last executing test programs: 24.639453848s ago: executing program 0 (id=87): setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000100)=@v1={0x2, "b64f9261d9d19509e8"}, 0xa, 0x2) syz_clone(0x8808400, &(0x7f0000000140)="80f5e79193d93087d28e7d223556ee767f7b2452331e7982a592ad424183771082cc17a3ce073a4c146d4414cfc20f55ba3b295f0e8448f94e1257c06cd37d8c9cbaaefa96170de8e55b23dd2e49d5990760f062117e4a84e827ba54722197c6977ba55464943dc6636bdaf3ef9b8a9371f4092bf1d6453cd785cec6d6090b00c03cadb5402e1eb0843787f6620cbc2b181c99b8123f11745b731c34248933db357149e392a165958e204123fa3a438ca8095abbfd4f89d93ef66005b929ffbf57e1425b253af1b5c64449e5aec2d4d38201d1b8a7f90c99a87afa4b", 0xdc, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280)="5509ca46a269ab633f8c695f0799eeedfdbc3421b61aca7bbfbaaacb498461d18e9ba74f2f38110ed7d11a4f028b233a269cffd13f9f5e87aec037d7a64336ce427d8f4f3bd17313daeed2e30afaea5f8b9fec88aeff7a26c76ff15f190e2963fcca4b76248ac32b5a577e2ca67e21a13fd8b15e3b66d5375613e69348c77a57838cc12a9a") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) r1 = syz_open_procfs(r0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x12b8b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000aba000/0x3000)=nil, &(0x7f0000a24000/0x4000)=nil, 0x3000}) 24.42216116s ago: executing program 0 (id=93): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x802, &(0x7f00000000c0)={[{@name={'name', 0x3d, 'nofavordynmods'}}, {@name={'name', 0x3d, 'nofavordynmods'}}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 24.370702995s ago: executing program 0 (id=94): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/connector\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 32) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (rerun: 32) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) (async) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="ebedd70489a0e6d3710e0d7177", 0xd}, {&(0x7f0000000140)="eb5a7a0f9eefea6d5fbffdde5665c78d241349ee3c87fe9e717956a0b886736ab2aff79c10abbccf4adc6253354025970f7de893fa1f2d317393e7225f6d06469c6dcf108bb6495553c4b2bbbfed6b524147bcc556dd77656407097430fc3661ff33d31ae334b2703bb97772043748464be1da5cb3f35266c00fb4dd0d4f0b515779c873879fbd77cccf5165a388f7d5058c165e8924ec01d6183652d417b7e13d8cf11ee3998a26821890a54f9825084ee8627b655a98f12c", 0xb9}, {&(0x7f0000000080)="eee6ec61d95afedaf832d68130a11a9ea2fb26b4d72f1b17b95005cae942ab4778557c4d609dfcfe373314715b6df49ad700c46ac28180581d4ad9a9b5c2fa99", 0x40}, {&(0x7f0000000200)="821b298b68", 0x5}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000240)="66aa5f40c4a189db6bb8009e7a4fa76f200106a0c163850339832ef6bcfa", 0x1e}], 0x6, 0x5) 24.299965832s ago: executing program 0 (id=95): ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$KVM_NMI(r1, 0xae9a) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) 24.299461092s ago: executing program 0 (id=96): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r1, 0x29, 0x7, &(0x7f0000000000)={0x7, {{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}}, {{0xa, 0x4e22, 0x18000, @remote, 0x8}}}, 0x108) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='system_u:object_r::ing_exec_t:s0 unconfined 0'], 0x41) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd1, &(0x7f0000000180)=0xe, 0x4) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x402, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x8, &(0x7f0000000000)=0xffffffff, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 24.261007346s ago: executing program 0 (id=97): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000940)={0x2, 0x4e22, @local}, 0x10) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "7a78a5cf4cb6d9fd24675318fd663cd8c8263dc1c62ba35cb9af646ae1d6f6bcc4da4effa514e97ae52807099349a4b8072fa60a653761af288c5c2f0a63cb08", 0x14}, 0x48, r2) keyctl$link(0x8, r2, r3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r5 = gettid() rt_tgsigqueueinfo(r5, r5, 0x14, &(0x7f0000000480)={0x12, 0x0, 0x80000000}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x40901, 0x88) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) write$FUSE_DIRENT(r6, &(0x7f0000000080)=ANY=[@ANYRESOCT=r6], 0x200001d0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x10, 0x8, 0x8, 0x1, {{0x22, 0x4, 0x2, 0x1a, 0x88, 0x66, 0x0, 0xff, 0x4, 0x0, @multicast1, @private=0xa010100, {[@timestamp={0x44, 0x18, 0x51, 0x0, 0x6, [0x0, 0x0, 0xfffffff9, 0x10, 0x6]}, @noop, @timestamp={0x44, 0x10, 0xe4, 0x0, 0x9, [0xf43, 0x2, 0x11f5]}, @end, @timestamp_prespec={0x44, 0x2c, 0x91, 0x3, 0x4, [{@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0x2}, {@empty}, {@rand_addr=0x64010100, 0x8e6}]}, @rr={0x7, 0x7, 0xbd, [@loopback]}, @lsrr={0x83, 0xb, 0x8a, [@private=0xa010102, @loopback]}, @timestamp={0x44, 0xc, 0x8a, 0x0, 0x8, [0x5, 0x8]}]}}}}}) bind$packet(r9, &(0x7f0000000380)={0x11, 0xf5, r10, 0x1, 0x1, 0x6, @broadcast}, 0x14) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000000800030002081000418e00000004fcff", 0x58}], 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x18, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 24.193501742s ago: executing program 32 (id=97): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000940)={0x2, 0x4e22, @local}, 0x10) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "7a78a5cf4cb6d9fd24675318fd663cd8c8263dc1c62ba35cb9af646ae1d6f6bcc4da4effa514e97ae52807099349a4b8072fa60a653761af288c5c2f0a63cb08", 0x14}, 0x48, r2) keyctl$link(0x8, r2, r3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r5 = gettid() rt_tgsigqueueinfo(r5, r5, 0x14, &(0x7f0000000480)={0x12, 0x0, 0x80000000}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x40901, 0x88) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) write$FUSE_DIRENT(r6, &(0x7f0000000080)=ANY=[@ANYRESOCT=r6], 0x200001d0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x10, 0x8, 0x8, 0x1, {{0x22, 0x4, 0x2, 0x1a, 0x88, 0x66, 0x0, 0xff, 0x4, 0x0, @multicast1, @private=0xa010100, {[@timestamp={0x44, 0x18, 0x51, 0x0, 0x6, [0x0, 0x0, 0xfffffff9, 0x10, 0x6]}, @noop, @timestamp={0x44, 0x10, 0xe4, 0x0, 0x9, [0xf43, 0x2, 0x11f5]}, @end, @timestamp_prespec={0x44, 0x2c, 0x91, 0x3, 