last executing test programs: 4.444387652s ago: executing program 3 (id=867): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000080)={0x5bc, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4490, 0x48}}}}, [@NL80211_ATTR_NAN_FUNC={0x59c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x108, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x480, 0xe, 0x0, 0x1, [{0xbd, 0x0, "f3c90e5a1fb5af2874e486bb6be3eab362300cd371a3247245adc6c47811bd3139dfc859a11c68a6d88bd0db00ef583a3a785e930db21d022562cde5e36ba5415148367eb59493125f419a2543e79d2b21133c348fcdd88a3768a50baf300211bd6a88e58c5a08db2c403ed048b663a8b4719b24d2848480889f9964698a35f25b03cedd7826edaa33a2ab735e1d151b27d7d4c7b65d37744967eb44b449b306e54374d4ee6c663f28aec8bd7dc92ef7586846fa1f83585a28"}, {0x27, 0x0, "cdb87a7061b28e7f52fbca48e5ef0932d5740e18394f3501758e5e8f5a8dd6dfc04f5f"}, {0xe1, 0x0, "57ab0de2379613c807e0f7f1a1f525bac6928acb5b766720ea0ad537b8ed4ddea323ef3191b39ee352baa7bb702500c40d86a5ae7529ee69684cdc040ba49193ed7f02cb9bd63825b734395796698c6ca2b5c19441ba630a8e56f87e18fd5b713971ae5e57ec0b2d861867ed7fb522451581341ef312aad74b4e6f49c451e9352863c16aa949ff0b5ac4a893f74acb2bf4b344014677b2fb4d0bfcb59f4c3f71e758771e8876602cb83085e1f9dbb682ba41dfb7375837a6207ee81a54414774e3ad31c5264da9a896d7a73e9c421e3194b3e1fd4fb378fb3ba428954d"}, {0x64, 0x0, "f1f7969c9ba539c760f2567bb720529c58543163590d5190f0b5480d4f140659cea3d924305176370079a0cf054c995c60f9a0d3c204b76c341ba471fbeebab2d397eed13b01bfef11e3c6d7f8accdb8ef1570ddacaf05de164932b8cade18f2"}, {0x100, 0x0, "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"}, {0x85, 0x0, "2313f64f9968b93f6c778161a40cafbc99d4b0d3c9a5034a6991e770b2559d2286e3452b254c331f44d66891393e4dd0a30976c8d4150eeac204538b0c15b7becd8e35529c486378591338dbe5c7c85ee067b28a20aec9e18daa3aac5e674712f176eb3bda79050ae9946180cf4051f6612e069c58a41e38cf226b13310f98681e"}, {0x86, 0x0, "f485cbc938768c87528b22418b567638193883c085bf1fd0e1d87062e7397aee5490da51c23a978093b8e7a0a5b510f990789abd148802bd2cde021d75c40a87515ce6a93c765dfe37a1ed1193bc06c4734e33b915e707913603bbff9a17b66dc1d11f6dbf5adc3019d89524a42288d28961b53ada5860a1402ed01a2cb6ef4d75a9"}, {0x3b, 0x0, "5d87621213c83e5de87cc0993b1b5b86d45e26f4994e51a2cff29da6c98b87447459548fbbffe99d213bedd2186d5762743f0dc0b4ec3d"}]}]}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x8002}, 0x4004045) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x67}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40040) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000008c0)=[@text64={0x40, &(0x7f0000000840)="c4826901340e66b8dc008ee0dfc748b8a4000000000000000f23d80f21f835800000200f23f8450fc7b28413000066ba6100b87c9a0000ef4f0fc7ab86000000363e440f01c2420f0f9b5e8d162bb666baf80cb87b9df085ef66bafc0cec", 0x5e}], 0x1, 0xb36a9bd10ff2a568, &(0x7f0000000900)=[@cstype0={0x4, 0xc}, @cstype0={0x4, 0x1}], 0x2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x130, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x114, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xdd}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x130}, 0x1, 0x0, 0x0, 0x24000094}, 0x80) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000ec0)={0x5, &(0x7f0000000bc0)=[{@fixed}, {@none}, {@fixed}, {@none}, {}]}) writev(r2, &(0x7f0000001000)=[{&(0x7f0000000f00)="ee2281eb4f0aff83d3114f72e3d9c6189e70426f79abff147f7b83a56268c8d8fc054ce084e144c4880b47e95e705da9c348d1256c119a774675b7c8d4de0e59c7519599c511303c5c8f030151fc51294161afb691abf95d5180d78f852a42d7641ea5b866095a6981b14f6759fe7dd4ce0f2bd23d6fb0397da42b8b06545022f5416aadd26f3313ea93ed6d78e8288e4f9880ffd0ab2edfbbbe72a0a207c9eb32ea50a4dba270447234e6d79bf9fab080dced50452ccbef2e39194935a5a5097e5a4159daa0985312b9684fc0e76fb66432e6d63b23c212b8c3522212d461e079da770122bdd2a21987488568adf0444ed7ff08", 0xf4}], 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000001180)={0x2, &(0x7f0000001040)=[{@fixed}, {@none}]}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001200), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x9c2ed1ff5947a8ff}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x44, r5, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x873}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8176}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, r0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001480)='autogroup\x00') r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001500), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x28, r7, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40000c0) r8 = syz_clone(0x0, &(0x7f0000001600)="18706131e868a79836b825339c1a93cf47f2e49c437331ebcc9374a36bf075ef3cced78a25576f9c997e284a2fec2f6c8f0bc9954ea8ead9297593b279be5a82660edaf0665828da9d21be5f3f4c7fb19380d2ae743dec2c77b312521ab6ea95ebeb3c5144a7d7151dce0202af2b29cbd9969bc561dcffabe04d61955603", 0x7e, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700)="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") fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002700)={0x1, 0x1, 0xfffffffffffffffd, 0xa, r8}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000002740)=""/32, &(0x7f0000002780)=0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x58, r0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x6, 0xa, "c25c"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f9d9154d65"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_open_procfs(r8, &(0x7f0000002900)='mountstats\x00') r10 = getpid() syz_open_procfs(r10, &(0x7f0000002940)='comm\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a00)={0x100, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1400000000}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd6b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000020}, 0x20000080) 4.398284193s ago: executing program 3 (id=868): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000040)=0x5, 0xfdda) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9050000005345204c696e7578fa8fcc9071b49bf1e8a0c49590d8c0bcc5e9f851dc5db30d13d38395f5f280dd14762d23d523008c96891214f122f6973774f53706e539695bb4b69ba06cb1c862588b6d06b768a68338c94aca7ca710a79fd2d700567b3075c1485ca3ceb88288821345592a003ba4c4e08fa2ee3ef2fc516c120e1942df22939984102589c0da"], 0x99) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/92, 0x5c, 0x0, 0x3c}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}, 0x1000}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x6, 0x0, 0x27}, @flat=@binder={0x73622a85, 0x1004, 0x3}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x1000}, @exit_looper, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) 4.272047805s ago: executing program 3 (id=869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="6c000000000301"], 0x6c}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x93, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a431676"}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x1000000) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, 0x0, 0x0, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x99b33000) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 3.441272168s ago: executing program 3 (id=886): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4e24, 0xff, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x5e}, {0xc, 0x480000000000000, 0x8000000000000000, 0x3, 0x3, 0x8, 0x6, 0xffffffffffffff1e}, {0xffffffff8974b177, 0x21a2, 0x9, 0x6}, 0x0, 0x0, 0x3, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4d2, 0x2b}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x0, 0xa, 0xfffffff8, 0x254e, 0x10}}, 0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x8000, 0x700, 0x0, 0x8, {{0x21, 0x4, 0x2, 0x8, 0x84, 0x67, 0x0, 0x1, 0x2b, 0x0, @rand_addr=0x64010102, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x81, 0x1, 0x7, [{@private=0xa010101, 0x9}]}, @ssrr={0x89, 0x27, 0x49, [@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010102, @broadcast, @local, @local, @empty, @private=0xa010100, @loopback, @local]}, @lsrr={0x83, 0x2b, 0xa0, [@multicast2, @local, @remote, @private=0xa010100, @broadcast, @multicast2, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x11}, @empty]}, @rr={0x7, 0xb, 0x22, [@dev={0xac, 0x14, 0x14, 0x16}, @multicast1]}]}}}}}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, r1}, 0xc) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x100000001) (async) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x11, r2, 0xc6c15000) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000001500)='\x00\x00\b\x00\xff\xff\xf7\xff\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q\x00\x00\x00\x00\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a\x00\x80\xff\xff\xff\xff\xff\xff\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xc3\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a\xde]X1`d\x9d\x9e\xd0\n\xa1\xa9\x8cO\xb8p\"\xe7\xdb\xab\x0eAW&+\xe8\xf7p\v\x01\\\x98\xeey\xc4c\x18\x91\xd9\x00\x1c\xf0.\x9f\x1e?\xea\xea\'0\"\x94\xd1\xd3P\xa8\xc5wP`\xa6\xd5Q\x11\xc3o\x04\vat\xb9}\x83g\xca\xfe\xf4\xe6;\x18\xb9\xe7<\xcf\x96~\x0f\xb0\xd3\x1bl\x9e\xc2\xc6\xcc\xbe\x8c#\xd0\x9f\x050\x1csf\x84\x06Z\xf4\xd2!\a\x8a\xc8\xbe\xdb\xf6y\x94Z\xed0\xdbZ\x9b8~\xc0\xbbU\xd5I\x14\xb6\xeb\xa7V\x00\x18A%') (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$FUSE_GETXATTR(r3, &(0x7f0000004200)={0x18, 0x0, 0x0, {0xfffffffe}}, 0x18) syz_usb_connect(0x2, 0x432, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0xbc, 0x7f, 0x95, 0x20, 0x411, 0x1a2, 0xf715, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x420, 0x3, 0xf, 0x6, 0xe0, 0xf7, [{{0x9, 0x4, 0xa6, 0x3, 0x5, 0x68, 0x67, 0x51, 0x9, [@hid_hid={0x9, 0x21, 0x4, 0x40, 0x1, {0x22, 0x4a2}}, @uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x9, 0x5, 0x0, "89c0caa4"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xde, 0x1, 0x8, 0x6, "", "8e1b"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x540, 0x4, "57b61746c79381"}]}], [{{0x9, 0x5, 0xc, 0x3, 0x20, 0xa, 0x9, 0x98}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x6, 0xf, 0x5}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0x9b, 0x4, 0x4, [@generic={0x3, 0x23, "f7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x8}]}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x4, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x99}, @generic={0xf4, 0x8, "51d8e94e6406e60935660d25b1c8bd4718f28ecf8a7eb4a2e9c0f2cc45194c6d3948f22085a93abd4e43697f256b182beb329920c1ac41a5a5cd09ed1ccfbbe980a3bdca162ffb5ccae30c223d80b611db3134f1788c169ac2e9faa290d9795263fdb3ae9a8c12f961959a747beaf17838f6db0ea75395a748f6949181cabf460c1d14a9259d22abc6daf387cc830adf0c458bd747c4b76e3f76c2fc838968eab592f02413814a142ae5a1f3b6267b91d835e7d9fab33aa2496dbfde1e89fd0b0db1dd6acf1f1b50f207e6b6dc5b23b55c9acfa3edb144fe137ed75d3f8449a09215a4b5da4ff9b8c373761fe7c6253aa2fd"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x9, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8, 0x14}]}}]}}, {{0x9, 0x4, 0xcb, 0x39, 0x7, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x9, 0xc, 0x200, 0x4c, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x31, 0x8}]}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0x8, 0x8, 0xe3, [@generic={0x8e, 0x22, "8e3a7ee908a0d9410c767a24d8e3c4373951917767a6e5a5f41d94b5f64d6fc6f35e388cc28299c287c2db6cb61cec9663b26e96b09eb1a2ae8a8ff7050c243f9e5bdc274a574808cf7afa51d57cd3e0f86d1593dc58c1a624bbe2bd1dcd342ca452028497f53449ad3ccd8c8d0d3b0bf6258bc0153a038494f8921b915e9734861aa1cbbfb2285d382731f3"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x29, 0x0, 0x8}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x81, 0x2, 0x8}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x9, 0x6, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x5, 0x2, 0x7, [@generic={0xe6, 0xd, "cf2fdf07be39ea940a9b571ca4d441d303426a1b85c9de218b915fc44b4bf20c011b6090e695ccacd25b17198806818256141a8d4609e889cbc51134855d3471a4257d26b96a9c3d91e46c0356ca1b9d0d53cc913864afe3c5a0e76143813f797e4c77cca04cbbf304a62ee0dff44bf256d352d3ab48da3e6b780b2b12767ec7fbf0e0dfb8aeeeb6600285e6cb19b44a961067e282c8c409367127856e12d637e7cdb9d44f94f6a82e4b2f03a5893b72ddbf77d3b9b215c7c0a7d4fdc110929b321bc0d0d42360e91fac97f6857c3351d57dbb5189094b9b4c6feb22a08d1ce5723d7517"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x3, 0x0, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x8}]}}]}}, {{0x9, 0x4, 0xac, 0x81, 0x7, 0xe0, 0x15, 0x39, 0x1, [], [{{0x9, 0x5, 0x2, 0x8, 0x200, 0x7, 0xe, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xfff3}, @generic={0x19, 0x22, "8240d3bc774f5f430c5d3d93a8fdd938f3bae9e65e2340"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x2, 0x7, 0x1}}, {{0x9, 0x5, 0x5, 0xc, 0xa00, 0x81, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x5}]}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0x3, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfe, 0xc8}]}}, {{0x9, 0x5, 0xf, 0x3, 0x0, 0x1, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x2e68}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x7, 0xf5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x2, 0xa6, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x53f}, @generic={0x42, 0xb, "cb41f6c458d50bed45df46a3f7abde90715e5f3019458cb763e0c379ad16da7b6d7b705a92c07200b66a0b3bcf76521c7704f8fa18fc7c83ab9b0ff7b06f0749"}]}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x8, 0x75, 0xf2, 0xff, 0x5}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x737c7f5ec3b55f37}}, {0x24, &(0x7f0000000380)=@string={0x24, 0x3, "09df8d7a068d4aa7ce37e43dc2c8afc73690e1d0ebf0a6b75d8cd9954fc57b83f001"}}, {0xdc, &(0x7f00000003c0)=@string={0xdc, 0x3, "778c3b71a7bca07f77015877b193460875a9997841f505bea6a8cd3843e5542cf5289e2d305a496b0a4422f5897e6d54abb0f7308290a5c0b504ff34a389269002a6c39ed6602727cf568d553ed340359fb69d0e4d56969b768250c6f659ad27485fc03b0e2ef6709cf9731551096751ed26387f9a08c1bda33c76831f6060bafc6c6800c1da91bb05bbe8037a63800399543b2e21a890600da930fa73aeac77cd90599623c2bf5bea04191b4c80b561e7fcf02f562e70d6c2f20d4a8762eae3a6a255473a947289e40bc315266bc0f29ebcabde921b3eb071e5"}}, {0xfe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]}, {0x58, &(0x7f0000000a80)=@string={0x58, 0x3, "c1150ec755971439c96d617ab90737d8cab3901fa5f0ac334b66339faa0d0293bfc78abb44c0970bb94091380061ca742844f75d6f3cbd24e2ae52649ca02ae183bcfd058d39ab734967f182c2c772962eb5b22a37c1"}}]}) (async, rerun: 64) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (rerun: 64) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000140)) 1.397778648s ago: executing program 2 (id=923): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x7, 0xf4a, 0x0, 0x40, 0x44150044}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x28, 0x0, &(0x7f0000000100)=[@increfs_done={0x40106308, 0x2}, @dead_binder_done, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) 1.25603613s ago: executing program 2 (id=926): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bind$can_raw(r7, &(0x7f0000000000), 0x10) fcntl$setstatus(r1, 0x4, 0x460c0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = socket(0xa, 0x3, 0x3a) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, 0x0, 0x0) close(0x3) 1.096130123s ago: executing program 0 (id=931): setuid(0xee01) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x101) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2, 0xffffffff}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0x5, 0x7ff, 0x0, {0x2, 0x8000000, 0x6, 0x0, 0xffffffff, 0x3, 0x201, 0x2, 0x42, 0xc000, 0x0, 0x0, r3, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x543, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)=0x2c) utime(&(0x7f00000029c0)='./file0\x00', 0x0) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000)=0x8, 0x4) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x804, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 1.095924083s ago: executing program 0 (id=932): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000180)={0x4000, 0xa, 0x2c}, 0x18) mkdirat(r0, &(0x7f0000000100)='./bus\x00', 0x1c4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x20) lseek(r1, 0x3, 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 1.093073594s ago: executing program 0 (id=933): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_open_dev$usbmon(&(0x7f0000002080), 0x8, 0x4082) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) 1.062213354s ago: executing program 0 (id=934): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x2, 'q+'}, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_EXE_FILE(0x38, 0xd, 0xffffffffffffffff) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x2}}, 0x10) connect$tipc(r2, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r2) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x5, 0x1, 0x7, 0x3, 0x471f, 0x800000]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x20, 0xe, 0x26, {0x26, 0xd, "618d52bfc7b1385985d89c802f07941814e4c6133e13096fbacbd8532a93ede98b3bb67f"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}, &(0x7f0000000640)={0x0, 0xf, 0x224, {0x5, 0xf, 0x224, 0x4, [@generic={0x65, 0x10, 0xb, "33cdf13623176ec0778f94ffac8169ec408db0ed8cddbf781bd0bbe55983df8c333036d2947190972f02f4959d5d21c05b746dfaaadccf4e88e6eb9298e286858473b6e80b9787249749619bfb124bfa3ac5ad20b6f0769b70091828c3428ffa73ea"}, @generic={0x103, 0x10, 0xa, "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"}, @generic={0xb4, 0x10, 0xf62374d520baa1b8, "a572c8f238dad0c3a0ea9cb3f9258e377670bb26c2af1d056c201c3be42e628d17f8a2fe786378f76b785267288d1550876f2754fb18e820513a33cfb86fb2119769367cf46c6a2489e1db2ed8a8616a208d1b62a62b1784c5c0b2136f2446673e7738fc331d4c360a852fa37573927e3b90f06049719f03acf511151d56ba684d93b480262e7af917d4753b772fa8e33bffc4c8dd1d103a37e88c269c1ad258489a2683aa61ac11e6df065baa8187d2d6"}, @ptm_cap={0x3}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa9, 0x8, 0xf, 0xf0, "804b3ecd", "f180d0bd"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x24, 0x34, 0x9, 0x9ec, 0x512}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000400)={0x40, 