last executing test programs: 1m20.559216236s ago: executing program 3 (id=639): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r0 = socket(0xa, 0x80000, 0x5) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffe, @remote}}}, 0x109) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x2, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @remote}}}, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x400000a, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000160071827efde4be701161000a04"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xd4000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x874fd42a7836ef60, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000002140)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c392a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bc1c2745f5f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x5, {0x3, 0x1, 0x5, 0x400000000000000, 0xb, 0x0, {0x0, 0x8, 0x0, 0x401, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x8, 0xc000, 0x3, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x801023a, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x1, {0x3, 0x8000000000000, 0x28dc, 0x2, 0x440000, 0x1, {0x1, 0xfffffffffffffffd, 0x0, 0x1000, 0xfffffffffffffffc, 0x100, 0x0, 0x0, 0x4, 0xc000, 0x0, 0x0, r10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r11, r11, 0x0) 1m20.530223856s ago: executing program 3 (id=640): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x8000}, &(0x7f0000000100), &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4e20, 0xff, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x5e}, {0xc, 0x480000000000000, 0x8000000000000002, 0x3, 0x3, 0x8, 0x6, 0xffffffffffffff1e}, {0xffffffff8974b177, 0x21a2, 0x9, 0x6}, 0x0, 0x0, 0x3, 0x1, 0x2}, {{@in6=@mcast1, 0x4d2, 0x2b}, 0xa, @in6=@loopback, 0x0, 0x3, 0x0, 0xa, 0xfffffff8, 0x254e, 0x10}}, 0xe8) bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0x0, @any, 0x8000, 0x2}, 0xe) listen(r2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() sendmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20}, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvmmsg(r5, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x0, 0x7}]) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000000080102000000000000000000000004060002400a0100074000000005080006400000000508000540000000040600024088fb00004400048008000140000000060800014000000400080006400000000508000140000000090800074000006c3408000340000000080800034000000003080006400001"], 0x84}, 0x1, 0x0, 0x0, 0x10000}, 0x20000000) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a0443000b0018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) mkdirat(r7, &(0x7f0000000140)='./file0\x00', 0x18f) r10 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0x184) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000080)={r11, 0x0, {0x0, 0x0, 0x0, 0x2a, 0x4000000000000ffb, 0x0, 0x0, 0x9, 0xc, "faf98317e5a114d989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfff, 0x40000000a]}}) 1m20.476161857s ago: executing program 3 (id=641): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000040)={[0x106, 0x8, 0xd9, 0x10000, 0x96be, 0x8001, 0x9, 0x7ac, 0x3, 0x4, 0x12, 0x8, 0x19, 0xc52fc03, 0x3, 0x8], 0xffff1000, 0x20093}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x890d, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000100)={0x3, 0xfc, "b3f9ebbc2bf0c526897f73b8a8d24d274cffc016dc87a963cf798409df651e1610228976d6919561229b6fe935e3df4e86b1ffb2fc947d71e28d20cb90a004e448fb2e77815b210a568f3d5e1bf96a0a6f6337301526df11a64bc265b055eb31ce9a3a2e697ada85f4fea99580080461032096b06216e5a124769b06399ef200d0b90a2bcc7b1bf54ef1c97894f8efccea73ef16ff987ea14e21ae9845c10ca46ffda866b5be307ea99cd2d2b9ec96a2519b7467e6c23ffb2f99c2db3c4da071bd8f4fe0a5238e7baa580784f8af3c44d584d817299f6fa76e7d759e06179294734e4a93b11f8037b60052b6f1f9a0625ac73bd92b1f1da6d6ef468b"}) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) 1m20.475803217s ago: executing program 3 (id=642): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmallocinfo\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x0) mount$cgroup2(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x910022, &(0x7f00000000c0)={[{}, {}, {@pids_localevents}], [{@smackfsdef={'smackfsdef', 0x3d, 'rootmode'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) socket$netlink(0x10, 0x3, 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000500)=0xd3f1, 0x4) sendmmsg$inet6(r2, &(0x7f0000003f40)=[{{&(0x7f0000001380)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x9}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138b, 0x3}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x4, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 1m20.381527917s ago: executing program 3 (id=643): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r2, 0x10000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x4) fcntl$addseals(r2, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x8000}) mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1, 0x30, 0xffffffffffffffff, 0xdce30000) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1e}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m20.225340668s ago: executing program 3 (id=644): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @remote, 0x8}, 0xdb) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m20.178597198s ago: executing program 32 (id=644): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @remote, 0x8}, 0xdb) ioctl$BLKRRPART(r0, 0x125f, 0x0) 10.48318093s ago: executing program 1 (id=1935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0x9, 0x7fffffff) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f00003ff000/0x2000)=nil, 0x2000, 0x6, 0x100010, r3, 0x8fe69000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) fadvise64(r3, 0x81, 0xc, 0x2) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) madvise(&(0x7f0000571000/0x3000)=nil, 0x3000, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x6, 0x3, 0x8, 0x80}, {0x380, 0x0, 0x6, 0xfffffffd}, {0x8, 0xc, 0x7, 0x8}, {0x10, 0x1, 0x8, 0xc4}, {0x314, 0x5, 0xa, 0x5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x1b) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x140, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x60, 0x23, 0x7, {0x7, 0x5, "3d91419d09"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) close_range(r1, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f00000000c0)={r5, 0x2, r3, 0x2aceb860, 0x80000}) 8.585226123s ago: executing program 1 (id=1935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0x9, 0x7fffffff) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f00003ff000/0x2000)=nil, 0x2000, 0x6, 0x100010, r3, 0x8fe69000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) fadvise64(r3, 0x81, 0xc, 0x2) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) madvise(&(0x7f0000571000/0x3000)=nil, 0x3000, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x6, 0x3, 0x8, 0x80}, {0x380, 0x0, 0x6, 0xfffffffd}, {0x8, 0xc, 0x7, 0x8}, {0x10, 0x1, 0x8, 0xc4}, {0x314, 0x5, 0xa, 0x5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x1b) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x140, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x60, 0x23, 0x7, {0x7, 0x5, "3d91419d09"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) close_range(r1, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f00000000c0)={r5, 0x2, r3, 0x2aceb860, 0x80000}) 6.680304015s ago: executing program 2 (id=2058): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r1, 0x0, 0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x141) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x206e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79}) 6.633771246s ago: executing program 1 (id=1935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0x9, 0x7fffffff) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f00003ff000/0x2000)=nil, 0x2000, 0x6, 0x100010, r3, 0x8fe69000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) fadvise64(r3, 0x81, 0xc, 0x2) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) madvise(&(0x7f0000571000/0x3000)=nil, 0x3000, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x6, 0x3, 0x8, 0x80}, {0x380, 0x0, 0x6, 0xfffffffd}, {0x8, 0xc, 0x7, 0x8}, {0x10, 0x1, 0x8, 0xc4}, {0x314, 0x5, 0xa, 0x5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x1b) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x140, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x60, 0x23, 0x7, {0x7, 0x5, "3d91419d09"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) close_range(r1, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f00000000c0)={r5, 0x2, r3, 0x2aceb860, 0x80000}) 4.685853749s ago: executing program 0 (id=2059): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = userfaultfd(0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000002c0)={0x8080000, 0x100000, 0x1}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$tipc(0x1e, 0x5, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) writev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="659d5db3e73055300f157998dd6e159395dce7a0ef9d", 0x16}, {&(0x7f0000000140)="6025d41db653c0c35a481b5c86aa0e8ffb88feb58899186716f51f1684ecb101285cb18e2462bd043a0a55730c6c020e7911023c26cb65b1a4eba04bf6672251fd24ed05c062b021809623ddb3492391d7caccc9ec238ad881ab5da788109adaafb3b60a400bea0c811c2c", 0x6b}, {&(0x7f0000000200)="ef9ccabe5e475231cb28993cb29433db5972ec04db9cfa10bd72d657b7b194b96ab3e2b8c7bf92490786b3927be9eea773b41f1089581c30f4609ebf3470dc0a365793333a180069a5", 0x49}], 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 4.685587919s ago: executing program 2 (id=2060): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') read$FUSE(r1, &(0x7f0000007100)={0x2020}, 0x941f) open_tree(0xffffffffffffffff, 0x0, 0x5000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000100)) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x2001, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f00000002c0)={0x3, "6038778244e64ab16f7a7ae16623970a9518ac825c3ed28be1d175cac55f047150b15aa0fe69350b14c83aa3d4d178d2d549710b481534608db533ae846697f73e0fbde45ea4bd1b0215554d607addb427c96ea51b5a05029a652c76b5a42ccabb6edace2f5bf98d90cf102ab3dfac027cb541079c5d935f3d65bb1a68df909cf0c35352c74e4aa257dbd2a769dec1b3017835c05474ed41df700215082b1626ba726e7b6bdac8ff76237a9807a28a7b9bf6931622e07e3f8a80583a68ab08ee3fac35831c5f99b05bee86e0ffb4da0bfc15c6e74f2b865b735648178d4ff382cf7d85170ce97d7577977ba506b206e49d8ba6e9fe5ca5e68229cd1233d7cbc06deeee24a489b7049b256f1bcbe94f1aac87c5b8237d9e6c0eb6b0a1423d8ab354de50a055f827e453938cd9781997949f960e1ef4327179c0eb31d6f226a103613966ebf74205abc508acc5bcfc10ed228139ad72d378f13245af3a22288856616cd20e062d6fd339a70a51213adee610eca4be2866b81313fc1c304a951083031f5cab32d242e2cb798fe4ed68dd5cc0c09b8189545bf8c142b4726ef6c2656bc5f69a534ee8c2179ed16fe410c639deec8c6d0e37bdf0ff46ce271f3b98d3569fc4f0b8b7a1e7f1008af2ba178745a2314b19d53bf4c198925afe2f6d67d84be11c41995b4e19d1adee0c535bfd49295500d08812dc4c4456026d57fd1112"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x808081, 0x0) 4.623961709s ago: executing program 0 (id=2062): r0 = socket$inet6(0xa, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) pread64(r2, &(0x7f00000002c0)=""/124, 0x7c, 0x7) r3 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r4, 0x400, 0x0) fcntl$getflags(r3, 0x401) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00004df000/0x2000)=nil, 0x2000, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) getsockopt$inet6_mreq(r0, 0x29, 0x13, 0x0, &(0x7f0000000280)) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x68d42, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x448, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x434, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x2b}, {0x4}, {0x4}, {0xc}, {0x5, 0x8, {0x1}}}}, @m_ipt={0x404, 0x9, 0x0, 0x0, {{0x8}, {0x2e8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x125, 0x6, {0x8, 'security\x00', 0x10, 0x0, "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"}}, @TCA_IPT_TARG={0x17f, 0x6, {0x2000, 'mangle\x00', 0x0, 0x5, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xf5, 0x6, "a55e2efce40f6bab37f04b0caa51b6227acccbc8b6cd6ea0d2a050a52cae348912c9207ee57e8b5179dc20b7d353bf46e7a4641ed1a1391abd5ac5b4c6c28408dfedfa02fa1a9a7d0949f4ddb0f8e68235606e324dfdd5e671519129362a83445ab28010d25e7b978625a6b46839558e7e7a742d4b13aff412bb50a5a1247af7fe64c92f2aaa5f85fe5b6874cf23f3e93037bb2753a871b84b49c3e9885011d8b2a1bf0a2ea3ec616dfc7c8b6faa589c2a514ac6d52c977bebb3065d1eb8dc139ba04a72da28493d3a1ba60704f04381c5ec6b032b4ecbb1d523d1b63ccd8e5051325c5e7d32265bd45d7e94bee3998dc2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x80c1}, 0x9080) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BLKRRPART(r5, 0x125f, 0x0) 4.62325114s ago: executing program 2 (id=2063): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) inotify_add_watch(r0, 0x0, 0x3000004) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1}) (async) syz_usb_connect$cdc_ecm(0x0, 0x79, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002020000102505a1a440f1ffff00010902670001010000000904000012020600000b2406000002f332ac000005240000000d240f010000000087000600001524120600a317a88b045e4f01a607c0ffcb7e392a072414000001000324"], 0x0) (async, rerun: 64) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x400001000001fe) (async) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x3000008, 0x13, r2, 0xca638000) 4.54738734s ago: executing program 4 (id=2064): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) (async) dup(0xffffffffffffffff) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x20, 0x1, 0x3, "a78863"}, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$input_event(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x80, 0x8, 0x301, 0x0, 0x0, 0xfe, 0x0}) r4 = getpid() read$FUSE(r2, &(0x7f0000002340)={0x2020}, 0x2020) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 4.52312139s ago: executing program 1 (id=1935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0x9, 0x7fffffff) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f00003ff000/0x2000)=nil, 0x2000, 0x6, 0x100010, r3, 0x8fe69000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) fadvise64(r3, 0x81, 0xc, 0x2) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) madvise(&(0x7f0000571000/0x3000)=nil, 0x3000, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x6, 0x3, 0x8, 0x80}, {0x380, 0x0, 0x6, 0xfffffffd}, {0x8, 0xc, 0x7, 0x8}, {0x10, 0x1, 0x8, 0xc4}, {0x314, 0x5, 0xa, 0x5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x1b) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x140, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x60, 0x23, 0x7, {0x7, 0x5, "3d91419d09"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) close_range(r1, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f00000000c0)={r5, 0x2, r3, 0x2aceb860, 0x80000}) 4.52108314s ago: executing program 2 (id=2065): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x4, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93692, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x9, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRESDEC=r1, @ANYBLOB="991a3607f24a4b00ecb56bfd016b5e3a654c2b648a584d4cf0a19c34fd2159aad13c011d163b4c7e5b0959546a241d5dbdd30e68ef1d6c48529be89f5cf65c6bcc19a61cb0dfb08839401dc357382d9251b28913cb41915c401863ce8f79ba23b4a4", @ANYRESDEC, @ANYRES8=0x0, @ANYRES64=0x0, @ANYRES32=r0], 0x0) socket$netlink(0x10, 0x3, 0xf) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r5, 0x29, 0x37, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="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", 0x3d8}], 0x1}}], 0x1, 0x20048894) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, &(0x7f0000000040)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40400000692a7d24a881dec6824f", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf25620000000c009900060000004a0000000600b400521000000600b300020000000600b300020000000600b30002000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 2.425394534s ago: executing program 0 (id=2066): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8001, &(0x7f00000000c0)=[{0x4, 0x7ff, 0x19fa}], 0x1, 0x7f, 0x10, 0x4, 0x60, 0x8}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x3f, &(0x7f0000000a00)=ANY=[@ANYBLOB="120150020f820f10010404493efc4f80e89c0102030109022d00019d073006090474f1020206000809210300ec476dfbf5bf651a03e70104048009050e10fe"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = userfaultfd(0x80800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) ioctl$SNAPSHOT_FREE(r2, 