0x4, [{@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0x2}, {@empty}, {@rand_addr=0x64010100, 0x8e6}]}, @rr={0x7, 0x7, 0xbd, [@loopback]}, @lsrr={0x83, 0xb, 0x8a, [@private=0xa010102, @loopback]}, @timestamp={0x44, 0xc, 0x8a, 0x0, 0x8, [0x5, 0x8]}]}}}}}) bind$packet(r9, &(0x7f0000000380)={0x11, 0xf5, r10, 0x1, 0x1, 0x6, @broadcast}, 0x14) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000000800030002081000418e00000004fcff", 0x58}], 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x18, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 8.247886769s ago: executing program 3 (id=419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.167729716s ago: executing program 3 (id=435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close(r1) 6.899156932s ago: executing program 3 (id=441): pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in=@multicast2, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x2b}, {0x7, 0x0, 0x0, 0x800000, 0x0, 0x5853, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in6=@empty, 0x800, 0x33}, 0xa, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x8, 0x401}}, 0xe8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.140650353s ago: executing program 4 (id=484): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002dc0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, ']'}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 3.834653503s ago: executing program 3 (id=495): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x6) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b04, 0x0) 1.171629055s ago: executing program 2 (id=523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x48001) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.171466265s ago: executing program 2 (id=524): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000180)={0x0, 0xb, 0x40, 0x8000}, 0x10) 1.171357925s ago: executing program 2 (id=525): r0 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.158755326s ago: executing program 2 (id=526): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) unshare(0x2a060400) 1.069986055s ago: executing program 4 (id=527): r0 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.01184106s ago: executing program 2 (id=528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.01159082s ago: executing program 4 (id=529): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 941.928167ms ago: executing program 4 (id=530): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) shutdown(r0, 0x1) 925.128099ms ago: executing program 4 (id=531): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xffffffffffffffff) 700.011011ms ago: executing program 3 (id=532): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) statfs(&(0x7f0000001140)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 699.566261ms ago: executing program 1 (id=534): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x37) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 699.425191ms ago: executing program 3 (id=535): creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) 683.950693ms ago: executing program 1 (id=536): unshare(0x28000600) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) 671.492264ms ago: executing program 1 (id=537): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)='$', 0x1}], 0x1, &(0x7f0000001a80)=ANY=[], 0xc}}], 0x1, 0x4004804) 616.056039ms ago: executing program 1 (id=538): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1, 0xda, 0x3) 615.780179ms ago: executing program 1 (id=539): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'lo\x00', @remote}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 178.669212ms ago: executing program 2 (id=540): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 74.177043ms ago: executing program 1 (id=541): unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x48) 0s ago: executing program 4 (id=542): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fcntl$setown(r0, 0x8, r3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. [ 34.853645][ T36] audit: type=1400 audit(1760027476.990:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.855090][ T283] cgroup: Unknown subsys name 'net' [ 34.876532][ T36] audit: type=1400 audit(1760027476.990:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.906695][ T36] audit: type=1400 audit(1760027477.020:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.907116][ T283] cgroup: Unknown subsys name 'devices' [ 35.090543][ T283] cgroup: Unknown subsys name 'hugetlb' [ 35.096209][ T283] cgroup: Unknown subsys name 'rlimit' [ 35.192091][ T36] audit: type=1400 audit(1760027477.330:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.217192][ T36] audit: type=1400 audit(1760027477.330:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.242235][ T36] audit: type=1400 audit(1760027477.330:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.274226][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.283160][ T36] audit: type=1400 audit(1760027477.420:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.309313][ T36] audit: type=1400 audit(1760027477.420:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.340222][ T36] audit: type=1400 audit(1760027477.480:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.340899][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.366209][ T36] audit: type=1400 audit(1760027477.480:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.561881][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.577929][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.585352][ T290] bridge_slave_0: entered allmulticast mode [ 36.592024][ T290] bridge_slave_0: entered promiscuous mode [ 36.599296][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.606617][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.614156][ T290] bridge_slave_1: entered allmulticast mode [ 36.620905][ T290] bridge_slave_1: entered promiscuous mode [ 36.769467][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.776643][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.783762][ T295] bridge_slave_0: entered allmulticast mode [ 36.790477][ T295] bridge_slave_0: entered promiscuous mode [ 