last executing test programs: 2.02220478s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3080, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x280500) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000140)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@local}) r6 = fsopen(&(0x7f0000001980)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f00000019c0)='uid', &(0x7f0000001a00)='./file0\x00', 0xffffffffffffffff) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x8000, 0x210000}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) write$uinput_user_dev(r0, &(0x7f0000000780)={'syz0\x00', {0x8001, 0x9de, 0xd15, 0x7}, 0x2f, [0xffff, 0x0, 0x4, 0xa, 0x8001, 0x9, 0xbd64405c, 0x8000, 0x6, 0x1, 0x8, 0x1c7, 0x0, 0x0, 0xfffffff7, 0x8, 0x7, 0x355d, 0x8001, 0x11, 0x80000000, 0x7, 0x1, 0xb, 0x8, 0x6, 0x3, 0x7, 0x6, 0x348, 0x8001, 0x1, 0x9, 0x9, 0x1, 0x2, 0xb, 0x401, 0x19, 0xff, 0x20071fe9, 0x5, 0x9, 0x10, 0x7fffffff, 0x1, 0x5fb, 0x5, 0x5, 0x3, 0x10001, 0x700, 0x7, 0x101, 0xfffff1bc, 0x5, 0x4, 0x7, 0x80000001, 0x5, 0x3, 0x40, 0xfffff000, 0x1], [0x3ff, 0x1, 0x80000000, 0x6, 0x5, 0xf, 0x5, 0x1ff, 0xffffffc0, 0x10000, 0xff, 0x1, 0x304, 0x2, 0x8, 0xc2d5, 0x8000, 0x7, 0xb, 0x46, 0x8000, 0x5, 0x1, 0x7f, 0x1, 0x0, 0x3800, 0x40, 0x3, 0x0, 0x0, 0x2, 0x4, 0x5, 0x3ff, 0x7, 0x5, 0x8c, 0x10000, 0x5, 0x9ef5, 0xffffffff, 0x5, 0x0, 0x4, 0x9, 0x1000, 0x1000, 0x9, 0xa, 0x9, 0xf5, 0x800, 0x5, 0x5, 0xa5e, 0x3, 0x2, 0x7, 0x3, 0x9, 0x7, 0x0, 0x785], [0x7, 0x894, 0xd, 0x7, 0x5, 0x3, 0x3, 0x2, 0x3, 0x4, 0xff, 0x1, 0x9, 0x4, 0xde, 0x81, 0x7, 0x2, 0xfffffff8, 0x8, 0x9bac, 0x6, 0x7, 0x5, 0xb082, 0x14000, 0x6, 0xe000, 0x6, 0x9, 0xff8, 0x1, 0x5, 0xad, 0x7, 0x0, 0xb, 0x8001, 0x5, 0x0, 0x400, 0x3a28, 0x7fffffff, 0x7, 0x4, 0xe2, 0x693, 0x7, 0x1, 0xfffff801, 0x6, 0xfffeffff, 0x483, 0xdd, 0x6, 0xff, 0x9, 0xd99, 0x4, 0x1, 0x0, 0x5, 0x4], [0x8, 0xffffffff, 0x8, 0x101, 0x7, 0x13b, 0x3ff, 0xffffffff, 0x7, 0x5, 0x4, 0x3, 0xb, 0x0, 0xfff, 0x2, 0xbb3, 0x9, 0x8000, 0x1, 0x8f75, 0x9, 0x3, 0xb, 0x7f, 0x1, 0x100, 0xb, 0x8, 0x3, 0x4, 0x3, 0x0, 0x8, 0x400, 0x9c, 0x800, 0x4, 0x8, 0x6, 0xff, 0x2, 0x113519a9, 0x8, 0xc, 0x6, 0x9, 0x2, 0x3, 0x7f, 0x3ff, 0x77fc0, 0x3, 0xfffffff7, 0x0, 0x5, 0xf2a6, 0x28000000, 0x1, 0x70, 0x2, 0x401, 0xf, 0xfd97]}, 0x45c) 1.932692342s ago: executing program 3 (id=4): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x10000a}, 0x1c) poll(&(0x7f0000000100)=[{r0, 0x1028}], 0x1, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) poll(&(0x7f0000000040)=[{r0, 0xc08e}, {r0, 0x1014}, {r0, 0x46}, {r0, 0x220}], 0x4, 0x2) 1.848517443s ago: executing program 1 (id=5): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0xcc, 0x0, &(0x7f0000000580)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/127, 0x7f, 0x1, 0x22}, @fda={0x66646185, 0x9, 0x0, 0x32}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}, @increfs, @exit_looper, @register_looper, @enter_looper, @request_death={0x400c630e, 0x1}, @exit_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1, 0x1}, @fda={0x66646185, 0x5, 0x2, 0x32}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f0000000300)={0x0, 0x18, 0x38}}, 0x1400}, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, &(0x7f00000004c0)}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0xdae, 0x0, &(0x7f0000001780)="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"}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000000c0)=0x5, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000740)='cdg\x00', 