0x3305) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffffc000) mmap$binder(&(0x7f000094a000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x6, 0xdddd1000, 0x2000, &(0x7f00001bd000/0x2000)=nil}) 2.424568364s ago: executing program 4 (id=2067): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x100401, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) close_range(r0, 0xffffffffffffffff, 0x0) 2.336398165s ago: executing program 4 (id=2068): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0xf0, 0xd215) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, &(0x7f00000008c0)={0x40, 0x18, 0x2, "9b35"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x20, 0x30, 0x8b, {0x8b, 0x22, "42828972ad5c4d8aabfdb81377ea8cb03ca66e72e7951f86f677231fd339e70105df72c0a9dc8576274b2ed19e496a3ccda126c20dd0ec32f2117957b8886c4f8cbd5423b2fa1351e5fd3fd793bbf97debf7c1c8d99325172bc68f434ccfbb89980effed10f0cf289b7524f23f582dcec8e752ab1934275205364077dbe242d07292351dc1d5cb8c40"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}}, &(0x7f0000000300)={0x34, &(0x7f0000000400)={0x20, 0x17, 0xdd, "a83a2551a75d3629a70a476bec21f034b8e8924588c41964f5a84c7058b5ac35c77c33afe4aaf38db24c4842e63f5f44a98b558e88abca472d2540b3463b6267ef34781d82c0895f30daf19ab643f80e23a7da260dc4c0c8a4bdf115c96256df681c66a2d8630f9660acee4169b02cfa2a8f11b7b579a739b04c9ff0f329f79ba516f446e8730f60e832397c6e5ba49c7f7465f803094453f9cf3611dd6c62e2012febd07a500018fad459b1de5331ee8cd45517e38ca6378baa820e79c7836e4bac09ab199533b2c9b47ca5740a3a74b05db8841593b7e085306fbfd9"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000500)={0x20, 0x0, 0x9d, {0x9b, "1352c6f44e3619cf3bc7c42117861efda38cc729e11aeb8d9d5c5183841f71cbc89757553ba1cb47a107b8f1c1e179e8bbe7230358a5a88cdf28f0346cf97bbf33c0797123122cce6721482511cc1e223e67beeae7b6771269df63fdaa0016c60d23e6a65e139c75ef50a987d6a445fef917e232b82f9bab7ebf823ec9225bff37970591746297dd23099246974fbea0ba89ba6ab585dfc0323313"}}, &(0x7f0000000240)={0x20, 0x1, 0x1, 0x10}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xff}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat(r1, &(0x7f00000005c0)='./file0\x00', 0x604082, 0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xffffc000) 2.330844815s ago: executing program 1 (id=1935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0x9, 0x7fffffff) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f00003ff000/0x2000)=nil, 0x2000, 0x6, 0x100010, r3, 0x8fe69000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) fadvise64(r3, 0x81, 0xc, 0x2) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) madvise(&(0x7f0000571000/0x3000)=nil, 0x3000, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x6, 0x3, 0x8, 0x80}, {0x380, 0x0, 0x6, 0xfffffffd}, {0x8, 0xc, 0x7, 0x8}, {0x10, 0x1, 0x8, 0xc4}, {0x314, 0x5, 0xa, 0x5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x1b) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x140, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x60, 0x23, 0x7, {0x7, 0x5, "3d91419d09"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) close_range(r1, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f00000000c0)={r5, 0x2, r3, 0x2aceb860, 0x80000}) 146.517819ms ago: executing program 0 (id=2069): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030330210479c7bd553ec18a6d86ee6a4302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 146.212449ms ago: executing program 2 (id=2070): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_open_pts(0xffffffffffffffff, 0x52000) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) write(r0, &(0x7f0000000400)="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", 0x1f000) 145.869009ms ago: executing program 4 (id=2071): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x901015, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0xa8) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) io_setup(0x78865af6, &(0x7f0000000e80)) write(r0, &(0x7f0000000040)="05000000010000", 0x7) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 117.186429ms ago: executing program 0 (id=2072): prctl$PR_MCE_KILL(0x23, 0x3, 0x7fffffffeffe) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x90, 0x2, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x469f}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x67d}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x40080}, 0x400d0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x1}, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @clear_death, @decrefs], 0x0, 0x0, 0x0}) 64.023069ms ago: executing program 4 (id=2073): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000004000000000220000000a0001007770616e31040000d58dee591e5ce127590b0401d8ea8a98a86b02c75114d8180f5d12d7cc74fc92db11cde8d60d3a2afbcaa1354df1224673"], 0x20}}, 0x2008c0d4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x5) r6 = socket(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r8, 0x303, 0x4, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x44000080) setsockopt$sock_int(r6, 0x1, 0x4, &(0x7f0000000180)=0xd, 0x4) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @multicast2}, 0x4, 0x0, 0x4, 0x2}}, 0x2e) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.bfq.io_merged\x00', 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000340)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 62.65705ms ago: executing program 0 (id=2074): mmap(&(0x7f00001fb000/0x2000)=nil, 0x2000, 0x1000009, 0x4010, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @loopback, 0x4005}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff7, @empty, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x240c089d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) syz_usb_connect(0x2, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x5c}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40082104, &(0x7f0000000240)={0x0, 0x1, r3, 0x6}) fcntl$lock(r2, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401}) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000300)=""/172) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000180)=0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0xfffffffffffffffd, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 62.230979ms ago: executing program 4 (id=2075): r0 = socket$inet6(0xa, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) pread64(r2, &(0x7f00000002c0)=""/124, 0x7c, 0x7) r3 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r4, 0x400, 0x0) fcntl$getflags(r3, 0x401) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00004df000/0x2000)=nil, 0x2000, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) getsockopt$inet6_mreq(r0, 0x29, 0x13, 0x0, &(0x7f0000000280)) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x68d42, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x448, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x434, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x2b}, {0x4}, {0x4}, {0xc}, {0x5, 0x8, {0x1}}}}, @m_ipt={0x404, 0x9, 0x0, 0x0, {{0x8}, {0x2e8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x125, 0x6, {0x8, 'security\x00', 0x10, 0x0, "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"}}, @TCA_IPT_TARG={0x17f, 0x6, {0x2000, 'mangle\x00', 0x0, 0x5, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xf5, 0x6, "a55e2efce40f6bab37f04b0caa51b6227acccbc8b6cd6ea0d2a050a52cae348912c9207ee57e8b5179dc20b7d353bf46e7a4641ed1a1391abd5ac5b4c6c28408dfedfa02fa1a9a7d0949f4ddb0f8e68235606e324dfdd5e671519129362a83445ab28010d25e7b978625a6b46839558e7e7a742d4b13aff412bb50a5a1247af7fe64c92f2aaa5f85fe5b6874cf23f3e93037bb2753a871b84b49c3e9885011d8b2a1bf0a2ea3ec616dfc7c8b6faa589c2a514ac6d52c977bebb3065d1eb8dc139ba04a72da28493d3a1ba60704f04381c5ec6b032b4ecbb1d523d1b63ccd8e5051325c5e7d32265bd45d7e94bee3998dc2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x80c1}, 0x9080) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BLKRRPART(r5, 0x125f, 0x0) 9.74172ms ago: executing program 1 (id=1935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0x9, 0x7fffffff) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f00003ff000/0x2000)=nil, 0x2000, 0x6, 0x100010, r3, 0x8fe69000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) fadvise64(r3, 0x81, 0xc, 0x2) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) madvise(&(0x7f0000571000/0x3000)=nil, 0x3000, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x6, 0x3, 0x8, 0x80}, {0x380, 0x0, 0x6, 0xfffffffd}, {0x8, 0xc, 0x7, 0x8}, {0x10, 0x1, 0x8, 0xc4}, {0x314, 0x5, 0xa, 0x5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x1b) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x140, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x60, 0x23, 0x7, {0x7, 0x5, "3d91419d09"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) close_range(r1, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f00000000c0)={r5, 0x2, r3, 0x2aceb860, 0x80000}) 0s ago: executing program 2 (id=2076): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x22000) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @mcast2, 0x1}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000300)="66f2d766bad104b000ee66bad10466ed66b87d008ed0c7442400392a0000c744240218966104c7442406000000000f011424b9800000c00f3235002000000f300f20c035100000000f22c0c744240000800000c7442402d7580000c7442406000000000f011c240fc7b10f00000067660fc2a3004000", 0x76}], 0x1, 0x5d, 0x0, 0xa) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000440)={{0xffff1000, 0x8000000, 0xc, 0x3, 0x6, 0x5, 0x0, 0xf, 0x4, 0x1, 0x81}, {0x10000, 0x6000, 0x1, 0xc, 0x8, 0x7, 0x8, 0x0, 0x9, 0x8, 0x1, 0x9d}, {0x10000, 0x8080000, 0x10, 0x6, 0x5, 0x2, 0x6, 0x0, 0xa6, 0x2, 0x7, 0x5}, {0xdddd0000, 0xeeee0000, 0x4, 0x16, 0xf7, 0x0, 0x1b, 0x97, 0x9, 0x81, 0x6, 0x7}, {0x2000, 0xf000, 0x0, 0x2, 0x54, 0x80, 0x74, 0x4, 0x6, 0x68, 0x9, 0xb}, {0xe345485cbb976fac, 0xf000, 0xa, 0x42, 0x53, 0x9, 0x1, 0x4, 0x8, 0x9, 0x7f}, {0x5000, 0x6000, 0x0, 0x2, 0xc0, 0xfe, 0x2, 0x5, 0x24, 0x7f, 0x8, 0x5}, {0xf000, 0x8081000, 0xc, 0x31, 0x5, 0x7, 0x80, 0xff, 0x7, 0xa, 0x4b, 0x6}, {0x0, 0x9}, {0xdddd0000, 0x1}, 0x40010, 0x0, 0x4000, 0x744005, 0x0, 0x2400, 0x3000, [0x7fff, 0xb66, 0x5, 0x7ff]}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000100)={0x2000, 0x100000}) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000180)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000280)=0x14) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) kernel console output (not intermixed with test programs): s: failed to clone upperpath [ 47.435972][ T36] audit: type=1400 audit(1761791980.985:499): avc: denied { write } for pid=1337 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.444669][ T1339] 9pnet: Unknown protocol version 9pN00.u [ 47.572821][ T36] audit: type=1400 audit(1761791981.125:500): avc: denied { setattr } for pid=1348 comm="syz.2.338" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 47.573057][ T1349] rust_binder: 198: no such ref 3 [ 47.600925][ T1349] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 47.607994][ T1349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 47.622176][ T36] audit: type=1400 audit(1761791981.175:501): avc: denied { lock } for pid=1350 comm="syz.2.339" path="socket:[11516]" dev="sockfs" ino=11516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 47.878695][ T439] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 47.896814][ T45] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 47.903316][ T45] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 47.911006][ T45] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 48.008744][ T439] usb 3-1: device descriptor read/64, error -71 [ 48.033347][ T36] audit: type=1400 audit(1761791981.585:502): avc: denied { ioctl } for pid=1362 comm="syz.1.343" path="socket:[11531]" dev="sockfs" ino=11531 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.248706][ T439] usb 3-1: device descriptor read/64, error -71 [ 48.356399][ T45] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 48.364794][ T45] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 48.377625][ T45] usb 1-1: USB disconnect, device number 15 [ 48.384472][ T36] audit: type=1400 audit(1761791981.945:503): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.389525][ T45] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 48.410200][ T36] audit: type=1400 audit(1761791981.965:504): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.440261][ T36] audit: type=1400 audit(1761791981.965:505): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.498712][ T439] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 48.628705][ T439] usb 3-1: device descriptor read/64, error -71 [ 48.671045][ T1411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:250 [ 48.868715][ T439] usb 3-1: device descriptor read/64, error -71 [ 48.981464][ T1419] rust_binder: Error while translating object. [ 48.981507][ T1419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.987761][ T1419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:241 [ 48.999361][ T439] usb usb3-port1: attempt power cycle [ 49.082173][ T452] bridge_slave_1: left allmulticast mode [ 49.087891][ T452] bridge_slave_1: left promiscuous mode [ 49.093800][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.103828][ T452] bridge_slave_0: left allmulticast mode [ 49.118683][ T452] bridge_slave_0: left promiscuous mode [ 49.124513][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.213785][ T1422] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.220967][ T1422] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.228020][ T1422] bridge_slave_0: entered allmulticast mode [ 49.234356][ T1422] bridge_slave_0: entered promiscuous mode [ 49.240873][ T1422] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.247969][ T1422] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.255063][ T1422] bridge_slave_1: entered allmulticast mode [ 49.261413][ T1422] bridge_slave_1: entered promiscuous mode [ 49.267888][ T452] veth1_macvtap: left promiscuous mode [ 49.273437][ T452] veth0_vlan: left promiscuous mode [ 49.340931][ T1422] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.347985][ T1422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.355259][ T1422] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.362297][ T1422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.369929][ T439] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 49.378864][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.386711][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.389643][ T439] usb 3-1: device descriptor read/8, error -71 [ 49.426347][ T1437] __vm_enough_memory: pid: 1437, comm: syz.3.357, bytes: 18014402804453376 not enough memory for the allocation [ 49.437317][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.445484][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.469024][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.476090][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.514479][ T1422] veth0_vlan: entered promiscuous mode [ 49.538739][ T439] usb 3-1: device descriptor read/8, error -71 [ 49.556041][ T1422] veth1_macvtap: entered promiscuous mode [ 49.642106][ T1462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.642140][ T1462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 49.778749][ T439] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 49.809710][ T439] usb 3-1: device descriptor read/8, error -71 [ 49.949712][ T439] usb 3-1: device descriptor read/8, error -71 [ 50.058880][ T439] usb usb3-port1: unable to enumerate USB device [ 50.396374][ T1476] rust_binder: 265: no such ref 3 [ 50.401500][ T1476] rust_binder: 265: no such ref 1 [ 50.406577][ T1476] rust_binder: Write failure EFAULT in pid:265 [ 50.514435][ T1486] rust_binder: Write failure EINVAL in pid:17 [ 50.656708][ T1494] binder: Bad value for 'max' [ 50.724669][ T1504] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 50.737167][ T1504] overlayfs: missing 'lowerdir' [ 50.750029][ T1507] /dev/rnullb0: Can't lookup blockdev [ 50.878746][ T418] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 51.029720][ T418] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.039850][ T418] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.050184][ T418] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 51.059378][ T418] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.067381][ T418] usb 4-1: Product: syz [ 51.071584][ T418] usb 4-1: Manufacturer: syz [ 51.076171][ T418] usb 