last executing test programs: 20.419589781s ago: executing program 2 (id=2178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) unshare(0x2040600) r1 = getpgid(0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0) r4 = syz_pidfd_open(r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x8) pidfd_send_signal(r4, 0x0, 0x0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 20.364932621s ago: executing program 2 (id=2179): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a000000000000000000000000000000000f00000001020001001ea1a0363491f0b6f60ec1"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040810) 20.364684411s ago: executing program 2 (id=2180): syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x58b9808bbcfa107b, 0x12, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000ded000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x99b33000) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x3}) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x3}) 20.265437441s ago: executing program 2 (id=2181): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000140)=0xb) (async) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000140)=0xb) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x2000}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x2000}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x200a, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000080)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/igmp6\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) 20.240379932s ago: executing program 2 (id=2182): r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000005c0)={{0x3000, 0xd000, 0x9, 0x7, 0xe, 0x40, 0x9, 0x80, 0x0, 0x4, 0xb8, 0x9}, {0x8080000, 0x4, 0x4, 0xeb, 0xed, 0x1, 0x1, 0x8, 0x2c, 0x5, 0xfe, 0x8}, {0x1, 0x2, 0x4, 0xb, 0x7, 0x40, 0x1, 0x0, 0x9, 0x4, 0xc, 0xc1}, {0x100000, 0x2000, 0x1, 0x9, 0xb5, 0x8, 0x4, 0x6, 0xa6, 0x8, 0x8, 0xb}, {0xdddd1000, 0xffff1000, 0xb, 0xc, 0xd0, 0xc, 0x3, 0xc, 0x4, 0x6, 0x10, 0x2b}, {0x0, 0x8000000, 0xd, 0x81, 0x6, 0xfb, 0x7, 0x5, 0x2, 0x67}, {0x8000000, 0x1000, 0x3, 0x8, 0x5, 0x3, 0x23, 0x0, 0xd, 0x8, 0x38}, {0x4, 0xeeee8000, 0x4, 0xc, 0x4, 0xb2, 0xbc, 0x80, 0x84, 0x9, 0x6, 0xb}, {0x102001, 0xa1b}, {0x6000, 0x7}, 0x0, 0x0, 0xeeee8000, 0x80, 0xc, 0x4000, 0x6000, [0x9, 0x81, 0x8, 0x8]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20.056860443s ago: executing program 2 (id=2183): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000874500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'rose0\x00'}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r3, 0x1, 0x70bd31, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x18000}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) 20.056688673s ago: executing program 32 (id=2183): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000874500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'rose0\x00'}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r3, 0x1, 0x70bd31, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x18000}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) 9.008350041s ago: executing program 0 (id=2404): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/123, 0x7b) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) 6.013324144s ago: executing program 0 (id=2442): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001e00050300000000000000000004000008000000", @ANYRES16, @ANYBLOB='\b'], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x24000800) 5.932466455s ago: executing program 0 (id=2443): r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000008c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049e1002100c9a7befe6f6d645a1a11b81b2c4b100fd57c06db1a75df432a9ed32d3b475663c0d236fd000000000000000000000000000000267f49eb82b962d81db29f0b47df47351f"], 0x184}}, 0x0) getsockname$packet(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000005c0)={{0x3000, 0xd000, 0x9, 0x7, 0xe, 0x40, 0x9, 0x80, 0x0, 0x4, 0xb8, 0x9}, {0x8080000, 0x4, 0x4, 0xb1, 0xed, 0x1, 0x1, 0x8, 0x2c, 0x4c, 0xfe, 0x8}, {0x1, 0x2, 0x4, 0xb, 0x7, 0x40, 0x1, 0x0, 0x9, 0x4, 0xc, 0xc1}, {0x100000, 0x2000, 0x1, 0x9, 0xb5, 0x8, 0x4, 0x6, 0xa6, 0x8, 0x8, 0xb}, {0xdddd1000, 0xffff1000, 0xb, 0xc, 0xd0, 0xc, 0x3, 0xc, 0x4, 0x6, 0x10, 0x2b}, {0x0, 0x8000000, 0xd, 0x81, 0x6, 0xfb, 0x7, 0x5, 0x2, 0x67}, {0x8000000, 0x1000, 0x3, 0x8, 0x5, 0x3, 0x23, 0x0, 0xd, 0x8, 0x38}, {0x4, 0xeeee8000, 0x4, 0xc, 0x7, 0xb2, 0xbc, 0x80, 0x84, 0x9, 0x6, 0xb}, {0x102001, 0xa1b}, {0x6000, 0x7}, 0x0, 0x0, 0xeeee8000, 0x80, 0xc, 0x4000, 0x6000, [0x9, 0x81, 0x8, 0x8]}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.843022445s ago: executing program 0 (id=2444): r0 = syz_usb_connect$cdc_ncm(0x5, 0x7e, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x6, 0x40, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xc, 0xb889, 0x7ff, 0x7}, {0x6, 0x24, 0x1a, 0x101, 0x24}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x99}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x9, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xa2, 0x4, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x10, 0x9, 0xd}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x2, 0x3, 0x4f, 0x10, 0x5}, 0x36, &(0x7f00000000c0)={0x5, 0xf, 0x36, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "c9ce3aa287343305697a14f00dd1e40e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0x0, 0x100}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x484, 0xf00, 0xb8b6, [0xc0c0]}, @ptm_cap={0x3}]}, 0x3, [{0xc3, &(0x7f0000000100)=@string={0xc3, 0x3, "9c6fee54c97d1f767b9ec278351d69b3c420c81e7a4be194572a0f9a4a70702dbbe58b4e6c68715ac4c32e2f589ee9d2d850c6a5a1b2784d88c1c3708cc898dd6450ce6cbd1229c85ab8fba8caa65c58a4ca0150efbde0318aa60ee6726fb2a9d2d4f39672b6fa1aaa41f157732231780b2c7e6a21a338356f4a3fff493c65e8897e17b6dc92efa0f5dcdb24c8fb35e13f12c3aa66eeb8bdb10cb5b36a77a1fc8c45ba4a3fceb400968908a0fd4b9da6bd24700b92d8933e875a81d7d81226724e"}}, {0x6, &(0x7f0000000200)=@string={0x6, 0x3, "50a15971"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x16, {0x16, 0x24, "9345ab02cac333ea6e7aa2163fd03f73e320984c"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}, &(0x7f0000000340)={0x0, 0xf, 0x2c, {0x5, 0xf, 0x2c, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x9, 0x0, 0x5, [0x3f00, 0xc00f, 0xffffaf, 0xffc0ff, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x9, 0x7, 0x1}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa3, 0x80, 0x5, 0x6, "4e62f629", "062d5d9e"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x2, 0xfe, 0x0, 0x4, 0x2, 0xfff}}}, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x20, 0x1c, 0x39, "013d792cd8759d42917d8b81bc44b67b7d22e3ffa09a0dad85a8cd803bd8176422d405dcdf96c37a55cda5c157721dd16ca3458f489244585a"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0xc9dd9cdac73e22b3}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x40, 0x20}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xcb}, &(0x7f0000000600)={0x40, 0xb, 0x2, "0797"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="14b8117e9977"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "8dfb"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0xfff7}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x3}}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000900)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x1, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x6, 0x6, 0x70}, {0x6, 0x24, 0x1a, 0x100, 0x23}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x7d, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x9, 0xe2}}}}}}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x200, 0x9, 0xf9, 0xb, 0x10, 0x80}, 0x68, &(0x7f00000009c0)={0x5, 0xf, 0x68, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x9, 0x0, 0x2, [0xcf, 0x0, 0xfe80c0, 0x180]}, @ssp_cap={0x14, 0x10, 0xa, 0x43, 0x2, 0x8, 0xf00, 0x6, [0x0, 0xc0c0]}, @ptm_cap={0x3}, @generic={0x30, 0x10, 0xa, "6a44636fee5a1d51d634d9720b03e8b21e0fe8745477291e430982883d0edaa87a3d49570ca340f90cbd412117"}]}, 0x7, [{0x2f, &(0x7f0000000a40)=@string={0x2f, 0x3, "fa30e2ffd91da1d1021808b7d966e5614cb0779616f77269b06c729415d22363b125ed9916555c2f2edc02b81e"}}, {0x80, &(0x7f0000000a80)=@string={0x80, 0x3, "990bdf075497d3871e5e1089cc1ddf6023c338120bec33f687a5f657b434c68a378e57c2d6c756e671b167fff54acee7ef8e0af3a7697cd17e2be544589219d239de5aea8afd6aafc40a9cbaa9299150502940ef45ea6a0a28c28c25772fc8018f430b3b6ccf80634b4ebc248d534585ea1183ab7b532d0a2e3bc3fd8a7f"}}, {0x31, &(0x7f0000000b00)=@string={0x31, 0x3, "905e19b5aab4e92c6d15ee00936663342af22c3728992b6ae3813cb75a1b1dd155f402ac626a8926de970f4df2c301"}}, {0x72, &(0x7f0000000b40)=@string={0x72, 0x3, "c3b4ac849a316c5e620b38898f6e76505d339a66f801403be0e5e9ec9b097f0af736c8a4b29198054887ff1a5892aa50eb4c73ec38df4d82f2288aab5147031b9c1e511ed82066bc2e4a53bd8bcc143e45cdd357c507aa736d127260114ef5f70cf104a13439f6d2819bfde5323bd5fb"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x420}}]}) r2 = syz_usb_connect(0x5, 0x9a, &(0x7f0000000d00)={{0x12, 0x1, 0x110, 0x40, 0x15, 0x7f, 0x40, 0xa46, 0x6688, 0x3986, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x1, 0x0, 0xc, 0x40, 0x2, [{{0x9, 0x4, 0x65, 0x3, 0x2, 0x41, 0xc0, 0x3, 0x8c, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, 'oB'}, {0x5, 0x24, 0x0, 0xfc}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x2, 0x1, 0x1}, [@mdlm_detail={0x1d, 0x24, 0x13, 0x8, "549a6aab5766b3f723be2086a5ba4fe7a432f28a8a9e294504"}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x8, 0x3, 0xc}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "c8"}, {0x5, 0x24, 0x0, 0x5c20}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x8, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1000, 0x4, 0x10}]}], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xc, 0x0, 0x2}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x9, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xed, 0x3}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x200, 0x8, 0x89, 0x7f, 0xff, 0x9}, 0xb5, &(0x7f0000000e00)={0x5, 0xf, 0xb5, 0x2, [@generic={0xa6, 0x10, 0x0, "19b8ccdd8139e96535021d286b5d751bc455b441983e8bcb198eb226c2b8fc33d01973a53ef47193638932bd0804f79ac379138150e4e325e5eabbd49855f8e18dc8494932e0c7166d3381ce95d9951485bfe675faac23a94ddea57ce3395efa7d2828ae95a6fe5827874ed4d3245e0eef3961d230e6a54369abb1e53481bdc670e30b15f4653d21def52f5f04c2327f05d98239e27b7640e940ffde0d1655f8677dc3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8d, 0x1e, 0x9}]}, 0x3, [{0x6e, &(0x7f0000000ec0)=@string={0x6e, 0x3, "a4d5687caeb49bcdad31542a3a77ca346527f1305d0e3fc8378fd5c6739134576226bf93d0343e612513e5bd3dbbe191a6d26fadc63ccc61f0d0fd424521811743ae071c74fac9b246fd143fdbebd28f2a6d7134621541bbd75de946bf23df37f1ebbf014fb4c939029019a1"}}, {0x3f, &(0x7f0000000f40)=@string={0x3f, 0x3, "92c3c4f8cc437766c499444c946d689f5cff0632b4f1c43bbb26c4542b7e624e3efc08471c6dea48045616ef250b7cf7ca6ce5956ad0ae8ca6eef781d8"}}, {0x51, &(0x7f0000000f80)=@string={0x51, 0x3, "05356841707c275d66ee8c0c2c3b3fad150218982ba57be7f688c564db0a6f14687fcd8849c78e1a2c160acf3883cefb54a08dc1b46572f2da4e6d3fe13a639b41c05a6cd63295ea47b6fe77dcd767"}}]}) syz_usb_control_io(r1, &(0x7f0000001380)={0x2c, &(0x7f0000001040)={0x20, 0x2, 0xce, {0xce, 0xf, "26234904e5d856fbd0b363ce40d76e1ff4f19ef44a43016219f8e1f3eb39cc056f7a6431deb309769f058a875bd1bbeab561dda3ea9634be7a78d5bc9de8144fb685eb181dd771adfe67a2f5c8d905cc7401b22a5c3e659f3b5671a083250dc8e17a00012b9446ebdcaf468c31486e1d7d9c19b624309e269c3935fceab2bf19dd5573f2a2d66468c784411930b27ae2060d590a588763964710591e0c5823cde25cc0629cbfcc3928533f83c23e6d390b3fa171e73f70f051212a69e99a6d910d32443040baa62cf277a296"}}, &(0x7f0000001140)={0x0, 0x3, 0xaf, @string={0xaf, 0x3, "4c4d01a111b7f2e2d0ada0d083c620afe39a1b89e3133e3961ebe916937fcbe522cf4c19e6e41c1f4112d2b1737689fa50261a5de62b675307351909b2dd25992bfdcb3dc754cc3bbaf462ac4eedc4175c6e62bf54afa3fc3af0a760cc31d242cd2dea186521584ce9442788f678438713c920113699d993e3f4847039b6c2800baf268fe70bd6d4ef97ff0308a13d5b49c725bb9096c7c6faea42d5c18732dbc6373dbd0d25ecbe4c5d0cc8fe"}}, &(0x7f0000001200)={0x0, 0xf, 0xf6, {0x5, 0xf, 0xf6, 0x4, [@ptm_cap={0x3}, @generic={0xdd, 0x10, 0xa, "a455a9f6b3650616f2944ede74658ed539b8a32f726e5140ef54182d37bf55820712a8d3d591265dfbfe870960a13bcceb18385006b5d4fda484ed0555a7104c50275c1dda5fa94c33f7985bbe1df46bef7feab2a3fff021b4633c27ac8dafbd4eb6420ba13153c79eda1cf3517904f48a6720525704fcf34388bed825121f5ccd5615eb499f1b05e147aee0c2c235d66770b4e791fca5b3b45814d60c00d89a370e95f06e0353360a37bdcffe35e907987bb002cda264682d14e3e89041f9c06db5831b542a5987965bbce63b68c2197d8da39f6353dce5ca10"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0xd3, 0x10}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x0, 0x1000}]}}, &(0x7f0000001300)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x0, 0x7, 0xc, "772e817c", "52f319b0"}}, &(0x7f0000001340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x6, 0xf6, 0x4, 0x400, 0x9}}}, &(0x7f00000017c0)={0x84, &(0x7f00000013c0)={0x20, 0x16, 0x26, "c026e479ac08b09d2d8605fe7bbfbbc48a43d5bf166dc29a2f6f13b0870077dcc08ba158340d"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000001480)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000014c0)={0x20, 0x0, 0x8, {0xc0, 0x4, [0xff0f]}}, &(0x7f0000001500)={0x40, 0x7, 0x2, 0x3c}, &(0x7f0000001540)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001580)={0x40, 0xb, 0x2, "a211"}, &(0x7f00000015c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000001600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000001640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001680)={0x40, 0x19, 0x2, "967f"}, &(0x7f00000016c0)={0x40, 0x1a, 0x2, 0x73}, &(0x7f0000001700)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001740)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001780)={0x40, 0x21, 0x1, 0x6}}) syz_usb_connect$uac1(0x4, 0xaf, &(0x7f0000001880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x5, 0xe0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x8, 0xf, {0x7, 0x25, 0x1, 0x5, 0xde}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xfb, 0x3, 0x9, 0xf7, "59a32b", "c980d1"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xfb, 0x2, 0x0, 0x1, "b213d3e9487e8bca0f"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xc, 0x3, 0x6, 0x10, "a060"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xe, 0x5a09, 0x6d, "1c43"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xd, 0x2, 0x0, 0x12, "f3cd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x10, 0x9, 0x5, {0x7, 0x25, 0x1, 0x81, 0xf2, 0x6}}}}}}}]}}, &(0x7f0000001ac0)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x201, 0x3, 0x2, 0x5, 0xff, 0x8}, 0x17, &(0x7f0000001980)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x0, 0x8, 0x800, 0x27}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0xe, 0x9}]}, 0x2, [{0x9c, &(0x7f00000019c0)=@string={0x9c, 0x3, "406406dc72937a58ba207f80f39b6a422c8f65d098848a43fb2d197ac5166a1af2f422e1cd0dd8ac143c56591dfa5940d5942d852d4167dd4f3f70eafc10370c4d5a09f6a5d4b5cb9814af0788e04d1d45b27ecbb21c8dff5afcb787e9e20f241b4e0dc9494abd6c2d96e3852d7e309ba42fc97b8d14dbf2a73ff2669499f32486cb96330d5e91271099e443699d9f8cb466c2f8b0568ca2fb68"}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x1801}}]}) syz_usb_control_io$hid(r2, &(0x7f0000001c00)={0x24, &(0x7f0000001b00)={0x0, 0x18, 0x38, {0x38, 0x22, "0bee277d69892555e5fe0c5c99c5d2e0ba048747b165cf92e0b85167be6e6aed5b6046d6f648b1d1640d8627090c7ba23a4698f5ccf7"}}, &(0x7f0000001b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}, &(0x7f0000001b80), &(0x7f0000001bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x230}}}}, &(0x7f0000001e00)={0x2c, &(0x7f0000001c40)={0x40, 0x30, 0x59, "784cbe2e5f2c89fd17f86805ff6ddde0ee534096a80b015b66cc564bd59aa97b48ca71064d5847044e29894856518cf29c6cf90c8d8d4fe08aab7df04a445453b82d493dd19a1f61319b5babeb2ce95051706e5ee957f7e425"}, &(0x7f0000001cc0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001d00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001d40)={0x20, 0x1, 0x71, "4b25240025f74f402bce98f17b61525c752a559c3a3b24ee9f8292831954777a73f5af598ea31edd2ff3670abc5247cd72c68361308a0a36a11744c16b86846d2dc98c1bd6ce9305f98628b4db2a5f1e5fc3ddd6d8215360fa2e53d5d6cb3ace07d36ce9372002edf15de97a4518b68541"}, &(0x7f0000001dc0)={0x20, 0x3, 0x1, 0xc}}) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000001e40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x94, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0xff, {0x9, 0x21, 0x261, 0x3, 0x1, {0x22, 0x73c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xf8, 0x8, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7f, 0x7, 0x6}}]}}}]}}]}}, &(0x7f0000002240)={0xa, &(0x7f0000001e80)={0xa, 0x6, 0x250, 0x2, 0x0, 0x44, 0xff, 0x7}, 0xdd, &(0x7f0000001ec0)={0x5, 0xf, 0xdd, 0x4, [@ptm_cap={0x3}, @generic={0xbf, 0x10, 0x1, "6b9ef9c1468d9b02b005408d4b4d25f0e75a272d465ae0e196d89c800ebd8280aa1bfbfcb63597d4af50b2325f87bb91d944eb96c955140c335c141a26ba1ba215377cf55deaf703369bca2cb04157854db506edee9371d7bac9c37fca609e47801a54dcc13e4ccd01156d1d8d350f89329740ac2050f9650e982cdfd8437e04e19cbe037df10f968ab645728adb483d3a921cea9e71ea679864538903506e9792929f8d596a92d9b5b8af07aea68869f033263ad63d65b7287404ea"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x3, 0xcc, 0x7, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x40, 0x62, 0x81, 0x2}]}, 0x6, [{0xf4, &(0x7f0000001fc0)=@string={0xf4, 0x3, "de89c64ae4ed30ddec721e642ae543324b996623404e93026ae87182662fa92500ccd03ffb22ad84d8007ee8a4adc0d91707049a88d0047a02abb6ef97337a3195160be7d6830008d5332a02d4e8028925f71438681e799da778d20e84eb50e50c754aa76fb38fd252c6883d21f8b8942de9f574168441a359603cec01b5a37e4d0bb508a83b9df4fd88e79fc0b7a391ce7ef8f46a575df14c35c413706e45e9f6192b44999cbe558ecc3d50d929115bb62076fe91352fef641e356b8d652e30d3d4b43b4e0d7550cec1e91745c4ab9b558161ce4fc403031d071fa7c9d98cad12ef9c6f3f6bfe2065a7fa45af764d06c450"}}, {0x67, &(0x7f00000020c0)=@string={0x67, 0x3, "5986552f3c1dcd9e1391fd0c110634100a2716f9d1ccd3f3d3e41c717cffc6bfefe2087ba0721bc51a648e87986c2421fe39f44a48e2b7c7279ca3334371c592ee918558e3641c56a05c0f215fb9a098547ae3f2787381e1689d3310cc2e631f03b8da74b7"}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x80c}}, {0x2a, &(0x7f0000002180)=@string={0x2a, 0x3, "5a338014521c426dd18f2870465da44a6481a279ba9da8b3496e72d48c3e6c984ed7b6745612bbd0"}}, {0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000002200)=@lang_id={0x4, 0x3, 0x3801}}]}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f00000022c0)={0x3ff, {0x49, 0x5, 0x7, 0x9, 0x7ff}}) r4 = syz_open_dev$usbfs(&(0x7f0000002300), 0x10, 0x200400) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002340)={0x8, 0x2, "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"}) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000002480)={0x8}) syz_usb_connect$cdc_ncm(0x0, 0x167, &(0x7f00000024c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x155, 0x2, 0x1, 0x43, 0x1b0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c491d1fe92"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xff, 0x101}, {0x6, 0x24, 0x1a, 0x8000, 0xcfd54f7d26ea88a0}, [@mdlm_detail={0xaf, 0x24, 0x13, 0xf, "14700f85b210ff5e8dede53249ec0411d1a3d932fbf9b9a8bde2ef39befeded972d2c5fcf598617fec05198e6cf58a9a6d6c9bc14d6953e1490ce9490a45fcb23f363baf03b6cff0c1d040c09c00464272fb158105f92bdeca997e0406e012d8591001e43fae5c3e6a90fb099b2de3b8c572ddce25f85eb2e6d673c9216d925eebb4c0056c005e1098a5749b247c6d4fac74ef01b012562fdd6d4c3f64a14002389015ea621a80bd05cda9"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}, @country_functional={0x10, 0x24, 0x7, 0xf3, 0xfffe, [0x9d, 0x6, 0x4, 0x244c, 0x900]}, @obex={0x5, 0x24, 0x15, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x401}, @mdlm_detail={0x16, 0x24, 0x13, 0x5, "31c50923d30ba11ad16a69e8963cbc7f0f45"}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x68, 0x4d, 0xb3, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x4, 0x9}}}}}}}]}}, &(0x7f0000002900)={0xa, &(0x7f0000002640)={0xa, 0x6, 0x250, 0x6, 0x1, 0x4, 0x40, 0xff}, 0x2c, &(0x7f0000002680)={0x5, 0xf, 0x2c, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0xb, 0xf0f, 0x6, [0xf]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "e3cb25c4c5af377670ea10baa6539791"}]}, 0x4, [{0xd, &(0x7f00000026c0)=@string={0xd, 0x3, "f42dfd0659218189459ef5"}}, {0xd1, &(0x7f0000002700)=@string={0xd1, 0x3, "4eeb22c8ae92bfacdf69a28b1edc09b44dae0441dd67766c5a213b2453f6c07ec3f7fc0443c3683668ddf4497d1f054bc969b59dc5fa8b2c3b4b714d8d464aebdb23a4ec816e1b552261649d6ac605611836ecf3d4700615f7290211f64ebf85ab9a93bc8e642546082e60b2d061a8ceb3e02a3b3e35b84ed2a11d0b0949ce951e9f49256dd1a1d2a20b27574ce6446525785f74cc8661d86e9bf22d1c70498411601964d11b0e5922bfda64aba459aab363dc2c5a94effd05887e829cf8efc1e5efaebe0e16c03856de0b5107cdbc"}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x1001}}, {0xa0, &(0x7f0000002840)=@string={0xa0, 