0x27, 0x15, "39869cfbc258067364b223c8dbfda82617ca9788f1"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x400, 0x40}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x81}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000900)={0x40, 0xb, 0x2, "05fd"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000980)={0x40, 0x13, 0x6, @local}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "c05d"}, 0x0, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000000b00)={0x40, 0x21, 0x1}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 737.903359ms ago: executing program 1 (id=936): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x1, 0xeeee0000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_pidfd_open(0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETSGCNT(r3, 0x89e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r5, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x3, 0x3, 0x26, @private2, @mcast1, 0x20, 0x20, 0x5, 0x9}}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @multicast2}, r6}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 737.716588ms ago: executing program 1 (id=937): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x802, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@private1, 0xb, 0x2, 0xff, 0x4, 0x9, 0xfff9}, 0x20) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd2(0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000180)={0xffffffffffffffff, 0x1, 0x2, 0x0, 0x61f8f2bf}, 0xc) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000040)={0x1, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 737.595759ms ago: executing program 1 (id=938): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000440), 0x0, 0xfffffffffffffeb0}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x2, 0x0, 0xb152, 0x5, 0x1ff, 0x0, 0x5}}) 681.739589ms ago: executing program 1 (id=939): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 672.35075ms ago: executing program 1 (id=940): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa6, 0x8c, 0x9a, 0x20, 0x1b3d, 0x1e2, 0x62d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x1, 0x17, 0x9c, 0xbd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) poll(&(0x7f0000000140)=[{r0, 0x240}], 0x1, 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0xfffffffffffffff8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) (async) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x101, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@handle={0x73682a85, 0x100a, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 510.565962ms ago: executing program 0 (id=941): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (fail_nth: 1) 448.004883ms ago: executing program 0 (id=942): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000780)="e37e", 0x2}, {&(0x7f0000000340)="4080392929d4", 0x6}, {&(0x7f0000000800)="7d17", 0x2}], 0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) io_setup(0x5, &(0x7f0000000440)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x3, 0x0, r4, 0x0}]) connect$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getpeername$tipc(r5, 0x0, &(0x7f0000000240)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 419.521824ms ago: executing program 3 (id=943): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0x1000800, 0x0, 0x1, 0xb, 0x0, 0x5}, 0x20) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) keyctl$reject(0x13, 0x0, 0x1, 0x204, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = fcntl$getown(r0, 0x9) syz_open_procfs(r1, &(0x7f00000008c0)='attr/keycreate\x00') r2 = syz_clone(0xc0038b00, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="00042dbd7000fcdbdf25110000001c000380080001000100000008000300030000000600040000280000080006000d000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) syz_usb_connect$cdc_ecm(0x6, 0x176, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x164, 0x1, 0x1, 0xfb, 0x10, 0x81, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0xb, {{0xb, 0x24, 0x6, 0x0, 0x0, "65859f63d491"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x3, 0x4, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x5, 0x80, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x82, 0x7f, 0x3, 0x65}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x3, 0xc9, 0x42}, @mbim_extended={0x8, 0x24, 0x1c, 0x2}, @mdlm_detail={0xf7, 0x24, 0x13, 0x8, "e0d2ea3950a3637d20b399d928759a6cfd3c9c6729b35c86ab5c51216e09ff7ef08db9e19c4b6d470dbd0ad7e981303e82f125002a9f6770f2761015bf50936883f1414b91d4ccf7e790b82adbbac78f8ac4e154c1a8d2aecb0d5ec97407436b1f15f4ddf06e53c553c93c2a4748936eef25e50749e99463656c0a20c544ca3e56da2bcbfea9aa16927d157e46e9eae401946f2ee42aaabb3a394b46316ad4335c88a8a80f79fb46af552ab9bae7bd2dd4c3d3fa49fd58d8e12c51647da7e07f9c660bbc7dcf51593b2770889360b286012742176d79d93a4d5c59ddb7617985b11ff6c3659b9c3151051a6fa427a9f3a3c0c4"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0xcf, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x7, 0x8}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0xc, 0x5, 0x5, 0x0, 0x6}, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="050f0f00020310080710021430850e"]}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) ioprio_set$pid(0x2, 0x0, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) r8 = gettid() (async) r9 = getpid() rt_tgsigqueueinfo(r9, r8, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27}) (async) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44142, 0x0) sendfile(r10, r7, 0x0, 0x800a121) 361.765534ms ago: executing program 3 (id=944): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x98) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x40047705, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x50041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x100) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r3) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x90012, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x7fffffff}}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@default_permissions}], [{@subj_user={'subj_user', 0x3d, 'cgroup2\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x1e}}, {@fsmagic={'fsmagic', 0x3d, 0x7fff}}]}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 244.076096ms ago: executing program 2 (id=945): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x804, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 243.690396ms ago: executing program 2 (id=946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x33, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 144.926557ms ago: executing program 1 (id=947): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x7079, 0x0, 0x4, 0x288}, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000540)=0x4, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES8=r3], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x1ff, 0x0, 0x5}}) 105.649918ms ago: executing program 2 (id=948): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000140)={{0x2, 0x4e24, @empty}, {0x1, @random="1f08b379bddd"}, 0x4, {0x2, 0x4e21, @private=0xa010102}, 'lo\x00'}) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r4, 0x2000) connect$packet(r1, &(0x7f00000000c0)={0x11, 0xf5, 0x0, 0x1, 0xb, 0x6, @multicast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) flock(0xffffffffffffffff, 0x8) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x201) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x40101000, 0x0, 0xfffffffffffffe48, 0x0, 0x0, 0x0) syz_clone(0x1048000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000001, 0x12, r5, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) prctl$PR_MCE_KILL_GET(0x22) connect$unix(r5, &(0x7f00000001c0)=@abs={0x1, 0x0, 0xbb}, 0x6e) mlock(&(0x7f00005c1000/0x4000)=nil, 0x4000) 0s ago: executing program 2 (id=949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x2, 'q+'}, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_EXE_FILE(0x38, 0xd, 0xffffffffffffffff) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x2}}, 0x10) connect$tipc(r2, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r2) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x5, 0x1, 0x7, 0x3, 0x471f, 0x800000]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x20, 0xe, 0x26, {0x26, 0xd, "618d52bfc7b1385985d89c802f07941814e4c6133e13096fbacbd8532a93ede98b3bb67f"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}, &(0x7f0000000640)={0x0, 0xf, 0x224, {0x5, 0xf, 0x224, 0x4, [@generic={0x65, 0x10, 0xb, "33cdf13623176ec0778f94ffac8169ec408db0ed8cddbf781bd0bbe55983df8c333036d2947190972f02f4959d5d21c05b746dfaaadccf4e88e6eb9298e286858473b6e80b9787249749619bfb124bfa3ac5ad20b6f0769b70091828c3428ffa73ea"}, @generic={0x103, 0x10, 0xa, "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"}, @generic={0xb4, 0x10, 0xf62374d520baa1b8, "a572c8f238dad0c3a0ea9cb3f9258e377670bb26c2af1d056c201c3be42e628d17f8a2fe786378f76b785267288d1550876f2754fb18e820513a33cfb86fb2119769367cf46c6a2489e1db2ed8a8616a208d1b62a62b1784c5c0b2136f2446673e7738fc331d4c360a852fa37573927e3b90f06049719f03acf511151d56ba684d93b480262e7af917d4753b772fa8e33bffc4c8dd1d103a37e88c269c1ad258489a2683aa61ac11e6df065baa8187d2d6"}, @ptm_cap={0x3}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa9, 0x8, 0xf, 0xf0, "804b3ecd", "f180d0bd"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x24, 0x34, 0x9, 0x9ec, 0x512}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000400)={0x40, 0x27, 0x15, "39869cfbc258067364b223c8dbfda82617ca9788f1"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x400, 0x40}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x81}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000900)={0x40, 0xb, 0x2, "05fd"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000980)={0x40, 0x13, 0x6, @local}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "c05d"}, 0x0, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000000b00)={0x40, 0x21, 0x1}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): 76 callbacks suppressed [ 41.549412][ T36] audit: type=1400 audit(1751388576.040:1536): avc: denied { ioctl } for pid=1075 comm="syz.3.257" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.589104][ T31] usb 3-1: device descriptor read/64, error -71 [ 41.629609][ T36] audit: type=1400 audit(1751388576.120:1537): avc: denied { ioctl } for pid=1075 comm="syz.3.257" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.631347][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.654556][ T36] audit: type=1400 audit(1751388576.120:1538): avc: denied { ioctl } for pid=1075 comm="syz.3.257" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.666092][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 41.689341][ T36] audit: type=1400 audit(1751388576.120:1539): avc: denied { ioctl } for pid=1075 comm="syz.3.257" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.702961][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.725077][ T36] audit: type=1400 audit(1751388576.120:1540): avc: denied { ioctl } for pid=1075 comm="syz.3.257" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.735821][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 41.760232][ T36] audit: type=1400 audit(1751388576.120:1541): avc: denied { ioctl } for pid=1075 comm="syz.3.257" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.773148][ T306] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 41.797936][ T36] audit: type=1400 audit(1751388576.160:1542): avc: denied { ioctl } for pid=1075 comm="syz.3.257" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.806443][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.831669][ T36] audit: type=1400 audit(1751388576.190:1543): avc: denied { ioctl } for pid=1053 comm="syz.2.251" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.839026][ T31] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 41.864466][ T36] audit: type=1400 audit(1751388576.190:1544): avc: denied { ioctl } for pid=1053 comm="syz.2.251" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.895862][ T36] audit: type=1400 audit(1751388576.260:1545): avc: denied { ioctl } for pid=1053 comm="syz.2.251" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.920846][ T306] usb 4-1: config 0 descriptor?? [ 41.999121][ T31] usb 3-1: device descriptor read/64, error -71 [ 42.035355][ T1088] overlayfs: failed to resolve './file0': -2 [ 42.137275][ T306] usbhid 4-1:0.0: can't add hid device: -71 [ 42.151797][ T306] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 42.199238][ T306] usb 4-1: USB disconnect, device number 5 [ 42.259091][ T31] usb 3-1: device descriptor read/64, error -71 [ 42.394137][ T31] usb usb3-port1: attempt power cycle [ 42.489152][ T306] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 42.489152][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 42.619096][ T9] usb 2-1: device descriptor read/64, error -71 [ 42.659228][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 42.666243][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.676389][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.687378][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.697254][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 42.710041][ T306] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 42.719087][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.727655][ T306] usb 4-1: config 0 descriptor?? [ 42.749118][ T31] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 42.771397][ T31] usb 3-1: device descriptor read/8, error -71 [ 42.869139][ T9] usb 2-1: device descriptor read/64, error -71 [ 42.901180][ T31] usb 3-1: device descriptor read/8, error -71 [ 43.056474][ T1115] overlayfs: overlapping lowerdir path [ 43.129099][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 43.139217][ T31] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 43.146822][ T306] betop 0003:20BC:5500.0006: unknown main item tag 0x0 [ 43.156636][ T1117] support for the xor transformation has been removed. [ 43.156726][ T306] betop 0003:20BC:5500.0006: unknown main item tag 0x0 [ 43.175979][ T31] usb 3-1: device descriptor read/8, error -71 [ 43.184017][ T306] betop 0003:20BC:5500.0006: hidraw1: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.3-1/input0 [ 43.195109][ T306] betop 0003:20BC:5500.0006: no inputs found [ 43.289097][ T9] usb 2-1: device descriptor read/64, error -71 [ 43.327168][ T1120] €Â: renamed from erspan0 (while UP) [ 43.351455][ T527] usb 4-1: USB disconnect, device number 6 [ 43.371303][ T31] usb 3-1: device descriptor read/8, error -71 [ 43.490319][ T31] usb usb3-port1: unable to enumerate USB device [ 43.539121][ T9] usb 2-1: device descriptor read/64, error -71 [ 43.585876][ T1127] input: syz1 as /devices/virtual/input/input8 [ 43.600248][ T307] udevd[307]: symlink '../../loop8' '/dev/disk/by-diskseq/56.tmp-b7:8' failed: Read-only file system [ 43.647361][ T307] udevd[307]: symlink '../../loop8' '/dev/disk/by-diskseq/56.tmp-b7:8' failed: Read-only file system [ 43.652744][ T9] usb usb2-port1: attempt power cycle [ 43.682904][ T1129] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.682931][ T1129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:215 [ 43.712878][ T307] udevd[307]: symlink '../../loop8' '/dev/disk/by-diskseq/56.tmp-b7:8' failed: Read-only file system [ 44.029247][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 44.062569][ T9] usb 2-1: device descriptor read/8, error -71 [ 44.139091][ T527] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 44.200980][ T9] usb 2-1: device descriptor read/8, error -71 [ 44.301816][ T527] usb 4-1: not running at top speed; connect to a high speed hub [ 44.311990][ T527] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 44.323251][ T527] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 44.334039][ T527] usb 4-1: config 1 interface 0 has no altsetting 0 [ 44.343496][ T527] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40 [ 44.352780][ T527] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.360798][ T527] usb 4-1: Product: 緜瑤㥃ꚙ礱໙ëœê‘ï¡ç¸çˆ”㻗꣆꽚걷áºî¶“ẙ袪鷪齇榶쨄é©äžî¬¹Ï´î±¡è²·ç‹µã±ˆåŽ…薉ᯔ핡á¢è‚ㆦã®å‰¿ì••äœ•ç£ æ…䛷ꔡ麃㭕锜ì“孢輨ç”꘹霶áœè¦±ã™…æ¤ã’§ê›œì¾«à½•ç¹”礨듋촉 [ 44.382821][ T527] usb 4-1: Manufacturer: 횲仫ꚅ [ 44.388214][ T527] usb 4-1: SerialNumber: syz [ 44.396289][ T1140] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 44.409086][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 44.409910][ T1140] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 44.439114][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 44.464457][ T1154] overlayfs: overlapping lowerdir path [ 44.481298][ T9] usb 2-1: device descriptor read/8, error -71 [ 44.583734][ T10] usb 3-1: config 7 has an invalid interface number: 228 but max is 3 [ 44.600053][ T10] usb 3-1: config 7 has an invalid interface number: 100 but max is 3 [ 44.618460][ T10] usb 3-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 44.637963][ T10] usb 3-1: config 7 has an invalid interface number: 139 but max is 3 [ 44.664713][ T9] usb 2-1: device descriptor read/8, error -71 [ 44.689129][ T10] usb 3-1: config 7 has an invalid interface number: 69 but max is 3 [ 44.699087][ T527] usbhid 4-1:1.0: can't add hid device: -71 [ 44.705033][ T527] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 44.717977][ T10] usb 3-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 44.736046][ T527] usb 4-1: USB disconnect, device number 7 [ 44.741965][ T10] usb 3-1: config 7 has an invalid descriptor of length 170, skipping remainder of the config [ 44.762382][ T10] usb 3-1: config 7 has no interface number 0 [ 44.770326][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 44.773312][ T10] usb 3-1: config 7 has no interface number 1 [ 44.794233][ T31] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 44.795454][ T10] usb 3-1: config 7 has no interface number 2 [ 44.810029][ T9] usb usb2-port1: unable to enumerate USB device [ 44.838072][ T10] usb 