4-1: SerialNumber: syz [ 51.366120][ T1521] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1521 comm=syz.0.383 [ 51.386934][ T1526] rust_binder: 26: no such ref 0 [ 51.392215][ T1527] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 51.401569][ T1527] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 51.442040][ T1530] binder: Bad value for 'stats' [ 51.450812][ T1530] rust_binder: 29: no such ref 1 [ 51.455795][ T1530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 51.476978][ T1533] binder: Bad value for 'stats' [ 51.491544][ T418] usb 4-1: 0:2 : does not exist [ 51.509018][ T1535] rust_binder: 33: no such ref 1 [ 51.514056][ T1535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 51.568852][ T1537] fuse: Unknown parameter '0x000000000000000300000000000000000003' [ 51.701673][ T418] usb 4-1: USB disconnect, device number 10 [ 51.838729][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 51.988695][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 51.994913][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.005067][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.015992][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.025115][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.033142][ T10] usb 1-1: Product: syz [ 52.037283][ T10] usb 1-1: Manufacturer: syz [ 52.041869][ T10] usb 1-1: SerialNumber: syz [ 52.217753][ T1549] netlink: 'syz.1.393': attribute type 32 has an invalid length. [ 52.225691][ T1549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 52.250226][ T10] usb 1-1: 0:2 : does not exist [ 52.255778][ T1554] GUP no longer grows the stack in syz.1.395 (1554): 200000001000-200000c01000 (200000000000) [ 52.261569][ T1556] rust_binder: 286: no such ref 1 [ 52.266531][ T1554] CPU: 0 UID: 0 PID: 1554 Comm: syz.1.395 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 52.266559][ T1554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 52.266576][ T1554] Call Trace: [ 52.266582][ T1554] [ 52.266589][ T1554] __dump_stack+0x21/0x30 [ 52.266631][ T1554] dump_stack_lvl+0x10c/0x190 [ 52.266655][ T1554] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.266688][ T1554] ? find_vma+0xcd/0x110 [ 52.266707][ T1554] dump_stack+0x19/0x20 [ 52.266730][ T1554] __get_user_pages+0x1e34/0x22d0 [ 52.266754][ T1554] ? __kasan_check_write+0x18/0x20 [ 52.266785][ T1554] ? down_read_killable+0x79/0xf0 [ 52.266804][ T1554] ? populate_vma_page_range+0x230/0x230 [ 52.266825][ T1554] ? kernel_text_address+0xa9/0xe0 [ 52.266848][ T1554] ? unwind_get_return_address+0x51/0x90 [ 52.266869][ T1554] __gup_longterm_locked+0xcb1/0x1580 [ 52.266894][ T1554] ? stack_depot_save_flags+0x38/0x800 [ 52.266913][ T1554] gup_fast_fallback+0x12ae/0x14a0 [ 52.266936][ T1554] ? kasan_save_track+0x3e/0x80 [ 52.266954][ T1554] ? __kmalloc_cache_noprof+0x24c/0x490 [ 52.266972][ T1554] ? futex_lock_pi+0x77a/0xa10 [ 52.266996][ T1554] ? get_user_pages_fast_only+0xc0/0xc0 [ 52.267020][ T1554] get_user_pages_fast+0x73/0xb0 [ 52.267041][ T1554] get_futex_key+0x24d/0x930 [ 52.267059][ T1554] ? __cfi_get_futex_key+0x10/0x10 [ 52.267075][ T1554] ? futex_lock_pi+0x77a/0xa10 [ 52.267095][ T1554] ? futex_setup_timer+0xb4/0xd0 [ 52.267111][ T1554] futex_lock_pi+0x1c0/0xa10 [ 52.267131][ T1554] ? __cfi_futex_lock_pi+0x10/0x10 [ 52.267153][ T1554] ? __kasan_check_write+0x18/0x20 [ 52.267177][ T1554] ? wake_up_q+0x10f/0x1c0 [ 52.267203][ T1554] ? __cfi_futex_wake_mark+0x10/0x10 [ 52.267224][ T1554] ? down_read+0x79/0xe0 [ 52.267242][ T1554] ? __kasan_check_write+0x18/0x20 [ 52.267267][ T1554] ? up_read+0x26/0x1d0 [ 52.267288][ T1554] do_futex+0x25c/0x500 [ 52.267305][ T1554] ? __cfi_do_futex+0x10/0x10 [ 52.267322][ T1554] ? vm_mmap_pgoff+0x145/0x4e0 [ 52.267340][ T1554] __se_sys_futex+0x28f/0x300 [ 52.267359][ T1554] ? __x64_sys_futex+0x110/0x110 [ 52.267377][ T1554] ? __kasan_check_write+0x18/0x20 [ 52.267402][ T1554] __x64_sys_futex+0xe9/0x110 [ 52.267421][ T1554] x64_sys_call+0x227f/0x2ee0 [ 52.267446][ T1554] do_syscall_64+0x58/0xf0 [ 52.267467][ T1554] ? clear_bhb_loop+0x50/0xa0 [ 52.267486][ T1554] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.267506][ T1554] RIP: 0033:0x7f296538efc9 [ 52.267526][ T1554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.267543][ T1554] RSP: 002b:00007f2963de3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 52.267567][ T1554] RAX: ffffffffffffffda RBX: 00007f29655e5fa0 RCX: 00007f296538efc9 [ 52.267582][ T1554] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00 [ 52.267595][ T1554] RBP: 00007f2965411f91 R08: 0000000000000000 R09: 0000000000000002 [ 52.267607][ T1554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.267619][ T1554] R13: 00007f29655e6038 R14: 00007f29655e5fa0 R15: 00007ffd7dbb2bb8 [ 52.267637][ T1554] [ 52.270452][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 52.271183][ T1556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:286 [ 52.298021][ T10] usb 1-1: USB disconnect, device number 16 [ 52.392117][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 52.392133][ T36] audit: type=1400 audit(1761791985.955:528): avc: denied { ioctl } for pid=1576 comm="syz.1.401" path="socket:[12079]" dev="sockfs" ino=12079 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.635132][ T36] audit: type=1400 audit(1761791985.965:529): avc: denied { bind } for pid=1578 comm="syz.1.402" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.655670][ T36] audit: type=1400 audit(1761791985.965:530): avc: denied { node_bind } for pid=1578 comm="syz.1.402" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 52.679396][ T36] audit: type=1400 audit(1761791985.965:531): avc: denied { name_bind } for pid=1578 comm="syz.1.402" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 52.702659][ T36] audit: type=1400 audit(1761791986.095:532): avc: denied { create } for pid=1591 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 52.722998][ T36] audit: type=1400 audit(1761791986.265:533): avc: denied { create } for pid=1594 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 52.900677][ T1628] fuse: Bad value for 'group_id' [ 52.905663][ T1628] fuse: Bad value for 'group_id' [ 52.941903][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 52.962156][ T36] audit: type=1400 audit(1761791986.515:534): avc: denied { map } for pid=1636 comm="syz.1.422" path="socket:[11102]" dev="sockfs" ino=11102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.034245][ T1642] 9pnet_fd: Insufficient options for proto=fd [ 53.098696][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 53.104799][ T45] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 53.115282][ T45] usb 4-1: New USB device found, idVendor=0698, idProduct=6b82, bcdDevice=d3.eb [ 53.124443][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.132445][ T45] usb 4-1: Product: syz [ 53.136928][ T45] usb 4-1: Manufacturer: syz [ 53.141588][ T45] usb 4-1: SerialNumber: syz [ 53.191550][ T36] audit: type=1400 audit(1761791986.745:535): avc: denied { connect } for pid=1651 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.263853][ T1661] kvm: kvm [1660]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 53.272586][ T1661] kvm: kvm [1660]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 53.293045][ T36] audit: type=1326 audit(1761791986.845:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.0.430" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f488e78efc9 code=0x0 [ 53.343955][ T1663] rust_binder: Write failure EFAULT in pid:56 [ 53.407793][ T10] usb 4-1: USB disconnect, device number 11 [ 53.413432][ T1664] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=1664 comm=syz.3.408 [ 53.753371][ T36] audit: type=1400 audit(1761791987.305:537): avc: denied { bind } for pid=1673 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.863079][ T1677] rust_binder: Error while translating object. [ 53.863122][ T1677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.869625][ T1677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:210 [ 53.916389][ T1684] FAT-fs (rnullb0): bogus number of reserved sectors [ 53.933045][ T1684] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 53.965188][ T1687] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 53.990356][ T1687] 9pnet: Could not find request transport: %Odno= [ 54.007701][ T1689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.014935][ T1689] rust_binder: Error in use_page_slow: ESRCH [ 54.014957][ T1689] rust_binder: use_range failure ESRCH [ 54.016222][ T1690] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 54.021325][ T1689] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 54.026789][ T1690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 54.034664][ T1689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 54.042484][ T1690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:222 [ 54.052072][ T1689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:222 [ 54.085064][ T1692] syz.2.439 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.247917][ T1708] rust_binder: 237: no such ref 0 [ 54.253195][ T1708] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 54.260507][ T1708] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 54.293904][ T1713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.328137][ T1721] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 54.334761][ T1721] rust_binder: Error while translating object. [ 54.343550][ T1721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.349763][ T1721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 54.884545][ T1737] rust_binder: Error while translating object. [ 54.894028][ T1737] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.900398][ T1737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:247 [ 54.984860][ T1751] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 55.038796][ T1753] overlayfs: failed to clone upperpath [ 55.090795][ T1765] rust_binder: Got transaction with invalid offset. [ 55.090832][ T1765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.097514][ T1765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 55.176177][ T1771] rust_binder: Error while translating object. [ 55.188745][ T1771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 55.194964][ T1771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:82 [ 55.875968][ T1783] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 55.937231][ T1796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.937264][ T1796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 55.958792][ T1797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.974648][ T1798] x_tables: unsorted underflow at hook 3 [ 55.989857][ T1797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 56.006243][ T1791] fuse: Bad value for 'fd' [ 56.197042][ T1810] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.210544][ T1810] rust_binder: Error while translating object. [ 56.210585][ T1810] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.216946][ T1810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 56.348707][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 56.399513][ T1835] __vm_enough_memory: pid: 1835, comm: syz.2.489, bytes: 18014402804453376 not enough memory for the allocation [ 56.509719][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 56.530119][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.549865][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.568728][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 56.583652][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 56.592754][ T45] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 56.607016][ T45] usb 1-1: Manufacturer: syz [ 56.613567][ T45] usb 1-1: config 0 descriptor?? [ 56.703958][ T1865] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 56.721900][ T1867] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 57.021592][ T45] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 57.029190][ T45] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 57.037197][ T1885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.037676][ T1885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:87 [ 57.045072][ T1885] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.054984][ T45] appleir 0003:05AC:8243.0004: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 57.074707][ T1885] rust_binder: Read failure Err(EFAULT) in pid:87 [ 57.089351][ T45] usb 1-1: USB disconnect, device number 17 [ 57.125078][ T1890] fido_id[1890]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 57.224892][ T1905] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 57.548729][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 57.587933][ T1935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:338 [ 57.599921][ T1937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.521'. [ 57.613540][ T1940] SELinux: Context KN is not valid (left unmapped). [ 57.709733][ T45] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 57.722686][ T45] usb 1-1: config 0 has no interface number 1 [ 57.729009][ T45] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 57.739010][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 57.746053][ T1950] rust_binder: 305: no such ref 3 [ 57.750659][ T45] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 57.765051][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 57.773394][ T45] usb 1-1: SerialNumber: syz [ 57.780311][ T45] usb 1-1: config 0 descriptor?? [ 57.815005][ T1960] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.927836][ T1960] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 57.934380][ T1960] rust_binder: Error while translating object. [ 57.943094][ T1960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.949305][ T1960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:310 [ 57.968678][ T439] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 57.986759][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 57.993639][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.000654][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.007345][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.014483][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.021216][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.028193][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.034950][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.042538][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.053026][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.060161][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.066882][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.074027][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.080770][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.087817][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.094808][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.101834][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.108564][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.115758][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.122510][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.129503][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.136181][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.138676][ T439] usb 4-1: Using ep0 maxpacket: 32 [ 58.143169][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.151961][ T439] usb 4-1: unable to get BOS descriptor or descriptor too short [ 58.154741][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.164266][ T439] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 58.169413][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.177019][ T439] usb 4-1: can't read configurations, error -71 [ 