0x3, "a39881f01e1d0b347dd7ca2fcf8f3dc7c3f6a47fd4c6947725cc287b4ba15c33beec4f51304d8d19255cb83ff8f552660b87e16bf969cfbaeb80d94638344703e50fdbca50f9b5fdc05b71bbd5c2acbfc27b268b87d66925117cc1499012efcd2bea410020dc14b52e14fa872ce56ee264e7184ef06b5aa831d616623795f47040d5bef64c2c66cd7040fb119f219e66a58bdb6cde31feef249ebedd4ce6"}}]}) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000002980)={0x3, 'pimreg1\x00', {0x80000000}, 0xfff8}) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000029c0)={'lo\x00'}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000002e00)={0x0, 0x0, 0x1b, 0xb, 0x163, &(0x7f0000002a00)="fe2acde4c1abff7afe7c423e2bd0833eb65ddb033418d06bc498f47c8935420b5f52cdb60cf2672a5335496f7575d191f746f210074dcbbba7bb990efc44b2867097995d0e5d0cd69a426432e3547f7d61e9259182f495a5908be840ec3bbe4cd9102137679c27a4f765b7a8b0be150a12bb87367c1072836364e42cc1173e577d70df69d60e16ff97fb5eb1c8ab99da6b0f4ea8717dfa42da8af8819beba228faf367622714b5c34c123c56a0de25c2b515af489a76111e928a984cec30e17249511a068c9311a86a63e45804b25e4fbf223d135ac304f04bbf89fc8f43df9021818915da011ff7d882d866474a4f0bc7f6b07b092a5d6a4c6cbeae3f4a7ab5050cb55f8a01a074da4b8fc46ac392fc0573f653469a1a9a6d2b99b288b0e1e4581a2ef6118e3a9046294398d534e8a5e78bac62a509f7efa8d5d2425f365bc03fb55409d03fa3a9c7f8c366cb54cd6f59e065080a83337e7a32c35450015fb4fa39b3546012325d69862f6715b3cf3571a6389c8309f95b63e3b508d8fd4b2f2f6e74c72e7163d88feb464f252ae7f943fe4926a10a5619e5a7d72902c160979bc781097d3429ba0556b184097154c83a77b5b1f23a0383ee36533c777df2daf0c910367580e4f38379a3e63d588b89a320677d3d228881e93f21dba530192cc0001d4eb37c626b95d69af6dbc142ceb5c0406762c159e8b50f1d6bc2a14ac8f51505f952dd4a9a75520e04b48eeede4f9d7df24ed20766ee6d49e00b8497c164a8c7a4610de3c92d1bfb57e67e3ea7df09d0e90dd9060a994bc8bf3500d2a4172edc88ed6e3858a40c46869d75f34208ce9d830739f297eca51e21d44ff9cb9927c527b40afd32fabc71ef24d43f1511d63ce86c307df6f55e03b99d57be2e883f5c458fea334c90ad532a7ea98f4375227f7c14f92c0a9428fa4293d8b05791dc5b5883aee1f05b49d9bb7d823ec280c05804fe13d9ba45ee969dbfc8be2ed85caf1d4e1adefbe9a5df04fa8c87059678008d47e704485867a664fe7caf09fa828a3e8b54221f7d48f1ea863f0a843c0ea88eccadbf3cf58e5836e17dea3cc21d22687c1884a5faf166be49e763ffdea55ea07063fbdd250d9ffb35960038306aa40a85607b72c9d3c54d9269d456e3a2bb226866fd2f88b7188b9ac60f5f29691fabeb2dd0df8d71b1100a850b9a9bc7aae6b24ad885c463bb86d1172bf84fbd2d2885a8aecde27b6989e5664bff3e8f7b0cc1cfa46b5e946ff99f06b8983040cc4e76a7c1c42039f7d9ee86fca6ba35a1024f87dadb2262efb360d96acff8ca2b4fbbb7a3f403578fc69761470a38f6e466dbb72d5b231f9e2abddd3739fb3415b816307043407555ab508efe2fd411f83226477541de9eaeb70146bcb7740b3f2efeaac093349eb7cc8ee575f20744a92b49e26d07c65572f4abe7d6a6"}) syz_usb_control_io$hid(r2, &(0x7f0000002fc0)={0x24, &(0x7f0000002e40)={0x0, 0x22, 0x53, {0x53, 0x10, "dd3c3cc254c9eedcd32054577f56c9f3dd54c120a45898e8e22c0de265b1ebae6b7eab96945700f06e9ecad1930523aef34cdc94c4206ad1826d441586efaadc73b1544d01b0a1c1fcc3fde54dd8d36870"}}, &(0x7f0000002ec0)={0x0, 0x3, 0x56, @string={0x56, 0x3, "cdb07cfa8d0e9c3a2b5b740d7c28b0a70634dc19a598d2865aeb5677ddae97a10129da277db15a0fe9f92cd9c02b13d597bd8e7087df7fe868e98c28531c729d964e3389ae4f8f9921796315902de031fe1e9970"}}, &(0x7f0000002f40)={0x0, 0x22, 0x4, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x2, 0x0, 0xa, 'D.'}]}}, &(0x7f0000002f80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x867}}}}, &(0x7f0000003280)={0x2c, &(0x7f0000003000)={0x20, 0x6, 0xe9, "54bc2fe14ba43f3d07ce639c2cda2ad3c9519f10ef76eaa95767a3c216399cb0adb32844d22966651e8063941c2f817a8519bb52286ac34158ccc97c24bb249db0e6fd2ef25903ca1a27e2d673364e2d5faea3d534aa8930d2a3008fbc1c5e06c7225e5a9071371956e143d24d9af2ea10775569255a15542ba70e413160bfda0b5b77cf9d0615f826e63bd735dc75ffd8700079eedee1d30b5262289c4317d4218a9ee5851c873dd800c0ad1508f85c3fccc0f903b2e55ac6db7f7d6fd9490ca4e3a4eebaa3544c6b30cabed4db377b310a02aa5eca618f6c70ac0bdf68154448bc878eaecab69523"}, &(0x7f0000003100)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000003140)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000003180)={0x20, 0x1, 0x8c, "33a60ff735b568dee52906cb6082fc0543430cca1fb8ac4bf578acec4975fdb3ca78e30786f6e8efcacdcdae23a58c7c5cd846a9dff12308d49561279539307995bb63a4c35923c872546e267bb5640cf77ace7cb8d14f9ec9bdd7cff6d15fd00e1f56a456f3b52097811b812f7c90bb2652b28423986d35c002c6b75bceceb05875cd3765c65fa533a5611c"}, &(0x7f0000003240)={0x20, 0x3, 0x1, 0x5}}) pipe(&(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000003300)) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r7) pipe2(&(0x7f0000003340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TIOCGICOUNT(r9, 0x545d, 0x0) bind$netlink(r9, &(0x7f0000003380)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) ioctl$BTRFS_IOC_SNAP_DESTROY(r8, 0x5000940f, &(0x7f00000033c0)={{r4}, "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"}) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000043c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xec, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x25e}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x7, 0x7f}}}}}]}}]}}, &(0x7f0000004940)={0xa, &(0x7f0000004400)={0xa, 0x6, 0x250, 0x8, 0x6, 0x2, 0x40, 0x1}, 0x3b, &(0x7f0000004440)={0x5, 0xf, 0x3b, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x4, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x1000, 0xf000, 0x6, [0x0, 0xdf8f, 0x3f30]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x0, 0x200}, @ssp_cap={0x10, 0x10, 0xa, 0xb, 0x1, 0x0, 0xf000, 0x81, [0x30]}]}, 0x9, [{0x4, &(0x7f0000004480)=@lang_id={0x4, 0x3, 0x827}}, {0x8f, &(0x7f00000044c0)=@string={0x8f, 0x3, "85759bd2620657fbedd71b3f9967b0d82f997825d8cc1ad692b6af3394471979735017e44f98dafae517e5fb1642351c8e00670ef6a49489e64b4c7f48dec92f8883a3fda3a90fce40e97479fd5621683c67ce234273f7e13594697b223cbbcf89e465b00f1bf8d1b5523cccee19fb7fe505dce6dbef194ed5a51fe05049f13ad6dbf39dcdfbc2831313b996e7"}}, {0x2f, &(0x7f0000004580)=@string={0x2f, 0x3, "64cc77199e9ffff8d16ecd4c6c59406d5b27806056eec5b267306f13d80a30b124248a0ee3bf3f1c4a32a73c4b"}}, {0x4, &(0x7f00000045c0)=@lang_id={0x4, 0x3, 0x809}}, {0x97, &(0x7f0000004600)=@string={0x97, 0x3, "5be554817aeed8d0cac6bae95173bad75f7e1cb02a05ed2740deccf472fbc627fd21635b4cbc9a3189e0ade09b39e1e2ecc2d273541813fc2be7e72ab21b9a26945d092c12a8701b0bb35e3a2f49fc65f7d4e7887ba9905492b9b37b912338bad9b91435385ad5e6d0724503804debfd75c2ecf80fa857f62be0a1efe1dff14a994451822e4d20beae149d58a01054290990615ebb"}}, {0xfb, &(0x7f00000046c0)=@string={0xfb, 0x3, "233ddcc9b7bde1d5bbdb7f5829233366691972dafb376029346695b05cfcde478f9acc8481e917cd2af45b277f14a90074f124c52ceab82546dadbb9ac4e15836fa0f39f8312691c65c423194e13ceef70c6722391c843def792746b2ed8070cdc326e0c757b3105affa8632126cbc9a598e2e909f846163d3a3ea4240285de4541fc17c870f74d1fbe307e32cf67d2fec15fc4ac69a7924f7e41f468b6099d7759bfcdb133a79b1b38f62166fec1c3959ed88e827cd3f3ed3e565e33668b51a3c5cd57740e0afc6cd3c62c648270b9f68f23b6bec8a3b73383ae5d756ea445efb162a703e904e575885d1efe0a9230ecff56b72c6f6d83359"}}, {0xcd, &(0x7f00000047c0)=@string={0xcd, 0x3, "90101bf5548de77068a2f71137ea5ac2e1be013e136e7f67f1751cd554f3a8400782fe431357f1e132776c6a8324b1c40ad4ec2324b3cfce6960abf324e4ab22114da983bf64afa064b57c674317217a7158f667822934ec8d8c592194adfdb4c3dd0b69972875ce9532f7f31159710abfe3fcf68043b1945c814ea1355c0e050a89951b1142a4591a4864ec6ed13ba4f4d4fdf3bfc074597e411d683c4851871efe904203c2fc2ecbe838cfef4ff7b08424e5585a3cf75e6d21eefe49f401439a5e2b9671eb7982b293bf"}}, {0x18, &(0x7f00000048c0)=@string={0x18, 0x3, "2f70048ed08f4ea05ecc77f74250ee8806d793dbee01"}}, {0x4, &(0x7f0000004900)=@lang_id={0x4, 0x3, 0x455}}]}) ioctl$GIO_FONTX(r8, 0x4b6b, &(0x7f0000004e00)={0x19a, 0xd, &(0x7f0000004a00)}) 2.831858958s ago: executing program 0 (id=2471): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0x1001f5, 0x40000}, 0x20) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='^\t*([%\x8e\x00', &(0x7f0000000200)='@!\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x8, 0x40000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x48c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.733669568s ago: executing program 0 (id=2474): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) read$FUSE(r1, &(0x7f0000000780)={0x2020}, 0x2020) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="b9000000000000", @ANYRES64], 0xb8) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}]}}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r6, &(0x7f0000002c80)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 661.533287ms ago: executing program 3 (id=2504): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1}) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x80, 0x0, 0x8}, 0x1}}, 0x18) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x2040) (async) iopl(0x3) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x7, 0x69, 0x8, 0x6b86}]}) process_mrelease(0xffffffffffffffff, 0x700000000000013) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 64) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 660.294557ms ago: executing program 3 (id=2507): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00000000000000000000000000007fffffff000001020001001ea1a0363491f0b6f60ec1"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040810) 660.126667ms ago: executing program 3 (id=2508): r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000005c0)={{0x3000, 0xd000, 0x9, 0x7, 0xe, 0x40, 0x9, 0x80, 0x0, 0x4, 0xb8, 0x9}, {0x8080000, 0x4, 0x4, 0xeb, 0xed, 0x1, 0x1, 0x8, 0x2c, 0x5, 0xfe, 0x8}, {0x1, 0x2, 0x4, 0xb, 0x7, 0x40, 0x1, 0x0, 0x9, 0x4, 0xc, 0xc1}, {0x100000, 0x2000, 0x1, 0x9, 0xb5, 0x8, 0x4, 0x6, 0xa6, 0x8, 0x8, 0xb}, {0xdddd1000, 0xffff1000, 0xb, 0xc, 0xd0, 0xc, 0x3, 0xc, 0x4, 0x6, 0x10, 0x2b}, {0x0, 0x8000000, 0xd, 0x81, 0x6, 0xfb, 0x7, 0x5, 0x2, 0x67}, {0x8000000, 0x1000, 0x3, 0x8, 0x5, 0x3, 0x23, 0x0, 0xd, 0x8, 0x38}, {0x4, 0xeeee8000, 0x4, 0xc, 0x4, 0xb2, 0xbc, 0x80, 0x84, 0x9, 0x6, 0xb}, {0x102001, 0xa1b}, {0x6000, 0x7}, 0x0, 0x0, 0xeeee8000, 0x80, 0xc, 0x4000, 0x6000, [0x9, 0x81, 0x8, 0x8]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r4, 0xae80, 0xf0ffff) 572.311258ms ago: executing program 3 (id=2511): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000100)=0x2) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000400)={0x2}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000580), 0x0) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003880)=[{{&(0x7f00000009c0)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="78ed24c8326258e4f8ac32b5da1ff672d9d79c98493b7551d27c37a265ac70fdef8b5f53d6835ef1b50cefbfbd657a922b388793df6d9f48e9bd273dd17c43f4e653512ece8a004251235b5e578881e4e3050523f04a54640ab68bc64b7e1542d992887408391460ccc8f0dbba4efdf61a8ca2c91b280b9c5e4b6ea96c80894eaeb110463d8b133cd4f0d3072d229fe2f00e82fbdafea270b51791f39f57108b8a2086b83455ebcebc99cc67087c18", 0xaf}], 0x1, &(0x7f0000000b00)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @flowinfo={{0x14, 0x29, 0xb, 0xd}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x29, 0x3, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x7, 0x8, [0x6, 0x3]}}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0xc9, 0x4, 0x2, 0x1, 0x0, [@local, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x11, 0x2, 0x3, 0xc0, 0x0, [@mcast1]}}}], 0xd8}}, {{&(0x7f0000000c00)={0xa, 0x4e21, 0xac28, @private2, 0x100}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="9c5a0d0530f5957394f347dbb7c2d657c0cf4c0a46135f9021edb4d800ccb60cf84db33375508ea8e57fcde60fe65bd0c596d0b11a5a1fd3d1139d9800d36a2164cae03c9418034a96f33e59", 0x4c}, {&(0x7f0000000cc0)="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", 0xfb}], 0x2, &(0x7f0000000e00)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x30}}, {{&(0x7f0000000e40)={0xa, 0x4e23, 0xd, @local, 0x48000000}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000000e80)="7cf8616cd97e1a399abac25ee6c7bf7f940edc0a4bc697430b049a64576cb757625b9d37add4f8192de71ab3b7dc21be778bd825ff42d606b8fb2f05afc91ac3d22fc19b8ccee4394e3801bcc171958e2c2e77da4d80df1a3c5b5f79f80cf34320663e976286a714acb93401fcdd93237060d15b38aa8707500edc04917e14055204dfbd211b3c7521788d6d54a567c14197a18e53106f235718cf891e9f7d250e24360feb6ccb0fdaa3e7cafedcd31dd69eec2078ab8b6ab1480f44c4b53b", 0xbf}, {&(0x7f0000000f40)="86b0bdefd11638289354d87d7d85013136dae06095414f39d7238654455b89015a7d931c40dff4099569d5f1a9126e01f8c252005c9c2836c77bc0aa0e4da1157da4ff1fc36f6d8de5f1041d40f8f3f248ef14befee71faaa11e2eac5e9031af69fbde1cd934dc0cd70585bb379794f773a08244c7377217bc16d9bc2217faab744e13cdde148762222c30e2a3490915fda35679faf58f2b957acc8ff65d2dab66019ea0b8dc887d13e84042ec53055972a3db64229c8f076085979ace66c840744575a5961a2fda", 0xc8}, {&(0x7f0000001040)="43f75b92467e7eb36b569c5002a742c3afd09ed70cdbde842846469d98570946a13f98c7397e0218167b840eb7a3816e1c84cbae04ef539a3f9ee8967bafe199e2895a62fdfeac3f6d42c65edf537712bf816dcee1cb64385fb4da209b93053dfa6c5fc72b7d0d5e798a524fcfc42554fb65a0b8bd6d63a998118787699bfa4f07f53ded83dfeff5464d", 0x8a}, {&(0x7f0000001100)="f42c3a", 0x3}], 0x4}}, {{&(0x7f0000001180)={0xa, 0x4e22, 0xf49, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x9}, 0x1c, &(0x7f0000001300)=[{&(0x7f00000011c0)="d6e009d791463c1781a655da53f1823e1a7124ce626b2cc25a472075a220416a82d62271b295af52897b428c0f8b6b0ab6b1c735e3c3e123e26a55f89a4fafa2912077d37d4f84aaba1861b95845f2a06573884cac4f165fe0540aa507ca8b53e10a4d97a5a4d452be68b4583dfccc4fe7285f644382a2fc11501639e45fff06d1e189bf2a273e43b89f5f0140f52c7f5f28fe2147eff6737f4060ade8db5f42bb20c77ce3633fec4da81c7981c204706f1f74a7830cf3f024b1a4bb207a84fe3b", 0xc1}, {&(0x7f00000012c0)="8865f53799c30128183b3fa5dee60f3503c2d097ad60b08b990e0574339cdec65c85c97758ccaab7c050", 0x2a}], 0x2, &(0x7f0000001340)=[@flowinfo={{0x14, 0x29, 0xb, 0xa}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000013c0)="41506327f50600e31a90e83ed0f911b45e65616e95128a5a97952058d23f5070b827a01c403bd50695cda06abfcfb82968268c902e47224313643f0bf06740c194d483d152f166ef7940676033b1388c1036adee10e088f63883478d34d06acd8bf8aab66ba8335086c91841cc00b6e55292038deab972a9ac45ac5bba2e9fc9503a2d670835a0c5d4cd943c76ca9bb40a83", 0x92}, {&(0x7f0000001480)="22ddc06e8c1d183365e72e1057ec1858cfdf4ff447baee20a44bf96a52e454e7b30201537ef5af971c99b808e086f4c6402ef87825ae1d9a3e7f78464339e5fb0b0320730a218dbb651dee6a8c2b248f3112da18154e37084d72cf38b78b13087ac4f78d616cf133d416eb8b66829f555175f72dc1f2ecfb2219", 0x7a}, {0x0}, {&(0x7f0000002540)}], 0x4, &(0x7f0000002700)=[@tclass={{0x14, 0x29, 0x43, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @dstopts_2292={{0xc0, 0x29, 0x4, {0x3b, 0x14, '\x00', [@pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x943, [0xb, 0x8b1, 0xaeac, 0x7c7dfdf9, 0x3, 0x73812ad2]}}, @generic={0x2}, @calipso={0x7, 0x18, {0x3, 0x4, 0x4, 0x61d2, [0xfffffffffffffff8, 0x2]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x6, 0x3f, "8c0d9c2df488b1c8952eb9faba6dd14df83a80dfd8342d09cea35cdfa50b10d76b0105d9fa6f9b76d2f1f4bb7deb2991a8b5945c207279fcf69de72dcc5b76"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x4c08}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x178}}, {{0x0, 0x0, &(0x7f0000002ac0), 0x0, &(0x7f0000002b40)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @dontfrag={{0x14}}, @hoplimit_2292={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x40}}], 0x70}}], 0x6, 0x1) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000003c40)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x24, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x66}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x804) 564.773178ms ago: executing program 3 (id=2512): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x4, 0x10003}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x1, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0xe62, @mcast1, 0x4d14}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x1d, 0xb, 0x40000001}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x70}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) rename(&(0x7f0000000740)='./bus\x00', &(0x7f0000000780)='./file1\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r4, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) recvmsg$unix(r4, &(0x7f00000002c0)={&(0x7f00000001c0), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000100)=""/21, 0x15}, {&(0x7f0000000540)=""/237, 0xed}], 0x4, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x40) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000ac0)='./file0\x00', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) close_range(r2, 0xffffffffffffffff, 0x2) 278.799129ms ago: executing program 1 (id=2526): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001e00050300000000000000000000010008000000", @ANYRES16, @ANYBLOB='\b'], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x24000800) 261.318449ms ago: executing program 1 (id=2527): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008000900f0000002080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 251.478429ms ago: executing program 1 (id=2528): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x10000000, 0x0, 0x0, 0x297, 0x0, 0x0, 0x3966, 0x6, 0x4000, 0x0, r2, r3, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r4, 0x0, 0x0) r5 = dup2(r4, r0) fallocate(r5, 0x10, 0x9, 0x3ff) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000002d00)='cgroup.threads\x00', 0x2, 0x0) read$FUSE(r8, &(0x7f0000000c80)={0x2020}, 0x2020) close_range(r6, 0xffffffffffffffff, 0x0) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 152.722259ms ago: executing program 4 (id=2529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 138.38606ms ago: executing program 1 (id=2530): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f00000035c0)=""/76, 0x4c}], 0x7}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x40000, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) 124.66333ms ago: executing program 1 (id=2531): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000100)=0x2) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000400)={0x2}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000580), 0x0) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003880)=[{{&(0x7f00000009c0)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="78ed24c8326258e4f8ac32b5da1ff672d9d79c98493b7551d27c37a265ac70fdef8b5f53d6835ef1b50cefbfbd657a922b388793df6d9f48e9bd273dd17c43f4e653512ece8a004251235b5e578881e4e3050523f04a54640ab68bc64b7e1542d992887408391460ccc8f0dbba4efdf61a8ca2c91b280b9c5e4b6ea96c80894eaeb110463d8b133cd4f0d3072d229fe2f00e82fbdafea270b51791f39f57108b8a2086b83455ebcebc99cc67087c18", 0xaf}], 0x1, &(0x7f0000000b00)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @flowinfo={{0x14, 0x29, 0xb, 0xd}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x29, 0x3, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x7, 0x8, [0x6, 0x3]}}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0xc9, 0x4, 0x2, 0x1, 0x0, [@local, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x11, 0x2, 0x3, 0xc0, 0x0, [@mcast1]}}}], 0xd8}}, {{&(0x7f0000000c00)={0xa, 0x4e21, 0xac28, @private2, 0x100}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="9c5a0d0530f5957394f347dbb7c2d657c0cf4c0a46135f9021edb4d800ccb60cf84db33375508ea8e57fcde60fe65bd0c596d0b11a5a1fd3d1139d9800d36a2164cae03c9418034a96f33e59", 0x4c}, {&(0x7f0000000cc0)="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", 0xfb}], 0x2, &(0x7f0000000e00)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x30}}, {{&(0x7f0000000e40)={0xa, 0x4e23, 0xd, @local, 0x48000000}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000000e80)="7cf8616cd97e1a399abac25ee6c7bf7f940edc0a4bc697430b049a64576cb757625b9d37add4f8192de71ab3b7dc21be778bd825ff42d606b8fb2f05afc91ac3d22fc19b8ccee4394e3801bcc171958e2c2e77da4d80df1a3c5b5f79f80cf34320663e976286a714acb93401fcdd93237060d15b38aa8707500edc04917e14055204dfbd211b3c7521788d6d54a567c14197a18e53106f235718cf891e9f7d250e24360feb6ccb0fdaa3e7cafedcd31dd69eec2078ab8b6ab1480f44c4b53b", 0xbf}, {&(0x7f0000000f40)="86b0bdefd11638289354d87d7d85013136dae06095414f39d7238654455b89015a7d931c40dff4099569d5f1a9126e01f8c252005c9c2836c77bc0aa0e4da1157da4ff1fc36f6d8de5f1041d40f8f3f248ef14befee71faaa11e2eac5e9031af69fbde1cd934dc0cd70585bb379794f773a08244c7377217bc16d9bc2217faab744e13cdde148762222c30e2a3490915fda35679faf58f2b957acc8ff65d2dab66019ea0b8dc887d13e84042ec53055972a3db64229c8f076085979ace66c840744575a5961a2fda", 0xc8}, {&(0x7f0000001040)="43f75b92467e7eb36b569c5002a742c3afd09ed70cdbde842846469d98570946a13f98c7397e0218167b840eb7a3816e1c84cbae04ef539a3f9ee8967bafe199e2895a62fdfeac3f6d42c65edf537712bf816dcee1cb64385fb4da209b93053dfa6c5fc72b7d0d5e798a524fcfc42554fb65a0b8bd6d63a998118787699bfa4f07f53ded83dfeff5464d", 0x8a}, {&(0x7f0000001100)="f42c3a", 0x3}], 0x4}}, {{&(0x7f0000001180)={0xa, 0x4e22, 0xf49, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x9}, 0x1c, &(0x7f0000001300)=[{&(0x7f00000011c0)="d6e009d791463c1781a655da53f1823e1a7124ce626b2cc25a472075a220416a82d62271b295af52897b428c0f8b6b0ab6b1c735e3c3e123e26a55f89a4fafa2912077d37d4f84aaba1861b95845f2a06573884cac4f165fe0540aa507ca8b53e10a4d97a5a4d452be68b4583dfccc4fe7285f644382a2fc11501639e45fff06d1e189bf2a273e43b89f5f0140f52c7f5f28fe2147eff6737f4060ade8db5f42bb20c77ce3633fec4da81c7981c204706f1f74a7830cf3f024b1a4bb207a84fe3b", 