36.809071][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.816344][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.823684][ T295] bridge_slave_1: entered allmulticast mode [ 36.830506][ T295] bridge_slave_1: entered promiscuous mode [ 36.837122][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.845160][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.852651][ T294] bridge_slave_0: entered allmulticast mode [ 36.859250][ T294] bridge_slave_0: entered promiscuous mode [ 36.869035][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.876195][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.883548][ T296] bridge_slave_0: entered allmulticast mode [ 36.890176][ T296] bridge_slave_0: entered promiscuous mode [ 36.900439][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.907613][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.915045][ T294] bridge_slave_1: entered allmulticast mode [ 36.921575][ T294] bridge_slave_1: entered promiscuous mode [ 36.935520][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.943049][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.951169][ T296] bridge_slave_1: entered allmulticast mode [ 36.957595][ T296] bridge_slave_1: entered promiscuous mode [ 37.028392][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.035811][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.043249][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.050684][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.158436][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.166075][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.173749][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.180846][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.193020][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.201023][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.208715][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.215768][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.230678][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.238016][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.245860][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.253045][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.273787][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.281547][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.289812][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.297512][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.305459][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.313237][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.320905][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.328875][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.353624][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.361135][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.369212][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.376466][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.392075][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.399248][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.407152][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.414268][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.455107][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.462246][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.472402][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.479863][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.495533][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.502805][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.511668][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.519128][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.562066][ T295] veth0_vlan: entered promiscuous mode [ 37.570536][ T290] veth0_vlan: entered promiscuous mode [ 37.591947][ T294] veth0_vlan: entered promiscuous mode [ 37.604485][ T290] veth1_macvtap: entered promiscuous mode [ 37.619606][ T294] veth1_macvtap: entered promiscuous mode [ 37.633596][ T296] veth0_vlan: entered promiscuous mode [ 37.643622][ T295] veth1_macvtap: entered promiscuous mode [ 37.678660][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.699237][ T296] veth1_macvtap: entered promiscuous mode [ 37.752820][ T333] cgroup: name respecified [ 37.810595][ T342] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.824741][ T345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6'. [ 37.824781][ T343] tipc: Started in network mode [ 37.846994][ T342] hub 9-0:1.0: USB hub found [ 37.852423][ T342] hub 9-0:1.0: 1 port detected [ 37.858861][ T343] tipc: Node identity 4, cluster identity 4711 [ 37.872737][ T343] tipc: Node number set to 4 [ 37.886071][ T343] rust_binder: 2: no such ref 2 [ 37.929821][ T356] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10'. [ 38.173088][ T391] netlink: 68 bytes leftover after parsing attributes in process `syz.1.21'. [ 38.190308][ T387] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 38.209258][ T389] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 38.230368][ T387] rust_binder: Write failure EINVAL in pid:23 [ 38.464463][ T418] netlink: 68 bytes leftover after parsing attributes in process `syz.1.30'. [ 38.527946][ T31] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 38.687954][ T66] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 38.700185][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 38.718179][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 38.742335][ T31] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 38.757999][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.780671][ T31] usb 4-1: config 0 descriptor?? [ 38.787165][ T399] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 38.827773][ T31] usbhid 4-1:0.0: can't add hid device: -22 [ 38.834990][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 38.843828][ T427] ======================================================= [ 38.843828][ T427] WARNING: The mand mount option has been deprecated and [ 38.843828][ T427] and is ignored by this kernel. Remove the mand [ 38.843828][ T427] option from the mount to silence this warning. [ 38.843828][ T427] ======================================================= [ 38.881632][ T66] usb 3-1: device descriptor read/64, error -71 [ 38.888127][ T427] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 39.023560][ T330] usb 4-1: USB disconnect, device number 2 [ 39.147951][ T66] usb 3-1: device descriptor read/64, error -71 [ 39.387974][ T66] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 39.409508][ T443] netlink: 68 bytes leftover after parsing attributes in process `syz.1.39'. [ 39.432492][ T445] fuse: Bad value for 'fd' [ 39.507993][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.537965][ T66] usb 3-1: device descriptor read/64, error -71 [ 39.677969][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 39.685530][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.686700][ T449] Zero length message leads to an empty skb [ 39.708395][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 39.717775][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.727641][ T31] usb 1-1: config 0 descriptor?? [ 39.780178][ T461] SELinux: security_context_str_to_sid () failed with errno=-22 [ 39.788236][ T66] usb 3-1: device descriptor read/64, error -71 [ 39.813732][ T466] rust_binder: 46: no such ref 0 [ 39.819184][ T466] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 39.826383][ T466] rust_binder: 46: no such ref 2 [ 39.833033][ T466] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 39.867285][ T470] cgroup: name respecified [ 39.898171][ T66] usb usb3-port1: attempt power cycle [ 39.902964][ T472] netlink: 68 bytes leftover after parsing attributes in process `syz.3.49'. [ 39.949928][ T36] kauditd_printk_skb: 95 callbacks suppressed [ 39.949948][ T36] audit: type=1400 audit(1760027482.090:169): avc: denied { append } for pid=476 comm="syz.3.51" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 40.027534][ T36] audit: type=1400 audit(1760027482.160:170): avc: denied { getopt } for pid=488 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.051399][ T493] process 'syz.1.57' launched './file0' with NULL argv: empty string added [ 40.061786][ T36] audit: type=1400 audit(1760027482.200:171): avc: denied { execute_no_trans } for pid=492 comm="syz.1.57" path="/26/file0" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.074435][ T495] rust_binder: Error while translating object. [ 40.086531][ T36] audit: type=1400 audit(1760027482.210:172): avc: denied { transfer } for pid=494 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 40.091979][ T495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.101774][ T36] audit: type=1400 audit(1760027482.230:173): avc: denied { block_suspend } for pid=496 comm="syz.1.59" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.112645][ T495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 40.148943][ T31] wacom 0003:056A:032B.0001: hidraw0: USB HID v0.09 Device [HID 056a:032b] on usb-dummy_hcd.0-1/input0 [ 40.187767][ T503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.187797][ T503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.194685][ T503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.201765][ T503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.208785][ T503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.215516][ T503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.222850][ T503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.229692][ T503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.236946][ T503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.243493][ T503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.244940][ T36] audit: type=1400 audit(1760027482.380:174): avc: denied { bind } for pid=501 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.250562][ T66] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 40.259014][ T36] audit: type=1400 audit(1760027482.390:175): avc: denied { listen } for pid=501 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.305015][ T36] audit: type=1400 audit(1760027482.400:176): avc: denied { connect } for pid=501 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.309548][ T66] usb 3-1: device descriptor read/8, error -71 [ 40.347471][ T36] audit: type=1400 audit(1760027482.480:177): avc: denied { read write } for pid=430 comm="syz.0.34" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.347976][ T515] tipc: Started in network mode [ 40.377150][ T515] tipc: Node identity 4, cluster identity 4711 [ 40.378526][ T36] audit: type=1400 audit(1760027482.480:178): avc: denied { open } for pid=430 comm="syz.0.34" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.384787][ T515] tipc: Node number set to 4 [ 40.414828][ T31] usb 1-1: USB disconnect, device number 2 [ 40.459122][ T66] usb 3-1: device descriptor read/8, error -71 [ 40.653299][ T530] capability: warning: `syz.1.69' uses deprecated v2 capabilities in a way that may be insecure [ 40.697947][ T66] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 40.716554][ T527] rust_binder: Write failure EFAULT in pid:92 [ 40.728912][ T66] usb 3-1: device descriptor read/8, error -71 [ 40.869504][ T66] usb 3-1: device descriptor read/8, error -71 [ 40.988826][ T66] usb usb3-port1: unable to enumerate USB device [ 41.483086][ T545] __vm_enough_memory: pid: 545, comm: syz.2.76, bytes: 18014402804453376 not enough memory for the allocation [ 41.498459][ T546] rust_binder: Write failure EFAULT in pid:16 [ 41.530236][ T555] cgroup: name respecified [ 41.675299][ T571] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.805412][ T587] binder: Unknown parameter 'defcontext01777777777777777777777' [ 41.856475][ T592] cgroup: name respecified [ 41.998149][ T330] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.008384][ T12] bridge_slave_1: left allmulticast mode [ 42.014998][ T12] bridge_slave_1: left promiscuous mode [ 42.021931][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.031591][ T12] bridge_slave_0: left allmulticast mode [ 42.040831][ T12] bridge_slave_0: left promiscuous mode [ 42.050145][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.068348][ T66] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 42.169692][ T330] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 42.187742][ T12] veth1_macvtap: left promiscuous mode [ 42.194404][ T330] usb 3-1: config 0 has an invalid descriptor of length 219, skipping remainder of the config [ 42.209725][ T12] veth0_vlan: left promiscuous mode [ 42.224230][ T330] usb 3-1: config 0 has no interfaces? [ 42.239502][ T66] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 42.248102][ T330] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 42.252009][ T66] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 42.272490][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.274343][ T66] usb 4-1: config 0 interface 0 has no altsetting 0 [ 42.290450][ T66] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 42.300392][ T66] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 42.304319][ T330] usb 3-1: config 0 descriptor?? [ 42.314705][ T66] usb 4-1: Product: syz [ 42.330719][ T623] 9pnet_virtio: no channels available for device ./file0 [ 42.343379][ T66] usb 4-1: Manufacturer: syz [ 42.350500][ T66] usb 4-1: SerialNumber: syz [ 42.361009][ T66] usb 4-1: config 0 descriptor?? [ 42.368462][ T66] hub 4-1:0.0: bad descriptor, ignoring hub [ 42.375353][ T66] hub 4-1:0.0: probe with driver hub failed with error -5 [ 42.401008][ T66] usb 4-1: selecting invalid altsetting 0 [ 42.450095][ T620] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.458715][ T620] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.466111][ T620] bridge_slave_0: entered allmulticast mode [ 42.474745][ T620] bridge_slave_0: entered promiscuous mode [ 42.482750][ T620] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.490336][ T620] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.498774][ T620] bridge_slave_1: entered allmulticast mode [ 42.505886][ T620] bridge_slave_1: entered promiscuous mode [ 42.546282][ T583] rust_binder: Error while translating object. [ 42.546332][ T583] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.554081][ T583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 42.568464][ T330] usb 3-1: USB disconnect, device number 6 [ 42.622022][ T620] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.632069][ T620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.640777][ T620] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.648341][ T620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.687054][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.705498][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.718230][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.725680][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.730067][ T634] netlink: 182 bytes leftover after parsing attributes in process `syz.3.92'. [ 42.746048][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.753985][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.796870][ T620] veth0_vlan: entered promiscuous mode [ 42.819030][ T620] veth1_macvtap: entered promiscuous mode [ 43.098177][ T66] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 43.121568][ T641] __vm_enough_memory: pid: 641, comm: syz.2.106, bytes: 18014402804453376 not enough memory for the allocation [ 43.259621][ T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 43.271808][ T66] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 43.286045][ T66] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 43.295876][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.307157][ T66] usb 5-1: config 0 descriptor?? [ 43.313236][ T636] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 43.322052][ T66] usbhid 5-1:0.0: can't add hid device: -22 [ 43.328603][ T66] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 43.522089][ T9] usb 5-1: USB disconnect, device number 2 [ 43.724820][ T657] cgroup: name respecified [ 43.749817][ T659] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967295 [ 43.758503][ T659] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 43.766884][ T659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:25 [ 43.783865][ T661] netlink: 'syz.2.116': attribute type 4 has an invalid length. [ 43.805447][ T661] netlink: 'syz.2.116': attribute type 4 has an invalid length. [ 43.818305][ T661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65534 sclass=netlink_route_socket pid=661 comm=syz.2.116 [ 43.833462][ T661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=661 comm=syz.2.116 [ 43.847594][ T66] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=66 comm=kworker/1:2 [ 43.861005][ T661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65498 sclass=netlink_route_socket pid=661 comm=syz.2.116 [ 43.932099][ T667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 43.947747][ T670] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 43.967037][ T670] SELinux: failed to load policy [ 44.219034][ T693] __vm_enough_memory: pid: 693, comm: syz.4.126, bytes: 18014402804453376 not enough memory for the allocation [ 44.232192][ T692] __vm_enough_memory: pid: 692, comm: syz.4.126, bytes: 18014402804453376 not enough memory for the allocation [ 44.333923][ T705] 9pnet_fd: Insufficient options for proto=fd [ 44.463725][ T715] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 44.632819][ T739] netlink: 'syz.1.142': attribute type 27 has an invalid length. [ 44.658835][ T744] netlink: 68 bytes leftover after parsing attributes in process `syz.4.143'. [ 44.691176][ T748] cgroup: name respecified [ 44.851894][ T768] netlink: 68 bytes leftover after parsing attributes in process `syz.1.153'. [ 44.924212][ T772] rust_binder: Write failure EFAULT in pid:116 [ 44.988044][ T10] usb 4-1: USB disconnect, device number 3 [ 45.119532][ T777] cgroup: name respecified [ 45.161038][ T781] incfs_lookup_dentry err:-13 [ 45.166785][ T781] incfs: Can't find or create .index dir in ./bus [ 45.173866][ T781] incfs: mount failed -13 [ 45.180305][ T781] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 45.180324][ T781] rust_binder: Read failure Err(EFAULT) in pid:61 [ 45.223686][ T786] bridge0: entered allmulticast mode [ 45.236982][ T786] bridge0: left allmulticast mode [ 45.432211][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 45.432231][ T36] audit: type=1400 audit(1760027487.570:242): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 45.628605][ T797] netlink: 68 bytes leftover after parsing attributes in process `syz.4.163'. [ 46.254852][ T821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.254891][ T821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 46.385120][ T36] audit: type=1400 audit(1760027488.520:243): avc: denied { getopt } for pid=824 comm="syz.2.174" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.418083][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.772496][ T829] cgroup: name respecified [ 46.880457][ T838] raw_sendmsg: syz.4.178 forgot to set AF_INET. Fix it! [ 46.894365][ T36] audit: type=1400 audit(1760027489.030:244): avc: denied { lock } for pid=836 comm="syz.4.178" path="socket:[5707]" dev="sockfs" ino=5707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.138219][ T457] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 47.205217][ T36] audit: type=1400 audit(1760027489.340:245): avc: denied { watch watch_reads } for pid=847 comm="syz.4.182" path="/27" dev="tmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.241817][ T36] audit: type=1400 audit(1760027489.370:246): avc: denied { connect } for pid=852 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.267417][ T36] audit: type=1400 audit(1760027489.370:247): avc: denied { getopt } for pid=852 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.288412][ T457] usb 4-1: device descriptor read/64, error -71 [ 47.296369][ T36] audit: type=1400 audit(1760027489.370:248): avc: denied { setopt } for pid=852 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.318377][ T36] audit: type=1400 audit(1760027489.430:249): avc: denied { create } for pid=856 comm="syz.1.185" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.340793][ T857] fuseblk: Bad value for 'fd' [ 47.346558][ T36] audit: type=1400 audit(1760027489.430:250): avc: denied { write } for pid=856 comm="syz.1.185" name="file2" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.370990][ T36] audit: type=1400 audit(1760027489.430:251): avc: denied { open } for pid=856 comm="syz.1.185" path="/67/file2" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.415864][ T863] netlink: 68 bytes leftover after parsing attributes in process `syz.1.187'. [ 47.527924][ T457] usb 4-1: device descriptor read/64, error -71 [ 47.548949][ T874] fuse: Bad value for 'fd' [ 47.768006][ T457] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 47.908444][ T457] usb 4-1: device descriptor read/64, error -71 [ 48.099029][ T885] netlink: 68 bytes leftover after parsing attributes in process `syz.1.196'. [ 48.149216][ T457] usb 4-1: device descriptor read/64, error -71 [ 48.258388][ T457] usb usb4-port1: attempt power cycle [ 48.388146][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.553303][ T908] netlink: 68 bytes leftover after parsing attributes in process `syz.4.205'. [ 48.597948][ T457] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 48.619384][ T457] usb 4-1: device descriptor read/8, error -71 [ 48.751226][ T457] usb 4-1: device descriptor read/8, error -71 [ 48.855134][ T930] netlink: 'syz.4.213': attribute type 30 has an invalid length. [ 48.924036][ T932] netlink: 68 bytes leftover after parsing attributes in process `syz.2.214'. [ 49.008021][ T457] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 49.029232][ T457] usb 4-1: device descriptor read/8, error -71 [ 49.159646][ T457] usb 4-1: device descriptor read/8, error -71 [ 49.188592][ T66] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 49.268127][ T457] usb usb4-port1: unable to enumerate USB device [ 49.339743][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 49.348512][ T66] usb 3-1: config 8 has an invalid interface number: 55 but max is 0 [ 49.357139][ T66] usb 3-1: config 8 has no interface number 0 [ 49.363678][ T66] usb 3-1: config 8 interface 55 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 49.374725][ T66] usb 3-1: config 8 interface 55 altsetting 16 bulk endpoint 0xB has invalid maxpacket 8 [ 49.384708][ T66] usb 3-1: config 8 interface 55 altsetting 16 bulk endpoint 0x9 has invalid maxpacket 8 [ 49.394595][ T66] usb 3-1: config 8 interface 55 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 49.405916][ T66] usb 3-1: config 8 interface 55 has no altsetting 0 [ 49.414261][ T66] usb 3-1: New USB device found, idVendor=0403, idProduct=f9d1, bcdDevice=a4.03 [ 49.423742][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.432676][ T66] usb 3-1: Product: syz [ 49.437399][ T66] usb 3-1: Manufacturer: syz [ 49.440688][ T955] netlink: 68 bytes leftover after parsing attributes in process `syz.4.223'. [ 49.442352][ T66] usb 3-1: SerialNumber: syz [ 49.459724][ T934] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 49.467227][ T934] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 49.681524][ T934] netlink: 'syz.2.215': attribute type 2 has an invalid length. [ 49.694150][ T66] ftdi_sio 3-1:8.55: FTDI USB Serial Device converter detected [ 49.703130][ T66] ftdi_sio ttyUSB0: unknown device type: 0xa403 [ 49.712305][ T66] usb 3-1: USB disconnect, device number 7 [ 49.721649][ T66] ftdi_sio 3-1:8.55: device disconnected [ 49.849871][ T979] tipc: Started in network mode [ 49.854815][ T979] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 49.864628][ T979] tipc: Enabled bearer , priority 10 [ 49.905058][ T985] cgroup: name respecified [ 50.210275][ T991] rust_binder: Error while translating object. [ 50.210321][ T991] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 50.217120][ T991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:84 [ 50.241590][ T993] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.251757][ T993] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 50.297958][ T66] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 50.464580][ T66] usb 4-1: not running at top speed; connect to a high speed hub [ 50.486766][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.500250][ T66] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 50.512327][ T66] usb 4-1: string descriptor 0 read error: -22 [ 50.519770][ T66] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.530002][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.746228][ T10] usb 4-1: USB disconnect, device number 8 [ 50.978026][ T66] tipc: Node number set to 4269801494 [ 51.460097][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 51.489701][ T36] audit: type=1400 audit(1760027493.600:263): avc: denied { read } for pid=1036 comm="syz.2.255" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 51.555137][ T36] audit: type=1400 audit(1760027493.600:264): avc: denied { open } for pid=1036 comm="syz.2.255" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 52.562116][ T36] audit: type=1400 audit(1760027494.150:265): avc: denied { map } for pid=1042 comm="syz.3.258" path="socket:[6610]" dev="sockfs" ino=6610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 52.849349][ T36] audit: type=1400 audit(1760027494.980:266): avc: denied { write } for pid=1052 comm="syz.3.262" path="socket:[6001]" dev="sockfs" ino=6001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.879339][ T1055] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 52.925456][ T36] audit: type=1400 audit(1760027495.060:267): avc: denied { write } for pid=1064 comm="syz.2.268" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 52.949358][ T1065] random: crng reseeded on system resumption [ 52.973174][ T36] audit: type=1400 audit(1760027495.090:268): avc: denied { open } for pid=1064 comm="syz.2.268" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 53.009676][ T36] audit: type=1400 audit(1760027495.150:269): avc: denied { read write } for pid=1066 comm="syz.3.269" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 53.034906][ T1067] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 53.058008][ T36] audit: type=1400 audit(1760027495.150:270): avc: denied { open } for pid=1066 comm="syz.3.269" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 53.094134][ T36] audit: type=1400 audit(1760027495.190:271): avc: denied { view } for pid=1074 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 53.234059][ T36] audit: type=1400 audit(1760027495.370:272): avc: denied { write } for pid=1080 comm="syz.2.277" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.268777][ T1103] 9pnet_fd: Insufficient options for proto=fd [ 53.318794][ T1106] overlayfs: failed to clone upperpath [ 53.365701][ T1108] tipc: Enabled bearer , priority 0 [ 53.373008][ T1108] syzkaller0: entered promiscuous mode [ 53.382402][ T1108] syzkaller0: entered allmulticast mode [ 53.392065][ T1108] tipc: Resetting bearer [ 53.399162][ T1107] tipc: Resetting bearer [ 53.414182][ T1107] tipc: Disabling bearer [ 55.558235][ T1216] random: crng reseeded on system resumption [ 55.585705][ T1216] Unrecognized hibernate image header format! [ 55.592346][ T1216] PM: hibernation: Image mismatch: architecture specific data [ 55.684237][ T1221] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 56.193264][ T1271] tipc: Failed to remove unknown binding: 66,1,1/0:1000050971/1000050973 [ 56.202961][ T1271] tipc: Failed to remove unknown binding: 66,1,1/0:1000050971/1000050973 [ 56.212039][ T1271] tipc: Failed to remove unknown binding: 66,1,1/0:1000050971/1000050973 [ 56.738364][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 56.738394][ T36] audit: type=1400 audit(1760027498.880:287): avc: denied { bind } for pid=1309 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.571575][ T1422] tmpfs: Unknown parameter 'usrquota' [ 59.468636][ T36] audit: type=1400 audit(1760027501.610:288): avc: denied { create } for pid=1466 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 59.549997][ T1477] overlayfs: failed to clone upperpath [ 59.838158][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 59.848680][ T1489] can: request_module (can-proto-6) failed. [ 59.989828][ T10] usb 4-1: config 0 has no interfaces? [ 59.995669][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 60.005122][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.014266][ T10] usb 4-1: config 0 descriptor?? [ 60.883588][ T1523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.468'. [ 60.914128][ T36] audit: type=1326 audit(1760027503.050:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1526 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec04f8eec9 code=0x7ffc0000 [ 60.940031][ T36] audit: type=1326 audit(1760027503.050:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1526 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec04f8eec9 code=0x7ffc0000 [ 60.967965][ T36] audit: type=1326 audit(1760027503.060:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1526 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec04f8eec9 code=0x7ffc0000 [ 60.992638][ T36] audit: type=1326 audit(1760027503.060:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1526 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec04f8eec9 code=0x7ffc0000 [ 61.017333][ T36] audit: type=1326 audit(1760027503.060:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1526 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec04f8eec9 code=0x7ffc0000 [ 61.042995][ T36] audit: type=1326 audit(1760027503.060:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1526 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec04f8eec9 code=0x7ffc0000 [ 61.067182][ T36] audit: type=1326 audit(1760027503.060:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1526 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec04f8eec9 code=0x7ffc0000 [ 61.091383][ T36] audit: type=1326 audit(1760027503.060:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1526 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec04f8eec9 code=0x7ffc0000 [ 62.398098][ T10] usb 4-1: USB disconnect, device number 9 [ 62.737944][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 62.823146][ T1600] overlayfs: failed to resolve './file1': -2 [ 62.887980][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 62.894982][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 62.903897][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.915558][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.926735][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 