58.183442][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.196576][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.203366][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.210390][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.217050][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.224033][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.230724][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.237697][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.244391][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.251344][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.258009][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.264962][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.271652][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.278598][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.285298][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.292257][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.298943][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.305867][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.312559][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.319508][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.326177][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.333156][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.339953][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.346904][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.353584][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.360538][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.367200][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.374150][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.380839][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.387788][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.394482][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.401444][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.408113][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.415646][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.422342][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.429392][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.436072][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.443098][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.449813][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.456816][ T1907] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.463513][ T1907] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.473253][ T45] usb 1-1: Found UVC 0.00 device (0002:0000) [ 58.480186][ T45] usb 1-1: No valid video chain found. [ 58.490766][ T45] usb 1-1: USB disconnect, device number 18 [ 58.733263][ T1981] rust_binder: Write failure EFAULT in pid:367 [ 58.733982][ T1982] rust_binder: Write failure EFAULT in pid:367 [ 58.757114][ T1985] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 58.763329][ T1985] rust_binder: Error while translating object. [ 58.772327][ T1985] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.778542][ T1985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:371 [ 58.800571][ T1987] rust_binder: Write failure EFAULT in pid:373 [ 58.979416][ T2004] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 59.009693][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 59.009704][ T36] audit: type=1400 audit(1761791992.565:557): avc: denied { read } for pid=2005 comm="syz.0.543" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.039433][ T36] audit: type=1400 audit(1761791992.565:558): avc: denied { open } for pid=2005 comm="syz.0.543" path="/38/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.041760][ T2001] /dev/rnullb0: Can't open blockdev [ 59.063952][ T36] audit: type=1400 audit(1761791992.565:559): avc: denied { ioctl } for pid=2005 comm="syz.0.543" path="/38/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.095366][ T2002] FAT-fs (rnullb0): bogus number of reserved sectors [ 59.105170][ T2002] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 59.124518][ T2015] veth1: entered allmulticast mode [ 59.129738][ T2012] TCP: TCP_TX_DELAY enabled [ 59.130702][ T2014] veth1: left allmulticast mode [ 59.260709][ T2023] rust_binder: 393: no such ref 2 [ 59.260868][ T36] audit: type=1400 audit(1761791992.815:560): avc: denied { remount } for pid=2022 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.265830][ T2023] rust_binder: Read failure Err(EAGAIN) in pid:393 [ 59.319474][ T2026] rust_binder: Error while translating object. [ 59.326103][ T2026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.332369][ T2026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 59.365988][ T36] audit: type=1400 audit(1761791992.915:561): avc: denied { search } for pid=2027 comm="syz.0.551" name="/" dev="configfs" ino=1241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.367396][ T2030] rust_binder: Error while translating object. [ 59.376149][ T36] audit: type=1400 audit(1761791992.935:562): avc: denied { write } for pid=2027 comm="syz.0.551" name="/" dev="configfs" ino=1241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.397563][ T2030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.408751][ T2028] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.425496][ T2030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:396 [ 59.542064][ T2028] rust_binder: 125: no such ref 3 [ 59.557819][ T2028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125 [ 59.558188][ T2028] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 59.558207][ T2032] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 59.650961][ T36] audit: type=1400 audit(1761791993.205:563): avc: denied { write } for pid=2040 comm="syz.3.556" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.710213][ T2043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:404 [ 59.759957][ T2045] kvm: emulating exchange as write [ 59.868746][ T418] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 59.908323][ T36] audit: type=1400 audit(1761791993.455:564): avc: denied { setopt } for pid=2047 comm="syz.3.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.018767][ T418] usb 1-1: Using ep0 maxpacket: 16 [ 60.024692][ T2070] netlink: 68 bytes leftover after parsing attributes in process `syz.2.565'. [ 60.034306][ T418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.046272][ T36] audit: type=1400 audit(1761791993.595:565): avc: denied { read } for pid=2069 comm="syz.2.565" dev="sockfs" ino=14823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.050271][ T2072] exFAT-fs (rnullb0): invalid boot record signature [ 60.074752][ T418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.074848][ T2072] exFAT-fs (rnullb0): failed to read boot sector [ 60.084573][ T418] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 60.091246][ T2072] exFAT-fs (rnullb0): failed to recognize exfat type [ 60.100008][ T418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.115290][ T418] usb 1-1: config 0 descriptor?? [ 60.140021][ T2074] netlink: 32 bytes leftover after parsing attributes in process `syz.3.566'. [ 60.150394][ T36] audit: type=1400 audit(1761791993.705:566): avc: denied { nosuid_transition } for pid=2073 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 60.151488][ T2074] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 60.178473][ T2074] rust_binder: Write failure EINVAL in pid:426 [ 60.205242][ T2077] rust_binder: Error while translating object. [ 60.216580][ T2077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 60.225981][ T2077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:429 [ 60.468717][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 60.498700][ T45] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 60.523261][ T418] playstation 0003:054C:05C4.0005: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 60.628676][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 60.634758][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 60.645897][ T10] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.656874][ T10] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 60.669923][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 60.676514][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 60.679884][ T45] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.685675][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.695937][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 60.704397][ T10] usb 3-1: config 0 descriptor?? [ 60.713435][ T45] usb 4-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 60.723545][ T418] playstation 0003:054C:05C4.0005: Invalid reportID received, expected 18 got 102 [ 60.724262][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.733590][ T418] playstation 0003:054C:05C4.0005: Failed to retrieve DualShock4 pairing info: -22 [ 60.743942][ T45] usb 4-1: config 0 descriptor?? [ 60.754918][ T418] playstation 0003:054C:05C4.0005: Failed to get MAC address from DualShock4 [ 60.765880][ T418] playstation 0003:054C:05C4.0005: Failed to create dualshock4. [ 60.774201][ T418] playstation 0003:054C:05C4.0005: probe with driver playstation failed with error -22 [ 60.941590][ T2039] input: syz1 as /devices/virtual/input/input15 [ 60.950624][ T418] usb 1-1: USB disconnect, device number 19 [ 61.118341][ T10] sony 0003:054C:024B.0006: item fetching failed at offset 5/7 [ 61.131507][ T10] sony 0003:054C:024B.0006: parse failed [ 61.139570][ T10] sony 0003:054C:024B.0006: probe with driver sony failed with error -22 [ 61.161217][ T45] smartjoyplus 0003:6666:8801.0007: invalid report_size 1330454127 [ 61.169234][ T45] smartjoyplus 0003:6666:8801.0007: item 0 4 1 7 parsing failed [ 61.177036][ T45] smartjoyplus 0003:6666:8801.0007: parse failed [ 61.183455][ T45] smartjoyplus 0003:6666:8801.0007: probe with driver smartjoyplus failed with error -22 [ 61.194436][ T2101] 9pnet_fd: Insufficient options for proto=fd [ 61.209112][ T2104] netlink: 'syz.1.576': attribute type 16 has an invalid length. [ 61.213788][ T2103] netlink: 'syz.1.576': attribute type 16 has an invalid length. [ 61.216845][ T2104] netlink: 'syz.1.576': attribute type 2 has an invalid length. [ 61.224885][ T2103] netlink: 'syz.1.576': attribute type 2 has an invalid length. [ 61.232316][ T2104] netlink: 64086 bytes leftover after parsing attributes in process `syz.1.576'. [ 61.240099][ T2103] netlink: 64086 bytes leftover after parsing attributes in process `syz.1.576'. [ 61.321697][ T45] usb 3-1: USB disconnect, device number 14 [ 61.371271][ T439] usb 4-1: USB disconnect, device number 14 [ 61.708714][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 61.860127][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.871121][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.880888][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.893950][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.903070][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.915649][ T10] usb 1-1: config 0 descriptor?? [ 61.974659][ T2130] exFAT-fs (rnullb0): invalid boot record signature [ 61.981339][ T2130] exFAT-fs (rnullb0): failed to read boot sector [ 61.987676][ T2130] exFAT-fs (rnullb0): failed to recognize exfat type [ 62.027398][ T2141] rust_binder: 449: no such ref 2 [ 62.073319][ T2148] veth1_to_bond: entered allmulticast mode [ 62.121930][ T2153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.130511][ T2153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.150576][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 62.156532][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 62.180242][ T10] usb 1-1: USB disconnect, device number 20 [ 62.202087][ T2159] rust_binder: Write failure EFAULT in pid:344 [ 62.314444][ T2165] __vm_enough_memory: pid: 2165, comm: syz.3.599, bytes: 18014402804453376 not enough memory for the allocation [ 62.438014][ T2203] rust_binder: Error in use_page_slow: ESRCH [ 62.438037][ T2203] rust_binder: use_range failure ESRCH [ 62.444506][ T2203] rust_binder: Failed to allocate buffer. len:4176, is_oneway:false [ 62.450336][ T2208] fuse: Unknown parameter 'Hd' [ 62.463154][ T2203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 62.463186][ T2203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:358 [ 62.488713][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 62.649734][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.660694][ T10] usb 1-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 62.669856][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.678309][ T10] usb 1-1: config 0 descriptor?? [ 62.802110][ T2221] 9pnet_fd: Insufficient options for proto=fd [ 62.821495][ T2226] binder: Bad value for 'max' [ 63.087287][ T10] chicony 0003:04F2:1236.0008: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.0-1/input0 [ 63.289032][ T2157] can0: slcan on ttyS3. [ 63.329196][ T2157] can0 (unregistered): slcan off ttyS3. [ 63.334843][ T2157] Falling back ldisc for ttyS3. [ 63.341437][ T2157] input: syz1 as /devices/virtual/input/input16 [ 63.360085][ T45] usb 1-1: USB disconnect, device number 21 [ 64.208741][ T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 64.359724][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 64.367989][ T10] usb 1-1: config 179 has no interface number 0 [ 64.374287][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 64.385443][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 64.396498][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 24929, setting to 64 [ 64.407713][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 64.421644][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 64.430738][ T10] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 64.438865][ T10] usb 1-1: Product: syz [ 64.443788][ T2272] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.451026][ T2272] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.662197][ T45] usb 1-1: USB disconnect, device number 22 [ 64.662299][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 64.676731][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 65.263785][ T2285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:148 [ 65.264156][ T2285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 65.273398][ T2285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:148 [ 65.331177][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 65.331196][ T36] audit: type=1326 audit(1761791998.885:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2286 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cf18efc9 code=0x7ffc0000 [ 65.370696][ T36] audit: type=1326 audit(1761791998.885:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2286 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cf18efc9 code=0x7ffc0000 [ 65.400327][ T36] audit: type=1326 audit(1761791998.885:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2286 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cf18efc9 code=0x7ffc0000 [ 65.423840][ T36] audit: type=1326 audit(1761791998.885:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2286 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cf18efc9 code=0x7ffc0000 [ 65.447542][ T36] audit: type=1326 audit(1761791998.885:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2286 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12cf18efc9 code=0x7ffc0000 [ 65.472139][ T36] audit: type=1326 audit(1761791998.885:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2286 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cf18efc9 code=0x7ffc0000 [ 65.497798][ T36] audit: type=1326 audit(1761791998.885:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2286 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cf18efc9 code=0x7ffc0000 [ 65.522188][ T36] audit: type=1326 audit(1761791998.885:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2286 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cf18efc9 code=0x7ffc0000 [ 65.522208][ T2292] netlink: 140 bytes leftover after parsing attributes in process `syz.2.625'. [ 65.545656][ T36] audit: type=1326 audit(1761791998.885:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2286 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12cf18efc9 code=0x7ffc0000 [ 65.578813][ T36] audit: type=1326 audit(1761791998.885:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2286 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cf18efc9 code=0x7ffc0000 [ 65.775510][ T2306] loop2: detected capacity change from 0 to 7 [ 65.803711][ T2301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:158 [ 65.804114][ T2301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 65.814392][ T2301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:158 [ 65.868687][ T438] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 65.899369][ T2316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.908967][ T2317] rust_binder: Error in use_page_slow: ESRCH [ 65.908989][ T2317] rust_binder: use_range failure ESRCH [ 65.915069][ T2317] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 65.920634][ T2317] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 65.928754][ T2317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:473 [ 66.028210][ T45] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 66.046746][ T45] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 66.056340][ T45] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 66.066380][ T438] usb 3-1: config 1 has an invalid interface number: 239 but max is 0 [ 66.074784][ T438] usb 3-1: config 1 has no interface number 0 [ 66.081506][ T438] usb 3-1: config 1 interface 239 has no altsetting 0 [ 66.088976][ T45] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 66.103636][ T438] usb 3-1: New USB device found, idVendor=0436, idProduct=0005, bcdDevice= 1.00 [ 66.114296][ T438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.122721][ T438] usb 3-1: Product: syz [ 66.127471][ T438] usb 3-1: Manufacturer: syz [ 66.132757][ T438] usb 3-1: SerialNumber: syz [ 66.135293][ T2327] fido_id[2327]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 66.330130][ T2345] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 66.346799][ T2344] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 66.346816][ T2344] rust_binder: Error while translating object. [ 66.355667][ T2344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.361925][ T2344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:494 [ 66.408693][ T45] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 66.530850][ T13] bridge_slave_1: left allmulticast mode [ 66.536571][ T13] bridge_slave_1: left promiscuous mode [ 66.542985][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.550823][ T13] bridge_slave_0: left allmulticast mode [ 66.556551][ T13] bridge_slave_0: left promiscuous mode [ 66.562497][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.570691][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.581862][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.591720][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 66.604689][ T45] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 66.613881][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.622751][ T45] usb 1-1: config 0 descriptor?? [ 66.694528][ T2350] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.701629][ T2350] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.709240][ T2350] bridge_slave_0: entered allmulticast mode [ 66.715468][ T2350] bridge_slave_0: entered promiscuous mode [ 66.722482][ T13] veth1_macvtap: left promiscuous mode [ 66.728053][ T13] veth0_vlan: left promiscuous mode [ 66.772473][ T2350] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.779750][ T2350] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.786897][ T2350] bridge_slave_1: entered allmulticast mode [ 66.793298][ T2350] bridge_slave_1: entered promiscuous mode [ 66.846207][ T2350] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.853283][ T2350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.860600][ T2350] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.867673][ T2350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.888026][ T2185] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.895474][ T2185] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.904910][ T2179] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.911973][ T2179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.921491][ T2185] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.928522][ T2185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.954261][ T2350] veth0_vlan: entered promiscuous mode [ 66.967506][ T2350] veth1_macvtap: entered promiscuous mode [ 67.023685][ T2363] rust_binder: Error while translating object. [ 67.023711][ T2363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 67.029965][ T2363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4 [ 67.035079][ T45] nintendo 0003:057E:2019.000A: unknown main item tag 0x2 [ 67.039835][ T2363] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2363 comm=syz.4.646 [ 67.049577][ T45] nintendo 0003:057E:2019.000A: item fetching failed at offset 4/5 [ 67.058878][ T2363] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=2363 comm=syz.4.646 [ 67.069249][ T45] nintendo 0003:057E:2019.000A: HID parse failed [ 67.078604][ T2363] SELinux: security_context_str_to_sid () failed with errno=-22 [ 67.089184][ T45] nintendo 0003:057E:2019.000A: probe - fail = -22 [ 67.115121][ T45] nintendo 0003:057E:2019.000A: probe with driver nintendo failed with error -22 [ 67.237677][ T2331] __vm_enough_memory: pid: 2331, comm: syz.0.636, bytes: 18014402804453376 not enough memory for the allocation [ 67.251007][ T9] usb 1-1: USB disconnect, device number 23 [ 67.698717][ T418] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.848803][ T418] usb 5-1: Using ep0 maxpacket: 16 [ 67.858724][ T418] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 67.866893][ T418] usb 5-1: config 0 has no interface number 0 [ 67.873089][ T418] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.884024][ T418] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.893838][ T418] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 67.902915][ T418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.911706][ T418] usb 5-1: config 0 descriptor?? [ 68.496614][ T438] ums-sddr09 3-1:1.239: USB Mass Storage device detected [ 68.523246][ T418] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000B/input/input18 [ 68.542333][ T2397] rust_binder: Write failure EFAULT in pid:381 [ 68.547039][ T438] usb 3-1: USB disconnect, device number 15 [ 68.572718][ T418] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000B/input/input19 [ 68.590755][ T2404] rust_binder: Fixups oob 178 180 369 186 [ 68.590785][ T2404] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 68.596755][ T2404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.605502][ T2404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:385 [ 68.615450][ T418] uclogic 0003:28BD:0071.000B: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 68.680703][ T2414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.680725][ T2414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:390 [ 68.724900][ T418] usb 5-1: USB disconnect, device number 2 [ 69.084717][ T2438] syz.2.672 uses obsolete (PF_INET,SOCK_PACKET) [ 69.321334][ T2447] rust_binder: Read failure Err(EAGAIN) in pid:15 [ 69.611617][ T2467] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.725970][ T2474] netlink: 104 bytes leftover after parsing attributes in process `syz.2.686'. [ 69.742376][ T2476] netlink: 104 bytes leftover after parsing attributes in process `syz.2.686'. [ 69.751753][ T2474] netlink: 'syz.2.686': attribute type 7 has an invalid length. [ 69.925551][ T2492] SELinux: security policydb version 18 (MLS) not backwards compatible [ 69.933992][ T2492] SELinux: failed to load policy [ 70.088732][ T2517] tmpfs: Unknown parameter 'noinode32' [ 70.107313][ T2517] kvm: kvm [2516]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000000d) [ 70.116657][ T2517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:48 [ 70.117102][ T2517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 70.126742][ T2517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:48 [ 70.219883][ T2522] syz.4.701 (2522): attempted to duplicate a private mapping with mremap. This is not supported. [ 70.240260][ T2522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 70.240292][ T2522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:50 [ 70.298701][ T418] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 70.335093][ T2534] /dev/rnullb0: Can't open blockdev [ 70.351615][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 70.351630][ T36] audit: type=1400 audit(1761792003.905:670): avc: denied { map } for pid=2535 comm="syz.4.706" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 70.458686][ T418] usb 3-1: Using ep0 maxpacket: 16 [ 70.464911][ T418] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.471656][ T418] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 70.480788][ T418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.491093][ T418] usb 3-1: config 0 descriptor?? [ 70.671634][ T36] audit: type=1400 audit(1761792004.225:671): avc: denied { execute } for pid=2554 comm="syz.1.713" path="/dev/rnullb0" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.694320][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.709875][ T36] audit: type=1400 audit(1761792004.265:672): avc: denied { mounton } for pid=2559 comm="syz.1.715" path="/229/file0" dev="tmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.858691][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 70.875174][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.888913][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 70.931206][ T10] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 70.943993][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.959060][ T418] uclogic 0003:28BD:0042.000C: interface is invalid, ignoring [ 70.978691][ T10] usb 5-1: Product: syz [ 70.982876][ T10] usb 5-1: Manufacturer: syz [ 70.987466][ T10] usb 5-1: SerialNumber: syz [ 70.999701][ T10] usb 5-1: config 0 descriptor?? [ 71.030590][ T2565] kvm: kvm [2564]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x6f6c625f726e2c32 [ 71.113272][ T418] usb 3-1: USB disconnect, device number 16 [ 71.157632][ T36] audit: type=1326 audit(1761792004.705:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2574 comm="syz.0.721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f488e78efc9 code=0x0 [ 71.258551][ T36] audit: type=1400 audit(1761792004.805:674): avc: denied { create } for pid=2574 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 71.562059][ T2578] futex_wake_op: syz.1.722 tries to shift op by -1; fix this program [ 71.642025][ T2584] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.642247][ T2584] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false [ 71.661114][ T2586] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 47) [ 71.669451][ T2586] rust_binder: Error while translating object. [ 71.683326][ T2586] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.693572][ T2586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:426 [ 71.705550][ T2586] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 71.721959][ T2586] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 71.863316][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 71.873398][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 71.884344][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 71.892616][ T10] usb 5-1: USB disconnect, device number 3 [ 72.255682][ T2603] x_tables: duplicate underflow at hook 2 [ 72.314004][ T2603] fuse: Unknown parameter 'fD50177777777777777777777700000000000000000000' [ 72.688716][ T438] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.838698][ T438] usb 5-1: Using ep0 maxpacket: 16 [ 72.845122][ T438] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.855417][ T438] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.866516][ T438] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.875838][ T438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.889126][ T438] usb 5-1: Product: syz [ 72.893488][ T438] usb 5-1: Manufacturer: syz [ 72.898163][ T438] usb 5-1: SerialNumber: syz [ 72.935085][ T2625] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 4294967272. macoff=96 [ 72.997584][ T2625] overlay: ./file0 is not a directory [ 73.056144][ T2636] overlayfs: missing 'workdir' [ 73.107615][ T36] audit: type=1400 audit(1761792006.655:675): avc: denied { bpf } for pid=2611 comm="syz.4.736" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.115714][ T438] usb 5-1: 0:2 : does not exist [ 73.137074][ T438] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 73.152449][ T438] usb 5-1: USB disconnect, device number 4 [ 73.162722][ T2647] fuse: Bad value for 'fd' [ 73.180957][ T36] audit: type=1400 audit(1761792006.735:676): avc: denied { name_bind } for pid=2648 comm="syz.0.750" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 73.481722][ T36] audit: type=1326 audit(1761792007.035:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2661 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296538efc9 code=0x7ffc0000 [ 73.504990][ T36] audit: type=1326 audit(1761792007.035:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2661 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296538efc9 code=0x7ffc0000 [ 73.528474][ T36] audit: type=1326 audit(1761792007.035:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2661 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296538efc9 code=0x7ffc0000 [ 73.647064][ T2664] rust_binder: Write failure EFAULT in pid:75 [ 73.674615][ T2666] rust_binder: Error in use_page_slow: ESRCH [ 73.674638][ T2666] rust_binder: use_range failure ESRCH [ 73.680664][ T2666] rust_binder: Failed to allocate buffer. len:72, is_oneway:true [ 73.686126][ T2666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 73.693948][ T2666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:77 [ 73.739031][ T2685] SELinux: security_context_str_to_sid () failed with errno=-22 [ 73.756345][ T2687] SELinux: security_context_str_to_sid () failed with errno=-22 [ 73.842010][ T2691] SELinux: security_context_str_to_sid () failed with errno=-22 [ 73.895393][ T2703] binder: Unknown parameter 'rw-' [ 74.045117][ T2721] 9pnet_fd: Insufficient options for proto=fd [ 74.300849][ T418] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 74.350171][ T2761] fuse: Unknown parameter '00000000000000000004' [ 74.432907][ T2766] netlink: 'syz.0.791': attribute type 12 has an invalid length. [ 74.441618][ T2765] netlink: 'syz.0.791': attribute type 12 has an invalid length. [ 74.460748][ T418] usb 5-1: Using ep0 maxpacket: 32 [ 74.467592][ T418] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 1023 [ 74.477563][ T418] usb 5-1: config 1 interface 0 has no altsetting 0 [ 74.485784][ T418] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.494889][ T418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.502952][ T418] usb 5-1: Product: syz [ 74.507132][ T418] usb 5-1: Manufacturer: syz [ 74.511726][ T418] usb 5-1: SerialNumber: syz [ 74.518248][ T2719] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 74.727010][ T2771] tmpfs: Bad value for 'nr_inodes' [ 74.902742][ T2795] rust_binder: Error while translating object. [ 74.902773][ T2795] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 74.909038][ T2795] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:431 [ 74.931345][ T2799] SELinux: security_context_str_to_sid () failed with errno=-22 [ 74.950282][ T2799] SELinux: security_context_str_to_sid () failed with errno=-22 [ 74.959641][ T2719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.968206][ T2719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.983464][ T418] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 74.986440][ T2804] rust_binder: Write failure EFAULT in pid:440 [ 74.994980][ T418] usb 5-1: USB disconnect, device number 5 [ 75.292038][ T1964] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 75.354915][ T2813] netlink: 108 bytes leftover after parsing attributes in process `syz.0.806'. [ 75.372487][ T2815] tc_dump_action: action bad kind [ 75.462619][ T1964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.473554][ T1964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.484282][ T1964] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.498388][ T1964] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.508073][ T1964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.517135][ T1964] usb 3-1: config 0 descriptor?? [ 75.538492][ T2852] tmpfs: Unknown parameter 'he' [ 75.540628][ T2850] netlink: 124 bytes leftover after parsing attributes in process `syz.0.819'. [ 75.579036][ T2862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=2862 comm=syz.1.825 [ 75.741153][ T1964] usbhid 3-1:0.0: can't add hid device: -71 [ 75.747373][ T1964] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 75.758560][ T1964] usb 3-1: USB disconnect, device number 17 [ 75.785450][ T2878] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 75.878159][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.048696][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 76.054874][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.064986][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.075248][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.084337][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.092341][ T10] usb 5-1: Product: syz [ 76.096480][ T10] usb 5-1: Manufacturer: syz [ 76.101055][ T10] usb 5-1: SerialNumber: syz [ 76.245221][ T2899] netlink: 'syz.1.836': attribute type 1 has an invalid length. [ 76.251174][ T1964] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 76.253030][ T2899] netlink: 1 bytes leftover after parsing attributes in process `syz.1.836'. [ 76.271119][ T2899] netlink: 'syz.1.836': attribute type 16 has an invalid length. [ 76.278886][ T2899] netlink: 'syz.1.836': attribute type 3 has an invalid length. [ 76.286556][ T2899] netlink: 64054 bytes leftover after parsing attributes in process `syz.1.836'. [ 76.324494][ T2856] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 76.371392][ T10] usb 5-1: 0:2 : does not exist [ 76.376346][ T10] usb 5-1: unit 9 not found! [ 76.383214][ T10] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 76.392660][ T10] usb 5-1: 4:0: cannot get min/max values for control 2 (id 4) [ 76.401943][ T10] usb 5-1: USB disconnect, device number 6 [ 76.409364][ T416] udevd[416]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.425257][ T1964] usb 3-1: Using ep0 maxpacket: 8 [ 76.431467][ T1964] usb 3-1: config 0 has an invalid interface number: 72 but max is 4 [ 76.439588][ T1964] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 76.448461][ T1964] usb 3-1: config 0 has no interface number 0 [ 76.455904][ T1964] usb 3-1: New USB device found, idVendor=0403, idProduct=7151, bcdDevice=1b.16 [ 76.465276][ T1964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.473280][ T1964] usb 3-1: Product: syz [ 76.477502][ T1964] usb 3-1: Manufacturer: syz [ 76.483210][ T1964] usb 3-1: SerialNumber: syz [ 76.489238][ T1964] usb 3-1: config 0 descriptor?? [ 76.495134][ T1964] hub 3-1:0.72: bad descriptor, ignoring hub [ 76.501195][ T1964] hub 3-1:0.72: probe with driver hub failed with error -5 [ 76.509357][ T1964] ftdi_sio 3-1:0.72: FTDI USB Serial Device converter detected [ 76.517782][ T1964] ftdi_sio ttyUSB0: unknown device type: 0x1b16 [ 76.545076][ T2918] netlink: 'syz.0.842': attribute type 4 has an invalid length. [ 76.552851][ T2918] netlink: 'syz.0.842': attribute type 21 has an invalid length. [ 76.561112][ T2918] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.842'. [ 76.636616][ T2927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'. [ 76.708958][ T2888] fuse: Unknown parameter 'f' [ 76.715588][ T2888] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 76.716270][ T2888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.732979][ T2888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.754468][ T2948] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 76.754501][ T2948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:475 [ 76.759262][ T2950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.852'. [ 76.779819][ T36] kauditd_printk_skb: 162 callbacks suppressed [ 76.779836][ T36] audit: type=1400 audit(1761792010.181:842): avc: denied { setattr } for pid=2952 comm="syz.2.853" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 76.789922][ T2953] rust_binder: Error while translating object. [ 76.811873][ T2953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 76.818266][ T2953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:477 [ 76.858746][ T1964] usb 3-1: USB disconnect, device number 18 [ 76.875170][ T1964] ftdi_sio 3-1:0.72: device disconnected [ 76.891182][ T2973] netlink: 9 bytes leftover after parsing attributes in process `syz.2.858'. [ 76.900822][ T2973] gretap0: entered promiscuous mode [ 76.907508][ T2972] netlink: 9 bytes leftover after parsing attributes in process `syz.2.858'. [ 76.918378][ T36] audit: type=1400 audit(1761792010.312:843): avc: denied { create } for pid=2976 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 77.006983][ T2994] rust_binder: 2984 RLIMIT_NICE not set [ 77.040241][ T2997] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 77.045819][ T2997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:490 [ 77.092551][ T3004] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 77.092602][ T3003] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 77.101853][ T3004] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 77.109874][ T3003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:120 [ 77.119488][ T3004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:120 [ 77.210397][ T3007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.219632][ T3007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 77.535851][ T3012] netlink: 112 bytes leftover after parsing attributes in process `syz.1.873'. [ 77.621847][ T36] audit: type=1400 audit(1761792010.969:844): avc: denied { accept } for pid=3015 comm="syz.1.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.719748][ T3023] netlink: 'syz.0.877': attribute type 4 has an invalid length. [ 77.974655][ T3026] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 77.974674][ T3026] rust_binder: Error while translating object. [ 77.986834][ T3026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.993226][ T3026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:497 [ 78.011881][ T3028] binder: Bad value for 'stats' [ 78.270930][ T3034] netlink: 'syz.0.882': attribute type 15 has an invalid length. [ 78.366986][ T3047] rust_binder: Write failure EFAULT in pid:132 [ 79.279282][ T3065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:136 [ 79.337824][ T36] audit: type=1400 audit(1761792012.583:845): avc: denied { bind } for pid=3079 comm="syz.0.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.386310][ T3087] tipc: Enabling of bearer rejected, media not registered [ 79.581803][ T3114] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 79.629554][ T418] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 79.668564][ T36] audit: type=1400 audit(2000000000.243:846): avc: denied { ioctl } for pid=3115 comm="syz.2.911" path="socket:[20829]" dev="sockfs" ino=20829 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.694234][ T3116] SELinux: failed to load policy [ 79.709719][ T3118] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 79.727917][ T3127] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.735924][ T3127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:518 [ 79.776476][ T3131] 9pnet_fd: Insufficient options for proto=fd [ 79.801213][ T418] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.811458][ T418] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.822267][ T418] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 79.831315][ T418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 79.841903][ T418] usb 5-1: SerialNumber: syz [ 80.065123][ T418] usb 5-1: 0:2 : does not exist [ 80.080708][ T418] usb 5-1: USB disconnect, device number 7 [ 80.101524][ T3149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.101578][ T416] udevd[416]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.108746][ T3149] IPv6: NLM_F_CREATE should be set when creating new route [ 80.108766][ T3149] IPv6: NLM_F_CREATE should be set when creating new route [ 80.150585][ T36] audit: type=1400 audit(2000000000.684:847): avc: denied { read } for pid=3150 comm="syz.0.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.236828][ T36] audit: type=1400 audit(2000000000.769:848): avc: denied { ioctl } for pid=3173 comm="syz.1.930" path="socket:[20989]" dev="sockfs" ino=20989 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.279757][ T1964] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 80.439618][ T1964] usb 3-1: Using ep0 maxpacket: 32 [ 80.446208][ T1964] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 80.454072][ T1964] usb 3-1: can't read configurations, error -61 [ 80.588847][ T1964] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 80.606869][ T3203] rust_binder: Error while translating object. [ 80.606893][ T3203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 80.613238][ T3203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:140 [ 80.655305][ T3205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 80.664607][ T3205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.673758][ T3205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 80.683815][ T3207] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.748766][ T1964] usb 3-1: Using ep0 maxpacket: 32 [ 80.762291][ T1964] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 80.769174][ T36] audit: type=1400 audit(2000000001.266:849): avc: denied { read } for pid=3211 comm="syz.4.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.770370][ T1964] usb 3-1: can't read configurations, error -61 [ 80.796264][ T1964] usb usb3-port1: attempt power cycle [ 80.848473][ T36] audit: type=1400 audit(2000000001.351:850): avc: denied { accept } for pid=3211 comm="syz.4.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.868831][ T36] audit: type=1400 audit(2000000001.351:851): avc: denied { read } for pid=3211 comm="syz.4.941" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.153781][ T1964] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 81.175417][ T1964] usb 3-1: Using ep0 maxpacket: 32 [ 81.181905][ T1964] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 81.189579][ T1964] usb 3-1: can't read configurations, error -61 [ 81.289388][ T3244] __nla_validate_parse: 3 callbacks suppressed [ 81.289403][ T3244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 81.324478][ T1964] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 81.335758][ T3250] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 81.346020][ T1964] usb 3-1: Using ep0 maxpacket: 32 [ 81.352564][ T1964] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 81.360424][ T1964] usb 3-1: can't read configurations, error -61 [ 81.367136][ T1964] usb usb3-port1: unable to enumerate USB device [ 81.490675][ T3287] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.811960][ T3309] rust_binder: Write failure EFAULT in pid:153 [ 81.976124][ T3316] incfs: Options parsing error. -22 [ 81.987933][ T3316] incfs: mount failed -22 [ 82.350506][ T3336] overlayfs: failed to clone upperpath [ 82.443570][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 82.443653][ T3338] overlay: filesystem on ./bus is read-only [ 82.456015][ T36] audit: type=1400 audit(2000000002.842:855): avc: denied { mounton } for pid=3337 comm="syz.0.988" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 82.591269][ T3341] binder: Bad value for 'max' [ 82.628000][ T3348] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 82.628034][ T3348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:159 [ 82.976384][ T1964] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 83.140842][ T36] audit: type=1400 audit(2000000003.499:856): avc: denied { accept } for pid=3376 comm="syz.1.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 83.146949][ T1964] usb 5-1: device descriptor read/64, error -71 [ 83.413431][ T1964] usb 5-1: device descriptor read/64, error -71 [ 83.626590][ T439] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 83.669224][ T1964] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 83.786506][ T439] usb 3-1: Using ep0 maxpacket: 32 [ 83.792785][ T439] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.799546][ T439] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 83.808671][ T1964] usb 5-1: device descriptor read/64, error -71 [ 83.814992][ T439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.823773][ T439] usb 3-1: config 0 descriptor?? [ 83.883079][ T3402] 9pnet_fd: Insufficient options for proto=fd [ 84.046864][ T439] usbhid 3-1:0.0: can't add hid device: -71 [ 84.053542][ T439] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 84.060402][ T3421] overlay: ./file0 is not a directory [ 84.065369][ T439] usb 3-1: USB disconnect, device number 23 [ 84.074585][ T1964] usb 5-1: device descriptor read/64, error -71 [ 84.191545][ T1964] usb usb5-port1: attempt power cycle [ 84.425961][ T439] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 84.502666][ T36] audit: type=1400 audit(2000000004.775:857): avc: denied { setopt } for pid=3431 comm="syz.1.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.553897][ T1964] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 84.566822][ T3442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=3442 comm=syz.1.1023 [ 84.576187][ T1964] usb 5-1: device descriptor read/8, error -71 [ 84.585649][ T36] audit: type=1400 audit(2000000004.850:858): avc: denied { create } for pid=3441 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.605591][ T439] usb 3-1: Using ep0 maxpacket: 16 [ 84.612046][ T439] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 84.621931][ T439] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 84.631635][ T439] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 84.642099][ T439] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.651564][ T439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.659706][ T439] usb 3-1: SerialNumber: syz [ 84.665832][ T3424] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 84.674707][ T3456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 84.684859][ T36] audit: type=1400 audit(2000000004.953:859): avc: denied { map } for pid=3455 comm="syz.1.1029" path="socket:[21470]" dev="sockfs" ino=21470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.736031][ T1964] usb 5-1: device descriptor read/8, error -71 [ 84.888470][ T3424] rust_binder: 546: no such ref 3 [ 84.893552][ T3424] rust_binder: 546: no such ref 1 [ 84.898787][ T3424] rust_binder: Write failure EFAULT in pid:546 [ 84.903713][ T439] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 84.918990][ T439] usb 3-1: USB disconnect, device number 24 [ 84.990898][ T1964] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 85.013187][ T1964] usb 5-1: device descriptor read/8, error -71 [ 85.151731][ T1964] usb 5-1: device descriptor read/8, error -71 [ 85.268265][ T1964] usb usb5-port1: unable to enumerate USB device [ 85.344243][ T36] audit: type=1326 audit(2000000005.572:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3470 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296538efc9 code=0x7ffc0000 [ 85.355862][ T3471] x_tables: duplicate underflow at hook 1 [ 85.367626][ T36] audit: type=1326 audit(2000000005.572:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3470 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296538efc9 code=0x7ffc0000 [ 85.400649][ T36] audit: type=1326 audit(2000000005.572:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3470 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f296538efc9 code=0x7ffc0000 [ 85.424035][ T36] audit: type=1326 audit(2000000005.572:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3470 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296538efc9 code=0x7ffc0000 [ 85.448187][ T36] audit: type=1326 audit(2000000005.572:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3470 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f296538efc9 code=0x7ffc0000 [ 85.623784][ T3494] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3494 comm=syz.2.1041 [ 85.666613][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'. [ 85.891621][ T3533] rust_binder: 168: no such ref 0 [ 85.896726][ T3533] rust_binder: Write failure EINVAL in pid:168 [ 85.899056][ T3534] tipc: Started in network mode [ 85.910162][ T3534] tipc: Node identity 46619676c25a, cluster identity 4711 [ 85.917304][ T3534] tipc: Enabled bearer , priority 0 [ 85.924013][ T3533] tipc: Enabling of bearer rejected, already enabled [ 85.940770][ T3534] syzkaller0: entered promiscuous mode [ 85.946230][ T3534] syzkaller0: entered allmulticast mode [ 85.951996][ T3534] tipc: Resetting bearer [ 85.962426][ T3532] tipc: Resetting bearer [ 85.975991][ T3532] tipc: Disabling bearer [ 86.049985][ T3547] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 86.130602][ T3565] kvm: user requested TSC rate below hardware speed [ 86.146189][ T3565] binder: Unknown parameter 'r' [ 86.378923][ T3592] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 86.451135][ T439] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 86.612030][ T439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.622994][ T439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.632958][ T439] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.646009][ T439] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.655287][ T439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.664009][ T439] usb 3-1: config 0 descriptor?? [ 86.860761][ T3623] overlayfs: failed to clone lowerpath [ 86.866748][ T3623] overlayfs: failed to clone lowerpath [ 86.886148][ T439] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 86.907396][ T439] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 87.088509][ T3656] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1096'. [ 87.198666][ T439] usb 3-1: USB disconnect, device number 25 [ 87.612931][ T1964] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 87.773780][ T1964] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.783931][ T1964] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.793485][ T1964] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 87.802597][ T1964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.810604][ T1964] usb 5-1: SerialNumber: syz [ 87.817219][ T1964] usb 5-1: 0:2 : does not exist [ 88.115590][ T3691] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 88.256844][ T1964] usb 5-1: USB disconnect, device number 12 [ 88.489649][ T3700] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1110'. [ 88.505934][ T3702] netlink: 'syz.0.1111': attribute type 27 has an invalid length. [ 88.560540][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 88.560557][ T36] audit: type=1400 audit(2000000008.575:918): avc: denied { create } for pid=3709 comm="syz.0.