0xc1}, {&(0x7f00000012c0)="8865f53799c30128183b3fa5dee60f3503c2d097ad60b08b990e0574339cdec65c85c97758ccaab7c050", 0x2a}], 0x2, &(0x7f0000001340)=[@flowinfo={{0x14, 0x29, 0xb, 0xa}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000013c0)="41506327f50600e31a90e83ed0f911b45e65616e95128a5a97952058d23f5070b827a01c403bd50695cda06abfcfb82968268c902e47224313643f0bf06740c194d483d152f166ef7940676033b1388c1036adee10e088f63883478d34d06acd8bf8aab66ba8335086c91841cc00b6e55292038deab972a9ac45ac5bba2e9fc9503a2d670835a0c5d4cd943c76ca9bb40a83", 0x92}, {&(0x7f0000001480)="22ddc06e8c1d183365e72e1057ec1858cfdf4ff447baee20a44bf96a52e454e7b30201537ef5af971c99b808e086f4c6402ef87825ae1d9a3e7f78464339e5fb0b0320730a218dbb651dee6a8c2b248f3112da18154e37084d72cf38b78b13087ac4f78d616cf133d416eb8b66829f555175f72dc1f2ecfb2219", 0x7a}, {0x0}, {&(0x7f0000002540)}], 0x4, &(0x7f0000002700)=[@tclass={{0x14, 0x29, 0x43, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x3b, 0x1d, '\x00', [@pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x943, [0xb, 0x8b1, 0xaeac, 0x7c7dfdf9, 0x3, 0x73812ad2]}}, @generic={0x2, 0x4e, "d5e54510e29b32e6f674e86fb141cee1f0a87f155d2aa445e81f23d106ab2f0cc94fefc89a6d2b9e53c640f602f6dc857f24c942467b4533cd195204a56ae33bea976bd6b23c57047afa99d22064"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x4, 0x61d2, [0xfffffffffffffff8, 0x2]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x6, 0x3f, "8c0d9c2df488b1c8952eb9faba6dd14df83a80dfd8342d09cea35cdfa50b10d76b0105d9fa6f9b76d2f1f4bb7deb2991a8b5945c207279fcf69de72dcc5b76"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x4c08}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x1c0}}, {{0x0, 0x0, &(0x7f0000002ac0), 0x0, &(0x7f0000002b40)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @dontfrag={{0x14}}, @hoplimit_2292={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x40}}], 0x70}}], 0x6, 0x1) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000003c40)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x24, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x66}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x804) 118.22234ms ago: executing program 4 (id=2532): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000005c0)={{0x3000, 0xd000, 0x9, 0x7, 0xe, 0x40, 0x9, 0x80, 0x0, 0x4, 0xb8, 0x9}, {0x8080000, 0x4, 0x4, 0xeb, 0xed, 0x1, 0x1, 0x8, 0x2c, 0x5, 0xfe, 0x8}, {0x1, 0x2, 0x4, 0xb, 0x7, 0x40, 0x1, 0x0, 0x9, 0x4, 0xc, 0xc1}, {0x100000, 0x2000, 0x1, 0x9, 0xb5, 0x8, 0x4, 0x6, 0xa6, 0x8, 0x8, 0xb}, {0xdddd1000, 0xffff1000, 0xb, 0xc, 0xd0, 0xc, 0x3, 0xc, 0x4, 0x6, 0x10, 0x2b}, {0x0, 0x8000000, 0xd, 0x81, 0x6, 0xfb, 0x7, 0x5, 0x2, 0x67}, {0x8000000, 0x1000, 0x3, 0x8, 0x5, 0x3, 0x23, 0x0, 0xd, 0x8, 0x38}, {0x4, 0xeeee8000, 0x4, 0xc, 0x4, 0xb2, 0xbc, 0x80, 0x84, 0x9, 0x6, 0xb}, {0x102001, 0xa1b}, {0x6000, 0x7}, 0x0, 0x0, 0xeeee8000, 0x80, 0xc, 0x4000, 0x6000, [0x9, 0x81, 0x8, 0x8]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b00"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x0, 0x3, 0x5, 0x408f, r4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death={0x400c630e, 0x2}, @clear_death={0x400c630e}], 0x0, 0x0, 0x0}) 68.38841ms ago: executing program 1 (id=2533): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xde04}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x781}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7ff}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x101200, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x907, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88e1}, 0x4000) r4 = syz_io_uring_complete(0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000340)={{0x6, 0x2, 0xfff}, 'syz1\x00', 0x37}) read(r2, &(0x7f00000003c0)=""/82, 0x52) r5 = fsmount(r4, 0x0, 0x80) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x51, 0x40}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000680), 0x480000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r7) recvmmsg(r7, &(0x7f00000009c0)=[{{&(0x7f0000000700)=@hci, 0x80, &(0x7f0000000940)=[{&(0x7f0000000780)=""/23, 0x17}, {&(0x7f00000007c0)=""/194, 0xc2}, {&(0x7f00000008c0)=""/107, 0x6b}], 0x3, &(0x7f0000000980)=""/30, 0x1e}, 0x3}], 0x1, 0x10020, &(0x7f0000000a00)={0x0, 0x989680}) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa4, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x1a}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0x83, 0x7f, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb, 0x29}}, @preq={0x82, 0x41, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x46, 0xf, 0x2, @broadcast, 0x0, @value=@broadcast, 0x7, 0xe, 0x3, [{{0x0, 0x0, 0x1}, @broadcast, 0x200}, {{0x0, 0x0, 0x1}, @device_a, 0xab}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}]}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0xc0, 0x4e, @broadcast, 0x5, 0xa3bd2763, 0x4}}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@random="6641198a42c3"}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000084}, 0x50) ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f0000000bc0)={0x80}) link(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)='./file0\x00') r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000d00)={'vxcan1\x00', {0x2, 0x4e21, @private=0xa010100}}) fcntl$setsig(r5, 0xa, 0x2f) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000d80)={&(0x7f0000000d40)=""/56, 0x1000000, 0x0, 0x6fee9fd2, 0x1}, 0x20) read$FUSE(r2, &(0x7f0000000fc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f0000003040)={0x8000, &(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40), {0x15}, &(0x7f0000000e80)=""/75, 0x4b, &(0x7f0000000f00)=""/176, &(0x7f0000003000)=[r10], 0x1, {r2}}, 0x58) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f00000030c0)) syz_genetlink_get_family_id$l2tp(&(0x7f0000003100), r4) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000003140)={r2, 0x9, 0x1, 0x6}) ioctl$UI_DEV_CREATE(r11, 0x5501) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000801, r9, &(0x7f0000003180)={0x2, 0x7, 0xbb, 0x2, 0xffffffffffffff19, 0xffffffffffffffff, 0xdb5, 0x0, 0x2}) 62.67852ms ago: executing program 4 (id=2534): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00000000000000000000feffffffffffffff000001020001001ea1a0363491f0b6f60ec1"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040810) 55.33399ms ago: executing program 4 (id=2535): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x46, &(0x7f0000003640)=[{&(0x7f00000036c0)=""/4120, 0x1015}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000003240)=""/100, 0x64}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}], 0x7}, 0x81}, {{0x0, 0x0, 0x0, 0x2000}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) 760.39µs ago: executing program 4 (id=2536): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f00000000c0)={0x20071026, r3}, &(0x7f0000000140)={0x788d4f06, 0x4, 0x9, 0x4, 0x0, 0x2}) (async) capset(&(0x7f00000000c0)={0x20071026, r3}, &(0x7f0000000140)={0x788d4f06, 0x4, 0x9, 0x4, 0x0, 0x2}) fstat(r2, &(0x7f0000000440)) (async) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r4, &(0x7f0000000000)) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000000080)) 241.01µs ago: executing program 4 (id=2537): r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000005c0)={{0x3000, 0xd000, 0x9, 0x7, 0xe, 0x40, 0x9, 0x80, 0x0, 0x4, 0xb8, 0x9}, {0x8080000, 0x4, 0x4, 0xeb, 0xed, 0x1, 0x1, 0x8, 0x2c, 0x5, 0xfe, 0x8}, {0x1, 0x2, 0x4, 0xb, 0x7, 0x40, 0x1, 0x0, 0x9, 0x4, 0xc, 0xc1}, {0x100000, 0x2000, 0x1, 0x9, 0xb5, 0x8, 0x4, 0x6, 0xa6, 0x8, 0x8, 0xb}, {0xdddd1000, 0xffff1000, 0xb, 0xc, 0xd0, 0xc, 0x3, 0xc, 0x4, 0x6, 0x10, 0x2b}, {0x0, 0x8000000, 0xd, 0x81, 0x6, 0xfb, 0x7, 0x5, 0x2, 0x67}, {0x8000000, 0x1000, 0x3, 0x8, 0x5, 0x3, 0x23, 0x0, 0xd, 0x8, 0x38}, {0x4, 0xeeee8000, 0x4, 0xc, 0x4, 0xb2, 0xbc, 0x80, 0x84, 0x9, 0x6, 0xb}, {0x102001, 0xa1b}, {0x6000, 0x7}, 0x0, 0x0, 0xeeee8000, 0x80, 0xc, 0x4000, 0x6000, [0x9, 0x81, 0x8, 0x8]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r4, 0xae80, 0x2000000) 0s ago: executing program 3 (id=2538): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) kernel console output (not intermixed with test programs): :361): avc: denied { create } for pid=2706 comm="syz.2.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 65.626021][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.632426][ T36] audit: type=1400 audit(1750764738.090:362): avc: denied { write } for pid=2711 comm="syz.2.891" name="ip6_tables_targets" dev="proc" ino=4026532617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 65.656121][ T36] audit: type=1400 audit(1750764738.100:363): avc: denied { getopt } for pid=2711 comm="syz.2.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.885244][ T2721] __nla_validate_parse: 1 callbacks suppressed [ 65.885264][ T2721] netlink: 5308 bytes leftover after parsing attributes in process `syz.0.893'. [ 65.908879][ T2725] netlink: 324 bytes leftover after parsing attributes in process `syz.0.894'. [ 66.027830][ T36] audit: type=1400 audit(1750764738.490:364): avc: denied { mount } for pid=2755 comm="syz.3.908" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 66.028153][ T2756] overlayfs: failed to clone lowerpath [ 66.228168][ T2811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 66.484088][ T2824] netlink: 15352 bytes leftover after parsing attributes in process `syz.1.933'. [ 66.493440][ T2824] netlink: 15352 bytes leftover after parsing attributes in process `syz.1.933'. [ 66.502923][ T2824] netlink: 15352 bytes leftover after parsing attributes in process `syz.1.933'. [ 66.512196][ T2824] netlink: 15352 bytes leftover after parsing attributes in process `syz.1.933'. [ 66.521430][ T2824] netlink: 15352 bytes leftover after parsing attributes in process `syz.1.933'. [ 66.530667][ T2824] netlink: 15352 bytes leftover after parsing attributes in process `syz.1.933'. [ 66.539911][ T2824] netlink: 15352 bytes leftover after parsing attributes in process `syz.1.933'. [ 66.677924][ T36] audit: type=1326 audit(1750764739.146:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2858 comm="syz.0.949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae83d8e929 code=0x0 [ 67.131824][ T36] audit: type=1326 audit(1750764739.606:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2877 comm="syz.1.956" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cfeb8e929 code=0x0 [ 67.698095][ T417] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.698100][ T630] Bluetooth: hci0: command 0x1003 tx timeout [ 68.046480][ T36] audit: type=1400 audit(1750764740.517:367): avc: denied { create } for pid=2930 comm="syz.0.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.065954][ T36] audit: type=1400 audit(1750764740.517:368): avc: denied { create } for pid=2930 comm="syz.0.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.293759][ T2942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 68.293785][ T2942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:318 [ 68.567651][ T9] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 68.619331][ T36] audit: type=1400 audit(1750764741.097:370): avc: denied { create } for pid=2952 comm="syz.0.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 68.639476][ T36] audit: type=1400 audit(1750764741.097:369): avc: denied { create } for pid=2952 comm="syz.0.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 68.727558][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 68.857579][ T9] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 69.007415][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 69.012854][ T9] usb usb3-port1: attempt power cycle [ 69.316469][ T2982] overlayfs: failed to resolve './file1': -2 [ 69.357298][ T9] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 69.377633][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 69.507185][ T9] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 69.527529][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 69.532937][ T9] usb usb3-port1: unable to enumerate USB device [ 69.704420][ T2984] netlink: 'syz.0.1001': attribute type 9 has an invalid length. [ 69.761347][ T36] audit: type=1400 audit(1750764742.237:371): avc: denied { nlmsg_write } for pid=2996 comm="syz.0.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 70.341133][ T3006] netlink: 'syz.1.1011': attribute type 9 has an invalid length. [ 70.787179][ T3022] fuse: Bad value for 'group_id' [ 70.792283][ T3022] fuse: Bad value for 'group_id' [ 70.898466][ T3028] netlink: 'syz.1.1021': attribute type 9 has an invalid length. [ 70.913596][ T3030] __nla_validate_parse: 66 callbacks suppressed [ 70.913610][ T3030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1022'. [ 71.192754][ T3053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 71.661063][ T3098] 9pnet_fd: Insufficient options for proto=fd [ 71.832868][ T3108] fuse: Bad value for 'group_id' [ 71.837885][ T3108] fuse: Bad value for 'group_id' [ 72.059474][ T36] audit: type=1400 audit(1750764744.539:372): avc: denied { shutdown } for pid=3117 comm="syz.0.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.120442][ T36] audit: type=1400 audit(1750764744.599:373): avc: denied { create } for pid=3126 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.151479][ T3132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 72.311945][ T3156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 72.353985][ T3162] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1070'. [ 72.363424][ T3162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1070'. [ 72.376006][ T3167] overlayfs: failed to clone upperpath [ 72.393794][ T3169] netlink: 'syz.3.1072': attribute type 4 has an invalid length. [ 72.464837][ T3182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 72.491677][ T36] audit: type=1400 audit(1750764744.969:374): avc: denied { create } for pid=3185 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.516242][ T3186] netlink: 'syz.2.1080': attribute type 4 has an invalid length. [ 72.533458][ T3187] syz.2.1080: attempt to access beyond end of device [ 72.533458][ T3187] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 72.548931][ T3187] exFAT-fs (loop2): unable to read boot sector [ 72.555350][ T3187] exFAT-fs (loop2): failed to read boot sector [ 72.561779][ T3187] exFAT-fs (loop2): failed to recognize exfat type [ 72.606888][ T3192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=3192 comm=syz.0.1082 [ 72.620785][ T3192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=3192 comm=syz.0.1082 [ 72.633404][ T3192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=3192 comm=syz.0.1082 [ 72.646610][ T3192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=3192 comm=syz.0.1082 [ 72.718740][ T3214] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.719624][ T3214] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 72.727010][ T3214] rust_binder: Write failure EINVAL in pid:367 [ 72.747746][ T36] audit: type=1400 audit(1750764745.229:375): avc: denied { listen } for pid=3215 comm="syz.2.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.747967][ T3216] rust_binder: Error while translating object. [ 72.774018][ T3216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 72.780291][ T3216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:369 [ 72.798523][ T3219] tmpfs: Unknown parameter 'grpquota' [ 72.825251][ T36] audit: type=1400 audit(1750764745.299:376): avc: denied { execute } for pid=3218 comm="syz.2.1093" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.904608][ T36] audit: type=1400 audit(1750764745.379:377): avc: denied { read } for pid=3223 comm="syz.2.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.007571][ T3239] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1101'. [ 73.016561][ T3239] tipc: Invalid UDP bearer configuration [ 73.016600][ T3239] tipc: Enabling of bearer rejected, failed to enable media [ 73.039512][ T3244] fuse: Bad value for 'user_id' [ 73.044381][ T3244] fuse: Bad value for 'user_id' [ 73.175340][ T428] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 73.325259][ T428] usb 3-1: Using ep0 maxpacket: 8 [ 73.332242][ T428] usb 3-1: config 127 has an invalid interface number: 24 but max is 1 [ 73.341141][ T428] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 73.351767][ T428] usb 3-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 73.361057][ T428] usb 3-1: config 127 has no interface number 0 [ 73.367625][ T428] usb 3-1: config 127 interface 24 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.381237][ T428] usb 3-1: config 127 interface 24 has no altsetting 0 [ 73.390026][ T428] usb 3-1: New USB device found, idVendor=045e, idProduct=047b, bcdDevice=b0.93 [ 73.399485][ T428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.417130][ T428] usb 3-1: Product: syz [ 73.421579][ T428] usb 3-1: Manufacturer: syz [ 73.426449][ T428] usb 3-1: SerialNumber: syz [ 73.501093][ T3264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 73.642136][ T428] usb 3-1: USB disconnect, device number 30 [ 73.712185][ T3284] overlayfs: failed to clone upperpath [ 73.887583][ T3288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 73.905914][ T3292] tipc: Invalid UDP bearer configuration [ 73.905937][ T3292] tipc: Enabling of bearer rejected, failed to enable media [ 73.996533][ T3301] overlayfs: missing 'lowerdir' [ 74.151143][ T3307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:386 [ 74.158544][ T3309] TCP: TCP_TX_DELAY enabled [ 74.173586][ T3309] rust_binder: Read failure Err(EAGAIN) in pid:388 [ 74.199210][ T3317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:394 [ 74.206819][ T3315] rust_binder: Error while translating object. [ 74.216112][ T3315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.222336][ T3315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:394 [ 74.245232][ T3322] fuse: Bad value for 'group_id' [ 74.259464][ T3322] fuse: Bad value for 'group_id' [ 74.279633][ T36] audit: type=1400 audit(1750764746.750:378): avc: denied { read } for pid=3327 comm="syz.2.1135" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 74.303894][ T36] audit: type=1400 audit(1750764746.750:379): avc: denied { open } for pid=3327 comm="syz.2.1135" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 74.347061][ T3341] overlayfs: failed to clone upperpath [ 74.356103][ T36] audit: type=1400 audit(1750764746.830:380): avc: denied { append } for pid=3327 comm="syz.2.1135" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.571559][ T36] audit: type=1400 audit(1750764747.040:381): avc: denied { map } for pid=3359 comm="syz.3.1147" path="socket:[20067]" dev="sockfs" ino=20067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.364304][ T31] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 75.452141][ T3392] overlayfs: failed to clone upperpath [ 75.515558][ T31] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 75.523913][ T31] usb 3-1: config 179 has no interface number 0 [ 75.530941][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 75.539487][ T3417] netlink: 'syz.0.1170': attribute type 9 has an invalid length. [ 75.542351][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 75.561004][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 75.572434][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 75.582515][ T31] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 75.595843][ T31] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 75.604915][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.613929][ T3389] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 75.622897][ T31] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 75.824785][ T31] usb 3-1: USB disconnect, device number 31 [ 76.020716][ T3444] netlink: 'syz.1.1182': attribute type 9 has an invalid length. [ 76.050718][ T3448] overlayfs: failed to resolve './file0': -2 [ 76.114704][ T3463] /dev/rnullb0: Can't lookup blockdev [ 76.136925][ T3467] netlink: 'syz.3.1192': attribute type 9 has an invalid length. [ 76.206100][ T3490] netlink: 'syz.0.1201': attribute type 9 has an invalid length. [ 76.221890][ T3494] __nla_validate_parse: 4 callbacks suppressed [ 76.221905][ T3494] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1203'. [ 76.307632][ T3520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1212'. [ 76.393303][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.403103][ T3528] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaa [ 76.412077][ T3528] exFAT-fs (rnullb0): invalid boot record signature [ 76.418888][ T3528] exFAT-fs (rnullb0): failed to read boot sector [ 76.425337][ T3528] exFAT-fs (rnullb0): failed to recognize exfat type [ 76.838966][ T3554] overlayfs: failed to resolve './file0': -2 [ 77.138946][ T3560] syz.1.1229 uses obsolete (PF_INET,SOCK_PACKET) [ 77.183556][ T3571] 9pnet_fd: Insufficient options for proto=fd [ 77.248434][ T3590] binder: Unknown parameter 'st' [ 77.286173][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 77.286192][ T36] audit: type=1400 audit(1750764749.761:389): avc: denied { lock } for pid=3598 comm="syz.1.1245" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.450494][ T3635] overlayfs: failed to clone upperpath [ 77.464847][ T3639] overlayfs: failed to resolve './file0': -2 [ 77.537702][ T3664] tmpfs: Unknown parameter 'noswanqtext' [ 78.412748][ T630] Bluetooth: hci0: command 0x1003 tx timeout [ 78.412748][ T417] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.429209][ T36] audit: type=1400 audit(1750764750.902:390): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.712599][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 78.863548][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.874569][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.883757][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.892388][ T10] usb 3-1: config 0 descriptor?? [ 79.092716][ T3703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1289'. [ 79.302936][ T10] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 79.313031][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input7 [ 79.372443][ T3711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 79.392579][ T10] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 79.393936][ T3713] overlayfs: failed to clone upperpath [ 79.421988][ T3713] netlink: 'syz.3.1293': attribute type 4 has an invalid length. [ 79.504349][ T3693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.512920][ T3693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.699819][ T3728] overlayfs: failed to clone upperpath [ 80.038635][ T3754] overlayfs: failed to clone upperpath [ 80.695306][ T3779] overlayfs: failed to clone upperpath [ 81.367792][ T3801] overlayfs: failed to clone upperpath [ 81.522047][ T31] usb 3-1: USB disconnect, device number 32 [ 81.643157][ T3807] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.729990][ T3812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1335'. [ 81.807824][ T3822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'. [ 81.975906][ T3847] overlayfs: failed to clone upperpath [ 82.497983][ T36] audit: type=1400 audit(1750764754.974:391): avc: denied { name_bind } for pid=3864 comm="syz.1.1360" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 82.671447][ T36] audit: type=1400 audit(1750764755.154:392): avc: denied { audit_write } for pid=3868 comm="syz.0.1361" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.692590][ T36] audit: type=1107 audit(1750764755.154:393): pid=3868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='4`' [ 82.710597][ T62] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 82.861549][ T62] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 82.869863][ T62] usb 3-1: config 0 has no interface number 0 [ 82.877374][ T62] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 82.886534][ T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.894559][ T62] usb 3-1: Product: syz [ 82.898786][ T62] usb 3-1: Manufacturer: syz [ 82.903395][ T62] usb 3-1: SerialNumber: syz [ 82.908460][ T62] usb 3-1: config 0 descriptor?? [ 83.397589][ T3887] overlayfs: failed to clone upperpath [ 83.515377][ T62] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 83.526758][ T62] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 83.537060][ T62] asix 3-1:0.251: probe with driver asix failed with error -5 [ 83.545580][ T62] usb 3-1: USB disconnect, device number 33 [ 83.919307][ T3898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1372'. [ 83.958625][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'. [ 83.975138][ T3908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'. [ 83.999922][ T3912] overlayfs: failed to clone upperpath [ 84.351368][ T3935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1388'. [ 84.360282][ T3935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1388'. [ 84.369479][ T36] audit: type=1400 audit(1750764756.845:394): avc: denied { accept } for pid=3933 comm="syz.3.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.950580][ T3976] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 84.960133][ T36] audit: type=1400 audit(1750764757.445:395): avc: denied { relabelto } for pid=3975 comm="syz.0.1407" name="file0" dev="tmpfs" ino=2638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 84.986376][ T36] audit: type=1400 audit(1750764757.445:396): avc: denied { associate } for pid=3975 comm="syz.0.1407" name="file0" dev="tmpfs" ino=2638 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:etc_mail_t:s0" [ 85.013694][ T36] audit: type=1400 audit(1750764757.445:397): avc: denied { rmdir } for pid=288 comm="syz-executor" name="file0" dev="tmpfs" ino=2638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 85.443628][ T3995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'. [ 85.488691][ T4007] overlayfs: failed to clone upperpath [ 85.511606][ T4012] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1422'. [ 86.014368][ T4045] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1437'. [ 86.384141][ T4064] overlayfs: failed to resolve './file0': -2 [ 86.638662][ T62] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 86.789517][ T62] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 86.797860][ T62] usb 3-1: config 179 has no interface number 0 [ 86.804172][ T62] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 86.815326][ T62] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 86.826313][ T62] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 86.837558][ T62] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 86.847570][ T62] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 86.860808][ T62] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 86.869887][ T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.878766][ T4066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 86.886908][ T62] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 86.903968][ T4090] 9pnet_fd: Insufficient options for proto=fd [ 86.945733][ T4101] __nla_validate_parse: 1 callbacks suppressed [ 86.945754][ T4101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1461'. [ 87.007892][ T4107] overlayfs: failed to resolve './file0': -2 [ 87.089412][ T62] usb 3-1: USB disconnect, device number 34 [ 87.630267][ T4137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 87.630291][ T4137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:469 [ 87.639789][ T4137] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 87.648999][ T4137] rust_binder: Read failure Err(EFAULT) in pid:469 [ 87.688513][ T4145] overlayfs: failed to resolve './file0': -2 [ 87.931259][ T4147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'. [ 88.500953][ T4189] incfs: Backing dir is not set, filesystem can't be mounted. [ 88.508690][ T4189] incfs: mount failed -2 [ 88.513718][ T4189] overlayfs: failed to clone upperpath [ 89.028003][ T4218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1509'. [ 89.417109][ T4245] incfs: Backing dir is not set, filesystem can't be mounted. [ 89.424756][ T4245] incfs: mount failed -2 [ 89.429994][ T4245] overlayfs: failed to clone upperpath [ 90.056934][ T307] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 90.207867][ T307] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 90.216205][ T307] usb 3-1: config 179 has no interface number 0 [ 90.222513][ T307] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 90.233662][ T307] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 90.244663][ T307] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 90.255890][ T307] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 90.265898][ T307] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 90.279342][ T307] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 90.288816][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.293587][ T4288] incfs: Backing dir is not set, filesystem can't be mounted. [ 90.301401][ T4257] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.304452][ T4288] incfs: mount failed -2 [ 90.312375][ T307] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 90.319649][ T4288] overlayfs: failed to clone upperpath [ 90.527387][ T62] usb 3-1: USB disconnect, device number 35 [ 90.844055][ T4298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'. [ 90.917933][ T4319] overlayfs: failed to clone upperpath [ 91.158645][ T4325] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.291039][ T4328] netlink: 'syz.1.1549': attribute type 4 has an invalid length. [ 91.298844][ T4328] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1549'. [ 91.828555][ T36] audit: type=1400 audit(1750764764.318:398): avc: denied { mount } for pid=4348 comm="syz.0.1559" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 91.829036][ T4349] overlayfs: failed to clone lowerpath [ 91.871220][ T4354] overlayfs: failed to clone upperpath [ 91.982755][ T4363] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1565'. [ 92.026589][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 92.875242][ T4393] overlayfs: failed to clone upperpath [ 92.903542][ T4399] overlayfs: failed to clone upperpath [ 93.060446][ T4420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.621035][ T4441] overlayfs: failed to clone upperpath [ 93.833414][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 94.174865][ T307] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 94.325794][ T307] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 94.334121][ T307] usb 3-1: config 179 has no interface number 0 [ 94.340425][ T307] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 94.351609][ T307] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 94.362620][ T307] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 94.373869][ T307] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 94.383908][ T307] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 94.397201][ T307] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 94.406282][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.415866][ T4448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.423634][ T307] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 94.626864][ T307] usb 3-1: USB disconnect, device number 36 [ 94.732632][ T4470] overlayfs: failed to clone upperpath [ 95.232043][ T36] audit: type=1400 audit(1750764767.710:399): avc: denied { bind } for pid=4503 comm="syz.2.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.252600][ T36] audit: type=1400 audit(1750764767.710:400): avc: denied { setopt } for pid=4503 comm="syz.2.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.337090][ T4514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1627'. [ 95.604228][ T307] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 95.620177][ T4529] overlayfs: failed to clone upperpath [ 95.755766][ T307] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 95.764128][ T307] usb 3-1: config 179 has no interface number 0 [ 95.770403][ T307] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 95.781786][ T307] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 95.792923][ T307] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 95.804743][ T307] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 95.815111][ T307] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 95.828515][ T307] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 96.101556][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.112928][ T4518] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.120985][ T307] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 96.167677][ T36] audit: type=1326 audit(1750764768.651:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.1.1650" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cfeb8e929 code=0x0 [ 96.322399][ T307] usb 3-1: USB disconnect, device number 37 [ 96.703044][ T4579] overlayfs: failed to resolve './file1': -2 [ 96.832700][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1655'. [ 96.881546][ T36] audit: type=1400 audit(1750764769.361:402): avc: denied { relabelfrom } for pid=4591 comm="syz.2.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 96.901985][ T36] audit: type=1400 audit(1750764769.361:403): avc: denied { relabelto } for pid=4591 comm="syz.2.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.006801][ T36] audit: type=1400 audit(1750764769.491:404): avc: denied { read } for pid=4600 comm="syz.1.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.052569][ T4609] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.256858][ T4623] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1671'. [ 97.540892][ T4635] overlayfs: failed to resolve './file1': -2 [ 97.803880][ T4637] tipc: Trying to set illegal importance in message [ 97.813518][ T36] audit: type=1400 audit(1750764770.301:405): avc: denied { shutdown } for pid=4636 comm="syz.2.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.890487][ T4649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 98.043898][ T4659] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.145418][ T4673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'. [ 98.291687][ T4680] overlayfs: failed to resolve './file1': -2 [ 98.825693][ T4711] netlink: 'syz.3.1706': attribute type 4 has an invalid length. [ 98.833902][ T4711] netlink: 'syz.3.1706': attribute type 4 has an invalid length. [ 98.886894][ T4722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 99.437754][ T36] audit: type=1400 audit(1750764771.922:406): avc: denied { mounton } for pid=4744 comm="syz.0.1720" path="/554/file0" dev="tmpfs" ino=3015 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 99.444604][ T4746] netlink: 'syz.0.1720': attribute type 4 has an invalid length. [ 99.468633][ T4746] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1720'. [ 100.130186][ T36] audit: type=1400 audit(1750764772.613:407): avc: granted { setsecparam } for pid=4790 comm="syz.2.1739" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 100.134075][ T4791] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.149364][ T36] audit: type=1400 audit(1750764772.613:408): avc: granted { setsecparam } for pid=4790 comm="syz.2.1739" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 100.156362][ T4791] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 100.179809][ T36] audit: type=1400 audit(1750764772.613:409): avc: granted { setsecparam } for pid=4790 comm="syz.2.1739" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 100.195593][ T4795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 100.227168][ T4799] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 100.342821][ T4805] netlink: 'syz.0.1744': attribute type 4 has an invalid length. [ 100.358525][ T4805] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1744'. [ 100.967836][ T4840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 101.082762][ T4846] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 101.171827][ T4860] fuse: Unknown parameter 'fcd [ 101.171827][ T4860] [ U7'8>n$ej Z{pҡsB_l8f*oDL;%N䍯z-yYTꦐ$s&f1{xȡ]b춗_*tKvq  m+:P_kIa>el0x0000000000000003' [ 101.439817][ T4863] fuse: Bad value for 'fd' [ 101.674861][ T4869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1771'. [ 102.602022][ T4911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 102.602055][ T4911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:659 [ 102.713218][ T4924] netlink: 'syz.0.1797': attribute type 9 has an invalid length. [ 103.360727][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1805'. [ 104.239878][ T492] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 104.369769][ T492] usb 3-1: device descriptor read/64, error -71 [ 104.609639][ T492] usb 3-1: device descriptor read/64, error -71 [ 104.849531][ T492] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 104.979458][ T492] usb 3-1: device descriptor read/64, error -71 [ 105.214207][ T5013] netlink: 'syz.1.1832': attribute type 9 has an invalid length. [ 105.222036][ T492] usb 3-1: device descriptor read/64, error -71 [ 105.266802][ T5025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 105.329348][ T492] usb usb3-port1: attempt power cycle [ 105.669100][ T492] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 105.690147][ T492] usb 3-1: device descriptor read/8, error -71 [ 105.824792][ T492] usb 3-1: device descriptor read/8, error -71 [ 106.068897][ T492] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 106.089972][ T492] usb 3-1: device descriptor read/8, error -71 [ 106.219940][ T492] usb 3-1: device descriptor read/8, error -71 [ 106.329256][ T492] usb usb3-port1: unable to enumerate USB device [ 106.429858][ T5084] overlayfs: missing 'lowerdir' [ 106.958057][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'. [ 106.999234][ T5106] overlayfs: missing 'lowerdir' [ 107.132223][ T5112] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.570153][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 107.937787][ T5158] overlayfs: missing 'lowerdir' [ 108.258771][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.265816][ T5165] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.273276][ T5165] bridge_slave_0: entered allmulticast mode [ 108.279556][ T5165] bridge_slave_0: entered promiscuous mode [ 108.285845][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.293004][ T5165] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.300267][ T5165] bridge_slave_1: entered allmulticast mode [ 108.306446][ T5165] bridge_slave_1: entered promiscuous mode [ 108.356958][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.364026][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.371340][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.378397][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.405430][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.413860][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.417706][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 108.417723][ T36] audit: type=1400 audit(1750764780.907:475): avc: denied { ioctl } for pid=5175 comm="syz.1.1896" path="socket:[26163]" dev="sockfs" ino=26163 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.458553][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.465620][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.473959][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.481048][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.503117][ T5165] veth0_vlan: entered promiscuous mode [ 108.513202][ T5165] veth1_macvtap: entered promiscuous mode [ 108.664639][ T5196] fuse: Bad value for 'user_id' [ 108.669793][ T5196] fuse: Bad value for 'user_id' [ 108.676553][ T5196] overlayfs: failed to resolve './file1': -2 [ 108.715596][ T5201] overlayfs: missing 'lowerdir' [ 108.718965][ T5197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.720607][ T492] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 108.898808][ T492] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 108.907099][ T492] usb 3-1: config 179 has no interface number 0 [ 108.913614][ T492] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 108.924818][ T492] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 108.935864][ T492] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 108.947263][ T492] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 108.957515][ T492] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 108.970803][ T492] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 108.980100][ T492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.990730][ T5180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.999330][ T492] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 109.201902][ T307] usb 3-1: USB disconnect, device number 42 [ 109.322705][ T36] audit: type=1400 audit(1750764781.817:476): avc: denied { getopt } for pid=5209 comm="syz.1.