62.938508][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.953246][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 62.963301][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.185649][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 63.185669][ T36] audit: type=1400 audit(1760027512.320:304): avc: denied { setopt } for pid=1608 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 63.226817][ T1611] netlink: 204 bytes leftover after parsing attributes in process `syz.2.506'. [ 64.946021][ T36] audit: type=1400 audit(1760027514.080:305): avc: denied { name_bind } for pid=1644 comm="syz.1.517" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 65.111734][ T36] audit: type=1400 audit(1760027514.250:306): avc: denied { create } for pid=1662 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 65.134412][ T36] audit: type=1400 audit(1760027514.260:307): avc: denied { associate } for pid=1664 comm="syz.2.526" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 65.451820][ T457] usb 4-1: USB disconnect, device number 10 [ 66.096485][ T36] audit: type=1326 audit(1760027515.230:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1696 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d958eec9 code=0x7ffc0000 [ 66.120484][ T36] audit: type=1326 audit(1760027515.230:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1696 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d958eec9 code=0x7ffc0000 [ 66.144873][ T36] audit: type=1326 audit(1760027515.240:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1696 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa6d958eec9 code=0x7ffc0000 [ 66.168771][ T36] audit: type=1326 audit(1760027515.240:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1696 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d958eec9 code=0x7ffc0000 [ 66.202001][ T36] audit: type=1326 audit(1760027515.250:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1696 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa6d958eec9 code=0x7ffc0000 [ 66.231870][ T36] audit: type=1326 audit(1760027515.250:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1698 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa6d95c1785 code=0x7ffc0000 [ 66.414032][ T1686] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI [ 66.427384][ T1686] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 66.436184][ T1686] CPU: 1 UID: 0 PID: 1686 Comm: syz.3.535 Not tainted syzkaller #0 9b63ddcf0ca82069290034062ca02b4369282e80 [ 66.447664][ T1686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.458371][ T1686] RIP: 0010:fuse_file_release+0x29e/0x400 [ 66.464570][ T1686] Code: 00 74 12 48 89 df e8 31 e5 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 e4 e3 a0 ff 48 ba 00 00 00 00 00 fc [ 66.485499][ T1686] RSP: 0018:ffffc9000669fd00 EFLAGS: 00010202 [ 66.491599][ T1686] RAX: 0000000000000019 RBX: 0000000000000000 RCX: 0000000000080000 [ 66.499678][ T1686] RDX: dffffc0000000000 RSI: 0000000000000c78 RDI: 0000000000000c79 [ 66.508044][ T1686] RBP: ffffc9000669fd48 R08: 0000000000000003 R09: 0000000000000004 [ 66.516137][ T1686] R10: dffffc0000000000 R11: fffff52000cd3f70 R12: 0000000000109001 [ 66.524136][ T1686] R13: ffff88811a1a0900 R14: ffff888113aa5a00 R15: 00000000000000c8 [ 66.532315][ T1686] FS: 00007f9d4a5b96c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 66.541703][ T1686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.548312][ T1686] CR2: 0000200000404030 CR3: 000000011b3f0000 CR4: 00000000003526b0 [ 66.556578][ T1686] Call Trace: [ 66.560378][ T1686] [ 66.563536][ T1686] fuse_release+0x13e/0x1b0 [ 66.568163][ T1686] ? __cfi_fuse_release+0x10/0x10 [ 66.573399][ T1686] __fput+0x1fb/0xa00 [ 66.577590][ T1686] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 66.583364][ T1686] ____fput+0x20/0x30 [ 66.587556][ T1686] task_work_run+0x1e0/0x250 [ 66.592262][ T1686] ? __cfi_task_work_run+0x10/0x10 [ 66.597513][ T1686] ? __kasan_check_write+0x18/0x20 [ 66.602679][ T1686] resume_user_mode_work+0x36/0x50 [ 66.607822][ T1686] syscall_exit_to_user_mode+0x64/0xb0 [ 66.613308][ T1686] do_syscall_64+0x64/0xf0 [ 66.617935][ T1686] ? clear_bhb_loop+0x50/0xa0 [ 66.622791][ T1686] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.628792][ T1686] RIP: 0033:0x7f9d4978eec9 [ 66.633421][ T1686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.653995][ T1686] RSP: 002b:00007f9d4a5b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 66.662521][ T1686] RAX: ffffffffffffff95 RBX: 00007f9d499e5fa0 RCX: 00007f9d4978eec9 [ 66.670515][ T1686] RDX: 0000000000000000 RSI: 0000000000109281 RDI: 00002000000000c0 [ 66.679275][ T1686] RBP: 00007f9d49811f91 R08: 0000000000000000 R09: 0000000000000000 [ 66.687617][ T1686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.696478][ T1686] R13: 00007f9d499e6038 R14: 00007f9d499e5fa0 R15: 00007ffce5981118 [ 66.704763][ T1686] [ 66.707836][ T1686] Modules linked in: [ 66.712357][ T1686] ---[ end trace 0000000000000000 ]--- [ 66.718387][ T1686] RIP: 0010:fuse_file_release+0x29e/0x400 [ 66.724629][ T1686] Code: 00 74 12 48 89 df e8 31 e5 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 e4 e3 a0 ff 48 ba 00 00 00 00 00 fc [ 66.745382][ T1686] RSP: 0018:ffffc9000669fd00 EFLAGS: 00010202 [ 66.751600][ T1686] RAX: 0000000000000019 RBX: 0000000000000000 RCX: 0000000000080000 [ 66.759637][ T1686] RDX: dffffc0000000000 RSI: 0000000000000c78 RDI: 0000000000000c79 [ 66.767783][ T1686] RBP: ffffc9000669fd48 R08: 0000000000000003 R09: 0000000000000004 [ 66.776092][ T1686] R10: dffffc0000000000 R11: fffff52000cd3f70 R12: 0000000000109001 [ 66.784384][ T1686] R13: ffff88811a1a0900 R14: ffff888113aa5a00 R15: 00000000000000c8 [ 66.793124][ T1686] FS: 00007f9d4a5b96c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 66.802254][ T1686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.809166][ T1686] CR2: 0000200000404030 CR3: 000000011b3f0000 CR4: 00000000003526b0 [ 66.817452][ T1686] Kernel panic - not syncing: Fatal exception [ 66.823988][ T1686] Kernel Offset: disabled [ 66.828525][ T1686] Rebooting in 86400 seconds..