last executing test programs: 22.453842668s ago: executing program 0 (id=1743): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) r4 = dup(r3) pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x7ff, 0x7, 0x4, 0x8, 0x0, 0x6, 0x9, 0x7e}, 0x0, 0x0) (async) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) read$msr(r1, &(0x7f00000002c0)=""/169, 0xa9) (async) sendfile(r5, 0xffffffffffffffff, 0x0, 0x3) (async) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000844) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) read$FUSE(r1, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0x0, r6}, 0x10) 22.32540591s ago: executing program 0 (id=1746): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4026e1, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x40047705, 0x2) 22.32117914s ago: executing program 0 (id=1748): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22.287018914s ago: executing program 0 (id=1750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x180000a, 0x12, r1, 0x0) mincore(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20008000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002800010023bd700000000000100000000c00000000000001000000000c002300040001"], 0x2c}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)={0x5e, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @pad1, @ra={0x5, 0x2, 0x101}]}, 0x18) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000080)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000180)={0x7f, 0x3ff, 0x7, 0x9, 0xf, "03f37f0ce56ca288"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 22.22443342s ago: executing program 0 (id=1752): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454cc, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x22, 0x101, 0x0, 0x0, "", [@nested={0x4, 0x12}]}, 0x14}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22.21926092s ago: executing program 0 (id=1753): r0 = socket$unix(0x1, 0x1, 0x0) fcntl$dupfd(r0, 0x406, r0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) r2 = socket(0x10, 0x803, 0x0) sendto$packet(r2, &(0x7f0000000040)="0bff2e", 0x3, 0x8080, &(0x7f0000000140)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @local}, 0x14) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r1, 0x0) r5 = signalfd4(r0, &(0x7f0000000e00)={[0x7]}, 0x8, 0x400) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x54, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x10) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000001040)='cmdline\x00') mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000001500)=ANY=[@ANYBLOB="7472616e733d756e69782c00d55acc616ed24125276846d394a1d8a1c8d7b4785f9ea9176cf94d118cc745369ef5f2172ce4632051d997c70ebe05c3d9a750c36d219e5c24799bf51046296a5c36b729d50f74e3235165a6fafba696218b232feab6301a4c2e20b1c3ded8b8ce60dbaaf082bc92cbfe24b4ef97c112e40812615db7d85f43bf"]) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r8 = syz_usb_connect(0x3, 0x9a3, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0xff, 0xe1, 0xca, 0x8, 0x10c4, 0x81a9, 0x1d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x991, 0x2, 0x2, 0xff, 0xe0, 0x6, [{{0x9, 0x4, 0xa8, 0x0, 0xd, 0xd8, 0x1b, 0x86, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x128, 0x3}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x2, 0x1, 0x4e, 0x0, 0x8}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x1, 0xfe, "4a8ee0061efe"}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x7, "c9"}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x2, 0x3, [0xa, 0x7, 0x7], 0x2}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x3, "050d"}]}], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x6b, 0x3c, 0x7, [@generic={0x76, 0x23, "b9e8729132df30420fa643b233540530374490e9928a4d6100a2cf9bce979cb8995baea8c9763fcfc1d40927aa6a1fd8de38b8b78ac64207ce3eced49e8394d0f1501686a13f4aacb3ed38d8a8c967a02b709a8367eaaefd08b5819e0ccea6352baf5f78d4085b0a4da6ca001dee3cdaa2e9b512"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x2, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x9}]}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x81, 0x1, 0x0, [@generic={0x99, 0x21, "7a00a873c237321c2108d6ab5aa41b2b11778ea8ce3c94a84568445721e926fbde1fc0b86a81408839e8ff5b9689812beec6c9ded1f616c89535e5e81d77b28602ec439d4262c3caa2c7613ac8b04c6ced317f891fd82d0fcb395e787478cb05146222bf8c4d885fd1380940d05314747fb4374f679487d4e68c85fcef0163cfeac1633be241d1685c03087ffe844b3dce3ca035f39302"}]}}, {{0x9, 0x5, 0x9, 0xb, 0x3ff, 0xa, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9c, 0x6}, @generic={0x95, 0x11, "a323384588effaaac105e08310a54eb0853d8ac2194c56ecdcdbea4db556841513ed8e8853979111b4e93687b924d6513f5833d08cd49fe6992218f0919baf810966d0b611c0544e9daacb3c429848865e15447455a68fe601f045fa11cea9a41fad7c07a5d53821000d32b7b87a0bb611968b4f8b93d125c0f1e5f308f2885837c9991336557214924416417c7ab36652cce5"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x10, 0x6, 0x40, [@generic={0xa8, 0x22, "fe4a8e11498a99314fe65e0dff054c1ce239e7f7dd70ad6de34599d7b435e6569f1741fc387b22ba4181024b6f0fd09be45edbc8743ee017b863d9324a9d852a9f3c33dbf6a5779408f11d81ca1f6073d856e70bf850aa808d8435dcfbe10ef090251a5b88486ebfa2566507dc9791c081819b3c54be561060d2bbdeeeac768f7133fa69fcefb0dd2e84328775044fa29c1b9632677ca46c68d40a87725241ae400f8f02058c"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x0, 0xe5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7f}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x96, 0x7, 0x4, [@generic={0x33, 0x21, "89f430a1626f7338f4f9ce82bcbaa1746be56e4f90d575fc141335cd3774b2aa28afc76787e4928553e40fef368cbc72a9"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x4, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa1, 0xfffd}, @generic={0x58, 0xf, "5da225d934f1df742086376e4c4feeedfc7304f3f528ef1f1f2aa641dbc355409b4d0fa62ba7f8158af4aef9f973d48a9472151b4ef0d2bce17ab463540cb439918d469d9d5e76b30cf743ccfa423b58021470861632"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x5, 0x2, 0xf8, [@generic={0x7b, 0xb, "903db67ecea84a45f2e3d9fe814bfdbe265b0afc623e314dc0fcfa982718aaa6063f6f67f46a7bde13f92ef299b0a9f25f85919905d98470806aabb2498d72cb3700ba700221b59667e1081c285690ac7b433be61dd99b77d79c946089a39ddf885740dfa8cdec04198f8e5d03ceaa47495203248103c83442"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x10, 0xfb, 0x7f, 0x2, [@generic={0xf5, 0xa, "d5240ef73b6c54a3ef062ef8ab8015af6a71226b99b51176a7b41c64c24e86435f5befbd3e4c7e231210be6f69ba92e3f9c4d96345d3c3c7e50b209c8596471eecfae8e8f324dbead261735e9db9f4d5d4cd79f5a4d5ab6b05f666ba413853429478b750930c932169d92dabbe3741ef157aecc4054106216bc3e17859607d6ae920074598ad4baaa24dc050c68923fb8fa35dff98778e45967c0a8d8fd650d8f8697b879de5a5ba93b2967ad92bcb1b46c47cb22afac3d4aef0817fd3c7a598dd161b0066e525c8cdf0cc352d2b6485d29497da9aa51b7385efa138f95b9563d780b3d03e82a487f17600283c498be2cbc103"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x9}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x4, 0x9, 0x7, [@generic={0x17, 0x9, "e2df266bacecc3b5c2ac469ed6156fff3eb3b0c234"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xb, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x1}, @generic={0x62, 0x21, "f5a028594dba5afc502716f6bff31df5174b1293f08703a56231d6ddbb990f7c6c9b1a43fb04101469848ac10af7d46b0edca42edc4aecd574de0beb12c1d58354b969a9c86b1ff4e36558d148f0959c3d770a624864f91bb1c830c5527d3079"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x29, 0x34, 0x0, [@generic={0xaa, 0xd, "fea9c6e147b2260a868738eda7cd4d48743b429a18295a0d1beef879d1cd9f731f7804664aeea03e43cd87adc3d1ec1722a274d2fde343e4486ab798a391cbe7659950930a1ce02e9b4aeb6cff06bc92972ddafd5c5e4ba104bd8cabe363d006c680f867424c55175f92d547f640b5c80507c4e6b03fa748dbabb2c8b093786b6db5fd59f022d9855a3a74ec2033c67a99d5be5e15abee06de0a70ee7ec2e87703ffebcab38f6789"}]}}]}}, {{0x9, 0x4, 0xc7, 0x10, 0x4, 0xe0, 0xf7, 0x64, 0x4, [@hid_hid={0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x56f}}], [{{0x9, 0x5, 0x6, 0x4, 0x400, 0x1, 0x6, 0x6, [@generic={0xb3, 0x30, "473002f9f19271b7c3edaf88517d1e07921b30a2dbd0979f0ad9ddd04a22fd0bc7437a8979d2706b7925c9420aec6c5eb675bd1a7da167a720eabdf2e8b59414ed57bd40ac19d499ca216e540e81502c34b448ec405fecffb4c9a44771cafc1fea082893a42bb8ab2a6926242ba3d4de1ecfa35b3fd1bc60bb8bf0e2599fe68c5e536ab97ccfc7175e3945d09be7d4a46bd81fdc34b2f4879c72ecede6b2c022c8ef47282da2d7c1a04a6660e59c4e718f"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x4}]}}, {{0x9, 0x5, 0x7, 0x3c, 0x10, 0x8, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x761f}, @generic={0xc3, 0x4, "a961df5d328ab3cbc676e6375eeed2a4b95c0ec206ba144fb5c2b0916ee3ae66ba24506357c931b72f99dbbac0db1304c9dfd7eb4e8d7059d8ab40153f58154e7f1809619c4ab9bd91a9f203273c6b0dff5e5073adac64917cab6c171897826cd58916990bd15118b85afec68a3281361105ff77889e2394977557f0427ea884f16ae05634589d4b64b393d6acc27d35e1de807902aad0094d774cec0da29b0deca4d049bc2db2e02e49895c563de7bcd51903bfe2f17def87497d24a948b115c9"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0xb, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0xfe, 0x3, 0x6, [@generic={0xac, 0x5, "769971d8973496d09ca1a58c852395faa5e7a49ab4a8dfeb6caba4dcdf6a5da0746bfce63501279c44dedc8a1709fe5f9cd5ac534dcac8b78f603ccbab78ecf4dbe2f110efb55958f5daabbe48c484d4247b7cf9add6872527937e9919c347f2688795b9fe298cc0460881c06665050f183f72a3061a01337353860aee4fc94bbe4430a16aa838bb0e27c8fe54bd356cdc277bd87a295f4b04a5a5a57eae271c1ba72cdf5ffbc87895b3"}, @generic={0xcd, 0x4, "d92605fe1a0e5ed45acac6215b60695a585b3c39b13bc9be8b4b49c797ce43419553fd1c417cc89bf115b948ec2ff2655fd9e52c66f0e828863a7d3d9b3d688277e9a6a4bbb020b403772ea32082ee17bb4230d982b5d6fc151b8fb7cef985e6f7b919d6961deecc041541cd4eba2a250f27ce3a71391395949946f5466e3088573f3b42eef8fad1076f0161e656a4085427a7c87960104cc53277a6ca6ce58063d8cb981639b527645f8a0f3b6b0b826a4f9d663396e72d4d92e9ce85f883d76a431fb84ddd249ed2b378"}]}}]}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x2, 0x1, 0x5, 0xff, 0x9}, 0xf, &(0x7f0000000040)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x3, 0x8, 0x4cb0}]}, 0x7, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x180a}}, {0xf5, &(0x7f0000000200)=@string={0xf5, 0x3, "1389dffac2f6ca45c21e07c0381b0007fae6d2d13739a555381bac86249abec05ea57bbdbf6f03a68167b5ed9ea7975f6d57f9b7535a6f84baea6eb4e761360c515b4b37d1296737dc7216493e59f47bf509176a299919c8ec7c2ecc0bf6c49c2f4c44df4352ca6fa1c728acbe25b81f8f8000e2988425ac136174e740065759fa0d6269b2db5ab4e9822009e052b01d1ff77d52a0428b0a2cfc466efa6480be9f45475492bb0029e9bd77f59bb6762b6851718789385b8d8b6f50bbd6eb530e8cfa4942b61cc86aba4541ba8ba4ecfd10bd6d9faf433c4b6bcd7eedc31cc9ec3dd7d8f4cbe69361ea5979dab27dbbe17c755e"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_control_io$printer(r8, &(0x7f0000000e80)={0x14, &(0x7f0000001280)={0x40, 0xe, 0x55, {0x55, 0x22, "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"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}}, &(0x7f0000001180)={0x34, &(0x7f00000011c0)={0x20, 0xe, 0x87, "f400f855429d44e8aa9ad5e0fa4f6903b6b9949a403ccb2f6e6c27fd1073d0a37f587fe070f6b7d0da330661d8eb5968b76635d624512243b49e83bbbffae2343f4f64c26f2b4aa3ce99a40a9ed330cad197d6fd8e05313abca0574f2bd9241083f8de8027f4c980acc60e0e3b9b77f00387dd91cf353a5377709b860d0cf525b51869b946d97f"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000001140)={0x20, 0x0, 0xfffffffffffffeae, 0x3}}) 7.217779512s ago: executing program 32 (id=1753): r0 = socket$unix(0x1, 0x1, 0x0) fcntl$dupfd(r0, 0x406, r0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) r2 = socket(0x10, 0x803, 0x0) sendto$packet(r2, &(0x7f0000000040)="0bff2e", 0x3, 0x8080, &(0x7f0000000140)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @local}, 0x14) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r1, 0x0) r5 = signalfd4(r0, &(0x7f0000000e00)={[0x7]}, 0x8, 0x400) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x54, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x10) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000001040)='cmdline\x00') mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000001500)=ANY=[@ANYBLOB="7472616e733d756e69782c00d55acc616ed24125276846d394a1d8a1c8d7b4785f9ea9176cf94d118cc745369ef5f2172ce4632051d997c70ebe05c3d9a750c36d219e5c24799bf51046296a5c36b729d50f74e3235165a6fafba696218b232feab6301a4c2e20b1c3ded8b8ce60dbaaf082bc92cbfe24b4ef97c112e40812615db7d85f43bf"]) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r8 = syz_usb_connect(0x3, 0x9a3, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0xff, 0xe1, 0xca, 0x8, 0x10c4, 0x81a9, 0x1d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x991, 0x2, 0x2, 0xff, 0xe0, 0x6, [{{0x9, 0x4, 0xa8, 0x0, 0xd, 0xd8, 0x1b, 0x86, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x128, 0x3}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x2, 0x1, 0x4e, 0x0, 0x8}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x1, 0xfe, "4a8ee0061efe"}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x7, "c9"}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x2, 0x3, [0xa, 0x7, 0x7], 0x2}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x3, "050d"}]}], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x6b, 0x3c, 0x7, [@generic={0x76, 0x23, "b9e8729132df30420fa643b233540530374490e9928a4d6100a2cf9bce979cb8995baea8c9763fcfc1d40927aa6a1fd8de38b8b78ac64207ce3eced49e8394d0f1501686a13f4aacb3ed38d8a8c967a02b709a8367eaaefd08b5819e0ccea6352baf5f78d4085b0a4da6ca001dee3cdaa2e9b512"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x2, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x9}]}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x81, 0x1, 0x0, [@generic={0x99, 0x21, "7a00a873c237321c2108d6ab5aa41b2b11778ea8ce3c94a84568445721e926fbde1fc0b86a81408839e8ff5b9689812beec6c9ded1f616c89535e5e81d77b28602ec439d4262c3caa2c7613ac8b04c6ced317f891fd82d0fcb395e787478cb05146222bf8c4d885fd1380940d05314747fb4374f679487d4e68c85fcef0163cfeac1633be241d1685c03087ffe844b3dce3ca035f39302"}]}}, {{0x9, 0x5, 0x9, 0xb, 0x3ff, 0xa, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9c, 0x6}, @generic={0x95, 0x11, "a323384588effaaac105e08310a54eb0853d8ac2194c56ecdcdbea4db556841513ed8e8853979111b4e93687b924d6513f5833d08cd49fe6992218f0919baf810966d0b611c0544e9daacb3c429848865e15447455a68fe601f045fa11cea9a41fad7c07a5d53821000d32b7b87a0bb611968b4f8b93d125c0f1e5f308f2885837c9991336557214924416417c7ab36652cce5"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x10, 0x6, 0x40, [@generic={0xa8, 0x22, "fe4a8e11498a99314fe65e0dff054c1ce239e7f7dd70ad6de34599d7b435e6569f1741fc387b22ba4181024b6f0fd09be45edbc8743ee017b863d9324a9d852a9f3c33dbf6a5779408f11d81ca1f6073d856e70bf850aa808d8435dcfbe10ef090251a5b88486ebfa2566507dc9791c081819b3c54be561060d2bbdeeeac768f7133fa69fcefb0dd2e84328775044fa29c1b9632677ca46c68d40a87725241ae400f8f02058c"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x0, 0xe5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7f}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x96, 0x7, 0x4, [@generic={0x33, 0x21, "89f430a1626f7338f4f9ce82bcbaa1746be56e4f90d575fc141335cd3774b2aa28afc76787e4928553e40fef368cbc72a9"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x4, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa1, 0xfffd}, @generic={0x58, 0xf, "5da225d934f1df742086376e4c4feeedfc7304f3f528ef1f1f2aa641dbc355409b4d0fa62ba7f8158af4aef9f973d48a9472151b4ef0d2bce17ab463540cb439918d469d9d5e76b30cf743ccfa423b58021470861632"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x5, 0x2, 0xf8, [@generic={0x7b, 0xb, "903db67ecea84a45f2e3d9fe814bfdbe265b0afc623e314dc0fcfa982718aaa6063f6f67f46a7bde13f92ef299b0a9f25f85919905d98470806aabb2498d72cb3700ba700221b59667e1081c285690ac7b433be61dd99b77d79c946089a39ddf885740dfa8cdec04198f8e5d03ceaa47495203248103c83442"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x10, 0xfb, 0x7f, 0x2, [@generic={0xf5, 0xa, "d5240ef73b6c54a3ef062ef8ab8015af6a71226b99b51176a7b41c64c24e86435f5befbd3e4c7e231210be6f69ba92e3f9c4d96345d3c3c7e50b209c8596471eecfae8e8f324dbead261735e9db9f4d5d4cd79f5a4d5ab6b05f666ba413853429478b750930c932169d92dabbe3741ef157aecc4054106216bc3e17859607d6ae920074598ad4baaa24dc050c68923fb8fa35dff98778e45967c0a8d8fd650d8f8697b879de5a5ba93b2967ad92bcb1b46c47cb22afac3d4aef0817fd3c7a598dd161b0066e525c8cdf0cc352d2b6485d29497da9aa51b7385efa138f95b9563d780b3d03e82a487f17600283c498be2cbc103"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x9}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x4, 0x9, 0x7, [@generic={0x17, 0x9, "e2df266bacecc3b5c2ac469ed6156fff3eb3b0c234"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xb, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x1}, @generic={0x62, 0x21, "f5a028594dba5afc502716f6bff31df5174b1293f08703a56231d6ddbb990f7c6c9b1a43fb04101469848ac10af7d46b0edca42edc4aecd574de0beb12c1d58354b969a9c86b1ff4e36558d148f0959c3d770a624864f91bb1c830c5527d3079"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x29, 0x34, 0x0, [@generic={0xaa, 0xd, "fea9c6e147b2260a868738eda7cd4d48743b429a18295a0d1beef879d1cd9f731f7804664aeea03e43cd87adc3d1ec1722a274d2fde343e4486ab798a391cbe7659950930a1ce02e9b4aeb6cff06bc92972ddafd5c5e4ba104bd8cabe363d006c680f867424c55175f92d547f640b5c80507c4e6b03fa748dbabb2c8b093786b6db5fd59f022d9855a3a74ec2033c67a99d5be5e15abee06de0a70ee7ec2e87703ffebcab38f6789"}]}}]}}, {{0x9, 0x4, 0xc7, 0x10, 0x4, 0xe0, 0xf7, 0x64, 0x4, [@hid_hid={0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x56f}}], [{{0x9, 0x5, 0x6, 0x4, 0x400, 0x1, 0x6, 0x6, [@generic={0xb3, 0x30, "473002f9f19271b7c3edaf88517d1e07921b30a2dbd0979f0ad9ddd04a22fd0bc7437a8979d2706b7925c9420aec6c5eb675bd1a7da167a720eabdf2e8b59414ed57bd40ac19d499ca216e540e81502c34b448ec405fecffb4c9a44771cafc1fea082893a42bb8ab2a6926242ba3d4de1ecfa35b3fd1bc60bb8bf0e2599fe68c5e536ab97ccfc7175e3945d09be7d4a46bd81fdc34b2f4879c72ecede6b2c022c8ef47282da2d7c1a04a6660e59c4e718f"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x4}]}}, {{0x9, 0x5, 0x7, 0x3c, 0x10, 0x8, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x761f}, @generic={0xc3, 0x4, "a961df5d328ab3cbc676e6375eeed2a4b95c0ec206ba144fb5c2b0916ee3ae66ba24506357c931b72f99dbbac0db1304c9dfd7eb4e8d7059d8ab40153f58154e7f1809619c4ab9bd91a9f203273c6b0dff5e5073adac64917cab6c171897826cd58916990bd15118b85afec68a3281361105ff77889e2394977557f0427ea884f16ae05634589d4b64b393d6acc27d35e1de807902aad0094d774cec0da29b0deca4d049bc2db2e02e49895c563de7bcd51903bfe2f17def87497d24a948b115c9"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0xb, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0xfe, 0x3, 0x6, [@generic={0xac, 0x5, "769971d8973496d09ca1a58c852395faa5e7a49ab4a8dfeb6caba4dcdf6a5da0746bfce63501279c44dedc8a1709fe5f9cd5ac534dcac8b78f603ccbab78ecf4dbe2f110efb55958f5daabbe48c484d4247b7cf9add6872527937e9919c347f2688795b9fe298cc0460881c06665050f183f72a3061a01337353860aee4fc94bbe4430a16aa838bb0e27c8fe54bd356cdc277bd87a295f4b04a5a5a57eae271c1ba72cdf5ffbc87895b3"}, @generic={0xcd, 