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 109.355186][ T5213] fuse: Unknown parameter 'U\0?885P6fd' [ 109.370233][ T5215] netlink: 'syz.1.1909': attribute type 9 has an invalid length. [ 109.393859][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1911'. [ 109.429327][ T5225] overlayfs: missing 'lowerdir' [ 109.595506][ T5229] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.711272][ T5232] rust_binder: Write failure EINVAL in pid:682 [ 109.946967][ T307] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 110.108045][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.117936][ T307] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 110.127023][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.135681][ T307] usb 3-1: config 0 descriptor?? [ 110.403767][ T5250] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 110.469544][ T5255] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.469697][ T5255] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 110.483552][ T5255] rust_binder: Write failure EINVAL in pid:23 [ 110.508452][ T36] audit: type=1400 audit(1750764783.008:477): avc: denied { ioctl } for pid=5256 comm="syz.0.1927" path="socket:[25537]" dev="sockfs" ino=25537 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.545193][ T307] logitech-djreceiver 0003:046D:C71F.0007: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0 [ 110.582885][ T5264] overlayfs: missing 'lowerdir' [ 110.742003][ T5232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.750536][ T5232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.758901][ T5265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.758967][ T5232] rust_binder: Write failure EINVAL in pid:682 [ 110.768432][ T492] usb 3-1: USB disconnect, device number 43 [ 110.794444][ T5274] SELinux: security_context_str_to_sid () failed with errno=-22 [ 110.974866][ T5281] netlink: 'syz.3.1934': attribute type 9 has an invalid length. [ 111.006907][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1937'. [ 111.024013][ T5289] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1938'. [ 111.546168][ T492] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 111.696079][ T492] usb 1-1: Using ep0 maxpacket: 8 [ 111.702265][ T492] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.713292][ T492] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.723070][ T492] usb 1-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 111.732175][ T492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.740740][ T492] usb 1-1: config 0 descriptor?? [ 111.813043][ T5315] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 111.821997][ T5315] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 111.886034][ T48] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 112.036886][ T48] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 112.045174][ T48] usb 3-1: config 1 has no interface number 0 [ 112.051334][ T48] usb 3-1: config 1 interface 105 has no altsetting 0 [ 112.059390][ T48] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 112.068461][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.076482][ T48] usb 3-1: Product: syz [ 112.080633][ T48] usb 3-1: Manufacturer: syz [ 112.085219][ T48] usb 3-1: SerialNumber: syz [ 112.147803][ T5292] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 112.157069][ T492] usbhid 1-1:0.0: can't add hid device: -71 [ 112.163070][ T492] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 112.172093][ T492] usb 1-1: USB disconnect, device number 8 [ 112.687881][ T5331] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 112.748274][ T5334] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 112.897333][ T48] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 113.005433][ T492] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 113.096839][ T5345] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 113.105658][ T5345] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 113.117282][ T5307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.126150][ T5307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.134982][ T5307] rust_binder: Error while translating object. [ 113.135016][ T5307] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 113.141321][ T5307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:697 [ 113.151950][ T48] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 113.172840][ T492] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 113.181334][ T492] usb 1-1: config 179 has no interface number 0 [ 113.188734][ T48] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, da:44:90:ba:d3:18 [ 113.201607][ T492] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 113.213984][ T492] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 113.225159][ T48] usb 3-1: USB disconnect, device number 44 [ 113.231565][ T48] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 113.242669][ T492] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 113.253957][ T492] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 113.266174][ T492] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 113.266249][ T5348] netlink: 'syz.3.1961': attribute type 9 has an invalid length. [ 113.287326][ T492] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 113.296407][ T492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.309193][ T48] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 113.318910][ T48] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 113.328818][ T48] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 113.329209][ T5338] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 113.362842][ T492] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 113.382328][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1963'. [ 113.567340][ T48] usb 1-1: USB disconnect, device number 9 [ 113.629011][ T5386] netlink: 'syz.1.1965': attribute type 4 has an invalid length. [ 113.698106][ T5404] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 113.706869][ T5404] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 113.731333][ T5400] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 113.810098][ T5422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1982'. [ 113.829799][ T5422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1982'. [ 114.086837][ T5425] kvm_intel: kvm [5424]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 114.161979][ T5429] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.227106][ T5434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1987'. [ 114.265607][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'. [ 114.827088][ T5452] overlayfs: missing 'lowerdir' [ 115.365406][ T5474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2006'. [ 115.389768][ T5476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2007'. [ 115.409154][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'. [ 115.428346][ T5480] rust_binder: Write failure EINVAL in pid:79 [ 115.521928][ T5488] overlayfs: missing 'lowerdir' [ 116.486350][ T5519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2026'. [ 116.555492][ T5523] overlayfs: missing 'lowerdir' [ 116.698567][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2038'. [ 116.904453][ T36] audit: type=1400 audit(1750764789.401:478): avc: denied { read } for pid=5562 comm="syz.2.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.973099][ T5567] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 117.077784][ T5577] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.156855][ T5582] overlay: filesystem on ./bus not supported as upperdir [ 117.176770][ T5584] netlink: 'syz.0.2055': attribute type 4 has an invalid length. [ 117.211108][ T5593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2058'. [ 117.222512][ T5595] overlayfs: missing 'workdir' [ 117.256579][ T9] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 117.279004][ T5602] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.374963][ T5611] netlink: 'syz.0.2067': attribute type 4 has an invalid length. [ 117.414300][ T9] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 117.422532][ T9] usb 3-1: config 1 has no interface number 0 [ 117.428673][ T9] usb 3-1: config 1 interface 105 has no altsetting 0 [ 117.439820][ T9] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 117.448908][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.456939][ T9] usb 3-1: Product: syz [ 117.461127][ T9] usb 3-1: Manufacturer: syz [ 117.465731][ T9] usb 3-1: SerialNumber: syz [ 117.489733][ T5617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5617 comm=syz.0.2069 [ 117.514229][ T5619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2070'. [ 117.759911][ T5632] netlink: 'syz.1.2076': attribute type 4 has an invalid length. [ 117.873716][ T5645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2081'. [ 117.913577][ T5647] overlayfs: missing 'workdir' [ 117.957184][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.964315][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.971383][ T5648] bridge_slave_0: entered allmulticast mode [ 117.977850][ T5648] bridge_slave_0: entered promiscuous mode [ 117.984310][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.991357][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.998580][ T5648] bridge_slave_1: entered allmulticast mode [ 118.005139][ T5648] bridge_slave_1: entered promiscuous mode [ 118.049055][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.056169][ T5648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.063472][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.070499][ T5648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.092058][ T5183] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.099493][ T5183] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.109093][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.116169][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.125383][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.132485][ T5183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.159238][ T5648] veth0_vlan: entered promiscuous mode [ 118.170799][ T5648] veth1_macvtap: entered promiscuous mode [ 118.205908][ T5653] serio: Serial port ttynull [ 118.285124][ T9] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 118.297827][ T36] audit: type=1326 audit(1750764790.793:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.2.2051" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f813fb8e929 code=0x0 [ 118.941893][ T5668] netlink: 'syz.3.2087': attribute type 4 has an invalid length. [ 118.973703][ T36] audit: type=1400 audit(1750764791.474:480): avc: denied { mount } for pid=5672 comm="syz.3.2089" name="/" dev="ramfs" ino=28969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 119.050726][ T5685] overlayfs: missing 'workdir' [ 119.330722][ T5688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2096'. [ 119.367734][ T36] audit: type=1326 audit(1750764791.864:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5693 comm="syz.0.2098" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e6ef8e929 code=0x0 [ 119.614119][ T5708] netlink: 'syz.1.2104': attribute type 4 has an invalid length. [ 120.081961][ T48] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 120.084350][ T9] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 120.101810][ T9] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 120.114840][ T9] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 96:e4:d8:e9:c4:28 [ 120.129355][ T9] usb 3-1: USB disconnect, device number 45 [ 120.136341][ T9] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 120.156742][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 120.193073][ T9] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 120.197554][ T5737] netlink: 'syz.3.2114': attribute type 4 has an invalid length. [ 120.202553][ T9] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 120.224478][ T9] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 120.241984][ T48] usb 2-1: device descriptor read/64, error -71 [ 120.361137][ T36] audit: type=1326 audit(2000000000.010:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.0.2119" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e6ef8e929 code=0x0 [ 120.481770][ T48] usb 2-1: device descriptor read/64, error -71 [ 120.641320][ T5753] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.731779][ T48] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 120.749543][ T5761] netlink: 'syz.2.2123': attribute type 4 has an invalid length. [ 120.861766][ T48] usb 2-1: device descriptor read/64, error -71 [ 121.101780][ T48] usb 2-1: device descriptor read/64, error -71 [ 121.201050][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 121.211994][ T48] usb usb2-port1: attempt power cycle [ 121.220393][ T5777] overlayfs: failed to clone upperpath [ 121.335627][ T5791] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.368193][ T5794] netlink: 'syz.2.2135': attribute type 4 has an invalid length. [ 121.390269][ T36] audit: type=1400 audit(2000000001.040:483): avc: denied { append } for pid=5795 comm="syz.2.2136" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.416482][ T5796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:761 [ 121.416697][ T36] audit: type=1400 audit(2000000001.070:484): avc: denied { ioctl } for pid=5795 comm="syz.2.2136" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.418659][ T5800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2138'. [ 121.467596][ T5801] rust_binder: Write failure EINVAL in pid:761 [ 121.472284][ T5803] binder: Bad value for 'max' [ 121.551754][ T48] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 121.572950][ T48] usb 2-1: device descriptor read/8, error -71 [ 121.703843][ T48] usb 2-1: device descriptor read/8, error -71 [ 121.951777][ T48] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 121.972781][ T48] usb 2-1: device descriptor read/8, error -71 [ 122.121847][ T48] usb 2-1: device descriptor read/8, error -71 [ 122.231915][ T48] usb usb2-port1: unable to enumerate USB device [ 122.353775][ T5816] netlink: 'syz.0.2144': attribute type 4 has an invalid length. [ 122.422759][ T5824] overlayfs: failed to clone upperpath [ 122.429261][ T5826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 122.572532][ T5832] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 122.608223][ T5836] netlink: 'syz.0.2154': attribute type 4 has an invalid length. [ 122.633146][ T5838] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.645602][ T5841] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.692573][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'. [ 122.782575][ T36] audit: type=1400 audit(2000000002.440:485): avc: denied { connect } for pid=5853 comm="syz.2.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.868504][ T5860] netlink: 'syz.1.2164': attribute type 4 has an invalid length. [ 122.907993][ T5865] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 122.918293][ T5865] 9pnet: Could not find request transport: xen [ 122.967088][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'. [ 122.976041][ T48] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 122.995366][ T5875] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.044609][ T5880] netlink: 'syz.1.2173': attribute type 4 has an invalid length. [ 123.121768][ T48] usb 1-1: device descriptor read/64, error -71 [ 123.148656][ T5890] rust_binder: Write failure EINVAL in pid:779 [ 123.302473][ T5898] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 123.362010][ T48] usb 1-1: device descriptor read/64, error -71 [ 123.391828][ T428] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 123.404852][ T60] bridge_slave_1: left allmulticast mode [ 123.410541][ T60] bridge_slave_1: left promiscuous mode [ 123.416392][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.424177][ T60] bridge_slave_0: left allmulticast mode [ 123.429834][ T60] bridge_slave_0: left promiscuous mode [ 123.435629][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.550036][ T60] veth1_macvtap: left promiscuous mode [ 123.555696][ T60] veth0_vlan: left promiscuous mode [ 123.564942][ T428] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.581768][ T428] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.592265][ T428] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.601329][ T428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.609423][ T428] usb 2-1: Product: Њ [ 123.613527][ T48] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 123.615240][ T428] usb 2-1: Manufacturer: Є [ 123.625986][ T428] usb 2-1: SerialNumber: Ъ [ 123.680349][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.687499][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.694691][ T5905] bridge_slave_0: entered allmulticast mode [ 123.700934][ T5905] bridge_slave_0: entered promiscuous mode [ 123.707531][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.714645][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.721869][ T5905] bridge_slave_1: entered allmulticast mode [ 123.728126][ T5905] bridge_slave_1: entered promiscuous mode [ 123.761784][ T48] usb 1-1: device descriptor read/64, error -71 [ 123.775413][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.782521][ T5905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.789786][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.796829][ T5905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.817782][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.825233][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.835957][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.843057][ T5183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.852804][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.859892][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.887642][ T5905] veth0_vlan: entered promiscuous mode [ 123.898824][ T5905] veth1_macvtap: entered promiscuous mode [ 123.929182][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2184'. [ 124.001773][ T48] usb 1-1: device descriptor read/64, error -71 [ 124.112022][ T48] usb usb1-port1: attempt power cycle [ 124.191775][ T307] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 124.312558][ T36] audit: type=1400 audit(2000000003.970:486): avc: denied { execheap } for pid=5953 comm="syz.3.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 124.352994][ T307] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 124.363387][ T307] usb 5-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 124.372573][ T307] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 124.381957][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.451779][ T48] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 124.472841][ T48] usb 1-1: device descriptor read/8, error -71 [ 124.602859][ T48] usb 1-1: device descriptor read/8, error -71 [ 124.621923][ T491] usb 5-1: USB disconnect, device number 2 [ 124.841788][ T48] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 124.849414][ T36] audit: type=1400 audit(2000000004.500:487): avc: denied { remount } for pid=5961 comm="syz.3.2208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 124.882962][ T48] usb 1-1: device descriptor read/8, error -71 [ 125.012764][ T48] usb 1-1: device descriptor read/8, error -71 [ 125.062734][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.069810][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.076927][ T5980] bridge_slave_0: entered allmulticast mode [ 125.083346][ T5980] bridge_slave_0: entered promiscuous mode [ 125.090084][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.097176][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.104367][ T5980] bridge_slave_1: entered allmulticast mode [ 125.110871][ T5980] bridge_slave_1: entered promiscuous mode [ 125.131858][ T48] usb usb1-port1: unable to enumerate USB device [ 125.151932][ T5183] bridge_slave_1: left allmulticast mode [ 125.157619][ T5183] bridge_slave_1: left promiscuous mode [ 125.163629][ T5183] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.171312][ T5183] bridge_slave_0: left allmulticast mode [ 125.177220][ T5183] bridge_slave_0: left promiscuous mode [ 125.182969][ T5183] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.299496][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.306622][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.313928][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.320960][ T5980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.332341][ T5183] veth1_macvtap: left promiscuous mode [ 125.340332][ T5183] veth0_vlan: left promiscuous mode [ 125.373678][ T5992] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.395505][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.404776][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.427475][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.434556][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.445436][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.452522][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.477312][ T5980] veth0_vlan: entered promiscuous mode [ 125.488992][ T5980] veth1_macvtap: entered promiscuous mode [ 125.539491][ T5999] rust_binder: Write failure EINVAL in pid:4 [ 126.083418][ T6012] batadv_slave_1: entered promiscuous mode [ 126.096577][ T6011] batadv_slave_1: left promiscuous mode [ 126.107452][ T428] usb 2-1: 0:2 : does not exist [ 126.122654][ T428] usb 2-1: USB disconnect, device number 10 [ 126.140189][ T5109] udevd[5109]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.141784][ T307] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 126.165050][ T6020] binder: Bad value for 'stats' [ 126.166180][ T6014] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 126.277492][ T6030] kvm_intel: kvm [6029]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 126.322826][ T307] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 