3-1: config 7 has no interface number 3 [ 44.844848][ T10] usb 3-1: config 7 interface 228 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 44.856538][ T10] usb 3-1: config 7 interface 228 altsetting 64 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 44.868401][ T10] usb 3-1: config 7 interface 228 altsetting 64 endpoint 0xB has invalid maxpacket 439, setting to 64 [ 44.880093][ T10] usb 3-1: config 7 interface 228 altsetting 64 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 44.891904][ T10] usb 3-1: config 7 interface 228 altsetting 64 endpoint 0x3 has an invalid bInterval 255, changing to 4 [ 44.903916][ T10] usb 3-1: config 7 interface 228 altsetting 64 endpoint 0x3 has invalid maxpacket 18282, setting to 1023 [ 44.915922][ T10] usb 3-1: config 7 interface 228 altsetting 64 has a duplicate endpoint with address 0xF, skipping [ 44.932361][ T10] usb 3-1: config 7 interface 100 altsetting 222 has a duplicate endpoint with address 0x5, skipping [ 44.943714][ T10] usb 3-1: config 7 interface 100 altsetting 222 has a duplicate endpoint with address 0x8, skipping [ 44.955265][ T10] usb 3-1: config 7 interface 100 altsetting 222 has an invalid descriptor for endpoint zero, skipping [ 44.967036][ T10] usb 3-1: config 7 interface 100 altsetting 222 has a duplicate endpoint with address 0x3, skipping [ 44.978642][ T10] usb 3-1: config 7 interface 100 altsetting 222 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 44.990506][ T10] usb 3-1: config 7 interface 100 altsetting 222 endpoint 0xA has an invalid bInterval 127, changing to 4 [ 45.002870][ T10] usb 3-1: config 7 interface 100 altsetting 222 endpoint 0xA has invalid maxpacket 1064, setting to 1023 [ 45.014945][ T10] usb 3-1: config 7 interface 100 altsetting 222 has an invalid descriptor for endpoint zero, skipping [ 45.026078][ T10] usb 3-1: config 7 interface 100 altsetting 222 has a duplicate endpoint with address 0x4, skipping [ 45.037980][ T10] usb 3-1: config 7 interface 100 altsetting 222 has an invalid descriptor for endpoint zero, skipping [ 45.049818][ T10] usb 3-1: config 7 interface 100 altsetting 222 has a duplicate endpoint with address 0x5, skipping [ 45.060825][ T10] usb 3-1: config 7 interface 100 altsetting 222 has a duplicate endpoint with address 0xA, skipping [ 45.072746][ T10] usb 3-1: config 7 interface 100 altsetting 222 has a duplicate endpoint with address 0xF, skipping [ 45.084439][ T10] usb 3-1: config 7 interface 100 altsetting 222 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 45.096359][ T10] usb 3-1: config 7 interface 100 altsetting 222 has a duplicate endpoint with address 0x4, skipping [ 45.107988][ T10] usb 3-1: config 7 interface 139 altsetting 32 has a duplicate endpoint with address 0x1, skipping [ 45.119554][ T10] usb 3-1: config 7 interface 139 altsetting 32 has a duplicate endpoint with address 0xC, skipping [ 45.131270][ T10] usb 3-1: config 7 interface 139 altsetting 32 has a duplicate endpoint with address 0x7, skipping [ 45.142781][ T10] usb 3-1: config 7 interface 139 altsetting 32 has a duplicate endpoint with address 0x4, skipping [ 45.154424][ T10] usb 3-1: config 7 interface 139 altsetting 32 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 45.166211][ T10] usb 3-1: config 7 interface 139 altsetting 32 has a duplicate endpoint with address 0xF, skipping [ 45.178173][ T10] usb 3-1: config 7 interface 139 altsetting 32 has a duplicate endpoint with address 0x2, skipping [ 45.189718][ T10] usb 3-1: config 7 interface 139 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 45.239085][ T10] usb 3-1: config 7 interface 69 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 45.267305][ T10] usb 3-1: config 7 interface 69 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 45.293643][ T10] usb 3-1: config 7 interface 69 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 45.323068][ T10] usb 3-1: config 7 interface 69 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 45.357692][ T10] usb 3-1: config 7 interface 69 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 45.387791][ T10] usb 3-1: config 7 interface 69 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 45.424857][ T10] usb 3-1: config 7 interface 69 altsetting 8 has a duplicate endpoint with address 0x88, skipping [ 45.457723][ T10] usb 3-1: config 7 interface 69 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 45.478524][ T10] usb 3-1: config 7 interface 69 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 45.491510][ T10] usb 3-1: config 7 interface 69 altsetting 8 has 9 endpoint descriptors, different from the interface descriptor's value: 13 [ 45.516468][ T10] usb 3-1: config 7 interface 228 has no altsetting 0 [ 45.539130][ T10] usb 3-1: config 7 interface 100 has no altsetting 0 [ 45.552340][ T10] usb 3-1: config 7 interface 139 has no altsetting 0 [ 45.567570][ T1183] rust_binder: 1183: no such ref 0 [ 45.579072][ T10] usb 3-1: config 7 interface 69 has no altsetting 0 [ 45.599204][ T1183] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 45.599223][ T1183] rust_binder: Read failure Err(EFAULT) in pid:203 [ 45.620267][ T1185] rust_binder: Write failure EINVAL in pid:203 [ 45.629452][ T10] usb 3-1: Dual-Role OTG device on HNP port [ 45.664837][ T10] usb 3-1: New USB device found, idVendor=12d1, idProduct=dfc5, bcdDevice=f3.a9 [ 45.679074][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.692451][ T10] usb 3-1: Product: syz [ 45.696627][ T10] usb 3-1: Manufacturer: ã§ä±¥î¦ç«‘ෳ據éŒï¨Šâ·ï¼‡ÛŸè‡µè¢‹ê¨®Î›ë’¨ç¿‘较佾裵䨜䘶ﾄä“â–¿é…ꜚ∕㬖奫뀫ꡇ⣶ᘥ欑鞋년☵⠾äŸéˆ¾ï‹›ë¥Ží„갨딓㾆á¼áŸ’æ¶â—”࿻ꥳ閔激㙮➸螪킚钙׼㟞䞤鳴ⲳᘗ긊æ¦ã»›ç­¦ï©ç—½ä­Ÿî¼°â‘µà®£ï¡—䛌㬢⡲㬴๙甬ꟈ뙕陦ç’犯î“åŽâ¥‘玴豭鳚뛣 [ 45.730969][ T1192] overlayfs: overlapping lowerdir path [ 45.769094][ T10] usb 3-1: SerialNumber: syz [ 45.780882][ T10] usb 3-1: Interface #228 referenced by multiple IADs [ 45.919173][ T1203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.019386][ T1152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.079264][ T1152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.091103][ T1152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.119244][ T1152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.164821][ T1152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.185726][ T1152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.239778][ T1152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.263909][ T1152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.295088][ T10] usb 3-1: USB disconnect, device number 13 [ 46.527974][ T1231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.551760][ T1231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.598004][ T36] kauditd_printk_skb: 808 callbacks suppressed [ 46.598019][ T36] audit: type=1400 audit(1751388581.080:2354): avc: denied { mounton } for pid=1235 comm="syz.1.311" path="/70/file0" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 46.640695][ T1231] netlink: 288 bytes leftover after parsing attributes in process `syz.0.310'. [ 46.686631][ T36] audit: type=1400 audit(1751388581.120:2355): avc: denied { read } for pid=1233 comm="syz.3.312" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.736074][ T36] audit: type=1400 audit(1751388581.120:2356): avc: denied { read open } for pid=1233 comm="syz.3.312" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.780757][ T36] audit: type=1400 audit(1751388581.120:2357): avc: denied { ioctl } for pid=1233 comm="syz.3.312" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.814921][ T36] audit: type=1400 audit(1751388581.150:2358): avc: denied { mount } for pid=1235 comm="syz.1.311" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.911668][ T36] audit: type=1400 audit(1751388581.150:2359): avc: denied { mounton } for pid=1235 comm="syz.1.311" path="/70/bus" dev="tmpfs" ino=423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 46.979088][ T36] audit: type=1400 audit(1751388581.150:2360): avc: denied { unlink } for pid=1235 comm="syz.1.311" name="#25" dev="tmpfs" ino=427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 47.052233][ T36] audit: type=1400 audit(1751388581.160:2361): avc: denied { mount } for pid=1235 comm="syz.1.311" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.088010][ T1253] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 47.147826][ T1234] 9pnet_fd: Insufficient options for proto=fd [ 47.154584][ T36] audit: type=1400 audit(1751388581.200:2362): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.228662][ T36] audit: type=1400 audit(1751388581.210:2363): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.539512][ T1261] binder: Bad value for 'defcontext' [ 48.013403][ T1267] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 48.052556][ T1269] fuse: Bad value for 'user_id' [ 48.057438][ T1269] fuse: Bad value for 'user_id' [ 48.222661][ T1234] SELinux: policydb magic number 0x332f6466 does not match expected magic number 0xf97cff8c [ 48.261598][ T1234] SELinux: failed to load policy [ 48.311357][ T1280] netlink: 1072 bytes leftover after parsing attributes in process `syz.2.327'. [ 48.340726][ T1280] netlink: 280 bytes leftover after parsing attributes in process `syz.2.327'. [ 48.440586][ T1282] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 48.440609][ T1282] rust_binder: Error while translating object. [ 48.468230][ T1282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.484597][ T1282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 48.645660][ T1294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.673321][ T1294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235 [ 48.735975][ T1300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.771998][ T1300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.789004][ T1304] overlayfs: conflicting options: userxattr,metacopy=on [ 49.100669][ T1325] UHID_CREATE from different security context by process 241 (syz.3.344), this is not allowed. [ 49.158349][ T1325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.158378][ T1325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:241 [ 49.259698][ T1329] tmpfs: Unknown parameter 'indo64' [ 49.302076][ T1331] rust_binder: 1331: no such ref 3 [ 49.307229][ T1331] rust_binder: 1331: no such ref 3 [ 49.354960][ T1331] rust_binder: 1331: no such ref 3 [ 49.359860][ T1334] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 49.369100][ T1331] rust_binder: Write failure EINVAL in pid:249 [ 49.699084][ T10] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 49.760210][ T306] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 49.789483][ T527] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 49.830701][ T1362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.839749][ T1362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.849093][ T10] usb 4-1: device descriptor read/64, error -71 [ 49.919086][ T306] usb 3-1: Using ep0 maxpacket: 32 [ 49.926140][ T306] usb 3-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 243, changing to 11 [ 49.937400][ T306] usb 3-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 49.950365][ T306] usb 3-1: config 1 interface 0 has no altsetting 0 [ 49.958594][ T306] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.967657][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 49.971675][ T527] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.975660][ T306] usb 3-1: SerialNumber: syz [ 49.987676][ T527] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 49.999729][ T527] usb 2-1: config 1 has no interface number 0 [ 50.002122][ T1346] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 50.013707][ T527] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.015874][ T306] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 50.043147][ T527] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.054168][ T527] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.062218][ T527] usb 2-1: Product: syz [ 50.066664][ T527] usb 2-1: Manufacturer: syz [ 50.071295][ T527] usb 2-1: SerialNumber: syz [ 50.079478][ T527] usb 2-1: selecting invalid altsetting 1 [ 50.149111][ T10] usb 4-1: device descriptor read/64, error -71 [ 50.282885][ T1349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.291400][ T1349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.306992][ T1349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.315451][ T1349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.389935][ T10] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 50.457421][ T527] cdc_ncm 2-1:1.1: bind() failure [ 50.471090][ T527] usb 2-1: USB disconnect, device number 11 [ 50.539095][ T10] usb 4-1: device descriptor read/64, error -71 [ 50.779099][ T10] usb 4-1: device descriptor read/64, error -71 [ 50.889454][ T10] usb usb4-port1: attempt power cycle [ 51.111364][ T1387] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 51.111387][ T1387] rust_binder: Read failure Err(EFAULT) in pid:247 [ 51.119956][ T1387] rust_binder: Write failure EFAULT in pid:247 [ 51.197290][ T1389] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.232326][ T1389] rust_binder: Write failure EINVAL in pid:249 [ 51.239107][ T10] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 51.271560][ T10] usb 4-1: device descriptor read/8, error -71 [ 51.282338][ T1390] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 51.431527][ T10] usb 4-1: device descriptor read/8, error -71 [ 51.492520][ T1400] overlayfs: missing 'lowerdir' [ 51.529638][ T1399] binder: Unknown parameter 'contextÀfs/binder1' [ 51.550489][ T1399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.558986][ T1399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.599898][ T36] kauditd_printk_skb: 713 callbacks suppressed [ 51.599914][ T36] audit: type=1400 audit(1751388586.090:3053): avc: denied { read write } for pid=1401 comm="syz.1.371" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.632907][ T36] audit: type=1400 audit(1751388586.090:3054): avc: denied { read write open } for pid=1401 comm="syz.1.371" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.661482][ T36] audit: type=1400 audit(1751388586.110:3055): avc: denied { ioctl } for pid=1340 comm="syz.3.348" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.679149][ T10] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 51.699918][ T36] audit: type=1400 audit(1751388586.150:3056): avc: denied { mount } for pid=1401 comm="syz.1.371" name="/" dev="ramfs" ino=11250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 51.732291][ T36] audit: type=1400 audit(1751388586.150:3057): avc: denied { read } for pid=1401 comm="syz.1.371" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.751248][ T10] usb 4-1: device descriptor read/8, error -71 [ 51.761877][ T36] audit: type=1400 audit(1751388586.150:3058): avc: denied { read open } for pid=1401 comm="syz.1.371" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.786167][ T36] audit: type=1400 audit(1751388586.150:3059): avc: denied { ioctl } for pid=1401 comm="syz.1.371" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.811546][ T36] audit: type=1400 audit(1751388586.240:3060): avc: denied { ioctl } for pid=1340 comm="syz.3.348" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.837216][ T36] audit: type=1400 audit(1751388586.240:3061): avc: denied { ioctl } for pid=1340 comm="syz.3.348" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.863066][ T36] audit: type=1400 audit(1751388586.240:3062): avc: denied { ioctl } for pid=1340 comm="syz.3.348" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.901523][ T10] usb 4-1: device descriptor read/8, error -71 [ 52.009722][ T10] usb usb4-port1: unable to enumerate USB device [ 52.501748][ T1421] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.535101][ T10] usb 3-1: USB disconnect, device number 14 [ 52.795502][ T1430] overlayfs: missing 'lowerdir' [ 53.074064][ T1441] 9pnet_fd: Insufficient options for proto=fd [ 53.321783][ T1438] rust_binder: Write failure EINVAL in pid:264 [ 53.325438][ T1460] overlayfs: failed to resolve './file0': -2 [ 53.499844][ T1469] 9pnet_fd: Insufficient options for proto=fd [ 53.547556][ T1471] netlink: 88 bytes leftover after parsing attributes in process `syz.3.396'. [ 53.615019][ T1475] netlink: 72 bytes leftover after parsing attributes in process `syz.0.398'. [ 53.721898][ T1482] 9p: Unknown access argument 00000000000000000000ý=¹&”ñ¼É½m'FrÔÁoŠ: -22 [ 53.819104][ T419] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 53.877724][ T1487] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.975698][ T419] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.987099][ T419] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.998532][ T419] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 54.009681][ T419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.018979][ T419] usb 3-1: config 0 descriptor?? [ 54.431904][ T1515] pim6reg1: entered allmulticast mode [ 54.440989][ T419] hid-thrustmaster 0003:044F:B65D.0008: collection stack underflow [ 54.459424][ T419] hid-thrustmaster 0003:044F:B65D.0008: item 0 4 0 12 parsing failed [ 54.478469][ T419] hid-thrustmaster 0003:044F:B65D.0008: parse failed with error -22 [ 54.493037][ T419] hid-thrustmaster 0003:044F:B65D.0008: probe with driver hid-thrustmaster failed with error -22 [ 54.546895][ T1519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265 [ 54.643410][ T419] usb 3-1: USB disconnect, device number 15 [ 54.700924][ T1523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.704328][ T1523] binder: Bad value for 'max' [ 54.729569][ T1523] rust_binder: Error in use_page_slow: ESRCH [ 54.729588][ T1523] rust_binder: use_range failure ESRCH [ 54.735657][ T1523] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 54.741198][ T1523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 54.749454][ T1523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:285 [ 55.099230][ T1532] netlink: 'syz.1.421': attribute