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 88.634620][ T3713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:601 [ 88.634816][ T3713] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 88.644009][ T3713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:601 [ 88.767246][ T3730] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1280 sclass=netlink_tcpdiag_socket pid=3730 comm=syz.0.1122 [ 88.836946][ T3737] rust_binder: Write failure EFAULT in pid:215 [ 88.847527][ T3740] syz.4.1125: attempt to access beyond end of device [ 88.847527][ T3740] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 88.866817][ T3740] EXT4-fs (loop4): unable to read superblock [ 88.911597][ T36] audit: type=1400 audit(2000000008.912:919): avc: denied { create } for pid=3745 comm="syz.4.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.936137][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 88.954230][ T3760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1133'. [ 88.999640][ T3758] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 89.061611][ T3772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 89.070614][ T3772] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1138'. [ 89.079597][ T3772] netlink: 'syz.0.1138': attribute type 3 has an invalid length. [ 89.087487][ T3772] netlink: 'syz.0.1138': attribute type 2 has an invalid length. [ 89.095268][ T3772] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1138'. [ 89.106257][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.120081][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.129987][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.142915][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.152132][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.169451][ T10] usb 3-1: config 0 descriptor?? [ 89.714328][ T10] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 89.723098][ T10] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 89.789106][ T3785] rust_binder: Got transaction with invalid offset. [ 89.789133][ T3785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.795776][ T3785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233 [ 89.989159][ T3790] netlink: 'syz.4.1143': attribute type 1 has an invalid length. [ 90.006365][ T3790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1143'. [ 90.015473][ T3790] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.056460][ C0] plantronics 0003:047F:FFFF.000E: hid_field_extract() called with n (132) > 32! (syz-executor) [ 90.270119][ T3722] rust_binder: Failed copying remainder into alloc: EFAULT [ 90.270138][ T3722] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 90.277441][ T3722] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 90.285846][ T3722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:603 [ 90.296860][ T10] usb 3-1: USB disconnect, device number 26 [ 90.496031][ T36] audit: type=1400 audit(2000000010.395:920): avc: denied { associate } for pid=3841 comm="syz.1.1158" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 90.551084][ T3845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1160'. [ 90.607124][ T3857] netlink: 'syz.1.1163': attribute type 2 has an invalid length. [ 90.769182][ T3881] netlink: 'syz.1.1170': attribute type 4 has an invalid length. [ 90.773208][ T3884] rust_binder: 248: no such ref 0 [ 90.776986][ T3881] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1170'. [ 90.854356][ T3894] input: syz1 as /devices/virtual/input/input22 [ 90.860571][ T3898] netlink: 'syz.1.1176': attribute type 39 has an invalid length. [ 90.863593][ T3895] overlayfs: overlapping lowerdir path [ 90.971248][ T3918] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 91.057253][ T3926] netlink: 'syz.1.1188': attribute type 12 has an invalid length. [ 91.095098][ T3930] tmpfs: Unknown parameter '00000000000000000000000' [ 91.110835][ T3934] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1191'. [ 91.247542][ T439] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 91.408470][ T439] usb 5-1: config 1 has an invalid interface number: 239 but max is 0 [ 91.416781][ T439] usb 5-1: config 1 has no interface number 0 [ 91.422930][ T439] usb 5-1: config 1 interface 239 has no altsetting 0 [ 91.431076][ T439] usb 5-1: New USB device found, idVendor=0436, idProduct=0005, bcdDevice= 1.00 [ 91.440232][ T439] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.448225][ T439] usb 5-1: Product: syz [ 91.452449][ T439] usb 5-1: Manufacturer: syz [ 91.457035][ T439] usb 5-1: SerialNumber: syz [ 91.696859][ T439] ums-sddr09 5-1:1.239: USB Mass Storage device detected [ 91.739599][ T439] usb 5-1: USB disconnect, device number 13 [ 92.046436][ T36] audit: type=1326 audit(2000000011.849:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.0.1196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f488e78efc9 code=0x0 [ 92.095868][ T3964] overlay: Unknown parameter 'measure' [ 92.131681][ T3975] 9pnet_fd: Insufficient options for proto=fd [ 92.337338][ T36] audit: type=1400 audit(2000000013.130:922): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=623 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 92.358286][ T4018] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 92.358886][ T36] audit: type=1400 audit(2000000013.130:923): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=623 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 92.389196][ T36] audit: type=1400 audit(2000000013.130:924): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=623 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 92.413666][ T4025] rust_binder: Write failure EFAULT in pid:284 [ 92.449841][ T36] audit: type=1400 audit(2000000013.233:925): avc: denied { map } for pid=4035 comm="syz.4.1223" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.480163][ T36] audit: type=1400 audit(2000000013.233:926): avc: denied { execute } for pid=4035 comm="syz.4.1223" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.511615][ T4040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:293 [ 92.910708][ T4076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.920117][ T4076] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 92.926737][ T4076] rust_binder: Read failure Err(EFAULT) in pid:326 [ 92.984736][ T4080] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.991360][ T4081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.998336][ T4081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:328 [ 93.075846][ T4101] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 93.076360][ T4101] @0: renamed from bond_slave_1 [ 93.199003][ T4107] overlayfs: failed to clone upperpath [ 93.232360][ T4111] binder: Unknown parameter '00000000000000000000003' [ 93.239804][ T4111] Unsupported ieee802154 address type: 0 [ 93.245503][ T36] audit: type=1400 audit(2000000013.965:927): avc: denied { bind } for pid=4110 comm="syz.4.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.272411][ T4122] 9pnet_fd: Insufficient options for proto=fd [ 93.285778][ T4126] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 93.286239][ T4122] 9pnet_fd: Insufficient options for proto=fd [ 94.002571][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 94.002587][ T36] audit: type=1400 audit(2000000014.687:929): avc: denied { watch watch_reads } for pid=4150 comm="syz.1.1265" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 94.031105][ T36] audit: type=1400 audit(2000000014.687:930): avc: denied { watch watch_reads } for pid=4150 comm="syz.1.1265" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 94.115579][ T36] audit: type=1400 audit(2000000014.800:931): avc: denied { write } for pid=4164 comm="syz.2.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.180230][ T4170] 9pnet: Could not find request transport: xen [ 94.359155][ T36] audit: type=1400 audit(2000000015.016:932): avc: denied { bind } for pid=4210 comm="syz.0.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.378240][ T4213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:350 [ 94.379071][ T4213] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.388343][ T4213] rust_binder: Read failure Err(EFAULT) in pid:350 [ 94.389728][ T36] audit: type=1400 audit(2000000015.035:933): avc: denied { create } for pid=4210 comm="syz.0.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 94.503359][ T4231] netlink: 'syz.4.1295': attribute type 1 has an invalid length. [ 94.511312][ T4231] netlink: 'syz.4.1295': attribute type 3 has an invalid length. [ 94.519069][ T4231] __nla_validate_parse: 1 callbacks suppressed [ 94.519086][ T4231] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1295'. [ 94.534992][ T4231] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.552602][ T4246] netlink: 'syz.4.1300': attribute type 4 has an invalid length. [ 94.555688][ T4244] 9pnet_fd: Insufficient options for proto=fd [ 94.597241][ T36] audit: type=1326 audit(2000000015.250:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e78efc9 code=0x7ffc0000 [ 94.620939][ T36] audit: type=1326 audit(2000000015.250:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e78efc9 code=0x7ffc0000 [ 94.648264][ T36] audit: type=1326 audit(2000000015.250:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f488e78efc9 code=0x7ffc0000 [ 94.657570][ T4260] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.671830][ T36] audit: type=1326 audit(2000000015.250:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e78efc9 code=0x7ffc0000 [ 94.681384][ T4260] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 94.713331][ T36] audit: type=1326 audit(2000000015.250:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e78efc9 code=0x7ffc0000 [ 94.717408][ T4260] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.756629][ T4260] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 94.787968][ T4271] exFAT-fs (rnullb0): invalid boot record signature [ 94.795776][ T4271] exFAT-fs (rnullb0): failed to read boot sector [ 94.808032][ T4271] exFAT-fs (rnullb0): failed to recognize exfat type [ 94.829244][ T4275] overlayfs: failed to clone upperpath [ 94.840794][ T4275] fuse: Unknown parameter 'rootmode' [ 94.892926][ T4283] netlink: 'syz.2.1313': attribute type 4 has an invalid length. [ 94.900769][ T4283] netlink: 'syz.2.1313': attribute type 21 has an invalid length. [ 94.911228][ T4283] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1313'. [ 94.950739][ T4290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 94.963345][ T4285] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1314'. [ 95.017059][ T4299] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1316'. [ 95.031548][ T4301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.040147][ T4301] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 95.075756][ T4306] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.144601][ T4318] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 95.151433][ T4318] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 95.184279][ T4322] netlink: 37 bytes leftover after parsing attributes in process `syz.0.1326'. [ 96.617526][ T4424] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.617784][ T4424] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.635920][ T452] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.643048][ T4425] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.491182][ T4477] devpts: called with bogus options [ 97.569874][ T4494] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1383'. [ 98.699828][ T4532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'. [ 98.804595][ T523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 98.804613][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 99.575344][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1410'. [ 99.729239][ T4591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.729628][ T4591] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 99.743771][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 99.743788][ T36] audit: type=1400 audit(2000000020.082:962): avc: denied { create } for pid=4592 comm="syz.4.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 100.530098][ T36] audit: type=1326 audit(2000000020.804:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.0.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e78efc9 code=0x7fc00000 [ 100.683805][ T4610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:404 [ 100.683932][ T4610] rust_binder: Read failure Err(EFAULT) in pid:404 [ 100.706390][ T4612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.713831][ T4612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.720827][ T36] audit: type=1400 audit(2000000020.992:964): avc: denied { lock } for pid=4611 comm="syz.4.1424" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.720898][ T4612] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 100.753256][ T4612] rust_binder: Failed to allocate buffer. len:5168, is_oneway:false [ 101.053846][ T4621] rust_binder: 415: no such ref 1 [ 101.066972][ T4621] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 101.219994][ T4637] overlayfs: failed to clone upperpath [ 101.394655][ T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 101.555520][ T10] usb 5-1: config 0 has an invalid descriptor of length 84, skipping remainder of the config [ 101.565793][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.578805][ T10] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 101.587868][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.596361][ T10] usb 5-1: config 0 descriptor?? [ 101.817279][ T4628] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.818356][ T10] usb 5-1: string descriptor 0 read error: -71 [ 101.833045][ T10] usb 5-1: USB disconnect, device number 14 [ 101.984156][ T4670] overlayfs: failed to clone upperpath [ 102.189951][ T36] audit: type=1400 audit(2000000022.371:965): avc: denied { mounton } for pid=4687 comm="syz.0.1448" path="/326/file0" dev="tmpfs" ino=1805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.190708][ T4688] 9pnet: Could not find request transport: fD [ 102.224442][ T36] audit: type=1400 audit(2000000022.371:966): avc: denied { write } for pid=4687 comm="syz.0.1448" name="file0" dev="tmpfs" ino=1805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.378183][ T4693] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.416630][ T4693] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 102.430084][ T4697] rust_binder: Write failure EINVAL in pid:432 [ 102.441990][ T4697] rust_binder: Error while translating object. [ 102.453748][ T4697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 102.459979][ T4697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:432 [ 102.496490][ T4701] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 102.513821][ T4701] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 102.530880][ T4701] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 102.543275][ T4701] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 102.567916][ T4706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.568026][ T4706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:439 [ 102.576936][ T4706] rust_binder: Failed to allocate buffer. len:5168, is_oneway:false [ 102.597571][ T4709] netlink: 'syz.2.1454': attribute type 4 has an invalid length. [ 102.613373][ T4709] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1454'. [ 102.631088][ T4708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.631315][ T4708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:441 [ 102.901209][ T4737] x_tables: unsorted underflow at hook 4 [ 102.983191][ T4742] random: crng reseeded on system resumption [ 102.983201][ T36] audit: type=1400 audit(2000000023.122:967): avc: denied { write } for pid=4741 comm="syz.4.1468" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 103.021020][ T4742] rust_binder: 459: no such ref 3 [ 103.023043][ T36] audit: type=1400 audit(2000000023.150:968): avc: denied { ioctl } for pid=4741 comm="syz.4.1468" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 103.026173][ T4743] rust_binder: 459: no such ref 3 [ 103.055882][ T4742] rust_binder: 459: no such ref 1 [ 103.061250][ T4742] rust_binder: Write failure EFAULT in pid:459 [ 103.061310][ T4743] rust_binder: 459: no such ref 1 [ 103.072767][ T4743] rust_binder: Write failure EFAULT in pid:459 [ 103.096282][ T4746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=4746 comm=syz.0.1469 [ 103.353294][ T4776] 9pnet_fd: Insufficient options for proto=fd [ 103.725979][ T4778] netlink: 'syz.4.1480': attribute type 1 has an invalid length. [ 103.807729][ T4787] overlayfs: failed to resolve '/;[hL[HUVmV': -2 [ 103.936136][ T36] audit: type=1400 audit(2000000024.013:969): avc: denied { create } for pid=4822 comm="syz.2.