126.341749][ T307] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 126.361085][ T307] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 126.385697][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.472711][ T6039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.481954][ T36] audit: type=1400 audit(2000000006.140:488): avc: denied { remount } for pid=6033 comm="syz.3.2234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 126.502032][ T6044] cgroup: No subsys list or none specified [ 126.550963][ T36] audit: type=1400 audit(2000000006.200:489): avc: denied { execute } for pid=6045 comm="syz.4.2238" path="/sys/power/pm_test" dev="sysfs" ino=1467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 126.619359][ T307] usb 1-1: USB disconnect, device number 14 [ 126.635434][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2239'. [ 126.672193][ T6051] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6051 comm=syz.1.2240 [ 126.693948][ T6051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 126.701400][ T6051] rust_binder: Write failure EINVAL in pid:57 [ 126.701592][ T6051] rust_binder: Write failure EFAULT in pid:57 [ 126.792277][ T6055] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 126.798419][ T6055] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:59 [ 126.958088][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'. [ 127.029065][ T36] audit: type=1400 audit(2000000006.680:490): avc: denied { setattr } for pid=6065 comm="syz.4.2246" name="NETLINK" dev="sockfs" ino=31705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.053677][ T6066] rust_binder: Write failure EFAULT in pid:35 [ 127.375937][ T6089] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.636941][ T6096] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.931799][ T307] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 128.045088][ T6101] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.083753][ T307] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 128.094201][ T307] usb 2-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 128.103774][ T307] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 128.113790][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.141998][ T6116] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.142035][ T6116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 128.240132][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2266'. [ 128.305616][ T6128] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.320321][ T6128] FAT-fs (rnullb0): bogus number of reserved sectors [ 128.326074][ T491] usb 2-1: USB disconnect, device number 11 [ 128.327383][ T6128] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 128.368415][ T6135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2271'. [ 128.377777][ T6135] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2271'. [ 128.410388][ T6137] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.435092][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2275'. [ 128.463216][ T6147] random: crng reseeded on system resumption [ 128.519298][ T6154] overlayfs: failed to resolve './file0': -2 [ 128.603546][ T36] audit: type=1400 audit(2000000008.260:491): avc: denied { read } for pid=6157 comm="syz.0.2281" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 128.626162][ T36] audit: type=1400 audit(2000000008.260:492): avc: denied { open } for pid=6157 comm="syz.0.2281" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 128.712527][ T6160] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 128.712574][ T6160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:256 [ 128.771762][ T491] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 128.923653][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2286'. [ 128.939815][ T6170] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.948153][ T6173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:49 [ 128.956448][ T491] usb 5-1: not running at top speed; connect to a high speed hub [ 128.974337][ T491] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 128.984833][ T6175] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.987235][ T491] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 129.004755][ T491] usb 5-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 129.017937][ T491] usb 5-1: config 1 interface 0 has no altsetting 0 [ 129.029677][ T491] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.038862][ T491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.046906][ T491] usb 5-1: Product: Ж [ 129.051007][ T491] usb 5-1: Manufacturer: ᬥ≪훗臦蒡뚑겧璅茵鿽夑忝త튔똅襮⧛鎃ᔊ䱙᳡঄ꛈẛ㕷ἧ㨂楐ꧢ认⨾煛騗䦃역듎ﯟℸꢰ陓㤭厪∑霴폱貎玞䩜⵺멂씆棉稱⮲⸣ﵿﺯ胖앭↫툨넙雠셝ᳪꄧ衝伣恧刓쓞ꐇ곎Ꚗ䀞˗ꮉ쑔蟥曻㿁ඉ┎豆࡯ׯ직涊憀⌞ [ 129.081800][ T6154] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 129.089259][ T6154] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 129.096769][ T6154] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 129.278635][ T6191] netlink: 'syz.3.2294': attribute type 12 has an invalid length. [ 129.305329][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2296'. [ 129.389407][ T6207] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 129.487778][ T36] audit: type=1400 audit(2000000009.140:493): avc: denied { accept } for pid=6220 comm="syz.3.2304" laddr=fe80::9c43:74ff:fefc:a969 lport=58 faddr=ff02::1 fport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.516602][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2305'. [ 129.718253][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2315'. [ 129.915403][ T6261] random: crng reseeded on system resumption [ 130.033314][ T491] usb 5-1: bad CDC descriptors [ 130.056230][ T491] usb 5-1: USB disconnect, device number 3 [ 130.126874][ T6275] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.304919][ T6297] fuse: Unknown parameter 'f' [ 130.459564][ T6313] random: crng reseeded on system resumption [ 130.776847][ T6323] netlink: 'syz.1.2342': attribute type 4 has an invalid length. [ 130.802686][ T6323] rust_binder: Write failure EINVAL in pid:122 [ 130.803854][ T6324] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 130.810357][ T36] audit: type=1400 audit(2000000010.460:494): avc: denied { create } for pid=6327 comm="syz.3.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 130.815258][ T6324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 131.275100][ T6352] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.323216][ T6353] rust_binder: 6350 RLIMIT_NICE not set [ 131.395776][ T6357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.402195][ T36] audit: type=1400 audit(2000000011.060:495): avc: denied { create } for pid=6355 comm="syz.4.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 131.432409][ T6357] rust_binder: Error while translating object. [ 131.432449][ T6357] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.439278][ T6362] tc_dump_action: action bad kind [ 131.444929][ T6357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 131.513507][ T6365] rust_binder: Write failure EINVAL in pid:128 [ 131.577931][ T6367] dump_vmcs: 1 callbacks suppressed [ 131.577951][ T6367] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.641759][ T492] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 131.654566][ T6370] __nla_validate_parse: 3 callbacks suppressed [ 131.654752][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2359'. [ 131.731270][ T6378] FAULT_INJECTION: forcing a failure. [ 131.731270][ T6378] name failslab, interval 1, probability 0, space 0, times 0 [ 131.744090][ T6378] CPU: 0 UID: 0 PID: 6378 Comm: syz.4.2363 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 131.744121][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.744133][ T6378] Call Trace: [ 131.744139][ T6378] [ 131.744146][ T6378] __dump_stack+0x21/0x30 [ 131.744173][ T6378] dump_stack_lvl+0x10c/0x190 [ 131.744192][ T6378] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.744212][ T6378] ? __kasan_check_write+0x18/0x20 [ 131.744233][ T6378] ? proc_fail_nth_write+0x17e/0x210 [ 131.744252][ T6378] dump_stack+0x19/0x20 [ 131.744271][ T6378] should_fail_ex+0x3d9/0x530 [ 131.744291][ T6378] should_failslab+0xac/0x100 [ 131.744313][ T6378] kmem_cache_alloc_noprof+0x42/0x3a0 [ 131.744334][ T6378] ? dup_fd+0x63/0xa60 [ 131.744355][ T6378] dup_fd+0x63/0xa60 [ 131.744375][ T6378] ? __kasan_check_write+0x18/0x20 [ 131.744395][ T6378] ? mutex_unlock+0x8b/0x240 [ 131.744414][ T6378] ? __cfi_mutex_unlock+0x10/0x10 [ 131.744433][ T6378] __close_range+0x1b3/0x6c0 [ 131.744456][ T6378] ? ksys_write+0x1ef/0x250 [ 131.744477][ T6378] ? __cfi___close_range+0x10/0x10 [ 131.744501][ T6378] ? __kasan_check_read+0x15/0x20 [ 131.744521][ T6378] __x64_sys_close_range+0x7e/0x90 [ 131.744540][ T6378] x64_sys_call+0x1686/0x2ee0 [ 131.744561][ T6378] do_syscall_64+0x58/0xf0 [ 131.744576][ T6378] ? clear_bhb_loop+0x50/0xa0 [ 131.744596][ T6378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.744614][ T6378] RIP: 0033:0x7fefead8e929 [ 131.744629][ T6378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.744645][ T6378] RSP: 002b:00007fefeabeb038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 131.744665][ T6378] RAX: ffffffffffffffda RBX: 00007fefeafb5fa0 RCX: 00007fefead8e929 [ 131.744679][ T6378] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: 0000000000000003 [ 131.744691][ T6378] RBP: 00007fefeabeb090 R08: 0000000000000000 R09: 0000000000000000 [ 131.744703][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.744714][ T6378] R13: 0000000000000000 R14: 00007fefeafb5fa0 R15: 00007ffd4d08ce58 [ 131.744728][ T6378] [ 131.901768][ T492] usb 1-1: Using ep0 maxpacket: 16 [ 131.976131][ T492] usb 1-1: config 11 has an invalid interface number: 180 but max is 2 [ 131.984472][ T492] usb 1-1: config 11 has an invalid interface number: 17 but max is 2 [ 131.993040][ T492] usb 1-1: config 11 has an invalid interface number: 226 but max is 2 [ 132.001284][ T492] usb 1-1: config 11 has no interface number 0 [ 132.007478][ T492] usb 1-1: config 11 has no interface number 1 [ 132.013692][ T492] usb 1-1: config 11 has no interface number 2 [ 132.019910][ T492] usb 1-1: config 11 interface 180 altsetting 7 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 132.030989][ T492] usb 1-1: config 11 interface 180 altsetting 7 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 132.042062][ T492] usb 1-1: config 11 interface 180 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 132.053308][ T492] usb 1-1: config 11 interface 180 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 132.064358][ T492] usb 1-1: config 11 interface 180 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 132.075179][ T492] usb 1-1: config 11 interface 180 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 132.087328][ T492] usb 1-1: config 11 interface 180 altsetting 7 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 132.099965][ T492] usb 1-1: config 11 interface 180 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 132.110956][ T492] usb 1-1: config 11 interface 17 altsetting 14 has a duplicate endpoint with address 0x4, skipping [ 132.121802][ T492] usb 1-1: config 11 interface 17 altsetting 14 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 132.132891][ T492] usb 1-1: config 11 interface 17 altsetting 14 has a duplicate endpoint with address 0x5, skipping [ 132.143700][ T492] usb 1-1: config 11 interface 17 altsetting 14 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 132.154772][ T492] usb 1-1: config 11 interface 17 altsetting 14 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 132.166528][ T492] usb 1-1: config 11 interface 17 altsetting 14 endpoint 0x82 has invalid maxpacket 59078, setting to 64 [ 132.177781][ T492] usb 1-1: config 11 interface 17 altsetting 14 has a duplicate endpoint with address 0x7, skipping [ 132.188725][ T492] usb 1-1: config 11 interface 17 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 132.199582][ T492] usb 1-1: config 11 interface 17 altsetting 14 endpoint 0xB has invalid maxpacket 52757, setting to 64 [ 132.210826][ T492] usb 1-1: config 11 interface 17 altsetting 14 has a duplicate endpoint with address 0x2, skipping [ 132.221621][ T492] usb 1-1: config 11 interface 17 altsetting 14 has a duplicate endpoint with address 0x4, skipping [ 132.232450][ T492] usb 1-1: config 11 interface 17 altsetting 14 bulk endpoint 0x8 has invalid maxpacket 1023 [ 132.242723][ T492] usb 1-1: config 11 interface 17 altsetting 14 has a duplicate endpoint with address 0xB, skipping [ 132.253521][ T492] usb 1-1: config 11 interface 17 altsetting 14 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 132.266851][ T492] usb 1-1: config 11 interface 226 altsetting 108 has a duplicate endpoint with address 0xF, skipping [ 132.277829][ T492] usb 1-1: config 11 interface 226 altsetting 108 has a duplicate endpoint with address 0x1, skipping [ 132.288809][ T492] usb 1-1: config 11 interface 180 has no altsetting 0 [ 132.295807][ T492] usb 1-1: config 11 interface 17 has no altsetting 0 [ 132.302597][ T492] usb 1-1: config 11 interface 226 has no altsetting 0 [ 132.310818][ T492] usb 1-1: Dual-Role OTG device on HNP port [ 132.316959][ T492] usb 1-1: New USB device found, idVendor=0b05, idProduct=1723, bcdDevice=ce.1e [ 132.326027][ T492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.334055][ T492] usb 1-1: Product: syz [ 132.338219][ T492] usb 1-1: Manufacturer: syz [ 132.342841][ T492] usb 1-1: SerialNumber: syz [ 132.371117][ T6389] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.421791][ T307] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 132.432941][ T6397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 132.432967][ T6397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:104 [ 132.462114][ T6399] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.525804][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2370'. [ 132.583226][ T307] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 64, setting to 8 [ 132.594013][ T307] usb 4-1: config 1 interface 0 has no altsetting 0 [ 132.603671][ T307] usb 4-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.40 [ 132.612884][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.621096][ T307] usb 4-1: Product: ࠇ [ 132.625419][ T307] usb 4-1: Manufacturer: 넠濒锥笟쟏柈冰㎈宩µ⟚挐깺냽㎯워軀頋⢸睷榺渎쵋쉞鰴랂ᝲ₺⠒䙂끍ᥫ㜝⾦킮䏠镰䲏컧赛㲈㐶孲ꑈ쭗™莽䠧㔊竺諸 偕咇詜ൎ봺昏⼨⶿楜紷팖饣︩뱳⅍塀잢鼯䣰쮏딳㾩庨숟窍㡇좎㣏䴽䶾튎搓ﳢ詯휪쉒귔쑼ꭙ䖟䇻 [ 132.658735][ T307] usb 4-1: SerialNumber: 㓟梛ﷵಐັ虮姟融莶瞠᪳쀒컩烶⍩塧ꑝ웞ꀸ蠵柍幊륃ꂜ鷅⻺긻뜖ﺛ囂۴華芉띝慮⽗璪衜㣼句ʻ㚱禍ꀟꖡ뤠争旾熠ჲᚎ羪࿧䀧劉⍇鰕ⷦ౵飩䴱圥⺚蓫䞖疊鳉耵ꍒ铪鰣⋀铼䗡︍▛祄ﻗ䜗涁톆ꍄ㧵㍧㢼ꯌ鹑钒쿼㜘ᣖ쨛倥㎓ [ 132.691682][ T6387] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 132.757514][ T492] usb 1-1: Found UVC 0.00 device syz (0b05:1723) [ 132.763965][ T492] usb 1-1: No valid video chain found. [ 132.771128][ T492] hub 1-1:11.226: Invalid hub with more than one config or interface [ 132.779313][ T492] hub 1-1:11.226: probe with driver hub failed with error -22 [ 132.789800][ T492] usb 1-1: USB disconnect, device number 15 [ 133.104274][ T307] usbhid 4-1:1.0: can't add hid device: -71 [ 133.110467][ T307] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 133.122652][ T307] usb 4-1: USB disconnect, device number 13 [ 133.152808][ T6410] FAULT_INJECTION: forcing a failure. [ 133.152808][ T6410] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 133.166156][ T6410] CPU: 1 UID: 0 PID: 6410 Comm: syz.4.2374 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 133.166187][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.166197][ T6410] Call Trace: [ 133.166203][ T6410] [ 133.166211][ T6410] __dump_stack+0x21/0x30 [ 133.166238][ T6410] dump_stack_lvl+0x10c/0x190 [ 133.166256][ T6410] ? __cfi_dump_stack_lvl+0x10/0x10 [ 133.166277][ T6410] ? filemap_map_pages+0xf16/0x1270 [ 133.166297][ T6410] dump_stack+0x19/0x20 [ 133.166315][ T6410] should_fail_ex+0x3d9/0x530 [ 133.166335][ T6410] should_fail_alloc_page+0xeb/0x110 [ 133.166359][ T6410] __alloc_pages_noprof+0x19d/0x6c0 [ 133.166377][ T6410] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 133.166395][ T6410] ? __cfi_mutex_lock+0x10/0x10 [ 133.166414][ T6410] ? avc_has_perm+0x144/0x220 [ 133.166433][ T6410] pipe_write+0x5d0/0x18a0 [ 133.166457][ T6410] ? __cfi_pipe_write+0x10/0x10 [ 133.166477][ T6410] ? handle_mm_fault+0x169b/0x1b90 [ 133.166502][ T6410] vfs_write+0x697/0xe80 [ 133.166519][ T6410] ? __cfi_pipe_write+0x10/0x10 [ 133.166530][ T6410] ? __cfi_vfs_write+0x10/0x10 [ 133.166542][ T6410] ? __kasan_check_read+0x15/0x20 [ 133.166553][ T6410] ksys_write+0x141/0x250 [ 133.166565][ T6410] ? __cfi_ksys_write+0x10/0x10 [ 133.166576][ T6410] ? __kasan_check_read+0x15/0x20 [ 133.166587][ T6410] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 133.166598][ T6410] __x64_sys_write+0x7f/0x90 [ 133.166615][ T6410] x64_sys_call+0x271c/0x2ee0 [ 133.166635][ T6410] do_syscall_64+0x58/0xf0 [ 133.166650][ T6410] ? clear_bhb_loop+0x50/0xa0 [ 133.166669][ T6410] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 133.166687][ T6410] RIP: 0033:0x7fefead8d3df [ 133.166703][ T6410] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 133.166717][ T6410] RSP: 002b:00007fefeabe8d30 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 133.166749][ T6410] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007fefead8d3df [ 133.166762][ T6410] RDX: 0000000000000029 RSI: 00007fefeabe8f30 RDI: 0000000000000002 [ 133.166774][ T6410] RBP: 00007fefeabe8f30 R08: 0000000000000000 R09: 0000000000000000 [ 133.166786][ T6410] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000029 [ 133.166797][ T6410] R13: 00007fefeaf84620 R14: 0000000000000029 R15: 00007fefeaf85c80 [ 133.166810][ T6410] [ 133.419082][ T6413] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 133.433624][ T6413] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 133.451665][ T6413] overlay: filesystem on ./bus not supported as upperdir [ 133.452948][ T6414] overlay: filesystem on ./bus not supported as upperdir [ 133.511756][ T417] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.551114][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2379'. [ 133.575209][ T6424] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 133.600723][ T6416] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.608779][ T6421] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.769073][ T6440] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 133.777693][ T492] hid (null): report_id 3547946974 is invalid [ 133.784791][ T492] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x6 [ 133.793203][ T492] hid-generic 0008:0000:FFFFFBFF.0008: unexpected long global item [ 133.810553][ T492] hid-generic 0008:0000:FFFFFBFF.0008: probe with driver hid-generic failed with error -22 [ 133.854258][ T6444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.882939][ T6453] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.897467][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2390'. [ 133.986111][ T6464] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 134.001281][ T6466] FAULT_INJECTION: forcing a failure. [ 134.001281][ T6466] name failslab, interval 1, probability 0, space 0, times 0 [ 134.014567][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.0.2395 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 134.014598][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.014610][ T6466] Call Trace: [ 134.014616][ T6466] [ 134.014624][ T6466] __dump_stack+0x21/0x30 [ 134.014649][ T6466] dump_stack_lvl+0x10c/0x190 [ 134.014678][ T6466] ? __cfi_dump_stack_lvl+0x10/0x10 [ 134.014698][ T6466] ? avc_has_perm+0x144/0x220 [ 134.014716][ T6466] ? __cfi_avc_has_perm+0x10/0x10 [ 134.014733][ T6466] dump_stack+0x19/0x20 [ 134.014748][ T6466] should_fail_ex+0x3d9/0x530 [ 134.014766][ T6466] should_failslab+0xac/0x100 [ 134.014786][ T6466] __kmalloc_cache_noprof+0x41/0x3c0 [ 134.014804][ T6466] ? vhost_task_create+0x101/0x350 [ 134.014824][ T6466] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 134.014845][ T6466] vhost_task_create+0x101/0x350 [ 134.014864][ T6466] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 134.014885][ T6466] ? __cfi_vhost_task_create+0x10/0x10 [ 134.014905][ T6466] ? __cfi_vhost_task_fn+0x10/0x10 [ 134.014924][ T6466] ? __kasan_check_write+0x18/0x20 [ 134.014940][ T6466] ? mutex_lock+0x92/0x1c0 [ 134.014956][ T6466] ? __cfi_mutex_lock+0x10/0x10 [ 134.014971][ T6466] ? kernel_text_address+0xa9/0xe0 [ 134.014986][ T6466] kvm_mmu_post_init_vm+0x1a6/0x310 [ 134.015003][ T6466] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 134.015019][ T6466] ? _parse_integer_limit+0x195/0x1e0 [ 134.015036][ T6466] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 134.015052][ T6466] ? kstrtoull+0x13b/0x1e0 [ 134.015066][ T6466] ? kstrtouint+0x78/0xf0 [ 134.015080][ T6466] ? ioctl_has_perm+0x1aa/0x4d0 [ 134.015101][ T6466] ? __asan_memcpy+0x5a/0x80 [ 134.015117][ T6466] ? ioctl_has_perm+0x3e0/0x4d0 [ 134.015137][ T6466] ? has_cap_mac_admin+0xd0/0xd0 [ 134.015158][ T6466] ? __kasan_check_write+0x18/0x20 [ 134.015174][ T6466] ? mutex_lock_killable+0x92/0x1c0 [ 134.015190][ T6466] ? __cfi_mutex_lock_killable+0x10/0x10 [ 134.015206][ T6466] ? proc_fail_nth_write+0x17e/0x210 [ 134.015222][ T6466] kvm_vcpu_ioctl+0x96f/0xee0 [ 134.015242][ T6466] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 134.015260][ T6466] ? __cfi_vfs_write+0x10/0x10 [ 134.015277][ T6466] ? __kasan_check_write+0x18/0x20 [ 134.015293][ T6466] ? mutex_unlock+0x8b/0x240 [ 134.015308][ T6466] ? __cfi_mutex_unlock+0x10/0x10 [ 134.015323][ T6466] ? __fget_files+0x2c5/0x340 [ 134.015344][ T6466] ? __fget_files+0x2c5/0x340 [ 134.015362][ T6466] ? bpf_lsm_file_ioctl+0xd/0x20 [ 134.015379][ T6466] ? security_file_ioctl+0x34/0xd0 [ 134.015398][ T6466] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 134.015416][ T6466] __se_sys_ioctl+0x135/0x1b0 [ 134.015435][ T6466] __x64_sys_ioctl+0x7f/0xa0 [ 134.015454][ T6466] x64_sys_call+0x1878/0x2ee0 [ 134.015472][ T6466] do_syscall_64+0x58/0xf0 [ 134.015484][ T6466] ? clear_bhb_loop+0x50/0xa0 [ 134.015500][ T6466] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.015515][ T6466] RIP: 0033:0x7f5e6ef8e929 [ 134.015528][ T6466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.015540][ T6466] RSP: 002b:00007f5e6fe39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.015557][ T6466] RAX: ffffffffffffffda RBX: 00007f5e6f1b5fa0 RCX: 00007f5e6ef8e929 [ 134.015568][ T6466] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 134.015577][ T6466] RBP: 00007f5e6fe39090 R08: 0000000000000000 R09: 0000000000000000 [ 134.015586][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.015595][ T6466] R13: 0000000000000000 R14: 00007f5e6f1b5fa0 R15: 00007ffe9f914588 [ 134.015607][ T6466] [ 134.081695][ T6470] rust_binder: Write failure EINVAL in pid:155 [ 134.726272][ T6504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.734829][ T6500] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 134.799128][ T6507] FAULT_INJECTION: forcing a failure. [ 134.799128][ T6507] name failslab, interval 1, probability 0, space 0, times 0 [ 134.811771][ T6507] CPU: 1 UID: 0 PID: 6507 Comm: syz.1.2411 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 134.811805][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.811815][ T6507] Call Trace: [ 134.811822][ T6507] [ 134.811829][ T6507] __dump_stack+0x21/0x30 [ 134.811856][ T6507] dump_stack_lvl+0x10c/0x190 [ 134.811874][ T6507] ? __cfi_dump_stack_lvl+0x10/0x10 [ 134.811893][ T6507] dump_stack+0x19/0x20 [ 134.811911][ T6507] should_fail_ex+0x3d9/0x530 [ 134.811932][ T6507] should_failslab+0xac/0x100 [ 134.811956][ T6507] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 134.811978][ T6507] ? dup_task_struct+0xbc/0xc50 [ 134.811994][ T6507] ? kasan_save_track+0x4f/0x80 [ 134.812016][ T6507] dup_task_struct+0xbc/0xc50 [ 134.812032][ T6507] ? __kasan_check_write+0x18/0x20 [ 134.812051][ T6507] ? _raw_spin_lock_irq+0x8d/0x120 [ 134.812076][ T6507] ? copy_process+0x3220/0x3220 [ 134.812093][ T6507] ? __kasan_check_write+0x18/0x20 [ 134.812113][ T6507] copy_process+0x538/0x3220 [ 134.812132][ T6507] ? __cfi_copy_process+0x10/0x10 [ 134.812149][ T6507] ? __kasan_check_write+0x18/0x20 [ 134.812167][ T6507] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 134.812192][ T6507] vhost_task_create+0x1d6/0x350 [ 134.812215][ T6507] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 134.812240][ T6507] ? __cfi_vhost_task_create+0x10/0x10 [ 134.812263][ T6507] ? __cfi_vhost_task_fn+0x10/0x10 [ 134.812286][ T6507] ? __kasan_check_write+0x18/0x20 [ 134.812306][ T6507] ? mutex_lock+0x92/0x1c0 [ 134.812324][ T6507] ? __cfi_mutex_lock+0x10/0x10 [ 134.812341][ T6507] ? kernel_text_address+0xa9/0xe0 [ 134.812359][ T6507] kvm_mmu_post_init_vm+0x1a6/0x310 [ 134.812379][ T6507] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 134.812399][ T6507] ? _parse_integer_limit+0x195/0x1e0 [ 134.812418][ T6507] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 134.812436][ T6507] ? kstrtoull+0x13b/0x1e0 [ 134.812453][ T6507] ? kstrtouint+0x78/0xf0 [ 134.812468][ T6507] ? ioctl_has_perm+0x1aa/0x4d0 [ 134.812491][ T6507] ? __asan_memcpy+0x5a/0x80 [ 134.812510][ T6507] ? ioctl_has_perm+0x3e0/0x4d0 [ 134.812533][ T6507] ? has_cap_mac_admin+0xd0/0xd0 [ 134.812556][ T6507] ? __kasan_check_write+0x18/0x20 [ 134.812575][ T6507] ? mutex_lock_killable+0x92/0x1c0 [ 134.812595][ T6507] ? __cfi_mutex_lock_killable+0x10/0x10 [ 134.812614][ T6507] ? proc_fail_nth_write+0x17e/0x210 [ 134.812680][ T6507] kvm_vcpu_ioctl+0x96f/0xee0 [ 134.812703][ T6507] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 134.812724][ T6507] ? __cfi_vfs_write+0x10/0x10 [ 134.812746][ T6507] ? __kasan_check_write+0x18/0x20 [ 134.812765][ T6507] ? mutex_unlock+0x8b/0x240 [ 134.812783][ T6507] ? __cfi_mutex_unlock+0x10/0x10 [ 134.812801][ T6507] ? __fget_files+0x2c5/0x340 [ 134.812825][ T6507] ? __fget_files+0x2c5/0x340 [ 134.812847][ T6507] ? bpf_lsm_file_ioctl+0xd/0x20 [ 134.812866][ T6507] ? security_file_ioctl+0x34/0xd0 [ 134.812887][ T6507] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 134.812908][ T6507] __se_sys_ioctl+0x135/0x1b0 [ 134.812931][ T6507] __x64_sys_ioctl+0x7f/0xa0 [ 134.812954][ T6507] x64_sys_call+0x1878/0x2ee0 [ 134.812976][ T6507] do_syscall_64+0x58/0xf0 [ 134.812991][ T6507] ? clear_bhb_loop+0x50/0xa0 [ 134.813011][ T6507] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.813028][ T6507] RIP: 0033:0x7f26c0d8e929 [ 134.813043][ T6507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.813057][ T6507] RSP: 002b:00007f26c1b56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.813077][ T6507] RAX: ffffffffffffffda RBX: 00007f26c0fb5fa0 RCX: 00007f26c0d8e929 [ 134.813091][ T6507] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 134.813102][ T6507] RBP: 00007f26c1b56090 R08: 0000000000000000 R09: 0000000000000000 [ 134.813113][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.813123][ T6507] R13: 0000000000000000 R14: 00007f26c0fb5fa0 R15: 00007fff45834b98 [ 134.813138][ T6507] [ 134.915282][ T6511] can0: slcan on ttyS3. [ 135.231459][ T6535] 9pnet_fd: p9_fd_create_unix (6535): problem connecting socket: ./file0: -111 [ 135.281914][ T36] audit: type=1400 audit(2000000014.930:496): avc: denied { create } for pid=6542 comm="syz.1.2419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 135.312123][ T6539] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 135.334559][ T6550] exFAT-fs (rnullb0): invalid boot record signature [ 135.341221][ T6550] exFAT-fs (rnullb0): failed to read boot sector [ 135.347639][ T6550] exFAT-fs (rnullb0): failed to recognize exfat type [ 135.591852][ T48] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 135.671776][ T491] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 135.741763][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 135.749609][ T48] usb 2-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 135.758753][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.767089][ T48] usb 2-1: Product: syz [ 135.771276][ T48] usb 2-1: Manufacturer: syz [ 135.775949][ T48] usb 2-1: SerialNumber: syz [ 135.781566][ T48] usb 2-1: config 0 descriptor?? [ 135.792609][ T6567] FAULT_INJECTION: forcing a failure. [ 135.792609][ T6567] name failslab, interval 1, probability 0, space 0, times 0 [ 135.805314][ T6567] CPU: 1 UID: 0 PID: 6567 Comm: syz.4.2427 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 135.805343][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.805353][ T6567] Call Trace: [ 135.805359][ T6567] [ 135.805366][ T6567] __dump_stack+0x21/0x30 [ 135.805393][ T6567] dump_stack_lvl+0x10c/0x190 [ 135.805409][ T6567] ? __cfi_dump_stack_lvl+0x10/0x10 [ 135.805422][ T6567] dump_stack+0x19/0x20 [ 135.805432][ T6567] should_fail_ex+0x3d9/0x530 [ 135.805445][ T6567] should_failslab+0xac/0x100 [ 135.805459][ T6567] __kmalloc_cache_node_noprof+0x46/0x3d0 [ 135.805472][ T6567] ? __get_vm_area_node+0x154/0x3a0 [ 135.805483][ T6567] ? kasan_save_track+0x3e/0x80 [ 135.805496][ T6567] __get_vm_area_node+0x154/0x3a0 [ 135.805506][ T6567] __vmalloc_node_range_noprof+0x33c/0x1420 [ 135.805517][ T6567] ? copy_process+0x538/0x3220 [ 135.805530][ T6567] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 135.805541][ T6567] ? kasan_save_alloc_info+0x40/0x50 [ 135.805551][ T6567] ? arch_dup_task_struct+0x5b/0xe0 [ 135.805563][ T6567] ? __asan_memcpy+0x5a/0x80 [ 135.805574][ T6567] dup_task_struct+0x5bd/0xc50 [ 135.805584][ T6567] ? copy_process+0x538/0x3220 [ 135.805593][ T6567] ? _raw_spin_lock_irq+0x8d/0x120 [ 135.805607][ T6567] ? copy_process+0x3220/0x3220 [ 135.805616][ T6567] ? __kasan_check_write+0x18/0x20 [ 135.805628][ T6567] copy_process+0x538/0x3220 [ 135.805638][ T6567] ? __cfi_copy_process+0x10/0x10 [ 135.805647][ T6567] ? __kasan_check_write+0x18/0x20 [ 135.805659][ T6567] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 135.805674][ T6567] vhost_task_create+0x1d6/0x350 [ 135.805689][ T6567] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 135.805703][ T6567] ? __cfi_vhost_task_create+0x10/0x10 [ 135.805717][ T6567] ? __cfi_vhost_task_fn+0x10/0x10 [ 135.805729][ T6567] ? __kasan_check_write+0x18/0x20 [ 135.805740][ T6567] ? mutex_lock+0x92/0x1c0 [ 135.805750][ T6567] ? __cfi_mutex_lock+0x10/0x10 [ 135.805761][ T6567] ? kernel_text_address+0xa9/0xe0 [ 135.805771][ T6567] kvm_mmu_post_init_vm+0x1a6/0x310 [ 135.805794][ T6567] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 135.805807][ T6567] ? _parse_integer_limit+0x195/0x1e0 [ 135.805818][ T6567] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 135.805829][ T6567] ? kstrtoull+0x13b/0x1e0 [ 135.805838][ T6567] ? kstrtouint+0x78/0xf0 [ 135.805848][ T6567] ? ioctl_has_perm+0x1aa/0x4d0 [ 135.805862][ T6567] ? __asan_memcpy+0x5a/0x80 [ 135.805873][ T6567] ? ioctl_has_perm+0x3e0/0x4d0 [ 135.805887][ T6567] ? has_cap_mac_admin+0xd0/0xd0 [ 135.805900][ T6567] ? __kasan_check_write+0x18/0x20 [ 135.805911][ T6567] ? mutex_lock_killable+0x92/0x1c0 [ 135.805922][ T6567] ? __cfi_mutex_lock_killable+0x10/0x10 [ 135.805934][ T6567] ? proc_fail_nth_write+0x17e/0x210 [ 135.805944][ T6567] kvm_vcpu_ioctl+0x96f/0xee0 [ 135.805958][ T6567] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 135.805971][ T6567] ? __cfi_vfs_write+0x10/0x10 [ 135.805983][ T6567] ? __kasan_check_write+0x18/0x20 [ 135.805994][ T6567] ? mutex_unlock+0x8b/0x240 [ 135.806004][ T6567] ? __cfi_mutex_unlock+0x10/0x10 [ 135.806014][ T6567] ? __fget_files+0x2c5/0x340 [ 135.806028][ T6567] ? __fget_files+0x2c5/0x340 [ 135.806041][ T6567] ? bpf_lsm_file_ioctl+0xd/0x20 [ 135.806053][ T6567] ? security_file_ioctl+0x34/0xd0 [ 135.806067][ T6567] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 135.806078][ T6567] __se_sys_ioctl+0x135/0x1b0 [ 135.806093][ T6567] __x64_sys_ioctl+0x7f/0xa0 [ 135.806106][ T6567] x64_sys_call+0x1878/0x2ee0 [ 135.806118][ T6567] do_syscall_64+0x58/0xf0 [ 135.806127][ T6567] ? clear_bhb_loop+0x50/0xa0 [ 135.806138][ T6567] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 135.806149][ T6567] RIP: 0033:0x7fefead8e929 [ 135.806159][ T6567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.806168][ T6567] RSP: 002b:00007fefeabeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.806180][ T6567] RAX: ffffffffffffffda RBX: 00007fefeafb5fa0 RCX: 00007fefead8e929 [ 135.806188][ T6567] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 135.806195][ T6567] RBP: 00007fefeabeb090 R08: 0000000000000000 R09: 0000000000000000 [ 135.806201][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.806207][ T6567] R13: 0000000000000000 R14: 00007fefeafb5fa0 R15: 00007ffd4d08ce58 [ 135.806216][ T6567] [ 135.806222][ T6567] syz.4.2427: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 135.987390][ T9] usb 2-1: USB disconnect, device number 12 [ 135.991991][ T491] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.995108][ T6567] ,cpuset= [ 136.000154][ T491] usb 4-1: not running at top speed; connect to a high speed hub [ 136.006983][ T6567] syz4 [ 136.011581][ T491] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 136.021143][ T6567] ,mems_allowed=0 [ 136.027074][ T491] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.033106][ T6567] [ 136.037554][ T491] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 136.040975][ T6567] CPU: 0 UID: 0 PID: 6567 Comm: syz.4.2427 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 136.041003][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.041014][ T6567] Call Trace: [ 136.041019][ T6567] [ 136.041026][ T6567] __dump_stack+0x21/0x30 [ 136.041051][ T6567] dump_stack_lvl+0x10c/0x190 [ 136.041070][ T6567] ? __cfi_dump_stack_lvl+0x10/0x10 [ 136.041091][ T6567] dump_stack+0x19/0x20 [ 136.041109][ T6567] warn_alloc+0x1bc/0x2a0 [ 136.041126][ T6567] ? __cfi_warn_alloc+0x10/0x10 [ 136.041143][ T6567] ? kasan_save_track+0x3e/0x80 [ 136.041165][ T6567] ? __get_vm_area_node+0x392/0x3a0 [ 136.041183][ T6567] __vmalloc_node_range_noprof+0x361/0x1420 [ 136.041206][ T6567] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 136.041224][ T6567] ? kasan_save_alloc_info+0x40/0x50 [ 136.041242][ T6567] ? arch_dup_task_struct+0x5b/0xe0 [ 136.041263][ T6567] ? __asan_memcpy+0x5a/0x80 [ 136.041282][ T6567] dup_task_struct+0x5bd/0xc50 [ 136.041298][ T6567] ? copy_process+0x538/0x3220 [ 136.041315][ T6567] ? _raw_spin_lock_irq+0x8d/0x120 [ 136.041338][ T6567] ? copy_process+0x3220/0x3220 [ 136.041354][ T6567] ? __kasan_check_write+0x18/0x20 [ 136.041374][ T6567] copy_process+0x538/0x3220 [ 136.041392][ T6567] ? __cfi_copy_process+0x10/0x10 [ 136.041409][ T6567] ? __kasan_check_write+0x18/0x20 [ 136.041427][ T6567] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 136.041461][ T6567] vhost_task_create+0x1d6/0x350 [ 136.041484][ T6567] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 136.041510][ T6567] ? __cfi_vhost_task_create+0x10/0x10 [ 136.041533][ T6567] ? __cfi_vhost_task_fn+0x10/0x10 [ 136.041555][ T6567] ? __kasan_check_write+0x18/0x20 [ 136.041577][ T6567] ? mutex_lock+0x92/0x1c0 [ 136.041595][ T6567] ? __cfi_mutex_lock+0x10/0x10 [ 136.041613][ T6567] ? kernel_text_address+0xa9/0xe0 [ 136.041631][ T6567] kvm_mmu_post_init_vm+0x1a6/0x310 [ 136.041651][ T6567] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 136.041672][ T6567] ? _parse_integer_limit+0x195/0x1e0 [ 136.041692][ T6567] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 136.041709][ T6567] ? kstrtoull+0x13b/0x1e0 [ 136.041726][ T6567] ? kstrtouint+0x78/0xf0 [ 136.041743][ T6567] ? ioctl_has_perm+0x1aa/0x4d0 [ 136.041766][ T6567] ? __asan_memcpy+0x5a/0x80 [ 136.041785][ T6567] ? ioctl_has_perm+0x3e0/0x4d0 [ 136.041809][ T6567] ? has_cap_mac_admin+0xd0/0xd0 [ 136.041831][ T6567] ? __kasan_check_write+0x18/0x20 [ 136.041850][ T6567] ? mutex_lock_killable+0x92/0x1c0 [ 136.041869][ T6567] ? __cfi_mutex_lock_killable+0x10/0x10 [ 136.041889][ T6567] ? proc_fail_nth_write+0x17e/0x210 [ 136.041907][ T6567] kvm_vcpu_ioctl+0x96f/0xee0 [ 136.041930][ T6567] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 136.041952][ T6567] ? __cfi_vfs_write+0x10/0x10 [ 136.041972][ T6567] ? __kasan_check_write+0x18/0x20 [ 136.041991][ T6567] ? mutex_unlock+0x8b/0x240 [ 136.042009][ T6567] ? __cfi_mutex_unlock+0x10/0x10 [ 136.042027][ T6567] ? __fget_files+0x2c5/0x340 [ 136.042050][ T6567] ? __fget_files+0x2c5/0x340 [ 136.042072][ T6567] ? bpf_lsm_file_ioctl+0xd/0x20 [ 136.042091][ T6567] ? security_file_ioctl+0x34/0xd0 [ 136.042113][ T6567] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 136.042134][ T6567] __se_sys_ioctl+0x135/0x1b0 [ 136.042158][ T6567] __x64_sys_ioctl+0x7f/0xa0 [ 136.042180][ T6567] x64_sys_call+0x1878/0x2ee0 [ 136.042200][ T6567] do_syscall_64+0x58/0xf0 [ 136.042215][ T6567] ? clear_bhb_loop+0x50/0xa0 [ 136.042233][ T6567] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 136.042251][ T6567] RIP: 0033:0x7fefead8e929 [ 136.042266][ T6567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.042280][ T6567] RSP: 002b:00007fefeabeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.042299][ T6567] RAX: ffffffffffffffda RBX: 00007fefeafb5fa0 RCX: 00007fefead8e929 [ 136.042312][ T6567] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 136.042323][ T6567] RBP: 00007fefeabeb090 R08: 0000000000000000 R09: 0000000000000000 [ 136.042335][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.042346][ T6567] R13: 0000000000000000 R14: 00007fefeafb5fa0 R15: 00007ffd4d08ce58 [ 136.042360][ T6567] [ 136.045337][ T6567] Mem-Info: [ 136.051943][ T491] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.055522][ T6567] active_anon:5538 inactive_anon:390 isolated_anon:0 [ 136.055522][ T6567] active_file:12061 inactive_file:12513 isolated_file:0 [ 136.055522][ T6567] unevictable:0 dirty:253 writeback:0 [ 136.055522][ T6567] slab_reclaimable:6035 slab_unreclaimable:74825 [ 136.055522][ T6567] mapped:24628 shmem:166 pagetables:853 [ 136.055522][ T6567] sec_pagetables:0 bounce:0 [ 136.055522][ T6567] kernel_misc_reclaimable:0 [ 136.055522][ T6567] free:1520988 free_pcp:2200 free_cma:0 [ 136.060215][ T491] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.065903][ T6567] Node 0 active_anon:22152kB inactive_anon:1560kB active_file:48244kB inactive_file:50052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98512kB dirty:1012kB writeback:0kB shmem:664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4832kB pagetables:3412kB sec_pagetables:0kB all_unreclaimable? no [ 136.071076][ T491] usb 4-1: Product: syz [ 136.076764][ T6567] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966020kB mlocked:0kB bounce:0kB free_pcp:5808kB local_pcp:68kB free_cma:0kB [ 136.081781][ T491] usb 4-1: Manufacturer: syz [ 136.086647][ T6567] lowmem_reserve[]: [ 136.091082][ T491] usb 4-1: SerialNumber: syz [ 136.096502][ T6567] 0 [ 136.102216][ T6560] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 136.107122][ T6567] 3921 [ 136.311950][ T491] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 136.326379][ T6567] 3921 [ 136.334494][ T491] cdc_ncm 4-1:1.0: bind() failure [ 136.337365][ T6567] [ 136.343179][ T491] usb 4-1: USB disconnect, device number 14 [ 136.349447][ T6567] Normal free:3123264kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22220kB inactive_anon:1560kB active_file:48244kB inactive_file:50052kB unevictable:0kB writepending:1012kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3352kB local_pcp:3104kB free_cma:0kB [ 136.864173][ T6573] tmpfs: Unknown parameter 'nosw{p3[y VV!' [ 136.869529][ T6567] lowmem_reserve[]: 0 0 0 [ 136.944867][ T6567] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 136.960591][ T6567] Normal: 596*4kB (UE) 1178*8kB (UME) 955*16kB (UME) 477*32kB (ME) 323*64kB (UME) 161*128kB (UME) 81*256kB (UME) 50*512kB (UME) 34*1024kB (UME) 13*2048kB (UME) 715*4096kB (M) = 3120048kB [ 136.979290][ T6567] 25123 total pagecache pages [ 136.984077][ T6567] 391 pages in swap cache [ 136.988430][ T6567] Free swap = 123168kB [ 136.992624][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 136.992824][ T6567] Total swap = 124996kB [ 137.004522][ T6567] 2097051 pages RAM [ 137.008382][ T6567] 0 pages HighMem/MovableOnly [ 137.013201][ T6567] 351516 pages reserved [ 137.017391][ T6567] 0 pages cma reserved [ 137.023512][ T6567] Memory allocations: [ 137.027544][ T6567] 0 B 0 init/main.c:1370 func:do_initcalls [ 137.034896][ T6567] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 137.043060][ T6567] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 137.050833][ T6567] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 137.058792][ T6567] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 137.066774][ T6567] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 137.075566][ T6567] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 137.083529][ T6567] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 137.091460][ T6567] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 137.099452][ T6567] 0 B 0 init/initramfs.c:101 func:find_link [ 137.152374][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 137.163188][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 137.172473][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.180477][ T9] usb 2-1: Product: syz [ 137.184833][ T9] usb 2-1: Manufacturer: syz [ 137.189443][ T9] usb 2-1: SerialNumber: syz [ 137.203102][ T9] usb 2-1: config 0 descriptor?? [ 137.318195][ T6601] binder: Unknown parameter 'slobz' [ 137.328490][ T6602] binder: Unknown parameter 'slobz' [ 137.362414][ T36] audit: type=1400 audit(2000000017.020:497): avc: denied { remount } for pid=6603 comm="syz.3.2441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 137.413649][ T492] usb 2-1: USB disconnect, device number 13 [ 137.432875][ T6605] binder: Bad value for 'max' [ 137.561975][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2442'. [ 137.602182][ T6610] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2443'. [ 137.644805][ T6610] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.954253][ T6618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 137.954298][ T6618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:169 [ 138.012532][ T6622] kvm: pic: non byte write [ 138.027030][ T6622] random: crng reseeded on system resumption [ 138.054521][ T36] audit: type=1400 audit(2000000017.710:498): avc: denied { accept } for pid=6621 comm="syz.1.