type 12 has an invalid length. [ 55.367248][ T1548] overlayfs: failed to resolve './file0': -2 [ 55.419674][ T1551] binder: Unknown parameter 'contextÀ' [ 55.458583][ T1554] binder: Unknown parameter '`ax' [ 55.615638][ T1564] binder: Bad value for 'max' [ 55.841090][ T1577] vcan0: entered allmulticast mode [ 55.860313][ T1577] vcan0: left allmulticast mode [ 55.931004][ T1580] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 55.971153][ T1582] overlayfs: failed to resolve './file0': -2 [ 56.105572][ T1584] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 56.289091][ T306] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 56.459076][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 56.473572][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.495684][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.517749][ T306] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 56.527010][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.535771][ T306] usb 4-1: config 0 descriptor?? [ 56.609986][ T36] kauditd_printk_skb: 592 callbacks suppressed [ 56.610003][ T36] audit: type=1400 audit(1751388591.100:3655): avc: denied { read } for pid=1596 comm="syz.1.441" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.638747][ T36] audit: type=1400 audit(1751388591.100:3656): avc: denied { read open } for pid=1596 comm="syz.1.441" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.662169][ T36] audit: type=1400 audit(1751388591.100:3657): avc: denied { ioctl } for pid=1596 comm="syz.1.441" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.686646][ T36] audit: type=1400 audit(1751388591.130:3658): avc: denied { read write } for pid=1596 comm="syz.1.441" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.710121][ T36] audit: type=1400 audit(1751388591.130:3659): avc: denied { read write open } for pid=1596 comm="syz.1.441" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.734372][ T36] audit: type=1400 audit(1751388591.130:3660): avc: denied { ioctl } for pid=1596 comm="syz.1.441" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.759152][ T36] audit: type=1400 audit(1751388591.130:3661): avc: denied { ioctl } for pid=1596 comm="syz.1.441" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.784487][ T36] audit: type=1400 audit(1751388591.130:3662): avc: denied { ioctl } for pid=1596 comm="syz.1.441" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.784553][ T1591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.819447][ T1591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.828891][ T1591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.838212][ T36] audit: type=1400 audit(1751388591.130:3663): avc: denied { ioctl } for pid=1596 comm="syz.1.441" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.854335][ T1591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.864554][ T36] audit: type=1400 audit(1751388591.250:3664): avc: denied { read write } for pid=1585 comm="syz.3.438" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.883948][ T1591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.908688][ T1591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.927151][ T1591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.929104][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 56.944338][ T1591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.962726][ T1591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.980590][ T1591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.061809][ T306] usbhid 4-1:0.0: can't add hid device: -71 [ 57.067815][ T306] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 57.069099][ T10] usb 2-1: device descriptor read/64, error -71 [ 57.099449][ T306] usb 4-1: USB disconnect, device number 12 [ 57.319103][ T10] usb 2-1: device descriptor read/64, error -71 [ 57.399157][ T306] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 57.550997][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.559102][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 57.561915][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.579184][ T306] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 57.588199][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.597006][ T306] usb 4-1: config 0 descriptor?? [ 57.639834][ T1616] overlayfs: failed to clone upperpath [ 57.699118][ T10] usb 2-1: device descriptor read/64, error -71 [ 57.779280][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.949117][ T10] usb 2-1: device descriptor read/64, error -71 [ 58.013684][ T306] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 58.021041][ T306] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 58.028263][ T306] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 58.035542][ T306] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 58.042772][ T306] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 58.050964][ T306] hid-steam 0003:28DE:1142.0009: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 58.060195][ T10] usb usb2-port1: attempt power cycle [ 58.218999][ T314] usb 4-1: USB disconnect, device number 13 [ 58.409110][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 58.430960][ T10] usb 2-1: device descriptor read/8, error -71 [ 58.561220][ T10] usb 2-1: device descriptor read/8, error -71 [ 58.789027][ T1636] fuse: Bad value for 'fd' [ 58.799097][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 58.837141][ T10] usb 2-1: device descriptor read/8, error -71 [ 58.971537][ T10] usb 2-1: device descriptor read/8, error -71 [ 59.055063][ T1650] rust_binder: Error while translating object. [ 59.055094][ T1650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.071398][ T1650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:302 [ 59.089189][ T10] usb usb2-port1: unable to enumerate USB device [ 59.142812][ T1654] netlink: 140 bytes leftover after parsing attributes in process `syz.0.459'. [ 59.230335][ T1657] netlink: 'syz.3.461': attribute type 12 has an invalid length. [ 59.321311][ T1660] binder: Unknown parameter 'fsuuid' [ 59.438486][ T1665] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.438518][ T1665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305 [ 59.689111][ T527] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 59.852017][ T527] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 59.861764][ T527] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 59.871975][ T527] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.888038][ T527] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.897605][ T527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.905803][ T527] usb 3-1: Product: é½ æ–·å˜ì°·â·“㊔㡵錵ហ۷á‹ä Šâ’ƒÂ¿á¯‰è‚ƒâ…¬ãž ë¤®à¹°â²–똆áˆè’›é…©ì€¨æ µá㻢à¿â¹‘㔔⨞ྒྷㇵ澤Ú患표믧䣺㹇귎طê™æ”œë…³í–ºë¬Šé£á£“䌎拵䵋鳎ì‚î¸å¯ˆé¥¿ì†ä¬‰ç…“ᥱ㵚蕒縶煻ꀆ鋤у纗ã¿ë‚…✊é†æ‚’陈摎홅⯇ꂕëŒî‡¶â†Žê¬—︓も뗎辛谄畡쓖킊 [ 59.941384][ T527] usb 3-1: Manufacturer: ÐŒ [ 59.947226][ T527] usb 3-1: SerialNumber: 枃⽌￉욈츦é°î°ç”€â­ƒã¬™éˆ‘鴩袢풀ꛜ똽ç¥å±¦ã›î´±ì€…衿爟çžã»’ऴ [ 60.053138][ T1689] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 60.053161][ T1689] rust_binder: Read failure Err(EFAULT) in pid:316 [ 60.076737][ T1689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:316 [ 60.205192][ T527] usb 3-1: 0:2 : does not exist [ 60.240757][ T527] usb 3-1: USB disconnect, device number 16 [ 60.306309][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.538539][ T1698] rust_binder: 1698: no such ref 0 [ 60.551344][ T1700] rust_binder: 1700: no such ref 2 [ 60.551344][ T1699] rust_binder: Write failure EINVAL in pid:317 [ 60.551367][ T1700] rust_binder: Read failure Err(EAGAIN) in pid:317 [ 61.326073][ T1723] rust_binder: Failed to allocate buffer. len:4294966520, is_oneway:false [ 61.332656][ T1723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 61.341202][ T1723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:326 [ 61.576654][ T1736] batadv_slave_1: entered promiscuous mode [ 61.610461][ T1734] batadv_slave_1: left promiscuous mode [ 61.619617][ T36] kauditd_printk_skb: 922 callbacks suppressed [ 61.619642][ T36] audit: type=1400 audit(1751388596.110:4587): avc: denied { read } for pid=1735 comm="syz.1.488" dev="nsfs" ino=4026532465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.676055][ T36] audit: type=1400 audit(1751388596.110:4588): avc: denied { read open } for pid=1735 comm="syz.1.488" path="net:[4026532465]" dev="nsfs" ino=4026532465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.719693][ T1738] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.733613][ T36] audit: type=1400 audit(1751388596.110:4589): avc: denied { create } for pid=1735 comm="syz.1.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.754507][ T36] audit: type=1400 audit(1751388596.110:4590): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.759134][ T1738] audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64 [ 61.779758][ T36] audit: type=1400 audit(1751388596.110:4591): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.811246][ T1738] audit: backlog limit exceeded [ 61.817196][ T36] audit: type=1400 audit(1751388596.110:4592): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.849517][ T1738] audit: audit_backlog=65 > audit_backlog_limit=64 [ 62.183783][ T1772] futex_wake_op: syz.0.498 tries to shift op by -1; fix this program [ 62.192586][ T1772] tmpfs: Unknown parameter 'hŠ(Ɖa-vi€e' [ 62.199542][ T1772] SELinux: Context system_u:object_r:root_t:s0 is not valid (left unmapped). [ 62.221675][ T1774] futex_wake_op: syz.0.498 tries to shift op by -1; fix this program [ 62.417851][ T1781] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 62.430223][ T1781] rust_binder: Write failure EINVAL in pid:323 [ 62.649534][ T1800] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45 sclass=netlink_xfrm_socket pid=1800 comm=syz.0.506 [ 62.689325][ T1800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 63.050258][ T1809] binder: Unknown parameter 'contextÀ' [ 63.102022][ T1822] fuseblk: Bad value for 'rootmode' [ 63.298446][ T1828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 63.755329][ T1856] tipc: Enabling of bearer rejected, failed to enable media [ 63.772082][ T1859] random: crng reseeded on system resumption [ 64.092874][ T1869] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 64.138492][ T1869] SELinux: failed to load policy [ 64.154916][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.340375][ T1878] overlayfs: failed to clone lowerpath [ 64.668593][ T1899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 64.763399][ T1901] netlink: 140 bytes leftover after parsing attributes in process `syz.0.544'. [ 64.813859][ T1904] overlayfs: failed to clone lowerpath [ 65.069089][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 65.219241][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 65.226960][ T31] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 65.236782][ T31] usb 4-1: config 179 has no interface number 0 [ 65.243773][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 65.255607][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 65.267398][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.279613][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 65.291842][ T31] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 65.305993][ T31] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 65.315901][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.328766][ T1899] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 65.708491][ T1913] 9pnet_fd: Insufficient options for proto=fd [ 66.179084][ T1572] Bluetooth: hci0: command 0x1003 tx timeout [ 66.185123][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.509621][ T1924] overlayfs: missing 'lowerdir' [ 66.629125][ T36] kauditd_printk_skb: 28161 callbacks suppressed [ 66.629141][ T36] audit: type=1326 audit(2000000003.250:32668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1867 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57778e929 code=0x7ff00000 [ 66.664273][ T36] audit: type=1326 audit(2000000003.280:32669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1867 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57778e929 code=0x7ff00000 [ 66.688438][ T36] audit: type=1326 audit(2000000003.280:32670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1867 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57778e929 code=0x7ff00000 [ 66.712598][ T36] audit: type=1326 audit(2000000003.280:32671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1867 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57778e929 code=0x7ff00000 [ 66.736752][ T36] audit: type=1326 audit(2000000003.280:32672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1867 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57778e929 code=0x7ff00000 [ 66.761384][ T36] audit: type=1326 audit(2000000003.280:32673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1867 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57778e929 code=0x7ff00000 [ 66.785712][ T36] audit: type=1326 audit(2000000003.280:32674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1867 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57778e929 code=0x7ff00000 [ 66.810049][ T36] audit: type=1326 audit(2000000003.280:32675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1867 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57778e929 code=0x7ff00000 [ 66.834349][ T36] audit: type=1326 audit(2000000003.280:32676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1867 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57778e929 code=0x7ff00000 [ 66.858651][ T36] audit: type=1326 audit(2000000003.280:32677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1867 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57778e929 code=0x7ff00000 [ 67.519118][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 67.669095][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 67.677145][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.694254][ T527] usb 4-1: USB disconnect, device number 14 [ 67.694290][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 67.708646][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 67.717014][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.737070][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 67.751268][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 67.760891][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.782248][ T10] usb 3-1: config 0 descriptor?? [ 67.836629][ T1944] overlayfs: failed to clone lowerpath [ 67.853824][ T1944] overlayfs: missing 'lowerdir' [ 67.894172][ T1948] netlink: 'syz.0.565': attribute type 12 has an invalid length. [ 68.023672][ T1960] netlink: 80 bytes leftover after parsing attributes in process `syz.0.567'. [ 68.119685][ T1966] netlink: 52 bytes leftover after parsing attributes in process `syz.1.568'. [ 68.128627][ T1966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'. [ 68.137515][ T1966] netlink: 'syz.1.568': attribute type 1 has an invalid length. [ 68.146005][ T1966] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.146764][ T1966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.153233][ T1966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:372 [ 68.217534][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000A/input/input9 [ 68.423671][ T10] microsoft 0003:045E:07DA.000A: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 68.475121][ T1940] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45 sclass=netlink_xfrm_socket pid=1940 comm=syz.2.561 [ 68.490789][ T1940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 68.514121][ T306] usb 3-1: USB disconnect, device number 17 [ 68.527879][ T1974] overlayfs: missing 'lowerdir' [ 69.039120][ T306] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 69.191591][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.212712][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.238713][ T306] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 69.258720][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.276408][ T306] usb 4-1: config 0 descriptor?? [ 69.371388][ T2007] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 69.455510][ T2011] binder: Unknown parameter 'defcontext01777777777777777777777' [ 69.700514][ T306] belkin 0003:1020:0006.000B: unexpected long global item [ 69.719985][ T306] belkin 0003:1020:0006.000B: parse failed [ 69.725922][ T306] belkin 0003:1020:0006.000B: probe with driver belkin failed with error -22 [ 69.799088][ T314] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 69.951839][ T314] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.963455][ T314] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.973983][ T314] usb 3-1: config 0 interface 0 has no altsetting 0 [ 69.981785][ T314] usb 3-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 69.991714][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.001272][ T314] usb 3-1: config 0 descriptor?? [ 70.397922][ T2063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'. [ 70.406835][ T2063] bridge_slave_1: left allmulticast mode [ 70.414054][ T2063] bridge_slave_1: left promiscuous mode [ 70.420526][ T2063] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.430770][ T2063] bridge_slave_0: left allmulticast mode [ 70.436439][ T2063] bridge_slave_0: left promiscuous mode [ 70.440160][ T2016] random: crng reseeded on system resumption [ 70.450474][ T2063] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.479985][ T2016] netlink: 'syz.2.589': attribute type 11 has an invalid length. [ 70.551710][ T2068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.571702][ T2068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.187251][ T2079] netlink: 'syz.1.611': attribute type 7 has an invalid length. [ 71.196754][ T2079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.611'. [ 71.216285][ T2079] overlayfs: failed to clone lowerpath [ 71.244213][ T2083] overlayfs: failed