0x4, "d92605fe1a0e5ed45acac6215b60695a585b3c39b13bc9be8b4b49c797ce43419553fd1c417cc89bf115b948ec2ff2655fd9e52c66f0e828863a7d3d9b3d688277e9a6a4bbb020b403772ea32082ee17bb4230d982b5d6fc151b8fb7cef985e6f7b919d6961deecc041541cd4eba2a250f27ce3a71391395949946f5466e3088573f3b42eef8fad1076f0161e656a4085427a7c87960104cc53277a6ca6ce58063d8cb981639b527645f8a0f3b6b0b826a4f9d663396e72d4d92e9ce85f883d76a431fb84ddd249ed2b378"}]}}]}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x2, 0x1, 0x5, 0xff, 0x9}, 0xf, &(0x7f0000000040)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x3, 0x8, 0x4cb0}]}, 0x7, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x180a}}, {0xf5, &(0x7f0000000200)=@string={0xf5, 0x3, "1389dffac2f6ca45c21e07c0381b0007fae6d2d13739a555381bac86249abec05ea57bbdbf6f03a68167b5ed9ea7975f6d57f9b7535a6f84baea6eb4e761360c515b4b37d1296737dc7216493e59f47bf509176a299919c8ec7c2ecc0bf6c49c2f4c44df4352ca6fa1c728acbe25b81f8f8000e2988425ac136174e740065759fa0d6269b2db5ab4e9822009e052b01d1ff77d52a0428b0a2cfc466efa6480be9f45475492bb0029e9bd77f59bb6762b6851718789385b8d8b6f50bbd6eb530e8cfa4942b61cc86aba4541ba8ba4ecfd10bd6d9faf433c4b6bcd7eedc31cc9ec3dd7d8f4cbe69361ea5979dab27dbbe17c755e"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_control_io$printer(r8, &(0x7f0000000e80)={0x14, &(0x7f0000001280)={0x40, 0xe, 0x55, {0x55, 0x22, "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"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}}, &(0x7f0000001180)={0x34, &(0x7f00000011c0)={0x20, 0xe, 0x87, "f400f855429d44e8aa9ad5e0fa4f6903b6b9949a403ccb2f6e6c27fd1073d0a37f587fe070f6b7d0da330661d8eb5968b76635d624512243b49e83bbbffae2343f4f64c26f2b4aa3ce99a40a9ed330cad197d6fd8e05313abca0574f2bd9241083f8de8027f4c980acc60e0e3b9b77f00387dd91cf353a5377709b860d0cf525b51869b946d97f"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000001140)={0x20, 0x0, 0xfffffffffffffeae, 0x3}}) 2.385769566s ago: executing program 2 (id=2091): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3) rt_sigprocmask(0x1, &(0x7f0000000040)={[0x7]}, 0x0, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0x4) cachestat(r1, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x469}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f0000000340)=""/186, 0xba}], 0x2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x7, 0x0, 0x0, {0x1ffffffffffffffe}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7766646e00005a926ee15583bdc7927fbf6823b9aacbf9aadfab3ed7fe08943d65ca10ac7251b597dfd6c23945b17404bbe50b75be711d263c770c63527eb8c4f64cd952d4969efb959ff78334cc83e479c95d5682fc5431f28d00", @ANYRESHEX=r6, @ANYBLOB=',k']) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2.282828946s ago: executing program 3 (id=2094): ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @dstopts={{0x18, 0x29, 0x37, {0x3c, 0x23}}}], 0x40}}], 0x1, 0x4000005) r0 = socket(0x10, 0x803, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/54, 0x36}, 0x142) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 2.104810503s ago: executing program 3 (id=2099): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) timer_create(0x5, &(0x7f0000000000)={0x0, 0x2000002c, 0x1, @tid=r0}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x181440) syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffff891, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f00000000c0)) 2.094808404s ago: executing program 3 (id=2100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x180000a, 0x12, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000180)={0x7f, 0x3ff, 0x7, 0x9, 0xf, "03f37f0ce56ca288"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1.503067152s ago: executing program 3 (id=2104): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40046721, &(0x7f00000000c0)) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001100010000000000000000002000000001"], 0x30}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) epoll_pwait(r1, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x401, &(0x7f0000000080), 0x8) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffee5, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x1001, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @flat=@handle}, &(0x7f0000000000)={0x0, 0x18, 0xffffff1a}}}], 0x0, 0x0, 0x0}) 1.41734142s ago: executing program 3 (id=2107): r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x3b, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x0, 0x3, 0x41f}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x84c}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @string={0x4, 0x3, "27ef"}}, 0x0, 0x0, 0x0}, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3}, {0xeeee0000, 0xdddd0000, 0xa, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0xeeee0000, 0x8, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0x2, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x2, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x100000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x0, 0x5e, 0xff]}) (async) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.129093269s ago: executing program 1 (id=2109): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) (rerun: 64) 957.184966ms ago: executing program 1 (id=2110): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0x0, 0x0, {0xb275, 0x0, 0x0, 0xfffffffe}}, 0x0}) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, 0x0, 0x8044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xffffd000) 756.240355ms ago: executing program 1 (id=2111): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x184) ioctl$KVM_CREATE_VCPU(r0, 0x7709, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f000044a000/0x3000)=nil, 0x3000}}) fadvise64(r1, 0x49c1a42e, 0x2, 0x5) 715.9991ms ago: executing program 4 (id=2112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x180000a, 0x12, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000180)={0x7f, 0x3ff, 0x7, 0x9, 0xf, "03f37f0ce56ca288"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 573.527884ms ago: executing program 4 (id=2113): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) (async, rerun: 32) syz_io_uring_setup(0x58f4, &(0x7f00000000c0)={0x0, 0x400289b, 0x800, 0x1, 0x2000031f}, &(0x7f0000000000), &(0x7f0000000180)) (async, rerun: 32) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) (async, rerun: 64) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x2, 0x0, 0x29, r0}, 0x10) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) syz_io_uring_setup(0x766f, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x20000003}, 0x0, 0x0) (rerun: 64) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002400010200000000ddf958b00eb62f83060003"], 0x1c}}, 0x8004) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff, 0x0, 0xff, 0x5, 0xda73, 0x5}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) (async, rerun: 64) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000240)={0x60, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000266000/0x2000)=nil, 0x4, 0x0, 0x0, 0x8000400008, 0x51, 0x58, 0x41, 0x8}) (async, rerun: 64) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x7, 0x0, 0x81, 0xfffffffb}) (async) lsm_set_self_attr(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000050000000000000023000000000000000300000000dd0000cfa7ae0000"], 0x23, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000040), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000040)={{0xc161, 0x2}, {0x4eb, 0x109003ff}, 0x9, 0x6}) (async) r8 = openat$cgroup_int(r6, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x6) (async) ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f0000000180)={0x2, 0x2, 0x7fff, 0x7, 0x3, 0x7}) 509.21219ms ago: executing program 1 (id=2114): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202a00, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0x0, 0x0, {0xb275, 0x0, 0x0, 0xfffffffe}}, 0x0}) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, 0x0, 0x8044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xffffd000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xffffd000) 508.59355ms ago: executing program 4 (id=2115): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xfd, 0x0, 0xfffffffd, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0xffffff31, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async, rerun: 64) r5 = open(&(0x7f0000000180)='./file0\x00', 0x5c800, 0xe0) sendfile(r5, r4, 0x0, 0xffffffff) 498.149321ms ago: executing program 4 (id=2116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r1 = socket$inet(0x2, 0x801, 0x0) (rerun: 64) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e03, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x9b) (async, rerun: 32) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x12b8b000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) fadvise64(r6, 0x3, 0x0, 0x4) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x14, 0x9, 0x3, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) (async) splice(r1, 0x0, r2, 0x0, 0x9, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) (async) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) (async, rerun: 32) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) write(r8, &(0x7f0000001400)="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", 0x1014) 324.107518ms ago: executing program 4 (id=2117): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000006480)=ANY=[@ANYBLOB="2400000013000100020000000800ff00ac14141b"], 0x24}], 0x1}, 0x0) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) setsockopt(r3, 0x107, 0x2, &(0x7f00000001c0)="fcff00000100060000071a80010061cc", 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1002}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x0, 0x7, 0x0, '\x00', {0x7ff, 0x7, 0x4, 0x2, r6, 0xffffffffffffffff, 0xc000, '\x00', 0x1, 0x80000000, 0xb4e7, 0x2, {0x8003, 0x8}, {0x100000006, 0x10001}, {0x100000000, 0x7}, {0x9, 0xa80}, 0x8000, 0xb, 0x4, 0x5}}}}) write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x0, 0x0, 0xfffe}}, 0x50) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) io_destroy(r2) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0xa58}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r7) sendmsg$IPVS_CMD_SET_SERVICE(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xc0, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x78fe0d32}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 278.357673ms ago: executing program 1 (id=2118): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r0) read$FUSE(r2, &(0x7f00000017c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r2, &(0x7f0000000100)={0xfffffffffffffcbb, 0xfffffffffffffffe, r3, {0x3}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setregid(0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) fsopen(&(0x7f0000004600)='bdev\x00', 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000000f5000005010040"]) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}]}}) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r8 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r8, r7, 0x0, 0xffffffff) 275.031903ms ago: executing program 2 (id=2119): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x0, 0x2, 0x1e}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000002100010027bd7000fbdbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc048080) pipe2(&(0x7f0000000080), 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f00000023c0)='fscrypt:', 0x0, r5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 234.877817ms ago: executing program 3 (id=2120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0xc000, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000002880)={0x0, 'veth0_vlan\x00', {}, 0xfffa}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./bus\x00', 0x107301, 0x80) getdents(r2, 0x0, 0x18) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000780)={0x6, 0x0, [{0xeeee0000, 0x1000, &(0x7f0000001600)=""/4096}, {0x5000, 0x61, &(0x7f0000000300)=""/97}, {0xeeee8000, 0x4, &(0x7f00000001c0)=""/4}, {0x10000, 0xc461de124a7460e9, &(0x7f0000000580)=""/113}, {0xf000, 0x11, &(0x7f00000004c0)=""/17}, {0x2, 0xbd, &(0x7f0000000640)=""/189}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000a00)={0x1, 0x0, [{0xeeef0000, 0xe2, &(0x7f00000003c0)=""/226}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r5 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000001c0)={0x0, 0x7, [{r2, 0x0, 0x100000000, 0x100000000}, {r2, 0x0, 0x8000, 0xffff5000}, {r2, 0x0, 0xfffff000, 0x1000000}, {r2, 0x0, 0xfffffffffffff000, 0x8000}, {r2, 0x0, 0xfffffffff0001000, 0x100000000}, {r4, 0x0, 0x0, 0x1000000000000}, {r2, 0x0, 0xfffffffffffff000}]}) ppoll(&(0x7f0000000080)=[{r0, 0x540}, {r2}, {r3, 0x2400}, {r2, 0x400}, {r5, 0xa}], 0x5, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000380)={[0xd]}, 0x8) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000240)={0x278100003e7, 0x2, 0x0, r10}) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000040)={0x1, 0x0, 0x0, r10}) close_range(r6, 0xffffffffffffffff, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) getdents64(r11, &(0x7f00000002c0)=""/173, 0xad) close_range(r0, 0xffffffffffffffff, 0x0) 229.996677ms ago: executing program 2 (id=2121): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) accept(r1, 0x0, 0x0) (async) syz_open_dev$MSR(0x0, 0x0, 0x0) (async) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) mkdir(&(0x7f00000001c0)='./file2\x00', 0x164) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x10, 0x803, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) (async) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x6cac0, 0x27) fcntl$setlease(r2, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x260840, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 146.264446ms ago: executing program 2 (id=2122): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x14b800, 0x6abac60bab6c66fb) (async) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) sendto$inet6(r2, &(0x7f0000000180)="5f626b589724aab472a8df13740a40370fd9007ce1e2e149dbc9974808a36618bbc8204c52cbd9697d9309956719dbbd5639f414c52767bc75b926d2a4f11695df775678d1", 0x45, 0x20080010, 0x0, 0x0) ftruncate(r0, 0xffffffffffffff00) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x800) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x1001, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @flat=@handle}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 61.133384ms ago: executing program 1 (id=2123): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x2, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x25], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0xee4b, 0x7, 0x5, 0xffff93a1, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff5, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x38f0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000003c0)=ANY=[@ANYBLOB="98510000000000005c9cb777a39f8bb16f8e59b66dd11d8521"]) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x2a, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x882) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000200)=[{}], 0x1, 0xffffffffffbffff8) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 60.471673ms ago: executing program 2 (id=2124): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000000)={0xbc, 0x0, 0x4}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f00000000c0)={{0x10001, 0xc}, {0x30ea, 0x7}, 0x1, 0x1}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000140)='clear_refs\x00') sendmsg$nl_generic(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1014080}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1e0, 0x25, 0x100, 0x70bd28, 0x25dfdbfd, {0x13}, [@generic="53cfadbe8463885aea973655c21321da18021467ed6f5e9492fe816abfaf4019ecb8ad53d403de3070ec8a78ba4204053338879a8b372f284057ce73c3a75f6351b7ed5b45256d2321a0fdd40a784cef0f9adcdcc08469e36c0352ad695a5dd794f317590538952a222e4789b17a9964211c59579d332fafcec9aded4e17b3dfb04811b0f2e4ae1b01c2e1efe24d9c2026c3611c0d0f037a270ebcedddc2575614d2fb710fcdefe4cab29a5ade8d759d015d7e21fe08c3cecb688f081c25813dee3e5eeb32f567a44a217f3abf8a5a0ea754197b0441c73066d354bd13", @generic="f999dd9e71fd086b1ded9ca821f27f54719f088a6941abbe45a4f45300b478ae5ae13aa8abccb48e2f7808daac9a738a9215a4606ac79063d4342edd41085be056ca1fb9397509b1d9a549ac26ca132b834165a9d35ecf1c4b08f7276335af9ddebc0da3ed4ae37bc7c01f86053d01ad18bc6e747b156d94e342ce73d1f463b26d3d3073fd23a80e445f5c6630019c352570c7b932f732342171dedc04ed5e2be597a6a1191974db7df0a64eb40824590dd850f804e1fcfdcec72c1312e7d22965e95bd4048489f5453516d69fd1da0026aee9e19c6ff5a9dcaa83c71245cb586eded60d8b49f9854cc6e50a"]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000440)=""/27, &(0x7f0000000480)=0x1b) r5 = signalfd(0xffffffffffffffff, &(0x7f00000004c0)={[0x308e]}, 0x8) ioctl$int_out(r0, 0x5460, &(0x7f0000000500)) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000540)={0x7849, 0x8, [{0x3, 0x1}, {0x3}, {0x3}, {0xc}, {0x9, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}]}) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000580)={0x1, 'veth0_macvtap\x00', {}, 0x1ff}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000005c0)) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e20, 0x250, @local, 0x1}}, 0x0, 0x0, 0x31, 0x0, "40bbf9c84ffab3342258a9e0310aad4f3d41859aad4decdf6d79845e5ddc8acd45001c434b6616ed07ad0769797f9a470873fdbdf9210c9379892760ac3e3b011a35b74d6dd546911045f5f3a99a69fc"}, 0xd8) r6 = syz_open_procfs(r3, &(0x7f0000000780)='oom_score_adj\x00') socketpair(0x1d, 0x6, 0x6, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_hci(r7, 0x0, 0x1, &(0x7f0000000800)=""/14, &(0x7f0000000840)=0xe) r9 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0xc) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000018c0)={0x20, 0x0, &(0x7f0000000880)=[@free_buffer={0x40086303, r9}, @decrefs={0x40046307, 0x3}, @release, @exit_looper], 0x1000, 0x0, &(0x7f00000008c0)="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"}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r7) sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, r10, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) inotify_init1(0x80400) r11 = syz_open_pts(r4, 0x381) ioctl$LOOP_SET_FD(r5, 0x4c00, r11) fcntl$getown(r2, 0x9) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000001a40)) write$eventfd(r6, &(0x7f0000001a80)=0x68e, 0x8) 28.848127ms ago: executing program 2 (id=2125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010000000000000000000000000000000000000000000000000000000000000000000000ffffac1414bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcfffffffffffffffeffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000feffffff00000000000000000000000000000000ac1414bb000000000000000000000000000000003c00000000000000fe800000000000000000000000000000000000000003000000080000ffffffff0000000000000000000000000000000000000001000000006c00000000000000ac1e0001000000000000000000000000000000000400040000000000333518c700000000ac1414aa0000000000000000000000000000000033"], 0x23c}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x2}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=2126): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x4, 