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 104.448919][ T4852] x_tables: duplicate underflow at hook 2 [ 104.455319][ T36] audit: type=1400 audit(2000000024.501:970): avc: denied { create } for pid=4849 comm="syz.4.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.154851][ T4913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1528'. [ 105.572861][ T4975] cgroup: Bad value for 'name' [ 105.578344][ T4977] cgroup: Unknown subsys name 'QB+wEFJ 80)9[D fnh@Ǫ\HTR[+SoWdMKԽSeԚo&Akd$-I c!' [ 105.640476][ T4984] incfs: Options parsing error. -22 [ 105.645738][ T4984] incfs: mount failed -22 [ 106.137491][ T36] audit: type=1400 audit(2000000000.431:971): avc: denied { relabelfrom } for pid=5014 comm="syz.4.1563" name="NETLINK" dev="sockfs" ino=27046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.161954][ T36] audit: type=1400 audit(2000000000.431:972): avc: denied { relabelto } for pid=5014 comm="syz.4.1563" name="NETLINK" dev="sockfs" ino=27046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 106.260167][ T5039] netlink: 'syz.2.1573': attribute type 4 has an invalid length. [ 106.270261][ T5039] netlink: 'syz.2.1573': attribute type 4 has an invalid length. [ 106.981387][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1590'. [ 107.506852][ T5137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1609'. [ 107.573804][ T5155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1616'. [ 107.605838][ T5158] 9pnet: Could not find request transport: fd0rfdno=0x0000000000000004 [ 107.648547][ T5169] netlink: 'syz.0.1620': attribute type 19 has an invalid length. [ 107.656409][ T5169] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1620'. [ 107.681013][ T5176] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1622'. [ 107.699008][ T36] audit: type=1400 audit(2000000001.904:973): avc: denied { read } for pid=5177 comm="syz.0.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.965145][ T36] audit: type=1400 audit(2000000002.157:974): avc: denied { execute_no_trans } for pid=5197 comm="syz.2.1631" path="/275/file0" dev="tmpfs" ino=1501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.164210][ T5209] overlayfs: failed to clone lowerpath [ 108.247972][ T5214] overlayfs: failed to clone lowerpath [ 108.254733][ T5214] fuse: Bad value for 'fd' [ 108.517299][ T5221] 9pnet_fd: Insufficient options for proto=fd [ 109.170316][ T5270] netlink: 'syz.2.1657': attribute type 1 has an invalid length. [ 109.178138][ T5270] netlink: 'syz.2.1657': attribute type 2 has an invalid length. [ 109.422649][ T36] audit: type=1400 audit(2000000003.527:975): avc: denied { mounton } for pid=5288 comm="syz.0.1666" path="/355/file0" dev="tmpfs" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 109.422661][ T5289] EXT4-fs: Ignoring removed check option [ 109.422681][ T5289] No source specified [ 109.571322][ T5308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1675'. [ 109.605278][ T5315] overlayfs: failed to clone upperpath [ 110.390704][ T5338] netlink: 'syz.1.1687': attribute type 4 has an invalid length. [ 110.398519][ T5338] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1687'. [ 110.409257][ T5338] netlink: 679 bytes leftover after parsing attributes in process `syz.1.1687'. [ 110.707081][ T5350] tipc: Enabling of bearer rejected, failed to enable media [ 110.725687][ T36] audit: type=1326 audit(2000000004.747:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.2.1693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb3d18efc9 code=0x0 [ 110.888435][ T5357] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 110.898631][ T36] audit: type=1400 audit(2000000004.906:977): avc: denied { relabelto } for pid=5353 comm="syz.2.1693" name="NETLINK" dev="sockfs" ino=27514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 110.978909][ T5359] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 111.033555][ T5360] @0: renamed from bond_slave_1 [ 111.639117][ T5385] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1704'. [ 111.662900][ T5392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1706'. [ 111.684291][ T5394] fuse: Unknown parameter 'fxbr@ h*`W<^Ab_\ln@Smv6LՒ%qz( (4 *°iz?XԞvp8xDZ/+"|%zU4bY-9*9نAkozSl!OvM)uCĆ0x0000000000000005' [ 111.686262][ T5399] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 111.727332][ T36] audit: type=1400 audit(2000000005.685:978): avc: denied { setattr } for pid=5400 comm="syz.0.1709" name="NETLINK" dev="sockfs" ino=27572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.992476][ T36] audit: type=1400 audit(2000000005.929:979): avc: denied { nlmsg_read } for pid=5412 comm="syz.4.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 112.098601][ T5426] batadv_slave_1: entered promiscuous mode [ 112.105271][ T5425] batadv_slave_1: left promiscuous mode [ 112.462355][ T5465] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 112.506312][ T5468] overlay: ./file0 is not a directory [ 112.621884][ T36] audit: type=1400 audit(2000000006.520:980): avc: denied { watch watch_reads } for pid=5475 comm="syz.0.1735" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 112.693249][ T5496] overlayfs: failed to clone upperpath [ 112.714516][ T5502] overlayfs: failed to clone upperpath [ 112.743217][ T5507] netlink: 'syz.0.1745': attribute type 16 has an invalid length. [ 112.751910][ T5508] netlink: 'syz.0.1745': attribute type 16 has an invalid length. [ 112.797763][ T5524] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1750'. [ 112.807812][ T5524] __vm_enough_memory: pid: 5524, comm: syz.0.1750, bytes: 21200669085696 not enough memory for the allocation [ 112.827180][ T5524] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1750'. [ 113.469090][ T5552] overlayfs: failed to clone upperpath [ 113.553209][ T5573] 9pnet_fd: Insufficient options for proto=fd [ 113.572332][ T5573] 9pnet_fd: Insufficient options for proto=fd [ 113.613120][ T36] audit: type=1400 audit(2000000007.449:981): avc: denied { map } for pid=5585 comm="syz.4.1771" path="socket:[28823]" dev="sockfs" ino=28823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 113.641556][ T36] audit: type=1400 audit(2000000007.449:982): avc: denied { accept } for pid=5585 comm="syz.4.1771" path="socket:[28823]" dev="sockfs" ino=28823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 113.648289][ T5588] 9pnet_fd: Insufficient options for proto=fd [ 113.693351][ T36] audit: type=1326 audit(2000000007.524:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.4.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e238efc9 code=0x7ffc0000 [ 113.726232][ T36] audit: type=1326 audit(2000000007.524:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.4.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e238efc9 code=0x7ffc0000 [ 113.754763][ T36] audit: type=1326 audit(2000000007.524:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.4.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f50e238efc9 code=0x7ffc0000 [ 113.783501][ T36] audit: type=1326 audit(2000000007.524:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.4.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e238efc9 code=0x7ffc0000 [ 113.807194][ T36] audit: type=1326 audit(2000000007.524:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.4.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e238efc9 code=0x7ffc0000 [ 114.387286][ T5646] vlan1: entered promiscuous mode [ 114.392610][ T5646] vlan1: entered allmulticast mode [ 114.397750][ T5646] veth0_vlan: entered allmulticast mode [ 114.451884][ T5664] 9pnet_fd: Insufficient options for proto=fd [ 114.457681][ T5665] 9pnet_fd: Insufficient options for proto=fd [ 115.022888][ T5673] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1800'. [ 115.048953][ T5680] 9pnet_fd: Insufficient options for proto=fd [ 115.055148][ T5679] 9pnet_fd: Insufficient options for proto=fd [ 115.088625][ T5689] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1805'. [ 116.265226][ T5736] fuse: Bad value for 'group_id' [ 116.270252][ T5736] fuse: Bad value for 'group_id' [ 116.276151][ T5736] overlayfs: failed to clone upperpath [ 116.667689][ T5767] netlink: 'syz.1.1833': attribute type 46 has an invalid length. [ 117.467396][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 117.467411][ T36] audit: type=1326 audit(2000000011.061:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.1.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296538efc9 code=0x7fc00000 [ 117.496795][ T36] audit: type=1326 audit(2000000011.061:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.1.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296538efc9 code=0x7fc00000 [ 118.034079][ T5860] netlink: 32 bytes leftover after parsing attributes in process `/selinux/policy'. [ 118.043536][ T5860] tipc: Invalid UDP bearer configuration [ 118.043562][ T5860] tipc: Enabling of bearer rejected, failed to enable media [ 118.827755][ T5890] tipc: Enabling of bearer rejected, failed to enable media [ 119.351904][ T5902] 9pnet_fd: Insufficient options for proto=fd [ 119.801101][ T5915] x_tables: unsorted entry at hook 2 [ 120.107815][ T5963] netlink: 'syz.2.1906': attribute type 27 has an invalid length. [ 120.247705][ T5974] netlink: 'syz.4.1911': attribute type 4 has an invalid length. [ 120.268430][ T36] audit: type=1400 audit(2000000013.697:997): avc: denied { create } for pid=5975 comm="syz.4.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 120.406100][ T36] audit: type=1400 audit(2000000013.819:998): avc: denied { getopt } for pid=5996 comm="syz.0.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.424565][ T5997] tmpfs: Bad value for 'uid' [ 120.430763][ T5997] tmpfs: Bad value for 'uid' [ 120.704179][ T6011] netlink: 'syz.2.1925': attribute type 4 has an invalid length. [ 120.711941][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 122.650508][ T6060] overlayfs: failed to clone upperpath [ 122.667465][ T6065] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1941'. [ 124.101937][ T6102] veth0_virt_wifi: entered allmulticast mode [ 124.117093][ T6102] veth0_virt_wifi: left allmulticast mode [ 124.161104][ T6106] 9pnet_fd: Insufficient options for proto=fd [ 126.092549][ T6155] overlayfs: failed to clone upperpath [ 127.135491][ T6163] devpts: called with bogus options [ 127.178604][ T6170] 9pnet_fd: Insufficient options for proto=fd [ 128.380032][ T6193] netlink: 'syz.2.1982': attribute type 4 has an invalid length. [ 128.396871][ T6193] netlink: 'syz.2.1982': attribute type 5 has an invalid length. [ 128.404922][ T6193] netlink: 'syz.2.1982': attribute type 1 has an invalid length. [ 128.415948][ T6195] netlink: 'syz.2.1982': attribute type 4 has an invalid length. [ 128.423746][ T6195] netlink: 'syz.2.1982': attribute type 5 has an invalid length. [ 128.432017][ T6195] netlink: 'syz.2.1982': attribute type 1 has an invalid length. [ 128.446592][ T6203] fuse: Unknown parameter '0x0000000000000004' [ 128.499706][ T36] audit: type=1326 audit(2000000021.409:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.4.1989" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f50e238efc9 code=0x0 [ 128.526718][ T36] audit: type=1400 audit(2000000021.447:1000): avc: denied { ioctl } for pid=6220 comm="syz.2.1991" path="socket:[30046]" dev="sockfs" ino=30046 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.773610][ T6234] fuse: Unknown parameter 'f0x0000000000000005' [ 129.798633][ T6236] netlink: 'syz.2.1995': attribute type 28 has an invalid length. [ 129.816864][ T6243] 9pnet_fd: Insufficient options for proto=fd [ 129.985422][ T6256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=6256 comm=syz.4.2002 [ 131.220491][ T6274] fuse: Unknown parameter '000000000000000000000x00000000000000030000000000000000000000300000000000000000000' [ 132.790481][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2019'. [ 134.416463][ T6342] overlayfs: failed to clone upperpath [ 134.427314][ T6343] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2029'. [ 136.145841][ T6369] 9pnet_fd: Insufficient options for proto=fd [ 136.152093][ T6366] 9pnet_fd: Insufficient options for proto=fd [ 136.251283][ T6386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6386 comm=syz.4.2038 [ 138.085844][ T6406] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2049'. [ 140.080299][ T6435] overlayfs: failed to clone upperpath [ 142.083027][ T6444] SELinux: Context system_u:object_r:iptables_initrc_exec_t:s0 is not valid (left unmapped). [ 142.128910][ T36] audit: type=1400 audit(2000000034.206:1001): avc: denied { relabelto } for pid=6442 comm="syz.4.2061" name="rnullb0" dev="tmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 142.174819][ T36] audit: type=1400 audit(2000000034.206:1002): avc: denied { associate } for pid=6442 comm="syz.4.2061" name="rnullb0" dev="tmpfs" ino=914 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 142.212185][ T36] audit: type=1400 audit(2000000034.234:1003): avc: denied { sys_module } for pid=6449 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 142.235507][ T6456] fuse: Unknown parameter '00000000000000000003' [ 142.554418][ T6447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2062'. [ 144.355185][ T36] audit: type=1400 audit(2000000036.289:1004): avc: denied { read write } for pid=6470 comm="syz.4.2068" name="rnullb0" dev="tmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 144.386409][ T36] audit: type=1400 audit(2000000036.289:1005): avc: denied { open } for pid=6470 comm="syz.4.2068" path="/dev/rnullb0" dev="tmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 144.438461][ T36] audit: type=1400 audit(2000000036.374:1006): avc: denied { map } for pid=6470 comm="syz.4.2068" path="/dev/rnullb0" dev="tmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=1 req=1935 state=3 status=67 (errno 9: Bad file descriptor) [ 146.828463][ T36] audit: type=1400 audit(2000000038.616:1007): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1611]" dev="pipefs" ino=1611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 146.938449][ T36] audit: type=1326 audit(2000000038.710:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6487 comm="syz.0.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488e78efc9 code=0x7fc00000 [ 147.097129][ T13] bridge_slave_1: left allmulticast mode [ 147.102845][ T13] bridge_slave_1: left promiscuous mode [ 147.108447][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.120723][ T13] bridge_slave_0: left allmulticast mode [ 147.126377][ T13] bridge_slave_0: left promiscuous mode [ 147.132209][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.283139][ T13] veth1_macvtap: left promiscuous mode [ 147.288636][ T13] veth0_vlan: left promiscuous mode [ 147.537221][ T13] bridge_slave_1: left allmulticast mode [ 147.542867][ T13] bridge_slave_1: left promiscuous mode [ 147.548514][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.555970][ T13] bridge_slave_0: left allmulticast mode [ 147.561729][ T13] bridge_slave_0: left promiscuous mode [ 147.567315][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.730414][ T13] veth1_macvtap: left promiscuous mode [ 147.735926][ T13] veth0_vlan: left promiscuous mode