to resolve './file0': -2 [ 71.748214][ T36] kauditd_printk_skb: 1644 callbacks suppressed [ 71.748229][ T36] audit: type=1400 audit(2000000520.358:34322): avc: denied { create } for pid=2095 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.774106][ T36] audit: type=1400 audit(2000000520.358:34323): avc: denied { setopt } for pid=2095 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.795288][ T10] usb 4-1: USB disconnect, device number 15 [ 71.812713][ T36] audit: type=1400 audit(2000000520.428:34324): avc: denied { create } for pid=2095 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.853342][ T36] audit: type=1400 audit(2000000520.428:34325): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.882310][ T36] audit: type=1400 audit(2000000520.428:34326): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.908841][ T2100] rust_binder: Write failure EINVAL in pid:401 [ 71.925864][ T36] audit: type=1400 audit(2000000520.428:34327): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.959579][ T36] audit: type=1400 audit(2000000520.458:34328): avc: denied { setopt } for pid=2095 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.979735][ T36] audit: type=1400 audit(2000000520.458:34329): avc: denied { create } for pid=2095 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.000810][ T36] audit: type=1400 audit(2000000520.458:34330): avc: denied { bind } for pid=2095 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.020943][ T36] audit: type=1400 audit(2000000520.458:34331): avc: denied { read write } for pid=2098 comm="syz.3.619" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.764832][ T2126] overlayfs: missing 'lowerdir' [ 72.891314][ T2130] cgroup: Invalid name [ 73.017174][ T2140] netlink: 1351 bytes leftover after parsing attributes in process `syz.0.635'. [ 73.093964][ T2150] overlayfs: failed to clone lowerpath [ 73.102565][ T2150] overlayfs: failed to clone upperpath [ 73.133784][ T2152] overlayfs: missing 'lowerdir' [ 73.237230][ T2157] SELinux: Context system_u:object_r:memory_device_t:s0 is not valid (left unmapped). [ 73.246976][ T306] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 73.260034][ T2157] overlayfs: failed to clone upperpath [ 73.381943][ T2181] overlayfs: failed to clone lowerpath [ 73.390089][ T2181] overlayfs: failed to clone upperpath [ 73.403000][ T306] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.414720][ T306] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 73.426894][ T306] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 73.431044][ T2183] overlayfs: missing 'lowerdir' [ 73.439200][ T306] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 73.452193][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.465161][ T2138] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 73.503648][ T2185] netlink: 4948 bytes leftover after parsing attributes in process `syz.0.651'. [ 74.289453][ T306] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 74.294213][ T2216] overlayfs: missing 'lowerdir' [ 74.297268][ T306] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input10 [ 74.569447][ T2222] /dev/rnullb0: Can't lookup blockdev [ 75.032950][ T2246] overlayfs: missing 'lowerdir' [ 75.150106][ T2254] overlayfs: failed to clone upperpath [ 75.219405][ T314] usbhid 3-1:0.0: can't add hid device: -32 [ 75.225434][ T314] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 75.240623][ T306] usb 3-1: USB disconnect, device number 18 [ 75.452597][ T2262] binder: Bad value for 'max' [ 75.561257][ T2269] overlayfs: missing 'lowerdir' [ 75.951745][ T2311] overlayfs: failed to clone upperpath [ 76.278740][ T2316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'. [ 76.400328][ T2321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.691'. [ 76.433139][ T2321] rust_binder: Error while translating object. [ 76.433169][ T2321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.448503][ T2321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:385 [ 76.461349][ T2320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2320 comm=syz.1.689 [ 76.751339][ T36] kauditd_printk_skb: 360 callbacks suppressed [ 76.751354][ T36] audit: type=1400 audit(2000000525.369:34692): avc: denied { mount } for pid=2333 comm="syz.2.696" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 76.793779][ T36] audit: type=1400 audit(2000000525.399:34693): avc: denied { mounton } for pid=2333 comm="syz.2.696" path="/135/bus" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.816305][ T36] audit: type=1400 audit(2000000525.399:34694): avc: denied { create } for pid=2332 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.839607][ T36] audit: type=1400 audit(2000000525.399:34695): avc: denied { ioctl } for pid=2332 comm="syz.0.697" path="socket:[16580]" dev="sockfs" ino=16580 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.865530][ T36] audit: type=1400 audit(2000000525.409:34696): avc: denied { connect } for pid=2332 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.928550][ T36] audit: type=1400 audit(2000000525.409:34697): avc: denied { write } for pid=2332 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.971758][ T36] audit: type=1400 audit(2000000525.409:34698): avc: denied { write } for pid=2332 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.032118][ T36] audit: type=1400 audit(2000000525.409:34699): avc: denied { create } for pid=2332 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.074314][ T36] audit: type=1400 audit(2000000525.419:34700): avc: denied { unlink } for pid=2333 comm="syz.2.696" name="#3b" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.096729][ T36] audit: type=1400 audit(2000000525.439:34701): avc: denied { mount } for pid=2333 comm="syz.2.696" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.243009][ T314] usb 4-1: USB disconnect, device number 16 [ 77.617959][ T2361] rust_binder: Write failure EFAULT in pid:425 [ 77.660074][ T2363] netlink: 'syz.0.707': attribute type 12 has an invalid length. [ 77.911002][ T2377] netlink: 1072 bytes leftover after parsing attributes in process `syz.2.714'. [ 77.938440][ T2377] netlink: 280 bytes leftover after parsing attributes in process `syz.2.714'. [ 78.088975][ T2389] rust_binder: Write failure EINVAL in pid:403 [ 78.518244][ T419] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 78.617938][ T2404] netlink: 'syz.0.722': attribute type 4 has an invalid length. [ 78.682128][ T2406] overlayfs: missing 'lowerdir' [ 78.690894][ T419] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.728179][ T419] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.748222][ T419] usb 3-1: config 0 interface 0 has no altsetting 0 [ 78.756568][ T419] usb 3-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 78.798173][ T419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.808886][ T419] usb 3-1: config 0 descriptor?? [ 79.068635][ T2427] /dev/rnullb0: Can't lookup blockdev [ 79.181860][ T2434] overlayfs: failed to clone lowerpath [ 79.200722][ T2434] overlayfs: missing 'workdir' [ 79.277779][ T2397] random: crng reseeded on system resumption [ 79.417771][ T2447] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 79.433688][ T2397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.448449][ T2447] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 79.476764][ T2447] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 79.514009][ T2397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.930071][ T2466] overlayfs: failed to clone lowerpath [ 79.961151][ T2466] overlayfs: missing 'workdir' [ 80.232597][ T2477] 9pnet: Could not find request transport: f( õÇ` [ 80.279082][ T2477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.300404][ T419] usbhid 3-1:0.0: can't add hid device: -71 [ 80.306413][ T419] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 80.316079][ T2477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.321604][ T419] usb 3-1: USB disconnect, device number 19 [ 80.372851][ T2477] fuse: Bad value for 'user_id' [ 80.390736][ T2477] fuse: Bad value for 'user_id' [ 80.602891][ T2482] fuseblk: Bad value for 'fd' [ 80.884326][ T2301] syz.1.686 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 80.935497][ T2301] CPU: 0 UID: 0 PID: 2301 Comm: syz.1.686 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 80.935532][ T2301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.935548][ T2301] Call Trace: [ 80.935554][ T2301] [ 80.935562][ T2301] __dump_stack+0x21/0x30 [ 80.935590][ T2301] dump_stack_lvl+0x10c/0x190 [ 80.935612][ T2301] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.935634][ T2301] ? ___ratelimit+0x3f7/0x5a0 [ 80.935656][ T2301] dump_stack+0x19/0x20 [ 80.935677][ T2301] dump_header+0xd7/0x490 [ 80.935703][ T2301] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 80.935722][ T2301] oom_kill_process+0x4c0/0x7e0 [ 80.935737][ T2301] ? sched_clock_cpu+0x75/0x400 [ 80.935757][ T2301] out_of_memory+0x7ee/0xbd0 [ 80.935772][ T2301] ? __cfi_out_of_memory+0x10/0x10 [ 80.935786][ T2301] ? mutex_lock_killable+0x92/0x1c0 [ 80.935805][ T2301] ? __cfi_mutex_lock_killable+0x10/0x10 [ 80.935826][ T2301] mem_cgroup_out_of_memory+0x279/0x350 [ 80.935849][ T2301] ? drain_obj_stock+0xed0/0xed0 [ 80.935874][ T2301] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 80.935897][ T2301] try_charge_memcg+0x8f7/0xde0 [ 80.935916][ T2301] ? set_pte_range+0x441/0x660 [ 80.935940][ T2301] ? __cfi_try_charge_memcg+0x10/0x10 [ 80.935960][ T2301] ? __alloc_pages_noprof+0x30d/0x6c0 [ 80.935986][ T2301] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 80.936007][ T2301] __mem_cgroup_charge+0xf6/0x410 [ 80.936030][ T2301] ? __cfi_folio_unlock+0x10/0x10 [ 80.936045][ T2301] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 80.936066][ T2301] shmem_alloc_and_add_folio+0x86d/0x1050 [ 80.936094][ T2301] ? put_swap_device+0x130/0x130 [ 80.936117][ T2301] ? shmem_huge_global_enabled+0x2da/0x360 [ 80.936141][ T2301] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 80.936165][ T2301] ? __kasan_check_write+0x18/0x20 [ 80.936186][ T2301] ? _raw_spin_lock+0x8c/0x120 [ 80.936213][ T2301] shmem_get_folio_gfp+0x5f0/0x1380 [ 80.936240][ T2301] ? shmem_get_folio+0xc0/0xc0 [ 80.936263][ T2301] ? follow_page_pte+0xa5c/0xb90 [ 80.936282][ T2301] ? inode_to_bdi+0x6d/0x100 [ 80.936302][ T2301] shmem_write_begin+0xf4/0x270 [ 80.936329][ T2301] generic_perform_write+0x32d/0x960 [ 80.936352][ T2301] ? __cfi_generic_perform_write+0x10/0x10 [ 80.936374][ T2301] ? down_write+0xe9/0x2a0 [ 80.936398][ T2301] ? file_update_time+0xa3/0x220 [ 80.936417][ T2301] shmem_file_write_iter+0x105/0x130 [ 80.936436][ T2301] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 80.936453][ T2301] __kernel_write_iter+0x392/0x830 [ 80.936472][ T2301] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 80.936490][ T2301] ? __cfi___kernel_write_iter+0x10/0x10 [ 80.936510][ T2301] ? get_dump_page+0x160/0x220 [ 80.936529][ T2301] ? __asan_memset+0x39/0x50 [ 80.936550][ T2301] ? iov_iter_bvec+0xc0/0x180 [ 80.936577][ T2301] dump_user_range+0xb06/0xdf0 [ 80.936601][ T2301] ? __cfi_dump_emit+0x10/0x10 [ 80.936624][ T2301] ? __cfi_dump_user_range+0x10/0x10 [ 80.936647][ T2301] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 80.936672][ T2301] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 80.936697][ T2301] elf_core_dump+0x2cd9/0x3810 [ 80.936725][ T2301] ? __cfi_elf_core_dump+0x10/0x10 [ 80.936754][ T2301] ? dump_interrupted+0xf0/0xf0 [ 80.936772][ T2301] ? filp_open+0x182/0x1d0 [ 80.936788][ T2301] ? 0xffffffffff600000 [ 80.936811][ T2301] do_coredump+0x1bf7/0x2bd0 [ 80.936834][ T2301] ? __cfi_do_coredump+0x10/0x10 [ 80.936854][ T2301] ? asm_exc_page_fault+0x2b/0x30 [ 80.936881][ T2301] ? __kasan_slab_free+0x6a/0x80 [ 80.936907][ T2301] ? kmem_cache_free+0x1c1/0x4c0 [ 80.936931][ T2301] get_signal+0x11fd/0x14f0 [ 80.936954][ T2301] arch_do_signal_or_restart+0x96/0x720 [ 80.936988][ T2301] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 80.937014][ T2301] irqentry_exit_to_user_mode+0x4e/0xb0 [ 80.937036][ T2301] irqentry_exit+0x16/0x60 [ 80.937057][ T2301] exc_page_fault+0x66/0xc0 [ 80.937077][ T2301] asm_exc_page_fault+0x2b/0x30 [ 80.937095][ T2301] RIP: 0033:0x7fefb118e931 [ 80.937111][ T2301] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 80.937128][ T2301] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 80.937154][ T2301] RAX: 0000000000000000 RBX: 00007fefb13b6160 RCX: 00007fefb118e929 [ 80.937168][ T2301] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 80.937179][ T2301] RBP: 00007fefb1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 80.937190][ T2301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.937201][ T2301] R13: 0000000000000001 R14: 00007fefb13b6160 R15: 00007ffe35bb06f8 [ 80.937216][ T2301] [ 80.937222][ T2301] memory: usage 307200kB, limit 307200kB, failcnt 18147 [ 80.944625][ T2493] overlayfs: failed to clone lowerpath [ 80.955144][ T2301] memory+swap: usage 432088kB, limit 9007199254740988kB, failcnt 0 [ 81.010166][ T2496] overlayfs: missing 'workdir' [ 81.030831][ T2301] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 81.067937][ T2301] Memory cgroup stats for [ 81.090730][ T2495] binder: Binderfs stats mode cannot be changed during a remount [ 81.175667][ T2301] /syz1: [ 81.434073][ T2301] cache 314290176 [ 81.440970][ T2301] rss 225280 [ 81.444357][ T2301] rss_huge 0 [ 81.447555][ T2301] shmem 314281984 [ 81.451220][ T2301] mapped_file 0 [ 81.454972][ T2301] dirty 0 [ 81.458405][ T2301] writeback 0 [ 81.461972][ T2301] workingset_refault_anon 23 [ 81.466555][ T2301] workingset_refault_file 240 [ 81.471265][ T2301] swap 127885312 [ 81.474991][ T2301] swapcached 98304 [ 81.478767][ T2301] pgpgin 251543 [ 81.483174][ T2301] pgpgout 175254 [ 81.486747][ T2301] pgfault 57697 [ 81.490382][ T2301] pgmajfault 56 [ 81.493983][ T2301] inactive_anon 133652480 [ 81.501486][ T2301] active_anon 180912128 [ 81.505648][ T2301] inactive_file 8192 [ 81.509564][ T2301] active_file 0 [ 81.513198][ T2301] unevictable 0 [ 81.516653][ T2301] hierarchical_memory_limit 314572800 [ 81.522081][ T2301] hierarchical_memsw_limit 9223372036854771712 [ 81.528420][ T2301] total_cache 314290176 [ 81.532705][ T2301] total_rss 225280 [ 81.536416][ T2301] total_rss_huge 0 [ 81.543601][ T2301] total_shmem 314281984 [ 81.547761][ T2301] total_mapped_file 0 [ 81.551790][ T2301] total_dirty 0 [ 81.555417][ T2301] total_writeback 0 [ 81.559248][ T2301] total_workingset_refault_anon 23 [ 81.564512][ T2301] total_workingset_refault_file 240 [ 81.569733][ T2301] total_swap 127885312 [ 81.572900][ T2509] overlayfs: missing 'lowerdir' [ 81.573979][ T2301] total_swapcached 98304 [ 81.583066][ T2301] total_pgpgin 251543 [ 81.587043][ T2301] total_pgpgout 175254 [ 81.591299][ T2301] total_pgfault 57697 [ 81.595279][ T2301] total_pgmajfault 56 [ 81.599283][ T2301] total_inactive_anon 133652480 [ 81.604293][ T2301] total_active_anon 180912128 [ 81.609009][ T2301] total_inactive_file 8192 [ 81.613577][ T2301] total_active_file 0 [ 81.617550][ T2301] total_unevictable 0 [ 81.621562][ T2301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.194,pid=866,uid=0 [ 81.636437][ T2301] Memory cgroup out of memory: Killed process 866 (syz.1.194) total-vm:93796kB, anon-rss:1092kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 81.659298][ T2306] syz.1.686 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 81.679557][ T2306] CPU: 0 UID: 0 PID: 2306 Comm: syz.1.686 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 81.679592][ T2306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.679605][ T2306] Call Trace: [ 81.679611][ T2306] [ 81.679619][ T2306] __dump_stack+0x21/0x30 [ 81.679645][ T2306] dump_stack_lvl+0x10c/0x190 [ 81.679665][ T2306] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.679685][ T2306] ? ___ratelimit+0x3f7/0x5a0 [ 81.679705][ T2306] dump_stack+0x19/0x20 [ 81.679724][ T2306] dump_header+0xd7/0x490 [ 81.679748][ T2306] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 81.679767][ T2306] oom_kill_process+0x4c0/0x7e0 [ 81.679784][ T2306] ? sched_clock_cpu+0x75/0x400 [ 81.679805][ T2306] out_of_memory+0x7ee/0xbd0 [ 81.679820][ T2306] ? __cfi_out_of_memory+0x10/0x10 [ 81.679835][ T2306] ? mutex_lock_killable+0x104/0x1c0 [ 81.679858][ T2306] ? __cfi_mutex_lock_killable+0x10/0x10 [ 81.679882][ T2306] mem_cgroup_out_of_memory+0x279/0x350 [ 81.679915][ T2306] ? drain_obj_stock+0xed0/0xed0 [ 81.679940][ T2306] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 81.679964][ T2306] try_charge_memcg+0x8f7/0xde0 [ 81.679986][ T2306] ? __cfi_try_charge_memcg+0x10/0x10 [ 81.680006][ T2306] ? __alloc_pages_noprof+0x30d/0x6c0 [ 81.680026][ T2306] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 81.680046][ T2306] ? __folio_batch_add_and_move+0x2ab/0x370 [ 81.680064][ T2306] __mem_cgroup_charge+0xf6/0x410 [ 81.680083][ T2306] ? __kasan_check_write+0x18/0x20 [ 81.680103][ T2306] ? _raw_spin_lock+0x8c/0x120 [ 81.680127][ T2306] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 81.680149][ T2306] shmem_alloc_and_add_folio+0x86d/0x1050 [ 81.680178][ T2306] ? put_swap_device+0x130/0x130 [ 81.680203][ T2306] ? shmem_huge_global_enabled+0x2da/0x360 [ 81.680230][ T2306] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 81.680256][ T2306] ? __kasan_check_write+0x18/0x20 [ 81.680279][ T2306] ? _raw_spin_lock+0x8c/0x120 [ 81.680306][ T2306] shmem_get_folio_gfp+0x5f0/0x1380 [ 81.680334][ T2306] ? shmem_get_folio+0xc0/0xc0 [ 81.680359][ T2306] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 81.680380][ T2306] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 81.680402][ T2306] ? inode_to_bdi+0x6d/0x100 [ 81.680422][ T2306] shmem_write_begin+0xf4/0x270 [ 81.680448][ T2306] generic_perform_write+0x32d/0x960 [ 81.680472][ T2306] ? __cfi_generic_perform_write+0x10/0x10 [ 81.680493][ T2306] ? down_write+0xe9/0x2a0 [ 81.680514][ T2306] ? mnt_get_write_access_file+0x1af/0x3b0 [ 81.680533][ T2306] ? mnt_put_write_access_file+0xc2/0x100 [ 81.680550][ T2306] ? file_update_time+0x1ef/0x220 [ 81.680570][ T2306] shmem_file_write_iter+0x105/0x130 [ 81.680590][ T2306] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 81.680610][ T2306] __kernel_write_iter+0x392/0x830 [ 81.680633][ T2306] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 81.680654][ T2306] ? __cfi___kernel_write_iter+0x10/0x10 [ 81.680677][ T2306] ? get_dump_page+0x160/0x220 [ 81.680696][ T2306] ? __asan_memset+0x39/0x50 [ 81.680716][ T2306] ? iov_iter_bvec+0xc0/0x180 [ 81.680739][ T2306] dump_user_range+0xb06/0xdf0 [ 81.680762][ T2306] ? __cfi_dump_emit+0x10/0x10 [ 81.680782][ T2306] ? __cfi_dump_user_range+0x10/0x10 [ 81.680803][ T2306] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 81.680827][ T2306] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 81.680852][ T2306] elf_core_dump+0x2cd9/0x3810 [ 81.680883][ T2306] ? __cfi_elf_core_dump+0x10/0x10 [ 81.680922][ T2306] ? dump_interrupted+0xf0/0xf0 [ 81.680941][ T2306] ? filp_open+0x182/0x1d0 [ 81.680958][ T2306] ? 