0x201}, 0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_cache\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xa1110, r6, 0xe51f000) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r7, 0x800000008401, 0x1) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): nvalid descriptor of length 0, skipping remainder of the config [ 28.802080][ T62] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.805589][ T412] usb 3-1: device descriptor read/8, error -71 [ 28.811959][ T62] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 28.826312][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 28.834352][ T62] usb 2-1: SerialNumber: syz [ 28.841368][ T62] usb 2-1: 0:2 : does not exist [ 28.846546][ T62] usb 2-1: unit 208 not found! [ 28.908570][ T550] rust_binder: Write failure EINVAL in pid:53 [ 28.908787][ T550] rust_binder: got new transaction with bad transaction stack [ 28.914972][ T550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 28.923048][ T550] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.949684][ T412] usb 3-1: device descriptor read/8, error -71 [ 28.951836][ T555] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 28.956195][ T36] audit: type=1400 audit(1760519698.060:216): avc: denied { setattr } for pid=554 comm="syz.0.67" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.051143][ T544] usb 2-1: USB disconnect, device number 2 [ 29.254367][ T62] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.254450][ T412] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.285221][ T412] usb 3-1: device descriptor read/8, error -71 [ 29.360176][ T331] usb 4-1: 0:2 : does not exist [ 29.375660][ T331] usb 4-1: USB disconnect, device number 2 [ 29.397715][ T560] udevd[560]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.404385][ T62] usb 1-1: Using ep0 maxpacket: 32 [ 29.420838][ T62] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.425403][ T412] usb 3-1: device descriptor read/8, error -71 [ 29.431958][ T62] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.448464][ T62] usb 1-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 29.457551][ T62] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.467012][ T62] usb 1-1: config 0 descriptor?? [ 29.479107][ T568] batadv_slave_1: entered promiscuous mode [ 29.545837][ T412] usb usb3-port1: unable to enumerate USB device [ 29.678903][ T559] overlayfs: workdir and upperdir must be separate subtrees [ 29.695055][ T62] usbhid 1-1:0.0: can't add hid device: -71 [ 29.706747][ T62] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 29.725922][ T62] usb 1-1: USB disconnect, device number 2 [ 29.735825][ T577] rust_binder: Error while translating object. [ 29.735878][ T577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.742107][ T577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:67 [ 29.804704][ T331] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.974300][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 29.981229][ T331] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 29.989896][ T331] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 29.999432][ T331] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 30.008619][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.021820][ T331] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 30.036408][ T472] batadv_slave_1: left promiscuous mode [ 30.042185][ T331] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 30.077915][ T331] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 30.087827][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.096835][ T331] usb 4-1: config 0 descriptor?? [ 30.310005][ T331] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 30.329985][ T331] usb 4-1: USB disconnect, device number 3 [ 30.338014][ T331] usblp0: removed [ 30.674295][ T593] rust_binder: Error while translating object. [ 30.674340][ T593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.680630][ T593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 30.718589][ T597] netlink: 68 bytes leftover after parsing attributes in process `syz.1.80'. [ 30.756274][ T331] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.824927][ T608] overlay: Bad value for 'uuid' [ 30.830496][ T608] overlayfs: failed to clone lowerpath [ 30.925867][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 30.932284][ T331] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 30.948200][ T331] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 30.957116][ T331] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 30.966329][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.985937][ T331] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 30.997253][ T331] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.018077][ T331] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 31.033332][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.048772][ T331] usb 4-1: config 0 descriptor?? [ 31.057507][ T623] 9pnet_fd: Insufficient options for proto=fd [ 31.066478][ T624] netlink: 'syz.0.90': attribute type 4 has an invalid length. [ 31.077159][ T623] netlink: 'syz.0.90': attribute type 4 has an invalid length. [ 31.085208][ T624] netlink: 'syz.0.90': attribute type 4 has an invalid length. [ 31.258241][ T331] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 31.384532][ T412] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 31.524314][ T412] usb 1-1: device descriptor read/64, error -71 [ 31.616800][ T331] usb 4-1: USB disconnect, device number 4 [ 31.646717][ T331] usblp0: removed [ 31.651424][ T649] batadv_slave_1: left promiscuous mode [ 31.784611][ T412] usb 1-1: device descriptor read/64, error -71 [ 32.020188][ T412] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 32.146323][ T412] usb 1-1: device descriptor read/64, error -71 [ 32.320506][ T674] rust_binder: Error while translating object. [ 32.320542][ T674] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.326904][ T674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 32.347393][ T676] overlayfs: failed to clone upperpath [ 32.388624][ T412] usb 1-1: device descriptor read/64, error -71 [ 32.480399][ T697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 32.495582][ T412] usb usb1-port1: attempt power cycle [ 32.516996][ T702] netlink: 72 bytes leftover after parsing attributes in process `syz.2.118'. [ 32.541183][ T704] overlayfs: failed to clone upperpath [ 32.787008][ T732] rust_binder: Error in use_page_slow: ESRCH [ 32.787033][ T732] rust_binder: use_range failure ESRCH [ 32.796178][ T732] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 32.802039][ T732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 32.820230][ T732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:66 [ 32.829709][ T412] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 32.849287][ T738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 32.874601][ T412] usb 1-1: device descriptor read/8, error -71 [ 32.911344][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 32.911365][ T36] audit: type=1400 audit(1760519702.041:242): avc: denied { ioctl } for pid=744 comm="syz.3.132" path="socket:[5674]" dev="sockfs" ino=5674 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.001239][ T412] usb 1-1: device descriptor read/8, error -71 [ 33.159011][ T36] audit: type=1400 audit(1760519702.309:243): avc: denied { map } for pid=750 comm="syz.1.135" path="socket:[6987]" dev="sockfs" ino=6987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.212859][ T36] audit: type=1400 audit(1760519702.309:244): avc: denied { read } for pid=750 comm="syz.1.135" path="socket:[6987]" dev="sockfs" ino=6987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.262287][ T412] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 33.308250][ T412] usb 1-1: device descriptor read/8, error -71 [ 33.339962][ T755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 33.355327][ T36] audit: type=1400 audit(1760519702.504:245): avc: denied { connect } for pid=753 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.457348][ T412] usb 1-1: device descriptor read/8, error -71 [ 33.477052][ T768] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 33.483647][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.496801][ T36] audit: type=1400 audit(1760519702.659:246): avc: denied { nlmsg_read } for pid=767 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.518141][ T36] audit: type=1400 audit(1760519702.659:247): avc: denied { ioctl } for pid=767 comm="syz.3.141" path="socket:[7140]" dev="sockfs" ino=7140 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.563510][ T412] usb usb1-port1: unable to enumerate USB device [ 33.968193][ T781] process 'syz.2.144' launched './file0' with NULL argv: empty string added [ 33.977165][ T36] audit: type=1400 audit(1760519703.142:248): avc: denied { execute_no_trans } for pid=779 comm="syz.2.144" path="/42/file0" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.093478][ T36] audit: type=1400 audit(1760519703.265:249): avc: denied { write } for pid=783 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 34.136986][ T793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.282365][ T802] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.289637][ T802] rust_binder: Error while translating object. [ 34.296388][ T802] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 34.302636][ T802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:110 [ 34.353228][ T804] rust_binder: 112: no such ref 0 [ 34.367472][ T804] rust_binder: pid 804 performed invalid decrement on ref [ 34.374814][ T805] rust_binder: 112: no such ref 0 [ 34.379866][ T805] rust_binder: pid 805 performed invalid decrement on ref [ 34.450001][ T816] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 34.464767][ T36] audit: type=1400 audit(1760519703.646:250): avc: denied { setattr } for pid=817 comm="syz.0.157" name="NETLINK" dev="sockfs" ino=7197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.498743][ T36] audit: type=1400 audit(1760519703.687:251): avc: denied { read } for pid=813 comm="syz.1.155" name="/" dev="configfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 34.527267][ T822] 9pnet_fd: Insufficient options for proto=fd [ 34.877005][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.023156][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 35.029414][ T10] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 35.040420][ T10] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 35.051388][ T10] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 35.062307][ T10] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 35.071354][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 35.079391][ T10] usb 1-1: Manufacturer: syz [ 35.087301][ T10] hub 1-1:32.0: Invalid hub with more than one config or interface [ 35.095310][ T10] hub 1-1:32.0: probe with driver hub failed with error -22 [ 35.124034][ T845] 9pnet_fd: Insufficient options for proto=fd [ 35.442365][ T770] Bluetooth: hci0: command 0x1003 tx timeout [ 35.442369][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.480408][ T10] usb 1-1: USB disconnect, device number 7 [ 35.493201][ T560] udevd[560]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.005300][ T901] tipc: Can't bind to reserved service type 2 [ 36.030331][ T907] netlink: 'syz.3.190': attribute type 46 has an invalid length. [ 36.038632][ T907] netlink: 44 bytes leftover after parsing attributes in process `syz.3.190'. [ 36.200249][ T943] overlayfs: failed to clone upperpath [ 36.214545][ T943] netlink: 'syz.2.200': attribute type 28 has an invalid length. [ 36.261340][ T949] netlink: 596 bytes leftover after parsing attributes in process `syz.2.204'. [ 36.308319][ T960] netlink: 104 bytes leftover after parsing attributes in process `syz.2.208'. [ 36.343085][ T962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 36.549395][ T979] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 36.683761][ T999] batadv_slave_1: entered promiscuous mode [ 36.847576][ T1002] capability: warning: `syz.2.225' uses 32-bit capabilities (legacy support in use) [ 36.881633][ T1004] overlayfs: unescaped trailing colons in lowerdir mount option. [ 37.046322][ T1040] 9pnet_fd: Insufficient options for proto=fd [ 37.068047][ T1044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 37.101874][ T1042] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.183157][ T1058] 8021q: VLANs not supported on lo [ 37.189127][ T1059] Zero length message leads to an empty skb [ 37.286865][ T1072] netlink: 68 bytes leftover after parsing attributes in process `syz.2.251'. [ 37.300682][ T1086] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 37.334668][ T1090] 9pnet_fd: Insufficient options for proto=fd [ 37.404553][ T1103] netlink: 152 bytes leftover after parsing attributes in process `syz.2.264'. [ 37.428428][ T1110] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 37.433096][ T1111] overlay: ./file0 is not a directory [ 37.505886][ T1114] overlayfs: failed to clone upperpath [ 37.536309][ T1118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=1118 comm=syz.3.268 [ 37.549198][ T1118] tipc: Enabling of bearer rejected, failed to enable media [ 37.775863][ T1130] overlayfs: missing 'lowerdir' [ 37.781049][ T1130] overlayfs: missing 'lowerdir' [ 37.786030][ T1130] overlayfs: missing 'lowerdir' [ 37.791942][ T1130] overlayfs: missing 'lowerdir' [ 37.797094][ T1130] overlayfs: missing 'lowerdir' [ 37.802140][ T1130] overlayfs: missing 'lowerdir' [ 37.807163][ T1130] overlayfs: missing 'lowerdir' [ 37.812134][ T1130] overlayfs: missing 'lowerdir' [ 37.817139][ T1130] overlayfs: missing 'lowerdir' [ 37.822290][ T1130] overlayfs: missing 'lowerdir' [ 37.827350][ T1130] overlayfs: missing 'lowerdir' [ 37.832325][ T1130] overlayfs: missing 'lowerdir' [ 37.837334][ T1130] overlayfs: missing 'lowerdir' [ 37.842311][ T1130] overlayfs: missing 'lowerdir' [ 37.847333][ T1130] overlayfs: missing 'lowerdir' [ 37.852335][ T1130] overlayfs: missing 'lowerdir' [ 37.857375][ T1130] overlayfs: missing 'lowerdir' [ 37.862375][ T1130] overlayfs: missing 'lowerdir' [ 37.867471][ T1130] overlayfs: missing 'lowerdir' [ 37.872568][ T1130] overlayfs: missing 'lowerdir' [ 37.877620][ T1130] overlayfs: missing 'lowerdir' [ 37.882618][ T1130] overlayfs: missing 'lowerdir' [ 37.887644][ T1130] overlayfs: missing 'lowerdir' [ 37.892607][ T1130] overlayfs: missing 'lowerdir' [ 37.897641][ T1130] overlayfs: missing 'lowerdir' [ 37.902608][ T1130] overlayfs: missing 'lowerdir' [ 37.907648][ T1130] overlayfs: missing 'lowerdir' [ 37.912610][ T1130] overlayfs: missing 'lowerdir' [ 37.917673][ T1130] overlayfs: missing 'lowerdir' [ 37.922744][ T1130] overlayfs: missing 'lowerdir' [ 37.927782][ T1130] overlayfs: missing 'lowerdir' [ 37.932834][ T1130] overlayfs: missing 'lowerdir' [ 37.937868][ T1130] overlayfs: missing 'lowerdir' [ 38.029490][ T1150] overlayfs: failed to clone upperpath [ 38.202488][ T1162] netlink: 44 bytes leftover after parsing attributes in process `syz.0.282'. [ 38.211461][ T1162] netlink: 'syz.0.282': attribute type 6 has an invalid length. [ 38.219243][ T1162] netlink: 'syz.0.282': attribute type 5 has an invalid length. [ 38.226903][ T1162] netlink: 'syz.0.282': attribute type 4 has an invalid length. [ 38.238697][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 38.238715][ T36] audit: type=1400 audit(1760519707.517:272): avc: denied { unlink } for pid=1161 comm="syz.0.282" name="#1" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.279961][ T36] audit: type=1400 audit(1760519707.557:273): avc: denied { create } for pid=1167 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 38.300025][ T36] audit: type=1400 audit(1760519707.578:274): avc: denied { sys_admin } for pid=1167 comm="syz.2.285" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 38.325059][ T36] audit: type=1400 audit(1760519707.588:275): avc: denied { associate } for pid=1169 comm="syz.2.285" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 38.472350][ T544] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 38.543251][ T1177] 9pnet_fd: Insufficient options for proto=fd [ 38.565155][ T1179] mmap: syz.1.289 (1179) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.639898][ T544] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.650863][ T544] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1576, setting to 1024 [ 38.662129][ T544] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 38.665544][ T36] audit: type=1400 audit(1760519707.946:276): avc: denied { write } for pid=1185 comm="syz.3.292" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=7615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.673879][ T544] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.706693][ T544] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.714923][ T544] usb 1-1: Product: syz [ 38.719272][ T544] usb 1-1: Manufacturer: syz [ 38.723890][ T544] usb 1-1: SerialNumber: syz [ 38.744782][ T1192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.294'. [ 38.767631][ T1195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 38.776562][ T1195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 38.785489][ T1195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 38.794745][ T1195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 38.855101][ T1210] netlink: 9 bytes leftover after parsing attributes in process `syz.2.299'. [ 38.864609][ T1210] gretap0: entered promiscuous mode [ 38.910037][ T1214] netlink: 'syz.2.301': attribute type 16 has an invalid length. [ 38.917886][ T1214] netlink: 'syz.2.301': attribute type 25 has an invalid length. [ 38.925720][ T1214] netlink: 42526 bytes leftover after parsing attributes in process `syz.2.301'. [ 38.926390][ T1162] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.977546][ T36] audit: type=1400 audit(1760519708.262:277): avc: denied { read } for pid=1218 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.070508][ T1220] 9pnet_fd: Insufficient options for proto=fd [ 39.183995][ T36] audit: type=1400 audit(1760519708.476:278): avc: denied { connect } for pid=1229 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.542105][ T544] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 39.547881][ T544] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 39.570262][ T544] cdc_ncm 1-1:1.0: bind() failure [ 39.576599][ T544] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 39.583814][ T544] cdc_ncm 1-1:1.1: bind() failure [ 39.593073][ T544] usb 1-1: USB disconnect, device number 8 [ 39.661460][ T36] audit: type=1400 audit(1760519708.965:279): avc: denied { watch } for pid=1243 comm="syz.1.309" path="/97/file0" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.737917][ T1251] 9pnet_fd: Insufficient options for proto=fd [ 40.081093][ T36] audit: type=1400 audit(1760519709.393:280): avc: denied { append } for