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.198301][ T36] audit: type=1400 audit(2000000017.850:499): avc: denied { unmount } for pid=5980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 138.306611][ T6633] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 138.311776][ T428] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 138.370619][ T6636] devtmpfs: Unknown parameter '^ *([%' [ 138.461932][ T9] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 138.481765][ T428] usb 2-1: Using ep0 maxpacket: 8 [ 138.487812][ T428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.498722][ T428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.508653][ T428] usb 2-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 138.517950][ T428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.526525][ T428] usb 2-1: config 0 descriptor?? [ 138.622829][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 138.631161][ T9] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 138.641491][ T9] usb 4-1: config 179 has no interface number 0 [ 138.647846][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 138.659030][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 138.670000][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 138.683264][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 138.692337][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.701155][ T6625] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 138.711778][ T492] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.862857][ T492] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.875797][ T492] usb 5-1: config 1 interface 0 has no altsetting 0 [ 138.883919][ T492] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.40 [ 138.893019][ T492] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.901009][ T492] usb 5-1: Product: 吺啞谿苣」ຠ絹㳾ᏻ锩칫෇煭䜰∍᎒う꠷湝콻雼斳閕ꐌ讑಼⠵㦕ᯖ潥⸰欎┞㒣ꃾ톿؇囶鉨蜽䊎⨄懼렡梪븟둍溝훖䡠陵蟦ޔꝀ핃椮觵桘ﮍ濚륁쮉俗ऌ诘䗡稰ᒘ핟䡶ꁰ釴둉쥋㽍৑凯蠤뎟䶀盇誉◐픰ࡴﱜꭢ鱄攒ﻏ䖭珲Ⰴ剶ꥺ䀂店헷娡௑㏠뉚韉鴲ȇ猅ꥡᾏ䶃㝱 [ 138.934603][ T428] wacom 0003:056A:0002.0009: unknown main item tag 0x0 [ 138.936550][ T492] usb 5-1: Manufacturer: ꋵ㸽轷௾鲷ឝ㜪帶葮㕰೐鋎髪媢듻Ở䓙ԥ୊꩛좘渴ꎂ徎኉㵌잡勃剶圻ꮓ琄๘뢓諕婯郺⼹ꌀ࣯㝆댱뉍ళॏᛊピ煛봚伻玩挑쿩≙螖⤰靶㚝죏貞湱块唓壱㹢鳻ę喉鑪퉺㵉 [ 138.946481][ T428] wacom 0003:056A:0002.0009: unknown main item tag 0x0 [ 138.969289][ T492] usb 5-1: SerialNumber: ࠖ [ 138.976334][ T9] usb 4-1: USB disconnect, device number 15 [ 138.986075][ T428] wacom 0003:056A:0002.0009: unknown main item tag 0x0 [ 138.993555][ T428] wacom 0003:056A:0002.0009: unknown main item tag 0x0 [ 139.000469][ T428] wacom 0003:056A:0002.0009: unknown main item tag 0x0 [ 139.007406][ T428] wacom 0003:056A:0002.0009: unknown main item tag 0x0 [ 139.014592][ T428] wacom 0003:056A:0002.0009: Unknown device_type for 'HID 056a:0002'. Ignoring. [ 139.189762][ T492] usbhid 5-1:1.0: can't add hid device: -71 [ 139.195765][ T492] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 139.206272][ T492] usb 5-1: USB disconnect, device number 4 [ 139.486654][ T6646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 139.486680][ T6646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:212 [ 139.512253][ T6650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6650 comm=syz.3.2460 [ 139.542769][ T36] audit: type=1400 audit(2000000019.200:500): avc: denied { write } for pid=6651 comm="syz.3.2461" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 139.571386][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2462'. [ 139.658560][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2466'. [ 139.681405][ T6666] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.780223][ T36] audit: type=1400 audit(2000000019.430:501): avc: denied { create } for pid=6674 comm="syz.3.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.811070][ T36] audit: type=1400 audit(2000000019.450:502): avc: denied { write } for pid=6674 comm="syz.3.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.831506][ T36] audit: type=1400 audit(2000000019.450:503): avc: denied { nlmsg_read } for pid=6674 comm="syz.3.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.071830][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 140.221782][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 140.228695][ T9] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 16 [ 140.238759][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 140.246831][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.255920][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.263935][ T9] usb 4-1: Product: ࠉ [ 140.268081][ T9] usb 4-1: Manufacturer: ࠒ [ 140.272694][ T9] usb 4-1: SerialNumber: 귭弇㍙憙￴㹸순㻯ୄ䑒濁ᄘ柇۵粯ꐭ坰㽃ᮞ훲⡐룹鉋櫒눿菻⩬䁊㑒쌝┰䇥⟃敮妻眹쟜뫯獹ﭘొ䓡ɞⷹꗾ过跧괝ག잿㱿㭦썚僗顃壡풪侷픻巸홾អ갞矻햁칤ᑭᕍ╖蘙뒢䫗 [ 140.298591][ T6677] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 140.508525][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 140.521066][ T9] usb 4-1: USB disconnect, device number 16 [ 140.735257][ T6681] devtmpfs: Unknown parameter '^ *([%' [ 140.763190][ T6683] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.833818][ T36] audit: type=1326 audit(2000000020.490:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.2474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e6ef8e929 code=0x0 [ 140.838411][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2475'. [ 140.883390][ T6690] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.939558][ T6694] binder: Unknown parameter 'defcontext01777777777777777777777' [ 140.963590][ T6698] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2479'. [ 140.973237][ T6698] binder: Bad value for 'stats' [ 140.978490][ T6699] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2479'. [ 140.978541][ T6698] binder: Bad value for 'stats' [ 141.014826][ T492] usb 2-1: USB disconnect, device number 14 [ 141.080161][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2484'. [ 141.081592][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2483'. [ 141.121326][ T36] audit: type=1400 audit(2000000020.770:505): avc: denied { accept } for pid=6714 comm="syz.1.2485" laddr=ff01::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 141.159834][ T6724] syz.4.2489: attempt to access beyond end of device [ 141.159834][ T6724] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 141.168996][ T6725] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.173538][ T6724] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 141.177049][ T6717] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 141.180851][ T6724] syz.4.2489: attempt to access beyond end of device [ 141.180851][ T6724] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 141.189823][ T6725] input: syz1 as /devices/virtual/input/input12 [ 141.211582][ T6728] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 141.239507][ T36] audit: type=1400 audit(2000000020.890:506): avc: denied { write } for pid=6722 comm="syz.1.2488" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 141.327328][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 141.352686][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2495'. [ 141.372255][ T36] audit: type=1400 audit(2000000021.030:507): avc: denied { mounton } for pid=6745 comm="syz.3.2496" path="/91/file0" dev="tmpfs" ino=499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 141.551764][ T428] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 141.580554][ T36] audit: type=1400 audit(2000000021.240:508): avc: denied { setattr } for pid=6745 comm="syz.3.2496" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.702899][ T428] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.715838][ T428] usb 2-1: config 1 interface 0 has no altsetting 0 [ 141.723785][ T428] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.40 [ 141.732896][ T428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.740869][ T428] usb 2-1: Product: 吺啞谿苣」ຠ絹㳾ᏻ锩칫෇煭䜰∍᎒う꠷湝콻雼斳閕ꐌ讑಼⠵㦕ᯖ潥⸰欎┞㒣ꃾ톿؇囶鉨蜽䊎⨄懼렡梪븟둍溝훖䡠陵蟦ޔꝀ핃椮觵桘ﮍ濚륁쮉俗ऌ诘䗡稰ᒘ핟䡶ꁰ釴둉쥋㽍৑凯蠤뎟䶀盇誉◐픰ࡴﱜꭢ鱄攒ﻏ䖭珲Ⰴ剶ꥺ䀂店헷娡௑㏠뉚韉鴲ȇ猅ꥡᾏ䶃㝱 [ 141.776431][ T428] usb 2-1: Manufacturer: ꋵ㸽轷௾鲷ឝ㜪帶葮㕰೐鋎髪媢듻Ở䓙ԥ୊꩛좘渴ꎂ徎኉㵌잡勃剶圻ꮓ琄๘뢓諕婯郺⼹ꌀ࣯㝆댱뉍ళॏᛊピ煛봚伻玩挑쿩≙螖⤰靶㚝죏貞湱块唓壱㹢鳻ę喉鑪퉺㵉 [ 141.801030][ T428] usb 2-1: SerialNumber: ࠖ [ 142.011202][ T428] usbhid 2-1:1.0: can't add hid device: -71 [ 142.017242][ T428] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 142.026094][ T428] usb 2-1: USB disconnect, device number 15 [ 142.731751][ T6754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:271 [ 142.774261][ T6761] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.866686][ T6768] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.866916][ T6769] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 142.868995][ T6768] rust_binder: Failed to allocate buffer. len:168, is_oneway:false [ 142.893492][ T6777] FAT-fs (rnullb0): bogus number of reserved sectors [ 142.909504][ T6777] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 142.948170][ T6783] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.000302][ T36] audit: type=1400 audit(2000000022.650:509): avc: denied { getopt } for pid=6787 comm="syz.3.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.002784][ T6788] overlay: filesystem on ./bus not supported as upperdir [ 143.039238][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2513'. [ 143.198091][ T6813] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.285729][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 143.351803][ T417] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 143.351864][ T630] Bluetooth: hci0: command 0x1003 tx timeout [ 143.457127][ T6838] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.538599][ T5980] ------------[ cut here ]------------ [ 143.544122][ T5980] WARNING: CPU: 1 PID: 5980 at fs/overlayfs/util.c:600 ovl_dir_modified+0x15a/0x190 [ 143.553524][ T5980] Modules linked in: [ 143.557418][ T5980] CPU: 1 UID: 0 PID: 5980 Comm: syz-executor Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 143.571068][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.581156][ T5980] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 143.586913][ T5980] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 5e 79 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7c a0 45 03 cc e8 86 81 43 ff <0f> 0b e9 3e ff ff ff e8 7a 81 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 143.606596][ T5980] RSP: 0018:ffffc9000f10fb68 EFLAGS: 00010293 [ 143.612794][ T5980] RAX: ffffffff82421f2a RBX: 0000000000000000 RCX: ffff88810cb91300 [ 143.620760][ T5980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.628802][ T5980] RBP: ffffc9000f10fb90 R08: ffff888131f02c3f R09: 1ffff110263e0587 [ 143.636923][ T5980] R10: dffffc0000000000 R11: ffffed10263e0588 R12: 0000000000000000 [ 143.644937][ T5980] R13: dffffc0000000000 R14: ffff888131f02ba0 R15: ffff88811cf2acc0 [ 143.652999][ T5980] FS: 00005555568f7500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 143.661971][ T5980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.668552][ T5980] CR2: 00007ffe6d128d18 CR3: 000000012a5d8000 CR4: 00000000003526b0 [ 143.676628][ T5980] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 143.684841][ T5980] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 143.692842][ T5980] Call Trace: [ 143.696215][ T5980] [ 143.699148][ T5980] ovl_do_remove+0x7b8/0xcf0 [ 143.703826][ T5980] ? ovl_set_redirect+0x780/0x780 [ 143.708861][ T5980] ? down_write+0xe9/0x2a0 [ 143.713299][ T5980] ? __cfi_down_write+0x10/0x10 [ 143.718227][ T5980] ovl_rmdir+0x1e/0x30 [ 143.722361][ T5980] vfs_rmdir+0x3dd/0x560 [ 143.726609][ T5980] incfs_kill_sb+0x109/0x230 [ 143.731186][ T5980] deactivate_locked_super+0xd5/0x2a0 [ 143.736827][ T5980] deactivate_super+0xb8/0xe0 [ 143.741508][ T5980] cleanup_mnt+0x3f1/0x480 [ 143.745946][ T5980] __cleanup_mnt+0x1d/0x40 [ 143.750368][ T5980] task_work_run+0x1e0/0x250 [ 143.754980][ T5980] ? __cfi_task_work_run+0x10/0x10 [ 143.760092][ T5980] ? __x64_sys_umount+0x126/0x170 [ 143.765136][ T5980] ? __cfi___x64_sys_umount+0x10/0x10 [ 143.770509][ T5980] ? __kasan_check_read+0x15/0x20 [ 143.775564][ T5980] resume_user_mode_work+0x36/0x50 [ 143.780675][ T5980] syscall_exit_to_user_mode+0x64/0xb0 [ 143.786205][ T5980] do_syscall_64+0x64/0xf0 [ 143.790625][ T5980] ? clear_bhb_loop+0x50/0xa0 [ 143.795335][ T5980] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 143.801243][ T5980] RIP: 0033:0x7f502198fc57 [ 143.805676][ T5980] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 143.825322][ T5980] RSP: 002b:00007ffe6d12a5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 143.833787][ T5980] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f502198fc57 [ 143.841814][ T5980] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6d12a670 [ 143.849805][ T5980] RBP: 00007ffe6d12a670 R08: 0000000000000000 R09: 0000000000000000 [ 143.857818][ T5980] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe6d12b760 [ 143.865840][ T5980] R13: 00007f5021a10925 R14: 0000000000022eda R15: 00007ffe6d12c830 [ 143.873839][ T5980] [ 143.876857][ T5980] ---[ end trace 0000000000000000 ]--- [ 143.882640][ T5980] ------------[ cut here ]------------ [ 143.888110][ T5980] WARNING: CPU: 0 PID: 5980 at fs/overlayfs/util.c:600 ovl_dir_modified+0x15a/0x190 [ 143.897538][ T5980] Modules linked in: [ 143.901470][ T5980] CPU: 0 UID: 0 PID: 5980 Comm: syz-executor Tainted: G W 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 143.916602][ T5980] Tainted: [W]=WARN [ 143.920399][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.930489][ T5980] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 143.936170][ T5980] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 5e 79 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7c a0 45 03 cc e8 86 81 43 ff <0f> 0b e9 3e ff ff ff e8 7a 81 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 143.955803][ T5980] RSP: 0018:ffffc9000f10fb68 EFLAGS: 00010293 [ 143.961901][ T5980] RAX: ffffffff82421f2a RBX: 0000000000000000 RCX: ffff88810cb91300 [ 143.969874][ T5980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.977870][ T5980] RBP: ffffc9000f10fb90 R08: ffff888131f02c3f R09: 1ffff110263e0587 [ 143.985877][ T5980] R10: dffffc0000000000 R11: ffffed10263e0588 R12: 0000000000000000 [ 143.993877][ T5980] R13: dffffc0000000000 R14: ffff888131f02ba0 R15: ffff88811cf2acc0 [ 144.001875][ T5980] FS: 00005555568f7500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 144.010808][ T5980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.017418][ T5980] CR2: 00007f5e6f181178 CR3: 000000012a5d8000 CR4: 00000000003526b0 [ 144.025422][ T5980] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.033426][ T5980] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.041400][ T5980] Call Trace: [ 144.044716][ T5980] [ 144.047646][ T5980] ovl_do_remove+0x7b8/0xcf0 [ 144.052260][ T5980] ? ovl_set_redirect+0x780/0x780 [ 144.057289][ T5980] ? down_write+0xe9/0x2a0 [ 144.061693][ T5980] ? __cfi_down_write+0x10/0x10 [ 144.066583][ T5980] ovl_rmdir+0x1e/0x30 [ 144.070643][ T5980] vfs_rmdir+0x3dd/0x560 [ 144.074920][ T5980] incfs_kill_sb+0x1a0/0x230 [ 144.079514][ T5980] deactivate_locked_super+0xd5/0x2a0 [ 144.084911][ T5980] deactivate_super+0xb8/0xe0 [ 144.089595][ T5980] cleanup_mnt+0x3f1/0x480 [ 144.094045][ T5980] __cleanup_mnt+0x1d/0x40 [ 144.098478][ T5980] task_work_run+0x1e0/0x250 [ 144.103101][ T5980] ? __cfi_task_work_run+0x10/0x10 [ 144.108212][ T5980] ? __x64_sys_umount+0x126/0x170 [ 144.113254][ T5980] ? __cfi___x64_sys_umount+0x10/0x10 [ 144.118629][ T5980] ? __kasan_check_read+0x15/0x20 [ 144.123676][ T5980] resume_user_mode_work+0x36/0x50 [ 144.128794][ T5980] syscall_exit_to_user_mode+0x64/0xb0 [ 144.134305][ T5980] do_syscall_64+0x64/0xf0 [ 144.138722][ T5980] ? clear_bhb_loop+0x50/0xa0 [ 144.143424][ T5980] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 144.149320][ T5980] RIP: 0033:0x7f502198fc57 [ 144.153881][ T5980] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 144.173530][ T5980] RSP: 002b:00007ffe6d12a5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 144.181968][ T5980] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f502198fc57 [ 144.189940][ T5980] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6d12a670 [ 144.197933][ T5980] RBP: 00007ffe6d12a670 R08: 0000000000000000 R09: 0000000000000000 [ 144.205930][ T5980] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe6d12b760 [ 144.213929][ T5980] R13: 00007f5021a10925 R14: 0000000000022eda R15: 00007ffe6d12c830 [ 144.221926][ T5980] [ 144.224944][ T5980] ---[ end trace 0000000000000000 ]--- [ 144.243485][ T6853] FAULT_INJECTION: forcing a failure. [ 144.243485][ T6853] name failslab, interval 1, probability 0, space 0, times 0 [ 144.256172][ T6853] CPU: 1 UID: 0 PID: 6853 Comm: syz.3.2538 Tainted: G W 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 144.256203][ T6853] Tainted: [W]=WARN [ 144.256210][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.256221][ T6853] Call Trace: [ 144.256227][ T6853] [ 144.256234][ T6853] __dump_stack+0x21/0x30 [ 144.256258][ T6853] dump_stack_lvl+0x10c/0x190 [ 144.256278][ T6853] ? __cfi_dump_stack_lvl+0x10/0x10 [ 144.256299][ T6853] dump_stack+0x19/0x20 [ 144.256316][ T6853] should_fail_ex+0x3d9/0x530 [ 144.256338][ T6853] should_failslab+0xac/0x100 [ 144.256360][ T6853] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 144.256381][ T6853] ? dup_task_struct+0xbc/0xc50 [ 144.256394][ T6853] ? kasan_save_track+0x4f/0x80 [ 144.256414][ T6853] dup_task_struct+0xbc/0xc50 [ 144.256429][ T6853] ? __kasan_check_write+0x18/0x20 [ 144.256448][ T6853] ? _raw_spin_lock_irq+0x8d/0x120 [ 144.256470][ T6853] ? copy_process+0x3220/0x3220 [ 144.256487][ T6853] ? __kasan_check_write+0x18/0x20 [ 144.256507][ T6853] copy_process+0x538/0x3220 [ 144.256527][ T6853] ? __cfi_copy_process+0x10/0x10 [ 144.256544][ T6853] ? __kasan_check_write+0x18/0x20 [ 144.256564][ T6853] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 144.256590][ T6853] vhost_task_create+0x1d6/0x350 [ 144.256613][ T6853] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 144.256638][ T6853] ? __cfi_vhost_task_create+0x10/0x10 [ 144.256661][ T6853] ? __cfi_vhost_task_fn+0x10/0x10 [ 144.256683][ T6853] ? __kasan_check_write+0x18/0x20 [ 144.256701][ T6853] ? mutex_lock+0x92/0x1c0 [ 144.256719][ T6853] ? __cfi_mutex_lock+0x10/0x10 [ 144.256738][ T6853] ? kernel_text_address+0xa9/0xe0 [ 144.256756][ T6853] kvm_mmu_post_init_vm+0x1a6/0x310 [ 144.256777][ T6853] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 144.256795][ T6853] ? _parse_integer_limit+0x195/0x1e0 [ 144.256824][ T6853] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 144.256842][ T6853] ? kstrtoull+0x13b/0x1e0 [ 144.256859][ T6853] ? kstrtouint+0x78/0xf0 [ 144.256877][ T6853] ? ioctl_has_perm+0x1aa/0x4d0 [ 144.256901][ T6853] ? __asan_memcpy+0x5a/0x80 [ 144.256920][ T6853] ? ioctl_has_perm+0x3e0/0x4d0 [ 144.256944][ T6853] ? has_cap_mac_admin+0xd0/0xd0 [ 144.256967][ T6853] ? __kasan_check_write+0x18/0x20 [ 144.256987][ T6853] ? mutex_lock_killable+0x92/0x1c0 [ 144.257006][ T6853] ? __cfi_mutex_lock_killable+0x10/0x10 [ 144.257026][ T6853] ? proc_fail_nth_write+0x17e/0x210 [ 144.257045][ T6853] kvm_vcpu_ioctl+0x96f/0xee0 [ 144.257068][ T6853] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 144.257090][ T6853] ? __cfi_vfs_write+0x10/0x10 [ 144.257111][ T6853] ? __kasan_check_write+0x18/0x20 [ 144.257128][ T6853] ? mutex_unlock+0x8b/0x240 [ 144.257144][ T6853] ? __cfi_mutex_unlock+0x10/0x10 [ 144.257162][ T6853] ? __fget_files+0x2c5/0x340 [ 144.257186][ T6853] ? __fget_files+0x2c5/0x340 [ 144.257209][ T6853] ? bpf_lsm_file_ioctl+0xd/0x20 [ 144.257228][ T6853] ? security_file_ioctl+0x34/0xd0 [ 144.257243][ T6853] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 144.257255][ T6853] __se_sys_ioctl+0x135/0x1b0 [ 144.257269][ T6853] __x64_sys_ioctl+0x7f/0xa0 [ 144.257282][ T6853] x64_sys_call+0x1878/0x2ee0 [ 144.257294][ T6853] do_syscall_64+0x58/0xf0 [ 144.257302][ T6853] ? clear_bhb_loop+0x50/0xa0 [ 144.257313][ T6853] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 144.257324][ T6853] RIP: 0033:0x7f502198e929 [ 144.257333][ T6853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.257342][ T6853] RSP: 002b:00007f5022865038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.257354][ T6853] RAX: ffffffffffffffda RBX: 00007f5021bb5fa0 RCX: 00007f502198e929 [ 144.257362][ T6853] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 144.257370][ T6853] RBP: 00007f5022865090 R08: 0000000000000000 R09: 0000000000000000 [ 144.257377][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.257383][ T6853] R13: 0000000000000000 R14: 00007f5021bb5fa0 R15: 00007ffe6d12c418 [ 144.257391][ T6853]