0xffffffffff600000 [ 81.680972][ T2306] do_coredump+0x1bf7/0x2bd0 [ 81.680994][ T2306] ? __cfi_do_coredump+0x10/0x10 [ 81.681014][ T2306] ? asm_exc_page_fault+0x2b/0x30 [ 81.681042][ T2306] ? __kasan_slab_free+0x6a/0x80 [ 81.681068][ T2306] ? kmem_cache_free+0x1c1/0x4c0 [ 81.681092][ T2306] get_signal+0x11fd/0x14f0 [ 81.681115][ T2306] arch_do_signal_or_restart+0x96/0x720 [ 81.681140][ T2306] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 81.681167][ T2306] irqentry_exit_to_user_mode+0x4e/0xb0 [ 81.681192][ T2306] irqentry_exit+0x16/0x60 [ 81.681215][ T2306] exc_page_fault+0x66/0xc0 [ 81.681242][ T2306] asm_exc_page_fault+0x2b/0x30 [ 81.681261][ T2306] RIP: 0033:0x7fefb118e931 [ 81.681277][ T2306] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 81.681295][ T2306] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 81.681312][ T2306] RAX: 0000000000000000 RBX: 00007fefb13b6160 RCX: 00007fefb118e929 [ 81.681327][ T2306] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 81.681340][ T2306] RBP: 00007fefb1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 81.681353][ T2306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.681365][ T2306] R13: 0000000000000001 R14: 00007fefb13b6160 R15: 00007ffe35bb06f8 [ 81.681381][ T2306] [ 81.681389][ T2306] memory: usage 307200kB, limit 307200kB, failcnt 18609 [ 81.850178][ T36] kauditd_printk_skb: 448 callbacks suppressed [ 81.850193][ T36] audit: type=1400 audit(2000000530.469:35150): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.853916][ T2306] memory+swap: usage 431916kB, limit 9007199254740988kB, failcnt 0 [ 81.853930][ T2306] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 81.853942][ T2306] Memory cgroup stats for /syz1 [ 81.861630][ T36] audit: type=1400 audit(2000000530.469:35151): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.866060][ T2306] : [ 81.882706][ T36] audit: type=1400 audit(2000000530.489:35152): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.885501][ T2306] cache 314294272 [ 81.885510][ T2306] rss 225280 [ 81.885515][ T2306] rss_huge 0 [ 81.885521][ T2306] shmem 314286080 [ 81.885526][ T2306] mapped_file 0 [ 81.885532][ T2306] dirty 0 [ 81.885537][ T2306] writeback 0 [ 81.885543][ T2306] workingset_refault_anon 23 [ 81.885551][ T2306] workingset_refault_file 240 [ 81.885557][ T2306] swap 127709184 [ 81.885562][ T2306] swapcached 94208 [ 81.885568][ T2306] pgpgin 251544 [ 81.885573][ T2306] pgpgout 175255 [ 81.885579][ T2306] pgfault 57697 [ 81.885586][ T2306] pgmajfault 56 [ 81.885591][ T2306] inactive_anon 133521408 [ 81.967297][ T36] audit: type=1400 audit(2000000530.579:35153): avc: denied { mounton } for pid=2525 comm="syz.2.764" path="/145/file0" dev="tmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.970057][ T2306] active_anon 181043200 [ 81.983556][ T36] audit: type=1400 audit(2000000530.589:35154): avc: denied { mount } for pid=2525 comm="syz.2.764" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 81.984187][ T2306] inactive_file 8192 [ 82.004949][ T36] audit: type=1400 audit(2000000530.589:35155): avc: denied { mounton } for pid=2525 comm="syz.2.764" path="/145/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 82.033023][ T2306] active_file 0 [ 82.051876][ T2526] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.065511][ T2306] unevictable 0 [ 82.091285][ T36] audit: type=1400 audit(2000000530.599:35156): avc: denied { mount } for pid=2525 comm="syz.2.764" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.111389][ T2306] hierarchical_memory_limit 314572800 [ 82.142726][ T36] audit: type=1400 audit(2000000530.619:35157): avc: denied { mounton } for pid=2525 comm="syz.2.764" path="/145/bus" dev="tmpfs" ino=877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.148259][ T2306] hierarchical_memsw_limit 9223372036854771712 [ 82.165964][ T36] audit: type=1400 audit(2000000530.629:35158): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.172907][ T2306] total_cache 314294272 [ 82.205084][ T36] audit: type=1400 audit(2000000530.629:35159): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.230489][ T2306] total_rss 225280 [ 82.532124][ T2306] total_rss_huge 0 [ 82.538872][ T2306] total_shmem 314286080 [ 82.543919][ T2306] total_mapped_file 0 [ 82.567713][ T2306] total_dirty 0 [ 82.571203][ T2306] total_writeback 0 [ 82.577902][ T2306] total_workingset_refault_anon 23 [ 82.583030][ T2306] total_workingset_refault_file 240 [ 82.605682][ T2306] total_swap 127709184 [ 82.612258][ T2306] total_swapcached 94208 [ 82.647700][ T2306] total_pgpgin 251544 [ 82.651704][ T2306] total_pgpgout 175255 [ 82.655760][ T2306] total_pgfault 57697 [ 82.677306][ T2306] total_pgmajfault 56 [ 82.683152][ T2306] total_inactive_anon 133521408 [ 82.695599][ T2306] total_active_anon 181043200 [ 82.705755][ T2306] total_inactive_file 8192 [ 82.716329][ T2306] total_active_file 0 [ 82.733840][ T2306] total_unevictable 0 [ 82.747711][ T2306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.323,pid=1270,uid=0 [ 82.782506][ T2306] Memory cgroup out of memory: Killed process 1270 (syz.1.323) total-vm:93668kB, anon-rss:980kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 82.816354][ T2300] syz.1.686 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 82.827717][ T2300] CPU: 1 UID: 0 PID: 2300 Comm: syz.1.686 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 82.827749][ T2300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.827760][ T2300] Call Trace: [ 82.827766][ T2300] [ 82.827774][ T2300] __dump_stack+0x21/0x30 [ 82.827800][ T2300] dump_stack_lvl+0x10c/0x190 [ 82.827820][ T2300] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.827842][ T2300] ? ___ratelimit+0x3f7/0x5a0 [ 82.827862][ T2300] dump_stack+0x19/0x20 [ 82.827882][ T2300] dump_header+0xd7/0x490 [ 82.827907][ T2300] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 82.827927][ T2300] oom_kill_process+0x4c0/0x7e0 [ 82.827945][ T2300] out_of_memory+0x7ee/0xbd0 [ 82.827962][ T2300] ? __cfi_out_of_memory+0x10/0x10 [ 82.827978][ T2300] ? mem_cgroup_out_of_memory+0x1fa/0x350 [ 82.828003][ T2300] ? kasan_check_range+0x1ca/0x2a0 [ 82.828037][ T2300] mem_cgroup_out_of_memory+0x279/0x350 [ 82.828062][ T2300] ? drain_obj_stock+0xed0/0xed0 [ 82.828087][ T2300] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 82.828111][ T2300] try_charge_memcg+0x8f7/0xde0 [ 82.828130][ T2300] ? __cfi_try_charge_memcg+0x10/0x10 [ 82.828148][ T2300] ? __alloc_pages_noprof+0x30d/0x6c0 [ 82.828165][ T2300] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 82.828191][ T2300] ? __folio_batch_add_and_move+0x2ab/0x370 [ 82.828210][ T2300] __mem_cgroup_charge+0xf6/0x410 [ 82.828233][ T2300] ? __kasan_check_write+0x18/0x20 [ 82.828254][ T2300] ? _raw_spin_lock+0x8c/0x120 [ 82.828281][ T2300] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 82.828308][ T2300] shmem_alloc_and_add_folio+0x86d/0x1050 [ 82.828338][ T2300] ? put_swap_device+0x130/0x130 [ 82.828365][ T2300] ? shmem_huge_global_enabled+0x2da/0x360 [ 82.828391][ T2300] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 82.828414][ T2300] ? __kasan_check_write+0x18/0x20 [ 82.828437][ T2300] ? _raw_spin_lock+0x8c/0x120 [ 82.828463][ T2300] shmem_get_folio_gfp+0x5f0/0x1380 [ 82.828492][ T2300] ? shmem_get_folio+0xc0/0xc0 [ 82.828514][ T2300] ? follow_page_pte+0xa5c/0xb90 [ 82.828530][ T2300] ? inode_to_bdi+0x6d/0x100 [ 82.828548][ T2300] shmem_write_begin+0xf4/0x270 [ 82.828573][ T2300] generic_perform_write+0x32d/0x960 [ 82.828598][ T2300] ? __cfi_generic_perform_write+0x10/0x10 [ 82.828627][ T2300] ? down_write+0xe9/0x2a0 [ 82.828658][ T2300] ? file_update_time+0xa3/0x220 [ 82.828683][ T2300] shmem_file_write_iter+0x105/0x130 [ 82.828705][ T2300] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 82.828725][ T2300] __kernel_write_iter+0x392/0x830 [ 82.828753][ T2300] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 82.828772][ T2300] ? __cfi___kernel_write_iter+0x10/0x10 [ 82.828792][ T2300] ? get_dump_page+0x160/0x220 [ 82.828810][ T2300] ? __asan_memset+0x39/0x50 [ 82.828831][ T2300] ? iov_iter_bvec+0xc0/0x180 [ 82.828857][ T2300] dump_user_range+0xb06/0xdf0 [ 82.828883][ T2300] ? __cfi_dump_emit+0x10/0x10 [ 82.828904][ T2300] ? __cfi_dump_user_range+0x10/0x10 [ 82.828928][ T2300] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 82.828958][ T2300] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 82.828983][ T2300] elf_core_dump+0x2cd9/0x3810 [ 82.829014][ T2300] ? __cfi_elf_core_dump+0x10/0x10 [ 82.829052][ T2300] ? dump_interrupted+0xf0/0xf0 [ 82.829073][ T2300] ? filp_open+0x182/0x1d0 [ 82.829092][ T2300] ? 0xffffffffff600000 [ 82.829107][ T2300] do_coredump+0x1bf7/0x2bd0 [ 82.829131][ T2300] ? __cfi_do_coredump+0x10/0x10 [ 82.829152][ T2300] ? asm_exc_page_fault+0x2b/0x30 [ 82.829179][ T2300] ? __kasan_slab_free+0x6a/0x80 [ 82.829204][ T2300] ? kmem_cache_free+0x1c1/0x4c0 [ 82.829228][ T2300] get_signal+0x11fd/0x14f0 [ 82.829252][ T2300] arch_do_signal_or_restart+0x96/0x720 [ 82.829278][ T2300] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 82.829306][ T2300] irqentry_exit_to_user_mode+0x4e/0xb0 [ 82.829330][ T2300] irqentry_exit+0x16/0x60 [ 82.829353][ T2300] exc_page_fault+0x66/0xc0 [ 82.829374][ T2300] asm_exc_page_fault+0x2b/0x30 [ 82.829393][ T2300] RIP: 0033:0x7fefb118e931 [ 82.829409][ T2300] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 82.829426][ T2300] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 82.829444][ T2300] RAX: 0000000000000000 RBX: 00007fefb13b6160 RCX: 00007fefb118e929 [ 82.829459][ T2300] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 82.829471][ T2300] RBP: 00007fefb1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 82.829484][ T2300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.829497][ T2300] R13: 0000000000000001 R14: 00007fefb13b6160 R15: 00007ffe35bb06f8 [ 82.829513][ T2300] [ 82.831854][ T2300] memory: usage 307200kB, limit 307200kB, failcnt 18680 [ 83.292648][ T2300] memory+swap: usage 431988kB, limit 9007199254740988kB, failcnt 0 [ 83.302273][ T2300] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 83.309297][ T2300] Memory cgroup stats for /syz1: [ 83.309431][ T2300] cache 314294272 [ 83.318090][ T2300] rss 225280 [ 83.319813][ T2559] overlayfs: failed to clone lowerpath [ 83.321306][ T2300] rss_huge 0 [ 83.329950][ T2300] shmem 314286080 [ 83.333635][ T2300] mapped_file 0 [ 83.339099][ T2300] dirty 0 [ 83.342045][ T2300] writeback 0 [ 83.345318][ T2300] workingset_refault_anon 23 [ 83.350158][ T2300] workingset_refault_file 240 [ 83.354830][ T2300] swap 127782912 [ 83.358386][ T2300] swapcached 94208 [ 83.362094][ T2300] pgpgin 251608 [ 83.365304][ T2561] netlink: 'syz.0.776': attribute type 16 has an invalid length. [ 83.365542][ T2300] pgpgout 175319 [ 83.379339][ T2300] pgfault 57697 [ 83.382804][ T2300] pgmajfault 57 [ 83.386333][ T2300] inactive_anon 133390336 [ 83.390700][ T2300] active_anon 181174272 [ 83.394838][ T2300] inactive_file 8192 [ 83.398727][ T2300] active_file 0 [ 83.402171][ T2300] unevictable 0 [ 83.405603][ T2300] hierarchical_memory_limit 314572800 [ 83.410975][ T2300] hierarchical_memsw_limit 9223372036854771712 [ 83.417119][ T2300] total_cache 314294272 [ 83.421273][ T2300] total_rss 225280 [ 83.424981][ T2300] total_rss_huge 0 [ 83.428787][ T2300] total_shmem 314286080 [ 83.432963][ T2300] total_mapped_file 0 [ 83.436922][ T2300] total_dirty 0 [ 83.440392][ T2300] total_writeback 0 [ 83.444183][ T2300] total_workingset_refault_anon 23 [ 83.449302][ T2300] total_workingset_refault_file 240 [ 83.454497][ T2300] total_swap 127782912 [ 83.458572][ T2300] total_swapcached 94208 [ 83.462798][ T2300] total_pgpgin 251608 [ 83.466753][ T2300] total_pgpgout 175319 [ 83.470814][ T2300] total_pgfault 57697 [ 83.474779][ T2300] total_pgmajfault 57 [ 83.478760][ T2300] total_inactive_anon 133390336 [ 83.483593][ T2300] total_active_anon 181174272 [ 83.488271][ T2300] total_inactive_file 8192 [ 83.492671][ T2300] total_active_file 0 [ 83.496624][ T2300] total_unevictable 0 [ 83.500615][ T2300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.248,pid=1044,uid=0 [ 83.515377][ T2300] Memory cgroup out of memory: Killed process 1044 (syz.1.248) total-vm:93668kB, anon-rss:972kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 83.643165][ T2563] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 83.724639][ T2300] syz.1.686 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 83.783210][ T2300] CPU: 0 UID: 0 PID: 2300 Comm: syz.1.686 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 83.783242][ T2300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.783254][ T2300] Call Trace: [ 83.783260][ T2300] [ 83.783268][ T2300] __dump_stack+0x21/0x30 [ 83.783295][ T2300] dump_stack_lvl+0x10c/0x190 [ 83.783316][ T2300] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.783336][ T2300] ? ___ratelimit+0x3f7/0x5a0 [ 83.783357][ T2300] dump_stack+0x19/0x20 [ 83.783377][ T2300] dump_header+0xd7/0x490 [ 83.783403][ T2300] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 83.783423][ T2300] oom_kill_process+0x4c0/0x7e0 [ 83.783442][ T2300] ? sched_clock_cpu+0x75/0x400 [ 83.783465][ T2300] out_of_memory+0x7ee/0xbd0 [ 83.783482][ T2300] ? __cfi_out_of_memory+0x10/0x10 [ 83.783499][ T2300] ? mutex_lock_killable+0x92/0x1c0 [ 83.783522][ T2300] ? __cfi_mutex_lock_killable+0x10/0x10 [ 83.783546][ T2300] mem_cgroup_out_of_memory+0x279/0x350 [ 83.783571][ T2300] ? drain_obj_stock+0xed0/0xed0 [ 83.783596][ T2300] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 83.783619][ T2300] try_charge_memcg+0x8f7/0xde0 [ 83.783639][ T2300] ? __cfi_try_charge_memcg+0x10/0x10 [ 83.783657][ T2300] ? __alloc_pages_noprof+0x30d/0x6c0 [ 83.783675][ T2300] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 83.783695][ T2300] ? __folio_batch_add_and_move+0x2ab/0x370 [ 83.783722][ T2300] __mem_cgroup_charge+0xf6/0x410 [ 83.783744][ T2300] ? __kasan_check_write+0x18/0x20 [ 83.783767][ T2300] ? _raw_spin_lock+0x8c/0x120 [ 83.783793][ T2300] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 83.783817][ T2300] shmem_alloc_and_add_folio+0x86d/0x1050 [ 83.783848][ T2300] ? put_swap_device+0x130/0x130 [ 83.783875][ T2300] ? shmem_huge_global_enabled+0x2da/0x360 [ 83.783901][ T2300] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 83.783927][ T2300] ? __kasan_check_write+0x18/0x20 [ 83.783949][ T2300] ? _raw_spin_lock+0x8c/0x120 [ 83.783975][ T2300] shmem_get_folio_gfp+0x5f0/0x1380 [ 83.784001][ T2300] ? shmem_get_folio+0xc0/0xc0 [ 83.784024][ T2300] ? follow_page_pte+0xa5c/0xb90 [ 83.784044][ T2300] ? inode_to_bdi+0x6d/0x100 [ 83.784065][ T2300] shmem_write_begin+0xf4/0x270 [ 83.784093][ T2300] generic_perform_write+0x32d/0x960 [ 83.784117][ T2300] ? __cfi_generic_perform_write+0x10/0x10 [ 83.784138][ T2300] ? down_write+0xe9/0x2a0 [ 83.784161][ T2300] ? file_update_time+0xa3/0x220 [ 83.784181][ T2300] shmem_file_write_iter+0x105/0x130 [ 83.784202][ T2300] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 83.784221][ T2300] __kernel_write_iter+0x392/0x830 [ 83.784245][ T2300] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 83.784265][ T2300] ? __cfi___kernel_write_iter+0x10/0x10 [ 83.784287][ T2300] ? get_dump_page+0x160/0x220 [ 83.784306][ T2300] ? __asan_memset+0x39/0x50 [ 83.784326][ T2300] ? iov_iter_bvec+0xc0/0x180 [ 83.784352][ T2300] dump_user_range+0xb06/0xdf0 [ 83.784377][ T2300] ? __cfi_dump_emit+0x10/0x10 [ 83.784399][ T2300] ? __cfi_dump_user_range+0x10/0x10 [ 83.784422][ T2300] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 83.784447][ T2300] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 83.784472][ T2300] elf_core_dump+0x2cd9/0x3810 [ 83.784502][ T2300] ? __cfi_elf_core_dump+0x10/0x10 [ 83.784535][ T2300] ? dump_interrupted+0xf0/0xf0 [ 83.784556][ T2300] ? filp_open+0x182/0x1d0 [ 83.784575][ T2300] ? 