pid=1274 comm="syz.0.321" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.199859][ T1288] netlink: 'syz.0.326': attribute type 4 has an invalid length. [ 40.218549][ T1288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.326'. [ 40.393228][ T36] audit: type=1400 audit(1760519709.709:281): avc: denied { bind } for pid=1327 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.541855][ T544] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 40.564802][ T1357] overlayfs: failed to clone upperpath [ 40.700381][ T544] usb 1-1: unable to get BOS descriptor or descriptor too short [ 40.708484][ T544] usb 1-1: not running at top speed; connect to a high speed hub [ 40.719614][ T544] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 40.728273][ T544] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.748127][ T544] usb 1-1: config 0 has no interface number 0 [ 40.757848][ T544] usb 1-1: config 0 interface 88 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.787348][ T544] usb 1-1: config 0 interface 88 has no altsetting 0 [ 40.802211][ T544] usb 1-1: language id specifier not provided by device, defaulting to English [ 40.812583][ T544] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 40.821927][ T544] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 40.836470][ T544] usb 1-1: Product: syz [ 40.840696][ T544] usb 1-1: Manufacturer: syz [ 40.855467][ T544] usb 1-1: SerialNumber: syz [ 40.862060][ T544] usb 1-1: config 0 descriptor?? [ 41.065329][ T1305] support for the xor transformation has been removed. [ 41.072907][ T1305] random: crng reseeded on system resumption [ 41.112366][ T1305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.120966][ T1305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.559268][ T1415] 9pnet_fd: Insufficient options for proto=fd [ 41.566018][ T1415] 9pnet_fd: Insufficient options for proto=fd [ 41.636035][ T1424] 9pnet_fd: Insufficient options for proto=fd [ 43.738943][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 43.738961][ T36] audit: type=1400 audit(1760519713.104:315): avc: denied { getopt } for pid=1516 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.802592][ T36] audit: type=1400 audit(1760519713.175:316): avc: denied { create } for pid=1522 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 43.830390][ T1525] syz.2.402 uses obsolete (PF_INET,SOCK_PACKET) [ 43.852074][ T1527] fuse: Bad value for 'fd' [ 43.858809][ T1528] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 43.864922][ T1527] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 43.874374][ T1528] overlayfs: failed to set xattr on upper [ 43.880140][ T1527] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 43.888319][ T1528] overlayfs: ...falling back to redirect_dir=nofollow. [ 43.900538][ T1527] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 43.911106][ T1528] overlayfs: ...falling back to metacopy=off. [ 43.916148][ T1527] overlayfs: failed to set xattr on upper [ 43.920274][ T1528] overlayfs: ...falling back to uuid=null. [ 43.927910][ T1527] overlayfs: ...falling back to redirect_dir=nofollow. [ 43.936568][ T36] audit: type=1400 audit(1760519713.307:317): avc: denied { connect } for pid=1529 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.938454][ T1527] overlayfs: ...falling back to metacopy=off. [ 43.957960][ C0] af_packet: tpacket_rcv: packet too big, clamped from 66038 to 3958. macoff=82 [ 43.964308][ T1527] overlayfs: ...falling back to uuid=null. [ 44.042444][ T1540] __nla_validate_parse: 4 callbacks suppressed [ 44.042467][ T1540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 44.058883][ T1540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.407'. [ 44.205059][ T1551] batadv_slave_1: entered promiscuous mode [ 44.409312][ T1550] batadv_slave_1: left promiscuous mode [ 45.126828][ T36] audit: type=1326 audit(1760519714.514:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1578 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038618eec9 code=0x50000 [ 45.150115][ T36] audit: type=1326 audit(1760519714.514:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1578 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038618eec9 code=0x50000 [ 45.173596][ T36] audit: type=1326 audit(1760519714.514:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1578 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038618eec9 code=0x50000 [ 45.197167][ T36] audit: type=1326 audit(1760519714.514:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1578 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038618eec9 code=0x50000 [ 45.220293][ T36] audit: type=1326 audit(1760519714.514:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1578 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x50000 [ 45.243713][ T36] audit: type=1326 audit(1760519714.514:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1578 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f038618eec9 code=0x50000 [ 45.653320][ T1625] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45018 sclass=netlink_xfrm_socket pid=1625 comm=syz.3.430 [ 45.699896][ T1632] overlayfs: empty lowerdir [ 45.791714][ T1644] 9pnet_fd: Insufficient options for proto=fd [ 45.850183][ T412] usb 1-1: USB disconnect, device number 9 [ 45.994726][ T36] audit: type=1400 audit(1760519715.395:324): avc: denied { link } for pid=1647 comm="syz.0.438" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 46.003705][ T1648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:166 [ 46.270763][ T1707] fuse: Unknown parameter 'a]wweSijՐH^|KhVKϊ#utM' [ 46.295067][ T1707] __vm_enough_memory: pid: 1707, comm: syz.0.454, bytes: 18014402804453376 not enough memory for the allocation [ 46.338501][ T1716] x_tables: unsorted underflow at hook 4 [ 46.602484][ T1745] netlink: 180 bytes leftover after parsing attributes in process `syz.1.470'. [ 46.620613][ T1746] batadv_slave_1: entered promiscuous mode [ 46.636822][ T1745] batadv_slave_1: left promiscuous mode [ 47.035154][ T1763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 47.492809][ T1790] netlink: 196 bytes leftover after parsing attributes in process `syz.0.484'. [ 47.517616][ T329] tipc: Subscription rejected, illegal request [ 47.994439][ T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 48.152650][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 48.159020][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 48.169018][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 48.181795][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.197602][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.214766][ T45] usb 1-1: Product: syz [ 48.226592][ T45] usb 1-1: Manufacturer: syz [ 48.231225][ T45] usb 1-1: SerialNumber: syz [ 48.281797][ T1841] veth1: entered allmulticast mode [ 48.401940][ T1840] veth1: left allmulticast mode [ 48.422211][ T1854] netlink: 'syz.1.507': attribute type 4 has an invalid length. [ 48.451960][ T45] usb 1-1: failed to enable PITCH for EP 0x82 [ 48.469304][ T45] usb 1-1: 2:1: cannot set freq 3624486 to ep 0x82 [ 48.494131][ T1871] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1871 comm=syz.1.513 [ 48.498963][ T45] usb 1-1: USB disconnect, device number 10 [ 48.727986][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 48.728003][ T36] audit: type=1400 audit(2000000000.000:344): avc: denied { bind } for pid=1887 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.753590][ T36] audit: type=1400 audit(2000000000.000:345): avc: denied { name_bind } for pid=1887 comm="syz.1.518" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 48.774856][ T36] audit: type=1400 audit(2000000000.000:346): avc: denied { node_bind } for pid=1887 comm="syz.1.518" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 48.789080][ T1890] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1890 comm=syz.2.519 [ 49.175884][ T1901] binder: Bad value for 'stats' [ 49.273616][ T36] audit: type=1400 audit(2000000000.540:347): avc: denied { sqpoll } for pid=1910 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.294362][ T1906] bridge0: port 3(macsec0) entered blocking state [ 49.300896][ T1906] bridge0: port 3(macsec0) entered disabled state [ 49.307578][ T1906] macsec0: entered allmulticast mode [ 49.315273][ T1906] veth1_macvtap: entered allmulticast mode [ 49.322397][ T1906] macsec0: entered promiscuous mode [ 49.328043][ T1906] bridge0: port 3(macsec0) entered blocking state [ 49.334514][ T1906] bridge0: port 3(macsec0) entered forwarding state [ 49.375275][ T36] audit: type=1400 audit(2000000000.640:348): avc: denied { name_bind } for pid=1928 comm="syz.3.533" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 49.628958][ T1938] netlink: 'syz.3.536': attribute type 16 has an invalid length. [ 49.663731][ T36] audit: type=1400 audit(2000000000.930:349): avc: denied { read } for pid=1941 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.706302][ T1951] incfs: Options parsing error. -22 [ 49.711591][ T1951] incfs: mount failed -22 [ 49.716865][ T36] audit: type=1326 audit(2000000000.990:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.2.541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f038618eec9 code=0x0 [ 49.933371][ T36] audit: type=1400 audit(2000000001.200:351): avc: denied { mount } for pid=1965 comm="syz.3.545" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 50.082295][ T36] audit: type=1400 audit(2000000001.350:352): avc: denied { write } for pid=1968 comm="syz.0.546" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.105539][ T1969] rust_binder: Error while translating object. [ 50.105575][ T1969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.112096][ T1969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 50.446219][ T544] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 50.606221][ T544] usb 1-1: Using ep0 maxpacket: 16 [ 50.612441][ T544] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 50.620693][ T544] usb 1-1: config 0 has no interface number 0 [ 50.626829][ T544] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 50.636734][ T544] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 50.646687][ T544] usb 1-1: config 0 interface 41 has no altsetting 0 [ 50.654850][ T544] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 50.664119][ T544] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.672162][ T544] usb 1-1: Product: syz [ 50.676352][ T544] usb 1-1: Manufacturer: syz [ 50.680964][ T544] usb 1-1: SerialNumber: syz [ 50.686807][ T544] usb 1-1: config 0 descriptor?? [ 50.692094][ T1980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.699346][ T1980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.749674][ T1986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1986 comm=syz.1.553 [ 50.907360][ T1980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.914673][ T1980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.117394][ T2028] netlink: 'syz.2.567': attribute type 1 has an invalid length. [ 51.277798][ T2052] netlink: 'syz.1.574': attribute type 11 has an invalid length. [ 51.285653][ T2052] netlink: 'syz.1.574': attribute type 2 has an invalid length. [ 51.326689][ T36] audit: type=1400 audit(2000000002.600:353): avc: denied { view } for pid=1979 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 51.487348][ T2076] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 51.770529][ T2089] overlayfs: failed to clone upperpath [ 51.981570][ T2107] netlink: 'syz.2.591': attribute type 4 has an invalid length. [ 51.989329][ T2107] netlink: 'syz.2.591': attribute type 5 has an invalid length. [ 51.997098][ T2107] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.591'. [ 52.047663][ T544] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 52.066434][ T544] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 52.076338][ T544] usb 1-1: USB disconnect, device number 11 [ 52.102806][ T2115] rust_binder: Fixups oob 178 180 369 186 [ 52.102834][ T2115] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 52.104727][ T2114] x_tables: duplicate underflow at hook 1 [ 52.109039][ T2115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.122929][ T2115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 52.158962][ T2121] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 52.177664][ T2121] netlink: 'syz.3.598': attribute type 2 has an invalid length. [ 52.207426][ T2129] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 52.433927][ T2170] futex_wake_op: syz.0.608 tries to shift op by 144; fix this program [ 52.774472][ T2189] netlink: 'syz.3.620': attribute type 27 has an invalid length. [ 52.791486][ T2189] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.798755][ T2189] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.179665][ T2211] overlayfs: failed to clone upperpath [ 53.185449][ T2213] overlayfs: failed to clone upperpath [ 53.198690][ T2216] batadv_slave_1: entered promiscuous mode [ 53.406035][ T2215] batadv_slave_1: left promiscuous mode [ 53.416223][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 53.567262][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 53.576426][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.585033][ T45] usb 1-1: config 0 descriptor?? [ 53.925174][ T2226] netlink: 'syz.1.632': attribute type 1 has an invalid length. [ 54.026509][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 54.026528][ T36] audit: type=1400 audit(2000000005.290:372): avc: denied { remount } for pid=2240 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.053495][ T45] magicmouse 0003:05AC:0324.0001: item fetching failed at offset 1/5 [ 54.064266][ T45] magicmouse 0003:05AC:0324.0001: magicmouse hid parse failed [ 54.072444][ T45] magicmouse 0003:05AC:0324.0001: probe with driver magicmouse failed with error -22 [ 54.314255][ T45] usb 1-1: USB disconnect, device number 12 [ 54.739465][ T36] audit: type=1400 audit(2000000006.010:373): avc: denied { setattr } for pid=2268 comm="syz.2.645" name="" dev="pipefs" ino=9817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 54.863169][ T2281] SELinux: security_context_str_to_sid () failed with errno=-22 [ 54.871858][ T36] audit: type=1400 audit(2000000006.140:374): avc: denied { read } for pid=2280 comm="syz.0.650" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.894468][ T36] audit: type=1400 audit(2000000006.140:375): avc: denied { open } for pid=2280 comm="syz.0.650" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 55.116237][ T2286] fuse: Bad value for 'group_id' [ 55.121275][ T2286] fuse: Bad value for 'group_id' [ 55.242113][ T2305] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 55.249296][ T2306] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 55.294292][ T2309] fuse: Unknown parameter 'grou[_id' [ 55.307034][ T36] audit: type=1400 audit(2000000006.580:376): avc: denied { search } for pid=2302 comm="syz.3.657" name="/" dev="configfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.337437][ T36] audit: type=1400 audit(2000000006.580:377): avc: denied { setattr } for pid=2302 comm="syz.3.657" name="/" dev="configfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.361321][ T2311] futex_wake_op: syz.2.660 tries to shift op by 144; fix this program [ 55.448475][ T36] audit: type=1400 audit(2000000006.720:378): avc: denied { bind } for pid=2323 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.013656][ T36] audit: type=1400 audit(2000000007.280:379): avc: denied { create } for pid=2340 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.053181][ T2348] cgroup: Invalid name [ 56.395583][ T2377] rust_binder: 258: no such ref 3 [ 56.667538][ T2390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.685'. [ 56.712721][ T2399] mmap: syz.1.688 (2399): VmData 29339648 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 56.777255][ T2415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2415 comm=syz.1.692 [ 56.955584][ T2429] rust_binder: Write failure EFAULT in pid:262 [ 57.206189][ T561] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 57.367237][ T561] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 57.375567][ T561] usb 1-1: config 1 has no interface number 0 [ 57.381931][ T561] usb 1-1: config 1 interface 105 has no altsetting 0 [ 57.390217][ T561] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 57.399477][ T561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.407548][ T561] usb 1-1: Product: syz [ 57.411753][ T561] usb 1-1: Manufacturer: syz [ 57.416411][ T561] usb 1-1: SerialNumber: syz [ 57.623921][ T561] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 57.635327][ T561] usb 1-1: USB disconnect, device number 13 [ 57.667958][ T2451] tipc: Started in network mode [ 57.672868][ T2451] tipc: Node identity ac14140f, cluster identity 4711 [ 57.679802][ T2451] tipc: New replicast peer: 255.255.255.255 [ 57.686016][ T2451] tipc: Enabled bearer , priority 10 [ 57.985490][ T2462] overlayfs: failed to clone upperpath [ 58.182790][ T36] audit: type=1400 audit(2000000009.450:380): avc: denied { getopt } for pid=2472 comm="syz.0.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.203004][ T2473] rust_binder: Error while translating object. [ 58.203037][ T2473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.209275][ T2473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:275 [ 58.536232][ T561] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 58.577239][ T2508] netlink: 'syz.3.725': attribute type 14 has an invalid length. [ 58.611363][ T2514] fuse: Bad value for 'rootmode' [ 58.697303][ T561] usb 1-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 58.706493][ T561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.715189][ T561] usb 1-1: config 0 descriptor?? [ 58.721122][ T561] usb-storage 1-1:0.0: USB Mass Storage device detected [ 58.728988][ T561] usb-storage 1-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 58.728988][ T561] Please send a copy of this message to and [ 58.806222][ T561] tipc: Node number set to 2886997007 [ 58.922012][ T36] audit: type=1400 audit(2000000010.190:381): avc: denied { read } for pid=2479 comm="syz.0.