================== [ 182.565566][ T7503] Disabling lock debugging due to kernel taint [ 182.571825][ T7503] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 182.579651][ T7503] #PF: supervisor write access in kernel mode [ 182.585754][ T7503] #PF: error_code(0x0002) - not-present page [ 182.591757][ T7503] PGD 0 P4D 0 [ 182.595180][ T7503] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 182.601281][ T7503] CPU: 1 UID: 0 PID: 7503 Comm: syz-executor Tainted: G B W 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 182.616443][ T7503] Tainted: [B]=BAD_PAGE, [W]=WARN [ 182.621491][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.631579][ T7503] RIP: 0010:ihold+0x2a/0x70 [ 182.636153][ T7503] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 8d 56 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 9d [ 182.655798][ T7503] RSP: 0018:ffffc9000f7afac0 EFLAGS: 00010246 [ 182.661895][ T7503] RAX: ffff8881336adf00 RBX: 0000000000000000 RCX: ffff8881336adf00 [ 182.669907][ T7503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.677888][ T7503] RBP: ffffc9000f7afad0 R08: ffffffff88955947 R09: 1ffffffff112ab28 [ 182.685881][ T7503] R10: dffffc0000000000 R11: fffffbfff112ab29 R12: ffff88813194348c [ 182.693861][ T7503] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 182.701839][ T7503] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 182.710801][ T7503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.717397][ T7503] CR2: 0000000000000168 CR3: 000000010bbfc000 CR4: 00000000003526b0 [ 182.725385][ T7503] Call Trace: [ 182.728681][ T7503] [ 182.731622][ T7503] vfs_rmdir+0x26a/0x560 [ 182.735882][ T7503] incfs_kill_sb+0x109/0x230 [ 182.740488][ T7503] deactivate_locked_super+0xd5/0x2a0 [ 182.745869][ T7503] deactivate_super+0xb8/0xe0 [ 182.750584][ T7503] cleanup_mnt+0x3f1/0x480 [ 182.755019][ T7503] __cleanup_mnt+0x1d/0x40 [ 182.759449][ T7503] task_work_run+0x1e0/0x250 [ 182.764051][ T7503] ? __cfi_task_work_run+0x10/0x10 [ 182.769168][ T7503] ? free_nsproxy+0x223/0x290 [ 182.773855][ T7503] do_exit+0x9b4/0x2630 [ 182.778019][ T7503] ? __cfi_do_exit+0x10/0x10 [ 182.782617][ T7503] ? __kasan_check_write+0x18/0x20 [ 182.787741][ T7503] ? _raw_spin_lock_irq+0x8d/0x120 [ 182.792875][ T7503] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 182.798521][ T7503] ? __cfi_ksys_write+0x10/0x10 [ 182.803385][ T7503] ? zap_other_threads+0x334/0x370 [ 182.808504][ T7503] do_group_exit+0x22a/0x300 [ 182.813105][ T7503] __x64_sys_exit_group+0x43/0x50 [ 182.818142][ T7503] x64_sys_call+0x2ed2/0x2ee0 [ 182.822834][ T7503] do_syscall_64+0x58/0xf0 [ 182.827271][ T7503] ? clear_bhb_loop+0x50/0xa0 [ 182.831960][ T7503] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 182.837857][ T7503] RIP: 0033:0x7fba3678e929 [ 182.842290][ T7503] Code: Unable to access opcode bytes at 0x7fba3678e8ff. [ 182.849313][ T7503] RSP: 002b:00007fff4e5c1a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 182.857745][ T7503] RAX: ffffffffffffffda RBX: 00007fba36810997 RCX: 00007fba3678e929 [ 182.865738][ T7503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 182.873725][ T7503] RBP: 0000000000000016 R08: 00007fff4e5bf836 R09: 00007fff4e5c2d50 [ 182.881722][ T7503] R10: 000000000000000a R11: 0000000000000246 R12: 00007fff4e5c2d50 [ 182.889707][ T7503] R13: 00007fba36810925 R14: 000055556d2214a8 R15: 00007fff4e5c6000 [ 182.897694][ T7503] [ 182.900716][ T7503] Modules linked in: [ 182.904615][ T7503] CR2: 0000000000000168 [ 182.908768][ T7503] ---[ end trace 0000000000000000 ]--- [ 182.914237][ T7503] RIP: 0010:ihold+0x2a/0x70 [ 182.918772][ T7503] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 8d 56 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 9d [ 182.938390][ T7503] RSP: 0018:ffffc9000f7afac0 EFLAGS: 00010246 [ 182.944490][ T7503] RAX: ffff8881336adf00 RBX: 0000000000000000 RCX: ffff8881336adf00 [ 182.952473][ T7503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.960460][ T7503] RBP: ffffc9000f7afad0 R08: ffffffff88955947 R09: 1ffffffff112ab28 [ 182.968437][ T7503] R10: dffffc0000000000 R11: fffffbfff112ab29 R12: ffff88813194348c [ 182.976426][ T7503] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 182.984406][ T7503] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 182.993345][ T7503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.999942][ T7503] CR2: 0000000000000168 CR3: 000000010bbfc000 CR4: 00000000003526b0 [ 183.007925][ T7503] Kernel panic - not syncing: Fatal exception [ 183.014253][ T7503] Kernel Offset: disabled [ 183.018585][ T7503] Rebooting in 86400 seconds..