0xffffffffff600000 [ 83.784590][ T2300] do_coredump+0x1bf7/0x2bd0 [ 83.784613][ T2300] ? __cfi_do_coredump+0x10/0x10 [ 83.784633][ T2300] ? asm_exc_page_fault+0x2b/0x30 [ 83.784660][ T2300] ? __kasan_slab_free+0x6a/0x80 [ 83.784686][ T2300] ? kmem_cache_free+0x1c1/0x4c0 [ 83.784719][ T2300] get_signal+0x11fd/0x14f0 [ 83.784743][ T2300] arch_do_signal_or_restart+0x96/0x720 [ 83.784769][ T2300] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 83.784797][ T2300] irqentry_exit_to_user_mode+0x4e/0xb0 [ 83.784819][ T2300] irqentry_exit+0x16/0x60 [ 83.784837][ T2300] exc_page_fault+0x66/0xc0 [ 83.784858][ T2300] asm_exc_page_fault+0x2b/0x30 [ 83.784877][ T2300] RIP: 0033:0x7fefb118e931 [ 83.784892][ T2300] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 83.784909][ T2300] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 83.784926][ T2300] RAX: 0000000000000000 RBX: 00007fefb13b6160 RCX: 00007fefb118e929 [ 83.784940][ T2300] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 83.784952][ T2300] RBP: 00007fefb1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 83.784964][ T2300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.784976][ T2300] R13: 0000000000000001 R14: 00007fefb13b6160 R15: 00007ffe35bb06f8 [ 83.784992][ T2300] [ 83.785069][ T2300] memory: usage 307200kB, limit 307200kB, failcnt 19778 [ 83.898239][ T31] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 83.904198][ T2300] memory+swap: usage 432088kB, limit 9007199254740988kB, failcnt 0 [ 83.937132][ T31] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 83.941680][ T2300] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 84.097559][ T2569] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.103218][ T2300] Memory cgroup stats for [ 84.204090][ T2570] fido_id[2570]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.214191][ T2300] /syz1: [ 84.312220][ T2300] cache 314290176 [ 84.318767][ T2300] rss 225280 [ 84.321996][ T2300] rss_huge 0 [ 84.325226][ T2300] shmem 314286080 [ 84.328885][ T2300] mapped_file 0 [ 84.332337][ T2300] dirty 0 [ 84.335268][ T2300] writeback 0 [ 84.338574][ T2300] workingset_refault_anon 23 [ 84.343157][ T2300] workingset_refault_file 242 [ 84.348411][ T2300] swap 127885312 [ 84.352040][ T2300] swapcached 98304 [ 84.355757][ T2300] pgpgin 251682 [ 84.360204][ T2300] pgpgout 175393 [ 84.363752][ T2300] pgfault 57700 [ 84.367204][ T2300] pgmajfault 59 [ 84.371680][ T2300] inactive_anon 94126080 [ 84.389919][ T2300] active_anon 220442624 [ 84.397549][ T2300] inactive_file 0 [ 84.402012][ T2300] active_file 4096 [ 84.405735][ T2300] unevictable 0 [ 84.417713][ T2300] hierarchical_memory_limit 314572800 [ 84.423111][ T2300] hierarchical_memsw_limit 9223372036854771712 [ 84.430066][ T2300] total_cache 314290176 [ 84.434227][ T2300] total_rss 225280 [ 84.442415][ T2300] total_rss_huge 0 [ 84.446913][ T2300] total_shmem 314286080 [ 84.451938][ T2300] total_mapped_file 0 [ 84.455998][ T2300] total_dirty 0 [ 84.460433][ T2300] total_writeback 0 [ 84.464385][ T2300] total_workingset_refault_anon 23 [ 84.470269][ T2300] total_workingset_refault_file 242 [ 84.475467][ T2300] total_swap 127885312 [ 84.480268][ T2300] total_swapcached 98304 [ 84.484533][ T2300] total_pgpgin 251682 [ 84.494713][ T2300] total_pgpgout 175393 [ 84.499444][ T2300] total_pgfault 57700 [ 84.503430][ T2300] total_pgmajfault 59 [ 84.507406][ T2300] total_inactive_anon 94126080 [ 84.525314][ T2300] total_active_anon 220442624 [ 84.530564][ T2300] total_inactive_file 0 [ 84.538110][ T2300] total_active_file 4096 [ 84.542364][ T2300] total_unevictable 0 [ 84.546342][ T2300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.686,pid=2301,uid=0 [ 84.564274][ T2300] Memory cgroup out of memory: Killed process 2301 (syz.1.686) total-vm:90092kB, anon-rss:1088kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 84.669395][ T2594] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.737272][ T2306] syz.1.686 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 84.782836][ T2306] CPU: 1 UID: 0 PID: 2306 Comm: syz.1.686 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 84.782869][ T2306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.782881][ T2306] Call Trace: [ 84.782887][ T2306] [ 84.782895][ T2306] __dump_stack+0x21/0x30 [ 84.782922][ T2306] dump_stack_lvl+0x10c/0x190 [ 84.782942][ T2306] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.782964][ T2306] ? ___ratelimit+0x3f7/0x5a0 [ 84.782985][ T2306] dump_stack+0x19/0x20 [ 84.783003][ T2306] dump_header+0xd7/0x490 [ 84.783029][ T2306] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 84.783050][ T2306] oom_kill_process+0x4c0/0x7e0 [ 84.783067][ T2306] ? sched_clock_cpu+0x75/0x400 [ 84.783090][ T2306] out_of_memory+0x7ee/0xbd0 [ 84.783107][ T2306] ? __cfi_out_of_memory+0x10/0x10 [ 84.783125][ T2306] ? mutex_lock_killable+0x92/0x1c0 [ 84.783147][ T2306] ? __cfi_mutex_lock_killable+0x10/0x10 [ 84.783171][ T2306] mem_cgroup_out_of_memory+0x279/0x350 [ 84.783196][ T2306] ? drain_obj_stock+0xed0/0xed0 [ 84.783221][ T2306] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 84.783245][ T2306] try_charge_memcg+0x8f7/0xde0 [ 84.783266][ T2306] ? __cfi_try_charge_memcg+0x10/0x10 [ 84.783286][ T2306] ? __alloc_pages_noprof+0x30d/0x6c0 [ 84.783307][ T2306] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 84.783326][ T2306] ? __folio_batch_add_and_move+0x2ab/0x370 [ 84.783346][ T2306] __mem_cgroup_charge+0xf6/0x410 [ 84.783367][ T2306] ? __kasan_check_write+0x18/0x20 [ 84.783390][ T2306] ? _raw_spin_lock+0x8c/0x120 [ 84.783416][ T2306] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 84.783440][ T2306] shmem_alloc_and_add_folio+0x86d/0x1050 [ 84.783470][ T2306] ? put_swap_device+0x130/0x130 [ 84.783498][ T2306] ? shmem_huge_global_enabled+0x2da/0x360 [ 84.783525][ T2306] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 84.783551][ T2306] ? __kasan_check_write+0x18/0x20 [ 84.783572][ T2306] ? _raw_spin_lock+0x8c/0x120 [ 84.783599][ T2306] shmem_get_folio_gfp+0x5f0/0x1380 [ 84.783627][ T2306] ? shmem_get_folio+0xc0/0xc0 [ 84.783651][ T2306] ? follow_page_pte+0xa5c/0xb90 [ 84.783671][ T2306] ? inode_to_bdi+0x6d/0x100 [ 84.783699][ T2306] shmem_write_begin+0xf4/0x270 [ 84.783723][ T2306] generic_perform_write+0x32d/0x960 [ 84.783746][ T2306] ? __cfi_generic_perform_write+0x10/0x10 [ 84.783768][ T2306] ? down_write+0xe9/0x2a0 [ 84.783791][ T2306] ? file_update_time+0xa3/0x220 [ 84.783811][ T2306] shmem_file_write_iter+0x105/0x130 [ 84.783832][ T2306] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 84.783852][ T2306] __kernel_write_iter+0x392/0x830 [ 84.783875][ T2306] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 84.783896][ T2306] ? __cfi___kernel_write_iter+0x10/0x10 [ 84.783919][ T2306] ? get_dump_page+0x160/0x220 [ 84.783937][ T2306] ? __asan_memset+0x39/0x50 [ 84.783958][ T2306] ? iov_iter_bvec+0xc0/0x180 [ 84.783985][ T2306] dump_user_range+0xb06/0xdf0 [ 84.784010][ T2306] ? __cfi_dump_emit+0x10/0x10 [ 84.784032][ T2306] ? __cfi_dump_user_range+0x10/0x10 [ 84.784055][ T2306] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 84.784079][ T2306] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 84.784105][ T2306] elf_core_dump+0x2cd9/0x3810 [ 84.784135][ T2306] ? __cfi_elf_core_dump+0x10/0x10 [ 84.784168][ T2306] ? dump_interrupted+0xf0/0xf0 [ 84.784190][ T2306] ? filp_open+0x182/0x1d0 [ 84.784208][ T2306] ? 0xffffffffff600000 [ 84.784224][ T2306] do_coredump+0x1bf7/0x2bd0 [ 84.784249][ T2306] ? __cfi_do_coredump+0x10/0x10 [ 84.784270][ T2306] ? asm_exc_page_fault+0x2b/0x30 [ 84.784297][ T2306] ? __kasan_slab_free+0x6a/0x80 [ 84.784323][ T2306] ? kmem_cache_free+0x1c1/0x4c0 [ 84.784347][ T2306] get_signal+0x11fd/0x14f0 [ 84.784370][ T2306] arch_do_signal_or_restart+0x96/0x720 [ 84.784395][ T2306] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 84.784423][ T2306] irqentry_exit_to_user_mode+0x4e/0xb0 [ 84.784448][ T2306] irqentry_exit+0x16/0x60 [ 84.784471][ T2306] exc_page_fault+0x66/0xc0 [ 84.784493][ T2306] asm_exc_page_fault+0x2b/0x30 [ 84.784513][ T2306] RIP: 0033:0x7fefb118e931 [ 84.784528][ T2306] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 84.784545][ T2306] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 84.784564][ T2306] RAX: 0000000000000000 RBX: 00007fefb13b6160 RCX: 00007fefb118e929 [ 84.784578][ T2306] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 84.784591][ T2306] RBP: 00007fefb1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 84.784604][ T2306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.784616][ T2306] R13: 0000000000000001 R14: 00007fefb13b6160 R15: 00007ffe35bb06f8 [ 84.784633][ T2306] [ 84.784654][ T2306] memory: usage 307200kB, limit 307200kB, failcnt 20507 [ 84.987448][ T2600] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 84.990315][ T2306] memory+swap: usage 421124kB, limit 9007199254740988kB, failcnt 0 [ 85.007655][ T2600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:435 [ 85.014724][ T2306] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 85.312950][ T2306] Memory cgroup stats for /syz1: [ 85.313234][ T2306] cache 289173504 [ 85.321878][ T2306] rss 94208 [ 85.325138][ T2306] rss_huge 0 [ 85.328385][ T2306] shmem 286457856 [ 85.332051][ T2306] mapped_file 2584576 [ 85.336022][ T2306] dirty 4096 [ 85.339240][ T2306] writeback 126976 [ 85.342950][ T2306] workingset_refault_anon 26 [ 85.347630][ T2306] workingset_refault_file 904 [ 85.352298][ T2306] swap 127553536 [ 85.355834][ T2306] swapcached 323584 [ 85.360432][ T2306] pgpgin 254752 [ 85.363898][ T2306] pgpgout 184571 [ 85.367435][ T2306] pgfault 57868 [ 85.370909][ T2306] pgmajfault 64 [ 85.374359][ T2306] inactive_anon 200216576 [ 85.379740][ T2306] active_anon 86188032 [ 85.383808][ T2306] inactive_file 0 [ 85.416375][ T2306] active_file 2715648 [ 85.533980][ T2306] unevictable 0 [ 85.541646][ T2306] hierarchical_memory_limit 314572800 [ 85.567600][ T2306] hierarchical_memsw_limit 9223372036854771712 [ 85.587609][ T2306] total_cache 289173504 [ 85.591790][ T2306] total_rss 94208 [ 85.619295][ T2306] total_rss_huge 0 [ 85.623231][ T2306] total_shmem 286457856 [ 85.633808][ T2306] total_mapped_file 2584576 [ 85.639222][ T2306] total_dirty 4096 [ 85.642948][ T2306] total_writeback 126976 [ 85.647254][ T2306] total_workingset_refault_anon 26 [ 85.707731][ T2306] total_workingset_refault_file 904 [ 85.712963][ T2306] total_swap 127553536 [ 85.717029][ T2306] total_swapcached 323584 [ 85.755851][ T2306] total_pgpgin 254752 [ 85.786226][ T2306] total_pgpgout 184571 [ 85.807178][ T2306] total_pgfault 57868 [ 85.812791][ T2306] total_pgmajfault 64 [ 85.817480][ T2306] total_inactive_anon 200216576 [ 85.823967][ T2306] total_active_anon 86188032 [ 85.829524][ T2306] total_inactive_file 0 [ 85.833690][ T2306] total_active_file 2715648 [ 85.839222][ T2306] total_unevictable 0 [ 85.843208][ T2306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.686,pid=2298,uid=0 [ 85.866021][ T2306] Memory cgroup out of memory: Killed process 2298 (syz.1.686) total-vm:90092kB, anon-rss:1088kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 85.895384][ T2631] overlayfs: failed to clone lowerpath [ 85.920038][ T2631] overlayfs: failed to clone upperpath [ 86.168603][ T2642] netlink: 'syz.1.805': attribute type 16 has an invalid length. [ 86.187621][ T2642] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.805'. [ 86.753215][ T2668] overlayfs: failed to clone lowerpath [ 86.857643][ T36] kauditd_printk_skb: 389 callbacks suppressed [ 86.857660][ T36] audit: type=1400 audit(2000000541.462:35549): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.893399][ T2670] overlayfs: failed to clone lowerpath [ 86.926839][ T2670] overlayfs: failed to clone upperpath [ 86.936193][ T36] audit: type=1400 audit(2000000541.502:35550): avc: denied { mount } for pid=2669 comm="syz.0.813" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 87.014612][ T36] audit: type=1400 audit(2000000541.502:35551): avc: denied { mounton } for pid=2669 comm="syz.0.813" path="/289/file0" dev="tmpfs" ino=1649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.058739][ T36] audit: type=1400 audit(2000000541.522:35552): avc: denied { read } for pid=2671 comm="syz.2.814" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.093020][ T36] audit: type=1400 audit(2000000541.522:35553): avc: denied { read open } for pid=2671 comm="syz.2.814" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.128875][ T36] audit: type=1400 audit(2000000541.532:35554): avc: denied { ioctl } for pid=2671 comm="syz.2.814" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.165977][ T36] audit: type=1400 audit(2000000541.532:35555): avc: denied { mounton } for pid=2669 comm="syz.0.813" path="/289/bus" dev="tmpfs" ino=1651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.199803][ T36] audit: type=1400 audit(2000000541.552:35556): avc: denied { read write } for pid=2671 comm="syz.2.814" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.223565][ T10] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 87.236585][ T36] audit: type=1400 audit(2000000541.552:35557): avc: denied { read write open } for pid=2671 comm="syz.2.814" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.264269][ T36] audit: type=1400 audit(2000000541.552:35558): avc: denied { read write } for pid=2671 comm="syz.2.814" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 87.376580][ T2678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 87.387425][ T2678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.387458][ T2678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:505 [ 87.419142][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 87.440519][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 87.461802][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.40 [ 87.475392][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.484243][ T10] usb 3-1: Product: syz [ 87.489082][ T10] usb 3-1: Manufacturer: syz [ 87.493746][ T10] usb 3-1: SerialNumber: syz [ 87.613724][ T2691] /dev/loop0: Can't lookup blockdev [ 87.648132][ T2696] overlayfs: failed to clone lowerpath [ 87.733198][ T10] usb 3-1: USB disconnect, device number 20 [ 88.100584][ T2706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.109948][ T2706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.337783][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 88.339049][ T2708] netlink: 'syz.2.827': attribute type 4 has an invalid length. [ 88.368072][ T2708] netlink: 'syz.2.827': attribute type 4 has an invalid length. [ 88.434006][ T2708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.434283][ T2708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.498379][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 88.532030][ T10] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 88.546327][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.556585][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 88.566344][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 88.576998][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 88.586957][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 88.604720][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.618271][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 88.626276][ T10] usb 4-1: SerialNumber: syz [ 88.641083][ T10] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 88.667929][ T10] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 88.841135][ T31] usb 4-1: USB disconnect, device number 17 [ 89.344444][ T2750] overlayfs: failed to clone lowerpath [ 89.412204][ T2754] overlayfs: failed to clone lowerpath [ 89.708099][ T2779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:484 [ 89.749811][ T2787] overlayfs: failed to clone lowerpath [ 89.779425][ T2787] overlayfs: failed to clone upperpath [ 89.926327][ T2793] rust_binder: Failed copying remainder into alloc: EFAULT [ 89.926384][ T2793] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 89.936450][ T2793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 89.958440][ T2793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:489 [ 90.013589][ T2796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.854'. [ 90.053230][ T2796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.854'. [ 90.069860][ T2796] netlink: 72 bytes leftover after parsing attributes in process `syz.2.854'. [ 90.081214][ T2796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.854'. [ 90.267929][ T2818] netlink: 72 bytes leftover after parsing attributes in process `syz.0.860'. [ 90.295877][ T2823] overlayfs: failed to clone lowerpath [ 90.305331][ T2823] overlayfs: failed to clone upperpath [ 90.349441][ T2827] overlayfs: failed to clone lowerpath [ 90.357620][ T31] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 90.519505][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 90.529193][ T31] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 90.539856][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.553330][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.566779][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.581646][ T31] usb 3-1: Product: syz [ 90.585916][ T31] usb 3-1: Manufacturer: syz [ 90.591598][ T31] usb 3-1: SerialNumber: syz [ 90.632908][ T2844] netlink: 88 bytes leftover after parsing attributes in process `syz.3.869'. [ 90.952218][ T2847] netlink: 80 bytes leftover after parsing attributes in process `syz.1.870'. [ 90.963465][ T2847] overlayfs: failed to clone lowerpath [ 90.967054][ T2849] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25710 sclass=netlink_xfrm_socket pid=2849 comm=syz.0.871 [ 90.984414][ T2847] overlayfs: failed to clone upperpath [ 91.010969][ T2800] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 91.034336][ T31] usb 3-1: 0:2 : does not exist [ 91.034912][ T2853] overlayfs: failed to clone lowerpath [ 91.052957][ T31] usb 3-1: USB disconnect, device number 21 [ 91.094629][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.355089][ T2885] overlayfs: failed to clone lowerpath [ 91.363393][ T2885] overlayfs: missing 'lowerdir' [ 91.393520][ T2887] overlayfs: failed to clone lowerpath [ 91.619343][ T2899] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 91.648367][ T2899] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 91.648387][ T2899] rust_binder: Error while translating object. [ 91.677678][ T2899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.687640][ T2899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:498 [ 91.747617][ T10] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 91.779328][ T2908] 9pnet_fd: Insufficient options for proto=fd [ 91.867974][ T36] kauditd_printk_skb: 677 callbacks suppressed [ 91.867991][ T36] audit: type=1400 audit(2000000546.482:36236): avc: denied { mounton } for pid=2910 