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.923132][ T561] usb 1-1: USB disconnect, device number 14 [ 59.183880][ T36] audit: type=1326 audit(2000000010.450:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2518 comm="syz.1.728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41d9f8eec9 code=0x0 [ 59.322051][ T36] audit: type=1326 audit(2000000010.590:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2503 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038618eec9 code=0x7fc00000 [ 59.393317][ T2524] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 59.402713][ T2524] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 59.453860][ T2531] veth1: entered allmulticast mode [ 59.466761][ T36] audit: type=1326 audit(2000000010.740:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2535 comm="syz.0.732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c31d8eec9 code=0x0 [ 59.470132][ T2534] veth1: left allmulticast mode [ 59.565922][ T2545] GUP no longer grows the stack in syz.3.734 (2545): 200000001000-200000c01000 (200000000000) [ 59.576434][ T2545] CPU: 1 UID: 0 PID: 2545 Comm: syz.3.734 Not tainted syzkaller #0 16eb8ae5e642bf775817a16571acbfa82b92c919 [ 59.576476][ T2545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.576498][ T2545] Call Trace: [ 59.576505][ T2545] [ 59.576514][ T2545] __dump_stack+0x21/0x30 [ 59.576559][ T2545] dump_stack_lvl+0x10c/0x190 [ 59.576591][ T2545] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.576622][ T2545] ? find_vma+0xcd/0x110 [ 59.576645][ T2545] dump_stack+0x19/0x20 [ 59.576675][ T2545] __get_user_pages+0x1e34/0x22d0 [ 59.576705][ T2545] ? __kasan_check_write+0x18/0x20 [ 59.576742][ T2545] ? down_read_killable+0x79/0xf0 [ 59.576767][ T2545] ? populate_vma_page_range+0x230/0x230 [ 59.576796][ T2545] ? kernel_text_address+0xa9/0xe0 [ 59.576825][ T2545] ? unwind_get_return_address+0x51/0x90 [ 59.576853][ T2545] __gup_longterm_locked+0xcb1/0x1580 [ 59.576885][ T2545] ? stack_depot_save_flags+0x38/0x800 [ 59.576912][ T2545] gup_fast_fallback+0x12ae/0x14a0 [ 59.576942][ T2545] ? kasan_save_track+0x3e/0x80 [ 59.576973][ T2545] ? __kmalloc_cache_noprof+0x24c/0x490 [ 59.576995][ T2545] ? futex_lock_pi+0x77a/0xa10 [ 59.577027][ T2545] ? get_user_pages_fast_only+0xc0/0xc0 [ 59.577061][ T2545] get_user_pages_fast+0x73/0xb0 [ 59.577090][ T2545] get_futex_key+0x24d/0x930 [ 59.577112][ T2545] ? __cfi_get_futex_key+0x10/0x10 [ 59.577133][ T2545] ? futex_lock_pi+0x77a/0xa10 [ 59.577159][ T2545] ? futex_setup_timer+0xb4/0xd0 [ 59.577180][ T2545] futex_lock_pi+0x1c0/0xa10 [ 59.577205][ T2545] ? futex_unqueue+0x136/0x160 [ 59.577229][ T2545] ? __cfi_futex_lock_pi+0x10/0x10 [ 59.577256][ T2545] ? __cfi_futex_wake_mark+0x10/0x10 [ 59.577285][ T2545] ? futex_setup_timer+0xb4/0xd0 [ 59.577306][ T2545] ? __cfi_futex_wake_mark+0x10/0x10 [ 59.577338][ T2545] do_futex+0x25c/0x500 [ 59.577360][ T2545] ? _copy_from_user+0x41/0xb0 [ 59.577388][ T2545] ? __cfi_do_futex+0x10/0x10 [ 59.577410][ T2545] ? __se_sys_rt_tgsigqueueinfo+0xcb/0x490 [ 59.577448][ T2545] __se_sys_futex+0x28f/0x300 [ 59.577473][ T2545] ? __x64_sys_futex+0x110/0x110 [ 59.577497][ T2545] ? __kasan_check_write+0x18/0x20 [ 59.577531][ T2545] __x64_sys_futex+0xe9/0x110 [ 59.577555][ T2545] x64_sys_call+0x227f/0x2ee0 [ 59.577590][ T2545] do_syscall_64+0x58/0xf0 [ 59.577619][ T2545] ? clear_bhb_loop+0x50/0xa0 [ 59.577643][ T2545] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.577666][ T2545] RIP: 0033:0x7fd324f8eec9 [ 59.577693][ T2545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.577713][ T2545] RSP: 002b:00007fd325ed6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 59.577746][ T2545] RAX: ffffffffffffffda RBX: 00007fd3251e6090 RCX: 00007fd324f8eec9 [ 59.577764][ T2545] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00 [ 59.577780][ T2545] RBP: 00007fd325011f91 R08: 0000000000000000 R09: 0000000000000002 [ 59.577796][ T2545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.577811][ T2545] R13: 00007fd3251e6128 R14: 00007fd3251e6090 R15: 00007ffea329b0e8 [ 59.577831][ T2545] [ 59.948596][ T36] audit: type=1400 audit(2000000011.220:385): avc: denied { mount } for pid=2548 comm="syz.2.736" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.970475][ T36] audit: type=1400 audit(2000000011.230:386): avc: denied { remount } for pid=2548 comm="syz.2.736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.010321][ T2558] netlink: 72 bytes leftover after parsing attributes in process `syz.1.739'. [ 60.224619][ T2584] cgroup: Name too long [ 60.229954][ T2584] netlink: 'syz.3.751': attribute type 6 has an invalid length. [ 60.244497][ T2584] netlink: 'syz.3.751': attribute type 4 has an invalid length. [ 60.252373][ T2584] netlink: 'syz.3.751': attribute type 6 has an invalid length. [ 60.260656][ T2584] netlink: 5944 bytes leftover after parsing attributes in process `syz.3.751'. [ 60.474439][ T2613] 9pnet_virtio: no channels available for device /dev/loop2 [ 60.558565][ T561] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 60.567836][ T2625] batadv_slave_1: entered promiscuous mode [ 60.716169][ T561] usb 1-1: Using ep0 maxpacket: 32 [ 60.722577][ T561] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.733682][ T561] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.743468][ T561] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 60.752586][ T561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.761675][ T561] usb 1-1: config 0 descriptor?? [ 60.767590][ T561] hub 1-1:0.0: USB hub found [ 60.968706][ T561] hub 1-1:0.0: 1 port detected [ 61.170193][ T2592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 61.170246][ T2592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:287 [ 61.180500][ T561] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 61.196180][ T561] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 61.205280][ T561] usbhid 1-1:0.0: can't add hid device: -71 [ 61.211556][ T561] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 61.224688][ T36] audit: type=1326 audit(2000000012.500:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2631 comm="syz.3.767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd324f8eec9 code=0x0 [ 61.248017][ T561] usb 1-1: USB disconnect, device number 15 [ 61.285567][ T2625] batadv_slave_1: left promiscuous mode [ 61.359157][ T2645] netlink: 'syz.1.772': attribute type 11 has an invalid length. [ 61.366971][ T2645] netlink: 'syz.1.772': attribute type 2 has an invalid length. [ 61.411494][ T36] audit: type=1400 audit(2000000012.680:388): avc: denied { read } for pid=2652 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.825470][ T2669] exFAT-fs (rnullb0): invalid boot record signature [ 61.832146][ T2669] exFAT-fs (rnullb0): failed to read boot sector [ 61.838530][ T2669] exFAT-fs (rnullb0): failed to recognize exfat type [ 62.069173][ T36] audit: type=1400 audit(2000000013.340:389): avc: denied { nlmsg_read } for pid=2683 comm="syz.3.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 62.198443][ T36] audit: type=1400 audit(2000000013.470:390): avc: denied { load_policy } for pid=2692 comm="syz.0.788" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 62.198459][ T2693] SELinux: policydb table sizes (104,0) do not match mine (6,7) [ 62.226658][ T2693] SELinux: failed to load policy [ 62.232274][ T2693] 9pnet_fd: Insufficient options for proto=fd [ 62.262880][ T36] audit: type=1400 audit(2000000013.530:391): avc: denied { create } for pid=2701 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.391011][ T2712] fuse: Bad value for 'rootmode' [ 62.548213][ T2730] overlayfs: failed to clone upperpath [ 62.656194][ T561] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 62.796177][ T2752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'. [ 62.806589][ T561] usb 1-1: too many configurations: 229, using maximum allowed: 8 [ 62.819032][ T561] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 62.832856][ T561] usb 1-1: can't read configurations, error -61 [ 62.966189][ T561] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 63.116573][ T561] usb 1-1: too many configurations: 229, using maximum allowed: 8 [ 63.125495][ T561] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 63.133133][ T561] usb 1-1: can't read configurations, error -61 [ 63.139535][ T561] usb usb1-port1: attempt power cycle [ 63.435807][ T2776] 8021q: VLANs not supported on ip6_vti0 [ 63.476187][ T561] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 63.506927][ T561] usb 1-1: too many configurations: 229, using maximum allowed: 8 [ 63.516069][ T561] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 63.523717][ T561] usb 1-1: can't read configurations, error -61 [ 63.656199][ T561] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 63.676961][ T561] usb 1-1: too many configurations: 229, using maximum allowed: 8 [ 63.685902][ T561] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 63.693620][ T561] usb 1-1: can't read configurations, error -61 [ 63.700070][ T561] usb usb1-port1: unable to enumerate USB device [ 63.822883][ T2791] 9pnet_fd: Insufficient options for proto=fd [ 64.330557][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 64.330574][ T36] audit: type=1400 audit(2000000015.600:393): avc: denied { connect } for pid=2808 comm="syz.1.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.426038][ T36] audit: type=1400 audit(2000000015.690:394): avc: denied { name_bind } for pid=2829 comm="syz.1.836" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 64.556084][ T2848] 9pnet_fd: Insufficient options for proto=fd [ 64.587329][ T2852] tipc: Enabled bearer , priority 0 [ 64.734726][ T2870] 9pnet_fd: Insufficient options for proto=fd [ 65.396559][ T2887] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 65.408264][ T2887] overlayfs: missing 'lowerdir' [ 65.736190][ T561] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 65.887720][ T561] usb 1-1: not running at top speed; connect to a high speed hub [ 65.896230][ T561] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 65.907275][ T561] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 65.919436][ T561] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.928533][ T561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.936599][ T561] usb 1-1: Product: ఉ [ 65.940770][ T561] usb 1-1: Manufacturer: ᐉ [ 65.945442][ T561] usb 1-1: SerialNumber: ࡠ [ 66.154120][ T2899] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.163321][ T2899] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.275934][ T2930] overlayfs: failed to clone lowerpath [ 66.387878][ T561] cdc_ncm 1-1:1.0: bind() failure [ 66.394099][ T561] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 66.402380][ T561] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 66.413107][ T561] usb 1-1: USB disconnect, device number 20 [ 66.780356][ T36] audit: type=1400 audit(2000000018.050:395): avc: denied { create } for pid=2935 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 66.799820][ T36] audit: type=1400 audit(2000000018.060:396): avc: denied { getopt } for pid=2935 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.086013][ T2962] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 67.336204][ T561] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 67.480224][ T2974] /dev/loop0: Can't lookup blockdev [ 67.486173][ T561] usb 1-1: Using ep0 maxpacket: 16 [ 67.492426][ T561] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.509537][ T561] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.519582][ T561] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.01 [ 67.530241][ T561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.550657][ T561] usb 1-1: config 0 descriptor?? [ 67.588731][ T36] audit: type=1400 audit(2000000018.860:397): avc: denied { mounton } for pid=2984 comm="syz.3.892" path="/245/file0" dev="tmpfs" ino=1347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.611784][ T36] audit: type=1400 audit(2000000018.860:398): avc: denied { append } for pid=2984 comm="syz.3.892" name="file0" dev="tmpfs" ino=1347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.760594][ T2992] overlayfs: failed to clone upperpath [ 67.915113][ T36] audit: type=1400 audit(2000000019.180:399): avc: denied { map } for pid=2998 comm="syz.2.897" path="socket:[13293]" dev="sockfs" ino=13293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.967774][ T2962] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.977744][ T561] usbhid 1-1:0.0: can't add hid device: -71 [ 67.984223][ T561] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 67.993404][ T561] usb 1-1: USB disconnect, device number 21 [ 68.383757][ T3025] fuse: Unknown parameter 'ddd6#lӏ fU' [ 68.528782][ T36] audit: type=1400 audit(2000000019.800:400): avc: denied { bind } for pid=3037 comm="syz.1.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.565445][ T3044] overlayfs: failed to clone upperpath [ 68.770142][ T36] audit: type=1400 audit(2000000020.040:401): avc: denied { listen } for pid=3077 comm="syz.2.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.789556][ T36] audit: type=1400 audit(2000000020.050:402): avc: denied { accept } for pid=3077 comm="syz.2.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.921223][ T3081] 9pnet_fd: Insufficient options for proto=fd [ 69.476797][ T36] audit: type=1400 audit(2000000020.750:403): avc: denied { ioctl } for pid=3094 comm="syz.0.932" path="socket:[12206]" dev="sockfs" ino=12206 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.077396][ T36] audit: type=1400 audit(2000000021.350:404): avc: denied { name_bind } for pid=3135 comm="syz.2.946" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 70.105260][ T36] audit: type=1400 audit(2000000021.350:405): avc: denied { node_bind } for pid=3135 comm="syz.2.946" saddr=fe80::1c src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 70.426460][ T36] audit: type=1400 audit(2000000021.700:406): avc: denied { accept } for pid=3164 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.717517][ T3169] rust_binder: Read failure Err(EFAULT) in pid:357 [ 70.794917][ T3196] 9pnet_fd: Insufficient options for proto=fd [ 70.978010][ T36] audit: type=1400 audit(2000000022.250:407): avc: denied { bind } for pid=3218 comm="syz.0.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.038529][ T3228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.038834][ T3228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.045482][ T3228] rust_binder: validate_parent_fixup: new_min_offset=60, sg_entry.length=0 [ 71.051966][ T3228] rust_binder: Error while translating object. [ 71.060995][ T3228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.067278][ T3228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:376 [ 71.097054][ T36] audit: type=1400 audit(2000000022.370:408): avc: denied { execute } for pid=3229 comm="syz.0.981" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.207056][ T3236] netlink: 'syz.2.984': attribute type 27 has an invalid length. [ 71.217244][ T3236] gretap0: left promiscuous mode [ 71.304771][ T36] audit: type=1400 audit(2000000022.570:409): avc: denied { setopt } for pid=3247 comm="syz.1.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.328005][ T36] audit: type=1400 audit(2000000022.600:410): avc: denied { mounton } for pid=3240 comm="syz.0.985" path="/124/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 71.576231][ T331] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 71.727265][ T331] usb 1-1: config 0 has an invalid interface number: 190 but max is 0 [ 71.735548][ T331] usb 1-1: config 0 has no interface number 0 [ 71.741815][ T331] usb 1-1: New USB device found, idVendor=19d2, idProduct=1111, bcdDevice= 7.75 [ 71.750938][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.759708][ T331] usb 1-1: config 0 descriptor?? [ 71.801728][ T36] audit: type=1400 audit(2000000023.070:411): avc: denied { setattr } for pid=3257 comm="syz.2.991" name="TIPC" dev="sockfs" ino=14806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.894388][ T3276] overlayfs: failed to clone upperpath [ 71.914010][ T3280] netlink: 32 bytes leftover after parsing attributes in process `syz.2.998'. [ 71.965946][ T3251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.974600][ T3251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.181698][ T3297] overlayfs: failed to clone upperpath [ 72.439901][ T36] audit: type=1400 audit(2000000023.710:412): avc: denied { shutdown } for pid=3302 comm="syz.1.1006" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.038771][ T3317] veth0_vlan: left promiscuous mode [ 74.274002][ T331] usb 1-1: string descriptor 0 read error: -71 [ 74.285219][ T331] usb 1-1: bad CDC descriptors [ 74.296256][ T331] usb 1-1: USB disconnect, device number 22 [ 74.453450][ T3354] __vm_enough_memory: pid: 3354, comm: syz.0.1023, bytes: 18014402804453376 not enough memory for the allocation [ 74.466439][ T3354] rust_binder: Write failure EFAULT in pid:385 [ 74.749123][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 74.749143][ T36] audit: type=1400 audit(2000000026.020:415): avc: denied { create } for pid=3383 comm="syz.1.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.606840][ T36] audit: type=1400 audit(2000000026.880:416): avc: denied { setopt } for pid=3398 comm="syz.3.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.101907][ T3415] 9pnet_fd: Insufficient options for proto=fd [ 76.503942][ T3420] 9pnet_fd: Insufficient options for proto=fd [ 76.522242][ T3422] fuse: Bad value for 'group_id' [ 76.527299][ T3422] fuse: Bad value for 'group_id' [ 77.060623][ T3458] netlink: 'syz.3.1063': attribute type 28 has an invalid length. [ 77.250659][ T3480] cgroup: Need name or subsystem set [ 77.289013][ T36] audit: type=1400 audit(2000000028.560:417): avc: denied { mounton } for pid=3483 comm="syz.1.1071" path="/file0" dev="ramfs" ino=15061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 78.116819][ T3517] netlink: 'syz.0.1084': attribute type 5 has an invalid length. [ 78.137003][ T3517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 78.147121][ T3517] netlink: 'syz.0.1084': attribute type 32 has an invalid length. [ 78.156630][ T3521] sit0: entered promiscuous mode [ 78.165638][ T3517] rust_binder: Write failure EFAULT in pid:405 [ 78.189392][ T3521] netlink: 'syz.2.1086': attribute type 1 has an invalid length. [ 78.207298][ T3521] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1086'. [ 78.266708][ T3521] tipc: Enabling of bearer rejected, failed to enable media [ 78.293490][ T3531] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.326846][ T3533] 9pnet_fd: Insufficient options for proto=fd [ 78.341256][ T3536] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1091'. [ 78.419997][ T3545] overlayfs: failed to clone upperpath [ 78.435515][ T3545] overlayfs: failed to clone upperpath [ 78.532629][ T3556] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.533006][ T3556] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 78.542747][ T3557] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 78.555899][ T3556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 78.576065][ T3556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:413 [ 78.590956][ T36] audit: type=1400 audit(2000000029.860:418): avc: denied { relabelto } for pid=3555 comm="syz.2.1098" name="file0" dev="tmpfs" ino=1759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 78.661688][ T36] audit: type=1400 audit(2000000029.860:419): avc: denied { associate } for pid=3555 comm="syz.2.1098" name="file0" dev="tmpfs" ino=1759 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 78.703655][ T36] audit: type=1400 audit(2000000029.910:420): avc: denied { unlink } for pid=289 comm="syz-executor" name="file0" dev="tmpfs" ino=1759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 78.825639][ T3559] fuse: Bad value for 'fd' [ 78.837601][ T3559] fuse: Bad value for 'fd' [ 78.848365][ T3561] fuse: Bad value for 'fd' [ 78.870892][ T3589] overlayfs: failed to clone lowerpath [ 79.024352][ T36] audit: type=1400 audit(2000000030.290:421): avc: denied { create } for pid=3602 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 79.074655][ T36] audit: type=1400 audit(2000000030.340:422): avc: denied { setopt } for pid=3606 comm="syz.2.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.273688][ T3619] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1118'. [ 79.292746][ T3618] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1118'. [ 79.627589][ T3621] overlayfs: failed to clone lowerpath [ 79.685267][ T3625] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.686665][ T3625] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 79.693246][ T3625] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 79.704798][ T3625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:424 [ 79.761395][ T3629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1123'. [ 79.793524][ T3629] 9pnet_fd: Insufficient options for proto=fd [ 79.818567][ T3632] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.818679][ T3632] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 79.825158][ T3632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 79.849258][ T3632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:426 [ 79.907085][ T3643] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.919569][ T3643] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 79.926620][ T3643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 79.943284][ T3643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:428 [ 80.196186][ T561] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 80.289579][ T3690] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=51 sclass=netlink_tcpdiag_socket pid=3690 comm=syz.2.1147 [ 80.336221][ T561] usb 1-1: device descriptor read/64, error -71 [ 80.552680][ T36] audit: type=1400 audit(2000000031.820:423): avc: denied { write } for pid=3705 comm="syz.2.1153" path="socket:[15567]" dev="sockfs" ino=15567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.577210][ T561] usb 1-1: device descriptor read/64, error -71 [ 80.826172][ T561] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 80.912098][ T3737] EXT4-fs: dax option not supported [ 80.956179][ T561] usb 1-1: device descriptor read/64, error -71 [ 80.960611][ T3746] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3746 comm=syz.1.1168 [ 81.206307][ T561] usb 1-1: device descriptor read/64, error -71 [ 81.316637][ T561] usb usb1-port1: attempt power cycle [ 81.547195][ T3774] netlink: 679 bytes leftover after parsing attributes in process `syz.1.1177'. [ 81.656253][ T561] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 81.678513][ T561] usb 1-1: device descriptor read/8, error -71 [ 81.696963][ T3783] overlayfs: failed to clone upperpath [ 81.807239][ T561] usb 1-1: device descriptor read/8, error -71 [ 82.046250][ T561] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 82.067259][ T561] usb 1-1: device descriptor read/8, error -71 [ 82.197276][ T561] usb 1-1: device descriptor read/8, error -71 [ 82.310250][ T561] usb usb1-port1: unable to enumerate USB device [ 82.331059][ T3810] overlayfs: failed to clone lowerpath [ 82.482250][ T3824] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1195'. [ 82.567357][ T3830] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 83.028446][ T3841] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.030173][ T3843] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 83.037030][ T3843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 83.045154][ T3843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:435 [ 83.111188][ T3857] netlink: 488 bytes leftover after parsing attributes in process `syz.2.1205'. [ 83.214471][ T3881] overlayfs: failed to clone lowerpath [ 83.249521][ T3887] batadv_slave_1: entered promiscuous mode [ 83.276173][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 83.416186][ T10] usb 1-1: device descriptor read/64, error -71 [ 83.449493][ T3929] netlink: 'syz.1.1228': attribute type 28 has an invalid length. [ 83.456791][ T3884] batadv_slave_1: left promiscuous mode [ 83.484912][ T36] audit: type=1400 audit(2000000034.750:424): avc: denied { create } for pid=3932 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 83.518651][ T3940] overlay: ./file0 is not a directory [ 83.656175][ T10] usb 1-1: device descriptor read/64, error -71 [ 83.896194][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 84.026287][ T10] usb 1-1: device descriptor read/64, error -71 [ 84.276199][ T10] usb 1-1: device descriptor read/64, error -71 [ 84.386240][ T10] usb usb1-port1: attempt power cycle [ 84.400932][ T36] audit: type=1326 audit(2000000035.670:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3955 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d9f8eec9 code=0x7fc00000 [ 84.657844][ T4015] 9pnet_fd: Insufficient options for proto=fd [ 84.726160][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 84.747737][ T10] usb 1-1: device descriptor read/8, error -71 [ 84.877591][ T10] usb 1-1: device descriptor read/8, error -71 [ 85.116182][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 85.137691][ T10] usb 1-1: device descriptor read/8, error -71 [ 85.277278][ T10] usb 1-1: device descriptor read/8, error -71 [ 85.387004][ T10] usb usb1-port1: unable to enumerate USB device [ 85.411235][ T36] audit: type=1400 audit(2000000036.680:426): avc: denied { mount } for pid=4040 comm="syz.2.1268" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 85.474822][ T4041] 8021q: VLANs not supported on lo [ 85.530239][ T4051] overlayfs: failed to clone lowerpath [ 85.545149][ T4051] netlink: 'syz.2.1271': attribute type 4 has an invalid length. [ 85.556833][ T4051] netlink: 'syz.2.1271': attribute type 4 has an invalid length. [ 85.638609][ T36] audit: type=1400 audit(2000000036.910:427): avc: denied { create } for pid=4064 comm="syz.3.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 85.797140][ T4077] netlink: 'syz.3.1282': attribute type 32 has an invalid length. [ 85.819129][ T4081] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1284'. [ 85.864720][ T4092] 9pnet_fd: Insufficient options for proto=fd [ 86.008717][ T4117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1297'. [ 86.018645][ T36] audit: type=1400 audit(2000000037.300:428): avc: denied { write } for pid=4116 comm="syz.3.1297" path="socket:[16114]" dev="sockfs" ino=16114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.068618][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.077935][ T36] audit: type=1400 audit(2000000037.350:429): avc: denied { map } for pid=4120 comm="syz.0.1299" path="socket:[16127]" dev="sockfs" ino=16127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 86.106271][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.190086][ T4127] fido_id[4127]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 86.300801][ T4142] overlayfs: failed to clone lowerpath [ 86.355535][ T4148] batadv_slave_1: entered promiscuous mode [ 86.440942][ T4155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4155 comm=syz.2.1311 [ 86.575735][ T4147] batadv_slave_1: left promiscuous mode [ 86.655347][ T4167] sock: sock_set_timeout: `syz.2.1315' (pid 4167) tries to set negative timeout [ 86.827434][ T4169] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1316'. [ 86.871184][ T4179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1319'. [ 87.138355][ T4195] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 87.146880][ T4195] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1325'. [ 87.157606][ T4198] rust_binder: 4187 RLIMIT_NICE not set [ 87.496165][ T412] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 87.656183][ T412] usb 1-1: Using ep0 maxpacket: 8 [ 87.662484][ T412] usb 1-1: config 0 has an invalid descriptor of length 161, skipping remainder of the config [ 87.672814][ T412] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.685739][ T412] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 87.694810][ T412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.704008][ T412] usb 1-1: config 0 descriptor?? [ 87.785417][ T4235] fuse: Unknown parameter '0x0000000000000006' [ 87.910442][ T4217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.919333][ T4217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.035679][ T4270] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1351'. [ 88.074077][ T4270] bridge0: port 3(macsec0) entered blocking state [ 88.080788][ T4270] bridge0: port 3(macsec0) entered disabled state [ 88.087541][ T4270] macsec0: entered allmulticast mode [ 88.093538][ T4270] macsec0: entered promiscuous mode [ 88.133204][ T4217] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.133242][ T4217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:461 [ 88.144726][ T412] usb 1-1: string descriptor 0 read error: -71 [ 88.161209][ T412] usb 1-1: USB disconnect, device number 31 [ 88.867818][ T36] audit: type=1326 audit(2000000040.140:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.3.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd324f8eec9 code=0x7fc00000 [ 89.430353][ T36] audit: type=1326 audit(2000000040.700:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4320 comm="syz.2.1370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f038618eec9 code=0x0 [ 89.792318][ T4367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4367 comm=syz.2.1386 [ 89.805274][ T4368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4368 comm=syz.2.1386 [ 89.838017][ T4370] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 89.848442][ T36] audit: type=1400 audit(2000000041.120:432): avc: denied { relabelto } for pid=4369 comm="syz.2.1387" name="ptp0" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 89.879321][ T36] audit: type=1400 audit(2000000041.120:433): avc: denied { associate } for pid=4369 comm="syz.2.1387" name="ptp0" dev="tmpfs" ino=500 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 90.259845][ T4380] batadv_slave_1: entered promiscuous mode [ 90.475978][ T4385] rust_binder: Write failure EFAULT in pid:472 [ 90.489378][ T4379] batadv_slave_1: left promiscuous mode [ 90.609816][ T36] audit: type=1326 audit(2000000041.880:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d9f8eec9 code=0x7ffc0000 [ 90.650639][ T36] audit: type=1326 audit(2000000041.880:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d9f8eec9 code=0x7ffc0000 [ 90.690071][ T36] audit: type=1326 audit(2000000041.900:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f41d9f8eec9 code=0x7ffc0000 [ 90.714878][ T36] audit: type=1326 audit(2000000041.900:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d9f8eec9 code=0x7ffc0000 [ 90.745005][ T36] audit: type=1326 audit(2000000041.900:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d9f8eec9 code=0x7ffc0000 [ 90.768464][ T36] audit: type=1326 audit(2000000041.910:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d9f8eec9 code=0x7ffc0000 [ 90.785180][ T4418] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1406'. [ 90.792751][ T36] audit: type=1326 audit(2000000041.910:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d9f8eec9 code=0x7ffc0000 [ 90.832697][ T36] audit: type=1326 audit(2000000041.910:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41d9f8eec9 code=0x7ffc0000 [ 90.856335][ T36] audit: type=1326 audit(2000000041.910:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d9f8eec9 code=0x7ffc0000 [ 90.879973][ T36] audit: type=1326 audit(2000000041.910:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d9f8eec9 code=0x7ffc0000 [ 90.904008][ T36] audit: type=1326 audit(2000000041.910:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d9f8eec9 code=0x7ffc0000 [ 91.088726][ T4458] batadv_slave_1: entered promiscuous mode [ 91.104111][ T4458] batadv_slave_1: left promiscuous mode [ 91.127505][ T4466] overlayfs: failed to clone upperpath [ 91.227969][ T4476] rust_binder: Got transaction with invalid offset. [ 91.228028][ T4476] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.234827][ T4475] rust_binder: Got transaction with invalid offset. [ 91.244432][ T4476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:494 [ 91.252249][ T4475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.261569][ T4475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:494 [ 91.634296][ T4491] 9pnet_fd: p9_fd_create_tcp (4491): problem binding to privport [ 91.652938][ T4491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 93.258907][ T4590] 9pnet_fd: Insufficient options for proto=fd [ 93.671336][ T4622] 9pnet: Could not find request transport: Ed [ 93.756021][ T4654] netlink: 'syz.1.1488': attribute type 13 has an invalid length. [ 93.764357][ T4655] netlink: 'syz.1.1488': attribute type 13 has an invalid length. [ 93.962671][ T4682] overlayfs: failed to clone lowerpath [ 94.178388][ T4711] 9pnet_fd: Insufficient options for proto=fd [ 94.196259][ T4713] batadv_slave_1: entered promiscuous mode [ 94.410554][ T4712] batadv_slave_1: left promiscuous mode [ 94.828950][ T4760] netlink: 'syz.1.1527': attribute type 30 has an invalid length. [ 95.107493][ T4774] overlayfs: failed to clone lowerpath [ 95.125610][ T4776] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1533'. [ 95.476491][ T4802] 9pnet_fd: Insufficient options for proto=fd [ 95.496801][ T4810] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1543'. [ 96.039531][ T4846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14873 sclass=netlink_route_socket pid=4846 comm=syz.2.1556 [ 96.514224][ T36] kauditd_printk_skb: 1389 callbacks suppressed [ 96.514242][ T36] audit: type=1326 audit(2000000047.780:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.0.1570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c31d8eec9 code=0x0 [ 97.077729][ T4898] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1578'. [ 97.279313][ T4914] overlayfs: failed to clone upperpath [ 97.678690][ T36] audit: type=1400 audit(2000000048.950:1835): avc: denied { shutdown } for pid=4939 comm="syz.0.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.790465][ T4965] 9pnet: Unknown protocol version 9p200 [ 98.016764][ T4990] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1607'. [ 98.242200][ T5005] 9pnet_fd: Insufficient options for proto=fd [ 98.408991][ T5018] overlayfs: failed to resolve './file1': -2 [ 98.431152][ T5021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1620'. [ 98.431779][ T36] audit: type=1400 audit(2000000049.700:1836): avc: denied { accept } for pid=5020 comm="syz.3.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 98.441918][ T5021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1620'. [ 98.469134][ T36] audit: type=1400 audit(2000000049.740:1837): avc: denied { write } for pid=5024 comm="syz.2.1621" name="ptp0" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 98.496674][ T36] audit: type=1400 audit(2000000049.740:1838): avc: denied { open } for pid=5024 comm="syz.2.1621" path="/dev/ptp0" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 98.541941][ T36] audit: type=1400 audit(2000000049.740:1839): avc: denied { ioctl } for pid=5024 comm="syz.2.1621" path="/dev/ptp0" dev="tmpfs" ino=500 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 98.579849][ T36] audit: type=1400 audit(2000000049.810:1840): avc: denied { relabelfrom } for pid=5034 comm="syz.0.1625" name="NETLINK" dev="sockfs" ino=21774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.604547][ T36] audit: type=1400 audit(2000000049.810:1841): avc: denied { relabelto } for pid=5034 comm="syz.0.1625" name="NETLINK" dev="sockfs" ino=21774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 99.119437][ T36] audit: type=1400 audit(2000000050.390:1842): avc: denied { mount } for pid=5075 comm="syz.3.1639" name="/" dev="pstore" ino=2130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 99.456375][ T5109] overlayfs: failed to clone lowerpath [ 99.546768][ T5132] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1662'. [ 99.678189][ T5168] bridge0: entered allmulticast mode [ 99.684347][ T5168] bridge0: entered promiscuous mode [ 99.692141][ T36] audit: type=1400 audit(2000000050.963:1843): avc: denied { shutdown } for pid=5169 comm="syz.1.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.143925][ T5229] 9pnet_fd: Insufficient options for proto=fd [ 100.179294][ T5236] 9pnet_fd: Insufficient options for proto=fd [ 100.785059][ T5264] overlayfs: failed to clone upperpath [ 101.117004][ T5306] overlayfs: failed to clone upperpath [ 101.149463][ T5310] netlink: 'syz.0.1726': attribute type 5 has an invalid length. [ 101.519733][ T5312] netlink: 'syz.2.1727': attribute type 4 has an invalid length. [ 101.569417][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 101.569446][ T36] audit: type=1400 audit(2000000052.843:1847): avc: denied { create } for pid=5320 comm="syz.3.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.595337][ T36] audit: type=1400 audit(2000000052.843:1848): avc: denied { accept } for pid=5322 comm="syz.2.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.997823][ T36] audit: type=1400 audit(2000000053.273:1849): avc: denied { mounton } for pid=5383 comm="syz.0.1753" path="/221/file0" dev="tmpfs" ino=1234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 102.000988][ T5370] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 103.427081][ T5445] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 103.436221][ T36] audit: type=1400 audit(2000000054.713:1850): avc: denied { relabelto } for pid=5444 comm="syz.3.1772" name="rnullb0" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 103.462519][ T36] audit: type=1400 audit(2000000054.713:1851): avc: denied { associate } for pid=5444 comm="syz.3.1772" name="rnullb0" dev="tmpfs" ino=188 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 103.557996][ T36] audit: type=1400 audit(2000000054.833:1852): avc: denied { mounton } for pid=5456 comm="syz.3.1778" path="/469/file0" dev="tmpfs" ino=2548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.647837][ T36] audit: type=1400 audit(2000000054.923:1853): avc: denied { read write } for pid=5463 comm="syz.3.1780" name="rnullb0" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 103.677228][ T36] audit: type=1400 audit(2000000054.923:1854): avc: denied { open } for pid=5463 comm="syz.3.1780" path="/dev/rnullb0" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 103.909752][ T36] audit: type=1400 audit(2000000055.183:1855): avc: denied { create } for pid=5494 comm="syz.1.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 104.331682][ T36] audit: type=1400 audit(2000000055.603:1856): avc: denied { create } for pid=5511 comm="syz.2.