comm="syz.1.891" path="/205/file0" dev="tmpfs" ino=1209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.871025][ T2912] overlayfs: failed to clone lowerpath [ 91.874253][ T36] audit: type=1400 audit(2000000546.482:36237): avc: denied { mount } for pid=2910 comm="syz.1.891" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 91.917629][ T10] usb 4-1: device descriptor read/64, error -71 [ 91.935697][ T2912] overlayfs: failed to clone upperpath [ 91.987602][ T36] audit: type=1400 audit(2000000546.482:36238): avc: denied { mounton } for pid=2910 comm="syz.1.891" path="/205/file0" dev="tmpfs" ino=1209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.039484][ T36] audit: type=1400 audit(2000000546.512:36239): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.049000][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.076201][ T2919] overlayfs: failed to clone lowerpath [ 92.084015][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.087608][ T36] audit: type=1400 audit(2000000546.512:36240): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.096066][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.118213][ T36] audit: type=1400 audit(2000000546.512:36241): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.130210][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.148269][ T36] audit: type=1400 audit(2000000546.552:36242): avc: denied { mounton } for pid=2910 comm="syz.1.891" path="/205/bus" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.159528][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.183885][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.193236][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.200566][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.203009][ T36] audit: type=1400 audit(2000000546.572:36243): avc: denied { create } for pid=2914 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.206917][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.227243][ T36] audit: type=1400 audit(2000000546.582:36244): avc: denied { setopt } for pid=2914 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.232971][ T10] usb 4-1: device descriptor read/64, error -71 [ 92.252441][ T36] audit: type=1400 audit(2000000546.622:36245): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.265790][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.289688][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.296706][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.307230][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.314429][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.321383][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.330195][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.336880][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.343567][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.351247][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.358317][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.364662][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.373174][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.379773][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.386096][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.394005][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.400818][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.407141][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.415343][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.421946][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.428273][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.435943][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.442583][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.448909][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.456590][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.463184][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.469646][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.477317][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.483928][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.490358][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.498249][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.504830][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.511158][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.518827][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.525395][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.531747][ T10] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 92.539342][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.547065][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.553686][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.560035][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.567811][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.574387][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.580721][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.588457][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.595025][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.601351][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.609253][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.615822][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.622146][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.629831][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.636407][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.642771][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.650438][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.657010][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.663393][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.670159][ T10] usb 4-1: device descriptor read/64, error -71 [ 92.677993][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.684584][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.690946][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.698749][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.708355][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.714683][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.722565][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.729206][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.735629][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.737036][ T2936] overlayfs: missing 'lowerdir' [ 92.744898][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.753922][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.760851][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.770849][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.777527][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.783877][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.794709][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.799036][ T2938] /dev/rnullb0: Can't lookup blockdev [ 92.801363][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.813004][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.821628][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.829411][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.836334][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.844465][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.851744][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.859471][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.867957][ T2922] exFAT-fs (rnullb0): invalid boot record signature [ 92.874544][ T2922] exFAT-fs (rnullb0): failed to read boot sector [ 92.880948][ T2922] exFAT-fs (rnullb0): failed to recognize exfat type [ 92.937656][ T10] usb 4-1: device descriptor read/64, error -71 [ 93.006005][ T2951] overlayfs: failed to clone lowerpath [ 93.032488][ T2951] tipc: Started in network mode [ 93.045557][ T2951] tipc: Node identity 2007ff, cluster identity 4711 [ 93.053545][ T2951] tipc: Node number set to 2099199 [ 93.062202][ T2951] overlayfs: missing 'lowerdir' [ 93.063786][ T2955] overlayfs: missing 'workdir' [ 93.067706][ T10] usb usb4-port1: attempt power cycle [ 93.120927][ T2957] overlayfs: failed to clone lowerpath [ 93.130029][ T2959] rust_binder: 2959: no such ref 0 [ 93.364106][ T2979] overlayfs: missing 'workdir' [ 93.421986][ T10] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 93.459852][ T10] usb 4-1: device descriptor read/8, error -71 [ 93.500043][ T2988] overlay: Unknown parameter 'smackfsfloor' [ 93.520437][ T2990] overlayfs: failed to clone lowerpath [ 93.590505][ T10] usb 4-1: device descriptor read/8, error -71 [ 93.592646][ T2993] rust_binder: 2993: no such ref 3 [ 93.698095][ T3003] overlayfs: missing 'workdir' [ 93.805340][ T3012] overlayfs: failed to resolve './file0': -2 [ 93.827695][ T10] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 93.863936][ T10] usb 4-1: device descriptor read/8, error -71 [ 93.999540][ T10] usb 4-1: device descriptor read/8, error -71 [ 94.107901][ T10] usb usb4-port1: unable to enumerate USB device [ 94.118615][ T3020] overlayfs: failed to clone lowerpath [ 94.225189][ T3028] overlayfs: failed to clone upperpath [ 94.581590][ T3044] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 94.596723][ T3045] overlay: ./file1 is not a directory [ 94.988513][ T31] ================================================================== [ 94.996617][ T31] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 95.003402][ T31] Write of size 8 at addr 0000000000000098 by task kworker/1:0/31 [ 95.011281][ T31] [ 95.013592][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 95.013613][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.013624][ T31] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 95.013670][ T31] Call Trace: [ 95.013676][ T31] [ 95.013683][ T31] __dump_stack+0x21/0x30 [ 95.013702][ T31] dump_stack_lvl+0x10c/0x190 [ 95.013718][ T31] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.013736][ T31] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x3aa/0x810 [ 95.013757][ T31] print_report+0x3d/0x70 [ 95.013771][ T31] kasan_report+0x163/0x1a0 [ 95.013792][ T31] ? down_write+0x83/0x2a0 [ 95.013811][ T31] ? __cfi_update_rq_clock+0x10/0x10 [ 95.013829][ T31] ? down_write+0x83/0x2a0 [ 95.013847][ T31] kasan_check_range+0x299/0x2a0 [ 95.013868][ T31] __kasan_check_write+0x18/0x20 [ 95.013886][ T31] down_write+0x83/0x2a0 [ 95.013903][ T31] ? __cfi_down_write+0x10/0x10 [ 95.013920][ T31] ? _raw_spin_lock+0x8c/0x120 [ 95.013941][ T31] ? __cfi__raw_spin_lock+0x10/0x10 [ 95.013961][ T31] ? mutex_unlock+0x8b/0x240 [ 95.013977][ T31] ? __cfi_mutex_unlock+0x10/0x10 [ 95.013994][ T31] rust_binderfs_remove_file+0x6c/0x110 [ 95.014012][ T31] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 95.014038][ T31] ? unwind_next_frame+0x3c2/0x750 [ 95.014053][ T31] ? __kernel_text_address+0x11/0x40 [ 95.014069][ T31] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 95.014088][ T31] ? arch_stack_walk+0x139/0x170 [ 95.014108][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 95.014133][ T31] ? stack_trace_save+0x9d/0xe0 [ 95.014149][ T31] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 95.014176][ T31] ? stack_depot_save_flags+0x38/0x800 [ 95.014195][ T31] ? kasan_save_stack+0x4d/0x60 [ 95.014214][ T31] ? kasan_save_stack+0x3e/0x60 [ 95.014232][ T31] ? __kasan_record_aux_stack+0xb2/0xd0 [ 95.014248][ T31] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 95.014265][ T31] ? __call_rcu_common+0xcc/0x6f0 [ 95.014283][ T31] ? call_rcu+0x14/0x20 [ 95.014301][ T31] ? __kasan_check_write+0x18/0x20 [ 95.014317][ T31] ? _raw_spin_trylock+0xaf/0x130 [ 95.014338][ T31] ? __cfi__raw_spin_trylock+0x10/0x10 [ 95.014360][ T31] ? _raw_spin_unlock+0x45/0x60 [ 95.014373][ T31] ? call_rcu_nocb+0x6bd/0xc10 [ 95.014389][ T31] ? swake_up_one_online_ipi+0x30/0x30 [ 95.014405][ T31] ? __cfi_delayed_put_task_struct+0x10/0x10 [ 95.014421][ T31] ? __call_rcu_common+0x40b/0x6f0 [ 95.014441][ T31] ? call_rcu_hurry+0x30/0x30 [ 95.014458][ T31] ? task_dead_fair+0x110/0x190 [ 95.014477][ T31] ? __cfi_task_dead_fair+0x10/0x10 [ 95.014495][ T31] ? call_rcu+0x14/0x20 [ 95.014512][ T31] ? put_task_struct_rcu_user+0x66/0xb0 [ 95.014528][ T31] ? __switch_to_asm+0x3d/0x70 [ 95.014546][ T31] ? __schedule+0x1463/0x1f10 [ 95.014561][ T31] ? kick_pool+0xad/0x550 [ 95.014575][ T31] process_scheduled_works+0x7d2/0x1020 [ 95.014597][ T31] worker_thread+0xc58/0x1250 [ 95.014618][ T31] kthread+0x2ca/0x370 [ 95.014638][ T31] ? __cfi_worker_thread+0x10/0x10 [ 95.014657][ T31] ? __cfi_kthread+0x10/0x10 [ 95.014677][ T31] ret_from_fork+0x64/0xa0 [ 95.014693][ T31] ? __cfi_kthread+0x10/0x10 [ 95.014713][ T31] ret_from_fork_asm+0x1a/0x30 [ 95.014733][ T31] [ 95.014739][ T31] ================================================================== [ 95.372576][ T31] Disabling lock debugging due to kernel taint [ 95.378930][ T31] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 95.386738][ T31] #PF: supervisor write access in kernel mode [ 95.392801][ T31] #PF: error_code(0x0002) - not-present page [ 95.398779][ T31] PGD 800000010c797067 P4D 800000010c797067 PUD 0 [ 95.405298][ T31] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 95.411357][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G B 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 95.426191][ T31] Tainted: [B]=BAD_PAGE [ 95.430326][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.440365][ T31] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 95.457129][ T31] RIP: 0010:down_write+0x9a/0x2a0 [ 95.462152][ T31] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 95.481829][ T31] RSP: 0018:ffffc90000207500 EFLAGS: 00010256 [ 95.487883][ T31] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 95.495839][ T31] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000207520 [ 95.503793][ T31] RBP: ffffc90000207598 R08: ffffc90000207527 R09: 1ffff92000040ea4 [ 95.511758][ T31] R10: dffffc0000000000 R11: fffff52000040ea5 R12: dffffc0000000000 [ 95.519727][ T31] R13: 1ffff92000040ea0 R14: ffffc90000207520 R15: 0000000000000000 [ 95.527692][ T31] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 95.536618][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.543198][ T31] CR2: 0000000000000098 CR3: 000000013bbb6000 CR4: 00000000003526b0 [ 95.551164][ T31] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.559126][ T31] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.567082][ T31] Call Trace: [ 95.570346][ T31] [ 95.573270][ T31] ? __cfi_down_write+0x10/0x10 [ 95.578114][ T31] ? _raw_spin_lock+0x8c/0x120 [ 95.582871][ T31] ? __cfi__raw_spin_lock+0x10/0x10 [ 95.588056][ T31] ? mutex_unlock+0x8b/0x240 [ 95.592630][ T31] ? __cfi_mutex_unlock+0x10/0x10 [ 95.597639][ T31] rust_binderfs_remove_file+0x6c/0x110 [ 95.603171][ T31] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 95.615923][ T31] ? unwind_next_frame+0x3c2/0x750 [ 95.621027][ T31] ? __kernel_text_address+0x11/0x40 [ 95.626299][ T31] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 95.632446][ T31] ? arch_stack_walk+0x139/0x170 [ 95.637372][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 95.642297][ T31] ? stack_trace_save+0x9d/0xe0 [ 95.647140][ T31] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 95.660323][ T31] ? stack_depot_save_flags+0x38/0x800 [ 95.665775][ T31] ? kasan_save_stack+0x4d/0x60 [ 95.670613][ T31] ? kasan_save_stack+0x3e/0x60 [ 95.675452][ T31] ? __kasan_record_aux_stack+0xb2/0xd0 [ 95.680981][ T31] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 95.686946][ T31] ? __call_rcu_common+0xcc/0x6f0 [ 95.691955][ T31] ? call_rcu+0x14/0x20 [ 95.696100][ T31] ? __kasan_check_write+0x18/0x20 [ 95.701199][ T31] ? _raw_spin_trylock+0xaf/0x130 [ 95.706216][ T31] ? __cfi__raw_spin_trylock+0x10/0x10 [ 95.711665][ T31] ? _raw_spin_unlock+0x45/0x60 [ 95.716497][ T31] ? call_rcu_nocb+0x6bd/0xc10 [ 95.721247][ T31] ? swake_up_one_online_ipi+0x30/0x30 [ 95.726688][ T31] ? __cfi_delayed_put_task_struct+0x10/0x10 [ 95.732652][ T31] ? __call_rcu_common+0x40b/0x6f0 [ 95.737755][ T31] ? call_rcu_hurry+0x30/0x30 [ 95.742418][ T31] ? task_dead_fair+0x110/0x190 [ 95.747258][ T31] ? __cfi_task_dead_fair+0x10/0x10 [ 95.752453][ T31] ? call_rcu+0x14/0x20 [ 95.756597][ T31] ? put_task_struct_rcu_user+0x66/0xb0 [ 95.762126][ T31] ? __switch_to_asm+0x3d/0x70 [ 95.766879][ T31] ? __schedule+0x1463/0x1f10 [ 95.771550][ T31] ? kick_pool+0xad/0x550 [ 95.775869][ T31] process_scheduled_works+0x7d2/0x1020 [ 95.781404][ T31] worker_thread+0xc58/0x1250 [ 95.786073][ T31] kthread+0x2ca/0x370 [ 95.790131][ T31] ? __cfi_worker_thread+0x10/0x10 [ 95.795234][ T31] ? __cfi_kthread+0x10/0x10 [ 95.799813][ T31] ret_from_fork+0x64/0xa0 [ 95.804215][ T31] ? __cfi_kthread+0x10/0x10 [ 95.808794][ T31] ret_from_fork_asm+0x1a/0x30 [ 95.813556][ T31] [ 95.816557][ T31] Modules linked in: [ 95.820433][ T31] CR2: 0000000000000098 [ 95.824573][ T31] ---[ end trace 0000000000000000 ]--- [ 95.830006][ T31] RIP: 0010:down_write+0x9a/0x2a0 [ 95.835023][ T31] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 95.854608][ T31] RSP: 0018:ffffc90000207500 EFLAGS: 00010256 [ 95.860659][ T31] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 95.868621][ T31] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000207520 [ 95.876574][ T31] RBP: ffffc90000207598 R08: ffffc90000207527 R09: 1ffff92000040ea4 [ 95.884534][ T31] R10: dffffc0000000000 R11: fffff52000040ea5 R12: dffffc0000000000 [ 95.892488][ T31] R13: 1ffff92000040ea0 R14: ffffc90000207520 R15: 0000000000000000 [ 95.900442][ T31] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 95.909353][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.915922][ T31] CR2: 0000000000000098 CR3: 000000013bbb6000 CR4: 00000000003526b0 [ 95.923877][ T31] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.931828][ T31] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.939785][ T31] Kernel panic - not syncing: Fatal exception [ 95.946046][ T31] Kernel Offset: disabled [ 95.950351][ T31] Rebooting in 86400 seconds..