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 104.595715][ T5522] 9pnet_fd: Insufficient options for proto=fd [ 104.679326][ T5543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1805'. [ 104.906072][ T5590] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1821'. [ 104.915501][ T5590] gretap0: entered promiscuous mode [ 104.997807][ T5611] batadv_slave_1: entered promiscuous mode [ 105.040262][ T5604] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1826'. [ 105.149835][ T5618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=5618 comm=syz.3.1830 [ 105.162539][ T5618] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1830'. [ 105.205130][ T5610] batadv_slave_1: left promiscuous mode [ 105.452626][ T5620] fuse: Unknown parameter 'wg$' [ 105.452626][ T5621] fuse: Unknown parameter 'wg$' [ 105.722513][ T5624] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 105.731407][ T5624] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 105.748109][ T5624] overlayfs: failed to clone lowerpath [ 105.982983][ T5631] netlink: 'syz.1.1836': attribute type 27 has an invalid length. [ 106.396316][ T329] ip6_tunnel: M xmit: Local address not yet configured! [ 106.407258][ T329] ip6_tunnel: M xmit: Local address not yet configured! [ 106.426535][ T10] ip6_tunnel: M xmit: Local address not yet configured! [ 106.465757][ T5677] veth1: entered allmulticast mode [ 106.594250][ T5675] veth1: left allmulticast mode [ 106.684089][ T5714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1862'. [ 106.926305][ T10] ip6_tunnel: M xmit: Local address not yet configured! [ 107.047437][ T5737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1870'. [ 107.056666][ T5738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1870'. [ 107.065893][ T5737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5737 comm=syz.2.1870 [ 107.300200][ T5752] overlay: Unknown parameter '/' [ 107.315720][ T5754] netlink: 'syz.3.1875': attribute type 29 has an invalid length. [ 107.323628][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1875'. [ 107.376277][ T10] ip6_tunnel: M xmit: Local address not yet configured! [ 107.409187][ T5760] fuse: Bad value for 'group_id' [ 107.414206][ T5760] fuse: Bad value for 'group_id' [ 107.554575][ T5772] 9pnet: Could not find request transport: f [ 107.734913][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 107.734932][ T36] audit: type=1400 audit(2000000059.003:1863): avc: denied { execute } for pid=5776 comm="syz.1.1882" path="/dev/ashmem" dev="tmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.783008][ T5783] overlayfs: failed to clone lowerpath [ 107.840332][ T5797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1889'. [ 107.928572][ T5804] 9pnet_virtio: no channels available for device syz [ 108.333420][ T5816] incfs: Options parsing error. -22 [ 108.339297][ T5816] incfs: mount failed -22 [ 109.143793][ T5874] 9pnet_fd: Insufficient options for proto=fd [ 109.245634][ T5878] /dev/rnullb0: Can't lookup blockdev [ 109.926557][ T5928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1938'. [ 109.996171][ T36] audit: type=1400 audit(2000000061.253:1864): avc: denied { mounton } for pid=5932 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 110.115360][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.134266][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.148394][ T5932] bridge_slave_0: entered allmulticast mode [ 110.160644][ T5932] bridge_slave_0: entered promiscuous mode [ 110.174250][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.196411][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.210000][ T5932] bridge_slave_1: entered allmulticast mode [ 110.216653][ T5932] bridge_slave_1: entered promiscuous mode [ 110.224066][ T329] bridge_slave_1: left allmulticast mode [ 110.230759][ T329] bridge_slave_1: left promiscuous mode [ 110.237488][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.245224][ T329] bridge_slave_0: left allmulticast mode [ 110.251173][ T329] bridge_slave_0: left promiscuous mode [ 110.259526][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.272566][ T329] tipc: Resetting bearer [ 110.350221][ T329] tipc: Disabling bearer [ 110.431558][ T329] tipc: Disabling bearer [ 110.440633][ T329] tipc: Left network mode [ 110.466691][ T329] veth1_macvtap: left promiscuous mode [ 110.472236][ T329] veth0_vlan: left promiscuous mode [ 110.542150][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.549280][ T5932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.556620][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.563790][ T5932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.593642][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.602010][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.621014][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.628131][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.638239][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.645335][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.679523][ T5932] veth0_vlan: entered promiscuous mode [ 110.693268][ T5932] veth1_macvtap: entered promiscuous mode [ 110.716970][ T36] audit: type=1400 audit(2000000061.993:1865): avc: denied { mounton } for pid=5932 comm="syz-executor" path="/root/syzkaller.aWvtGH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 110.785705][ T36] audit: type=1400 audit(2000000062.053:1866): avc: denied { execute_no_trans } for pid=5989 comm="syz.3.1954" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.942541][ T36] audit: type=1400 audit(2000000062.213:1867): avc: denied { create } for pid=6009 comm="syz.2.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 111.031918][ T6017] rust_binder: 6013 RLIMIT_NICE not set [ 111.706168][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.867291][ T45] usb 2-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 111.876534][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.885189][ T45] usb 2-1: config 0 descriptor?? [ 111.891158][ T45] usb-storage 2-1:0.0: USB Mass Storage device detected [ 111.898939][ T45] usb-storage 2-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 111.898939][ T45] Please send a copy of this message to and [ 112.010705][ T36] audit: type=1400 audit(2000000063.283:1868): avc: denied { module_load } for pid=6060 comm="syz.3.1976" path="/554/file0" dev="tmpfs" ino=3012 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 112.010743][ T6061] Invalid ELF header len 1 [ 112.097789][ T331] usb 2-1: USB disconnect, device number 3 [ 112.394529][ T6085] bpf: Bad value for 'mode' [ 112.840840][ T6097] 9pnet_fd: Insufficient options for proto=fd [ 112.925128][ T6105] rust_binder: 6101 RLIMIT_NICE not set [ 113.110707][ T6115] rust_binder: Write failure EFAULT in pid:47 [ 113.113911][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1995'. [ 113.386157][ T62] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.536181][ T62] usb 2-1: Using ep0 maxpacket: 32 [ 113.542605][ T62] usb 2-1: config 0 has an invalid interface number: 137 but max is 0 [ 113.550844][ T62] usb 2-1: config 0 has no interface number 0 [ 113.557024][ T62] usb 2-1: config 0 interface 137 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 113.566904][ T62] usb 2-1: config 0 interface 137 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.579913][ T62] usb 2-1: config 0 interface 137 has no altsetting 0 [ 113.588214][ T62] usb 2-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37 [ 113.597324][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.605331][ T62] usb 2-1: Product: syz [ 113.609543][ T62] usb 2-1: Manufacturer: syz [ 113.614149][ T62] usb 2-1: SerialNumber: syz [ 113.619452][ T62] usb 2-1: config 0 descriptor?? [ 113.625311][ T62] ftdi_sio 2-1:0.137: FTDI USB Serial Device converter detected [ 113.633393][ T62] usb 2-1: Detected SIO [ 113.637598][ T62] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 113.645417][ T62] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 113.841482][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.848604][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.855662][ T6128] bridge_slave_0: entered allmulticast mode [ 113.862163][ T6128] bridge_slave_0: entered promiscuous mode [ 113.868882][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.876025][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.883315][ T6128] bridge_slave_1: entered allmulticast mode [ 113.885321][ T6133] /dev/rnullb0: Can't lookup blockdev [ 113.890951][ T6128] bridge_slave_1: entered promiscuous mode [ 113.948725][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.955805][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.963111][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.970189][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.990350][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.997730][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.007471][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.014622][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.024630][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.031697][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.056062][ T6128] veth0_vlan: entered promiscuous mode [ 114.070455][ T6128] veth1_macvtap: entered promiscuous mode [ 114.180442][ T6210] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1996'. [ 114.189989][ T6211] rust_binder: 6209 RLIMIT_NICE not set [ 114.194284][ T6210] rust_binder: Write failure EFAULT in pid:50 [ 114.546212][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.652712][ T36] audit: type=1400 audit(2000000065.923:1869): avc: denied { execute } for pid=6218 comm="syz.3.2006" path="/dev/rnullb0" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 114.726138][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 114.732652][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.743604][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.753017][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.769524][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.778903][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.786970][ T45] usb 3-1: Product: syz [ 114.791197][ T45] usb 3-1: Manufacturer: syz [ 114.795848][ T45] usb 3-1: SerialNumber: syz [ 114.802584][ T45] cdc_ncm 3-1:1.0: skipping garbage [ 114.809208][ T45] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 114.816054][ T45] cdc_ncm 3-1:1.0: bind() failure [ 114.848059][ T36] audit: type=1326 audit(2000000066.123:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.3.2007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd324f8eec9 code=0x0 [ 115.016751][ T10] usb 3-1: USB disconnect, device number 6 [ 115.031768][ T6233] 9pnet_fd: Insufficient options for proto=fd [ 115.572624][ T36] audit: type=1400 audit(2000000066.843:1871): avc: denied { mounton } for pid=6253 comm="syz.2.2018" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 115.572693][ T6255] incfs: mount failed -22 [ 116.157207][ T45] usb 2-1: USB disconnect, device number 4 [ 116.164400][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 116.176549][ T45] ftdi_sio 2-1:0.137: device disconnected [ 116.245821][ T6269] rust_binder: 6268 RLIMIT_NICE not set [ 116.300557][ T6273] netlink: 'syz.3.2024': attribute type 63 has an invalid length. [ 116.323763][ T6273] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2024'. [ 116.332748][ T6273] gretap0: entered allmulticast mode [ 116.339584][ T6273] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 116.360152][ T6279] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 116.360187][ T6279] rust_binder: Error in use_page_slow: EBUSY [ 116.370679][ T6279] rust_binder: use_range failure EBUSY [ 116.376740][ T6279] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 116.382232][ T6279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 116.390339][ T6279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:60 [ 116.468951][ T6303] netlink: 'syz.2.2032': attribute type 2 has an invalid length. [ 116.485704][ T6303] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2032'. [ 116.496614][ T6292] cgroup: fork rejected by pids controller in /syz3 [ 116.742838][ T6435] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 116.868045][ T6446] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 116.910019][ T6450] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 116.910056][ T6450] rust_binder: Error while translating object. [ 116.920806][ T6450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 116.927177][ T6450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 116.962228][ T6454] SELinux: Context system_u:object_r:iptables_conf_t:s0 is not valid (left unmapped). [ 116.984023][ T36] audit: type=1400 audit(2000000068.253:1872): avc: denied { relabelto } for pid=6453 comm="syz.1.2045" name="file1" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_conf_t:s0" [ 117.018602][ T36] audit: type=1400 audit(2000000068.253:1873): avc: denied { associate } for pid=6453 comm="syz.1.2045" name="file1" dev="tmpfs" ino=132 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:iptables_conf_t:s0" [ 117.036466][ T6454] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2045'. [ 117.178072][ T6461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 117.178103][ T6461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:66 [ 117.205094][ T36] audit: type=1400 audit(2000000068.463:1874): avc: denied { getopt } for pid=6458 comm="syz.2.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.236798][ T6465] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.251815][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.259168][ T6465] bridge_slave_0: entered allmulticast mode [ 117.265881][ T6465] bridge_slave_0: entered promiscuous mode [ 117.269923][ T36] audit: type=1400 audit(2000000068.513:1875): avc: denied { ioctl } for pid=6458 comm="syz.2.2047" path="socket:[26790]" dev="sockfs" ino=26790 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.272810][ T6465] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.309879][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.317168][ T6465] bridge_slave_1: entered allmulticast mode [ 117.323632][ T6465] bridge_slave_1: entered promiscuous mode [ 117.343715][ T6478] batadv_slave_1: entered promiscuous mode [ 117.402516][ T6465] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.409637][ T6465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.416980][ T6465] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.424016][ T6465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.445774][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.453199][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.464569][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.471867][ T6203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.484899][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.492005][ T6203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.524369][ T6465] veth0_vlan: entered promiscuous mode [ 117.539250][ T6465] veth1_macvtap: entered promiscuous mode [ 117.766345][ T62] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.786214][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.816155][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.926187][ T62] usb 2-1: Using ep0 maxpacket: 16 [ 117.934114][ T62] usb 2-1: New USB device found, idVendor=1aad, idProduct=000f, bcdDevice= 0.40 [ 117.944034][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.946166][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 117.952445][ T62] usb 2-1: Product: 糸幄跶 [ 117.962512][ T62] usb 2-1: Manufacturer: 퇨乞䀶䑨閇麰뤺鿱藝䎃癩낰ꌨ耶ⶮ먵썣꡷㱟욚듊⍫뉍㇣疙鹗䅜낛촒ꃐ䕪뻓擕嚼縜Ⲗ烤䷴ᛙ녫僧ㆽℶ磌돋厯蓇譀긛㐙⾂嫩髒쌒㚍鲙溢ퟆ㏕᳐號㲕좂꺶ꕈ舵柜埻㭯〦뵝酠촩㬎ঔ獭毯䏹諁裁卢屋ɳ얋㺊僃⿣呷瀳ᐏ텤萕Ꚁ㺧鲳䧞뵢盲⢣߯਑⽢ꎂ觃ꩴ哒ۂ찜 [ 117.997642][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 118.002886][ T62] usb 2-1: SerialNumber: 枍ፍ轅鑂쮜Ⳏꇴ餀ﻹ緭䑬ꓑ覆僝ᤎ袁邂탾ꬠ癠ԂᲢﳩㄚ侳栍ᫀﾐ᥯꺪匥䌣ᲇ騨䉋㨯瑶쒱墨瀳挡犤ᕊን떐ᅩ詰㗧듖ܪ읞丬︫䎖傍턣燣톊䃡៰坃㡙빗脴꽔춐辗Ẏ鼑⏕ꘃᘁ鏭馢봬괶蜻ۧ빂緿ጮ짵꓉唙睓鹒ᵆ盅똪瓄钃அ靊㉋㌤꾏³䫉ᬒ쪗捨陇췑莅꣦籃Ⓗ佾㵄䯴퇓厐畓 [ 118.038622][ T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 118.040405][ T10] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.056150][ T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 118.063054][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 118.076787][ T10] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 118.085977][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.086150][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 118.094402][ T10] usb 5-1: Product: syz [ 118.107812][ T10] usb 5-1: Manufacturer: syz [ 118.112458][ T10] usb 5-1: SerialNumber: syz [ 118.116491][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.130078][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.140030][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 118.154043][ T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 118.163297][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.172560][ T31] usb 3-1: config 0 descriptor?? [ 118.270721][ T62] usbhid 2-1:1.0: can't add hid device: -71 [ 118.277412][ T62] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 118.290968][ T62] usb 2-1: USB disconnect, device number 5 [ 118.342864][ T36] audit: type=1400 audit(2000000069.613:1876): avc: denied { read } for pid=95 comm="acpid" name="event8" dev="devtmpfs" ino=516 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 118.371008][ T36] audit: type=1400 audit(2000000069.613:1877): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=516 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 118.397427][ T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 118.397509][ T36] audit: type=1400 audit(2000000069.613:1878): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=516 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 118.428447][ T31] usb 3-1: USB disconnect, device number 7 [ 118.442881][ T10] usbhid 5-1:1.0: can't add hid device: -71 [ 118.448240][ T31] usblp0: removed [ 118.449165][ T10] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 118.462061][ T10] usb 5-1: USB disconnect, device number 2 [ 118.811994][ T45] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 118.828323][ T45] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.916201][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 119.066165][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 119.072646][ T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 119.081190][ T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 119.089969][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 119.099009][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.108683][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.118360][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 119.131353][ T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 119.140519][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.149954][ T31] usb 3-1: config 0 descriptor?? [ 119.216662][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.346166][ T10] usb 2-1: device descriptor read/64, error -71 [ 119.356627][ T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 119.586180][ T10] usb 2-1: device descriptor read/64, error -71 [ 119.710045][ T331] usb 3-1: USB disconnect, device number 8 [ 119.717426][ T6516] batadv_slave_1: left promiscuous mode [ 119.723393][ T331] usblp0: removed [ 119.826530][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.956182][ T10] usb 2-1: device descriptor read/64, error -71 [ 120.046184][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.196161][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 120.196161][ T10] usb 2-1: device descriptor read/64, error -71 [ 120.208866][ T31] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.219147][ T31] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 120.229035][ T31] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.242019][ T31] usb 5-1: config 1 interface 0 has no altsetting 0 [ 120.250198][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.259663][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.267685][ T31] usb 5-1: Product: syz [ 120.271857][ T31] usb 5-1: Manufacturer: syz [ 120.276505][ T31] usb 5-1: SerialNumber: syz [ 120.306331][ T10] usb usb2-port1: attempt power cycle [ 120.458455][ T6520] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 120.484134][ T31] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 120.497894][ T31] usb 5-1: USB disconnect, device number 3 [ 120.513437][ T31] usblp0: removed [ 120.517672][ T6527] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 120.517693][ T6527] rust_binder: Error while translating object. [ 120.526776][ T6527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 120.532985][ T6527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 120.583756][ T6531] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 120.592887][ T6531] rust_binder: Read failure Err(EFAULT) in pid:65 [ 120.601835][ T6531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.646414][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 120.680376][ T10] usb 2-1: device descriptor read/8, error -71 [ 120.693319][ T6535] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 120.693345][ T6535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 120.701606][ T6535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:21 [ 120.757730][ T36] audit: type=1400 audit(2000000072.033:1879): avc: denied { watch } for pid=6542 comm="syz.4.2068" path="/7/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.778479][ T6543] overlay: Bad value for 'redirect_dir' [ 120.790620][ T6541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2067'. [ 120.795002][ T6544] overlay: Bad value for 'redirect_dir' [ 120.808037][ T36] audit: type=1400 audit(2000000072.083:1880): avc: denied { getattr } for pid=6540 comm="syz.2.2067" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 120.835311][ T10] usb 2-1: device descriptor read/8, error -71 [ 120.876009][ T36] audit: type=1326 audit(2000000072.143:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.4.2070" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff15e18eec9 code=0x0 [ 120.954893][ T6565] tipc: Started in network mode [ 120.959957][ T6565] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 120.969202][ T6565] tipc: Enabling of bearer rejected, failed to enable media [ 120.990964][ T36] audit: type=1400 audit(2000000072.263:1882): avc: denied { execmem } for pid=6549 comm="syz.4.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 121.019702][ T6573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 121.039365][ T36] audit: type=1400 audit(2000000072.313:1883): avc: denied { append } for pid=6575 comm="syz.2.2078" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 121.076164][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 121.078327][ T6581] rust_binder: Write failure EFAULT in pid:91 [ 121.107241][ T10] usb 2-1: device descriptor read/8, error -71 [ 121.186967][ T6593] rust_binder: Write failure EFAULT in pid:98 [ 121.249174][ T10] usb 2-1: device descriptor read/8, error -71 [ 121.296049][ T6610] fuse: Unknown parameter 'rotmode' [ 121.302692][ T6610] overlay: ./file0 is not a directory [ 121.366243][ T10] usb usb2-port1: unable to enumerate USB device [ 121.825711][ T36] audit: type=1400 audit(2000000073.093:1884): avc: denied { connect } for pid=6616 comm="syz.2.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.043747][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2097'. [ 122.053217][ T6637] erspan0: default FDB implementation only supports local addresses [ 122.075620][ T6637] rust_binder: Got transaction with invalid offset. [ 122.075673][ T6637] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 122.078377][ T6640] binder: Unknown parameter 'fscontext?}' [ 122.082863][ T6637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 122.167102][ T62] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 122.205378][ T1005] batadv_slave_1: left promiscuous mode [ 122.213474][ T6653] fuse: Bad value for 'fd' [ 122.223297][ T6654] fuse: Bad value for 'fd' [ 122.353443][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.361311][ T6655] __vm_enough_memory: pid: 6655, comm: syz.1.2105, bytes: 18014402804453376 not enough memory for the allocation [ 122.366152][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.381290][ T62] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.392576][ T6656] bridge_slave_0: entered allmulticast mode [ 122.393510][ T62] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.405545][ T6656] bridge_slave_0: entered promiscuous mode [ 122.407739][ T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.422494][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.426053][ T62] usb 3-1: config 0 descriptor?? [ 122.434681][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.445217][ T6656] bridge_slave_1: entered allmulticast mode [ 122.451791][ T6656] bridge_slave_1: entered promiscuous mode [ 122.524369][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.531483][ T6656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.538797][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.545840][ T6656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.570445][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.578090][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.590223][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.597330][ T6189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.608391][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.615462][ T6189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.642948][ T6617] 9pnet_fd: Insufficient options for proto=fd [ 122.660374][ T6656] veth0_vlan: entered promiscuous mode [ 122.672790][ T6656] veth1_macvtap: entered promiscuous mode [ 122.715240][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2104'. [ 122.725228][ T6674] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 122.725249][ T6674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 122.850986][ T62] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 122.870099][ T62] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input10 [ 122.950051][ T62] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 123.006193][ T544] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.114152][ T36] audit: type=1400 audit(2000000074.383:1885): avc: denied { read } for pid=6683 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 123.156184][ T544] usb 4-1: Using ep0 maxpacket: 16 [ 123.161955][ T36] audit: type=1400 audit(2000000074.433:1886): avc: denied { ioctl } for pid=6675 comm="syz.3.2107" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.189053][ T544] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.205727][ T544] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.216605][ T544] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.225813][ T544] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.234737][ T544] usb 4-1: Product: syz [ 123.239214][ T544] usb 4-1: Manufacturer: syz [ 123.243878][ T544] usb 4-1: SerialNumber: syz [ 123.321092][ T36] audit: type=1400 audit(2000000074.593:1887): avc: denied { read write } for pid=6688 comm="syz.1.2110" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.344345][ T36] audit: type=1400 audit(2000000074.593:1888): avc: denied { open } for pid=6688 comm="syz.1.2110" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.373871][ T62] usb 3-1: USB disconnect, device number 9 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK [ 123.564741][ T6702] rust_binder: 6698 RLIMIT_NICE not set [ 123.658866][ T544] usb 4-1: 0:2 : does not exist Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 123.933545][ T6748] /dev/rnullb0: Can't open blockdev [ 123.956313][ T6748] veth1: entered allmulticast mode [ 123.973147][ T544] usb 4-1: 5:0: failed to get current value for ch 0 (-22) OK [ 123.990908][ T544] usb 4-1: USB disconnect, device number 5 Stopping iptables: OK [ 124.082072][ T6765] rust_binder: Error while translating object. Stopping system message bus: [ 124.082141][ T6765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 124.093370][ T6765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:126 [ 124.148560][ T6774] can: request_module (can-proto-6) failed. [ 124.168031][ T6745] veth1: left allmulticast mode [ 124.187729][ T6776] incfs_lookup_dentry err:-13 [ 124.193760][ T6776] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. done [ 124.227071][ T6656] ------------[ cut here ]------------ [ 124.232632][ T6656] WARNING: CPU: 1 PID: 6656 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 124.242183][ T6656] Modules linked in: [ 124.246148][ T6656] CPU: 1 UID: 0 PID: 6656 Comm: syz-executor Not tainted syzkaller #0 16eb8ae5e642bf775817a16571acbfa82b92c919 [ 124.258086][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.268198][ T6656] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 124.274108][ T6656] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 1e 49 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8c 79 4c 03 cc e8 86 db 42 ff <0f> 0b e9 3e ff ff ff e8 7a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 124.293935][ T6656] RSP: 0018:ffffc90000effb68 EFLAGS: 00010293 [ 124.300085][ T6656] RAX: ffffffff824321da RBX: 0000000000000000 RCX: ffff888115c64c00 [ 124.308108][ T6656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.316141][ T6656] RBP: ffffc90000effb90 R08: ffff88813dc792df R09: 1ffff11027b8f25b [ 124.324141][ T6656] R10: dffffc0000000000 R11: ffffed1027b8f25c R12: 0000000000000000 [ 124.332157][ T6656] R13: dffffc0000000000 R14: ffff88813dc79240 R15: ffff8881167f5880 [ 124.340735][ T6656] FS: 000055556a199500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 124.349726][ T6656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.356377][ T6656] CR2: 00007f5e055ffdd8 CR3: 00000001093d0000 CR4: 00000000003526b0 [ 124.364390][ T6656] Call Trace: [ 124.367714][ T6656] [ 124.370671][ T6656] ovl_do_remove+0x7b8/0xcf0 [ 124.375305][ T6656] ? ovl_set_redirect+0x780/0x780 [ 124.380426][ T6656] ? down_write+0xe9/0x2a0 [ 124.384878][ T6656] ? __cfi_down_write+0x10/0x10 [ 124.389790][ T6656] ovl_rmdir+0x1e/0x30 [ 124.393903][ T6656] vfs_rmdir+0x3dd/0x560 [ 124.398218][ T6656] incfs_kill_sb+0x109/0x230 [ 124.402845][ T6656] deactivate_locked_super+0xd8/0x2a0 [ 124.408308][ T6656] deactivate_super+0xb8/0xe0 [ 124.413019][ T6656] cleanup_mnt+0x3f1/0x480 [ 124.417544][ T6656] __cleanup_mnt+0x1d/0x40 [ 124.422101][ T6656] task_work_run+0x1e0/0x250 [ 124.426847][ T6656] ? __cfi_task_work_run+0x10/0x10 [ 124.431989][ T6656] ? __x64_sys_umount+0x126/0x170 [ 124.437091][ T6656] ? __cfi___x64_sys_umount+0x10/0x10 [ 124.442503][ T6656] ? __kasan_check_read+0x15/0x20 [ 124.447621][ T6656] resume_user_mode_work+0x36/0x50 [ 124.452773][ T6656] syscall_exit_to_user_mode+0x64/0xb0 [ 124.458309][ T6656] do_syscall_64+0x64/0xf0 [ 124.462765][ T6656] ? clear_bhb_loop+0x50/0xa0 [ 124.467683][ T6656] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.473607][ T6656] RIP: 0033:0x7fd0a79901f7 [ 124.478066][ T6656] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 124.497745][ T6656] RSP: 002b:00007ffc83ab5d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 124.506267][ T6656] RAX: 0000000000000000 RBX: 00007fd0a7a11d7d RCX: 00007fd0a79901f7 [ 124.514358][ T6656] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc83ab5dd0 killall: can't k[ 124.522422][ T6656] RBP: 00007ffc83ab5dd0 R08: 0000000000000000 R09: 0000000000000000 ill pid 332: No [ 124.531877][ T6656] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc83ab6e60 such process [ 124.541395][ T6656] R13: 00007fd0a7a11d7d R14: 000000000001e5d8 R15: 00007ffc83ab6ea0 [ 124.550658][ T6656] [ 124.553707][ T6656] ---[ end trace 0000000000000000 ]--- killall: can't kill pid 336: No such process killall: can't kill pid 460: No such process killall: can't kill pid 560: No such process Stopping klogd: [ 124.616424][ T6656] ------------[ cut here ]------------ [ 124.622207][ T6656] WARNING: CPU: 1 PID: 6656 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 124.631686][ T6656] Modules linked in: [ 124.635617][ T6656] CPU: 1 UID: 0 PID: 6656 Comm: syz-executor Tainted: G W syzkaller #0 16eb8ae5e642bf775817a16571acbfa82b92c919 [ 124.648921][ T6656] Tainted: [W]=WARN [ 124.652750][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.662869][ T6656] RIP: 0010:ovl_dir_modified+0x15a/0x190 OK[ 124.668773][ T6656] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 1e 49 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8c 79 4c 03 cc e8 86 db 42 ff <0f> 0b e9 3e ff ff ff e8 7a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 124.688505][ T6656] RSP: 0018:ffffc90000effb68 EFLAGS: 00010293 [ 124.694610][ T6656] RAX: ffffffff824321da RBX: 0000000000000000 RCX: ffff888115c64c00 [ 124.702749][ T6656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.710905][ T6656] RBP: ffffc90000effb90 R08: ffff88813dc792df R09: 1ffff11027b8f25b [ 124.718964][ T6656] R10: dffffc0000000000 R11: ffffed1027b8f25c R12: 0000000000000000 [ 124.726982][ T6656] R13: dffffc0000000000 R14: ffff88813dc79240 R15: ffff8881167f5880 [ 124.734984][ T6656] FS: 000055556a199500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 Stopping acpid: [ 124.744036][ T6656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.751957][ T6656] CR2: 0000200000dff000 CR3: 00000001093d0000 CR4: 00000000003526b0 [ 124.760067][ T6656] Call Trace: [ 124.763369][ T6656] [ 124.766365][ T6656] ovl_do_remove+0x7b8/0xcf0 [ 124.771000][ T6656] ? ovl_set_redirect+0x780/0x780 [ 124.776060][ T6656] ? down_write+0xe9/0x2a0 [ 124.780533][ T6656] ? __cfi_down_write+0x10/0x10 [ 124.785414][ T6656] ovl_rmdir+0x1e/0x30 [ 124.789553][ T6656] vfs_rmdir+0x3dd/0x560 [ 124.793822][ T6656] incfs_kill_sb+0x1a0/0x230 [ 124.798490][ T6656] deactivate_locked_super+0xd8/0x2a0 [ 124.803886][ T6656] deactivate_super+0xb8/0xe0 [ 124.808660][ T6656] cleanup_mnt+0x3f1/0x480 [ 124.813110][ T6656] __cleanup_mnt+0x1d/0x40 [ 124.818016][ T6656] task_work_run+0x1e0/0x250 [ 124.822643][ T6656] ? __cfi_task_work_run+0x10/0x10 [ 124.827835][ T6656] ? __x64_sys_umount+0x126/0x170 [ 124.832899][ T6656] ? __cfi___x64_sys_umount+0x10/0x10 [ 124.838331][ T6656] ? __kasan_check_read+0x15/0x20 [ 124.843503][ T6656] resume_user_mode_work+0x36/0x50 [ 124.848701][ T6656] syscall_exit_to_user_mode+0x64/0xb0 [ 124.854175][ T6656] do_syscall_64+0x64/0xf0 [ 124.858618][ T6656] ? clear_bhb_loop+0x50/0xa0 [ 124.863344][ T6656] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.869290][ T6656] RIP: 0033:0x7fd0a79901f7 [ 124.873742][ T6656] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 124.893408][ T6656] RSP: 002b:00007ffc83ab5d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 124.901907][ T6656] RAX: 0000000000000000 RBX: 00007fd0a7a11d7d RCX: 00007fd0a79901f7 [ 124.909914][ T6656] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc83ab5dd0 [ 124.917918][ T6656] RBP: 00007ffc83ab5dd0 R08: 0000000000000000 R09: 0000000000000000 [ 124.925914][ T6656] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc83ab6e60 [ 124.933951][ T6656] R13: 00007fd0a7a11d7d R14: 000000000001e5d8 R15: 00007ffc83ab6ea0 [ 124.941975][ T6656] [ 124.945017][ T6656] ---[ end trace 0000000000000000 ]--- [ 125.248382][ T6189] bridge_slave_1: left allmulticast mode [ 125.254109][ T6189] bridge_slave_1: left promiscuous mode [ 125.260347][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.268076][ T6189] bridge_slave_0: left allmulticast mode [ 125.273795][ T6189] bridge_slave_0: left promiscuous mode [ 125.279527][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.389180][ T6189] veth1_macvtap: left promiscuous mode [ 125.394740][ T6189] veth0_vlan: left promiscuous mode OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only Connection to 10.128.0.28 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is g[ 126.034137][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 126.034155][ T36] audit: type=1400 audit(2000000077.303:1931): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2347]" dev="pipefs" ino=2347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 oing down NOW! [ 126.237978][ T6189] bridge_slave_1: left allmulticast mode [ 126.243667][ T6189] bridge_slave_1: left promiscuous mode [ 126.249334][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.257000][ T6189] bridge_slave_0: left allmulticast mode [ 126.262656][ T6189] bridge_slave_0: left promiscuous mode [ 126.268376][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.397984][ T6189] veth1_macvtap: left promiscuous mode [ 126.403504][ T6189] veth0_vlan: left promiscuous mode [ 126.748269][ T6189] bridge_slave_1: left allmulticast mode [ 126.753962][ T6189] bridge_slave_1: left promiscuous mode [ 126.759642][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.767242][ T6189] bridge_slave_0: left allmulticast mode [ 126.772885][ T6189] bridge_slave_0: left promiscuous mode [ 126.778539][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.786274][ T6189] bridge_slave_1: left allmulticast mode [ 126.792103][ T6189] bridge_slave_1: left promiscuous mode [ 126.797795][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.805323][ T6189] bridge_slave_0: left allmulticast mode [ 126.811068][ T6189] bridge_slave_0: left promiscuous mode [ 126.816683][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.960043][ T6189] veth1_macvtap: left promiscuous mode [ 126.965567][ T6189] veth0_vlan: left promiscuous mode [ 126.971130][ T6189] veth1_macvtap: left promiscuous mode [ 126.976668][ T6189] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 128.145956][ T6808] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 128.152792][ T6808] ACPI: PM: Preparing to enter system sleep state S5 [ 128.159828][ T6808] kvm: exiting hardware virtualization [ 128.165324][ T6808] reboot: Power down serialport: VM disconnected.