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000340)=[@exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000040)={0x1ffff, 0x5}) 1.848119663s ago: executing program 0 (id=6): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f00000000c0)) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) 1.838032103s ago: executing program 1 (id=7): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000140)={0xa0, 0x0, 0x0, {{0x2, 0x1, 0x8, 0x8001, 0xfff, 0x2, {0x1, 0x339, 0xe, 0x0, 0xe1, 0x9, 0x6, 0x4, 0x2, 0x2000, 0x3, 0x0, 0x0, 0x1, 0x1}}, {0x0, 0x18}}}, 0xa0) 1.824582703s ago: executing program 2 (id=8): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x20) 1.779097294s ago: executing program 2 (id=9): r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, &(0x7f0000000040)="502240ac75aac8d0a7", 0x9, 0x4000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000c00)={'gre0\x00', &(0x7f0000000b80)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x9, 0xc, {{0x5, 0x4, 0x3, 0x17, 0x14, 0x64, 0x0, 0xc5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x2c}}}}}) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x2d, 0x4) 1.775889734s ago: executing program 0 (id=10): r0 = add_key$fscrypt_v1(&(0x7f0000001280), &(0x7f0000000040)={'fscrypt:', @auto=[0x34, 0x62, 0x66, 0x7c, 0x31, 0x31, 0x62, 0x37, 0x63, 0x37, 0x33, 0x34, 0x38, 0x3d, 0x64, 0x30]}, &(0x7f00000000c0)={0x0, "429d0c5edbae5548a6260bce1f229942d176da275d7f9f2cdc83c409686ca79de9dce3e60cf0ea920a4ac47ef25a45db0c05a8504171f14a9da67990a57f613e", 0x1c}, 0x48, 0xfffffffffffffffc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe8000000000000000000000000000bbff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0x1a0}}, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f0000001580)={0x0, "60e59087c0bc4eecd575619bf7fe717b09a71f2ae77944bdf74658aa573ec7ec5fd9ecb3bf074000010000000070000073f7ab90557743462e2e82cc00", 0x11}, 0x48, r0) socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) unshare(0x22020600) keyctl$read(0xb, r2, &(0x7f0000000280)=""/4096, 0x1000) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000200)=0x8480, 0x4) unshare(0x4020400) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) 1.775414484s ago: executing program 0 (id=11): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x6000) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x4208, r4) getsockopt$inet6_buf(r3, 0x11, 0x2a, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x28011, r6, 0x80000) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0011fc0000007f5775fb337ace5d7ef50b3fbc55d77c752c3df9c3e07717c09f2b2faa0076c3603c319dbab80ac28390b2582df0bc76fc4c215d490fff72bf418c7e569a1ac862417918c694ccc12d1d102b99804bad69addcd3a011ba7e220e726c5eded48b919d7c36e036e3ca91581edc2cc646f0d518baaa1c2560638b97f3a1751f7608d5176ca0ba6042bb9531f80835568d1ddc281400ac95be74eeaca870e8ccc24a81187a8f4d8c9eee66fbb98497aca5521596352417b5897463a939eb755a9839a76fe39ab7abacc61466750e3120b884617a03afec24b9be39d4728c7534ba95e40ef66ec700000000000000"], 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0xfffc, 0x0, 0x58e8, 0xbb57, 0x4, 0x8, 0x1, 0x3, 0x2, 0x9, 0x5, 0x1}}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x81}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) wait4(r4, 0x0, 0x4, &(0x7f0000000500)) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x400}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D$'], 0x38}, 0xc804) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f00003d2000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000280)="660f06c4c1c37d2866b8a1108ed065640f07b9090b00000f32b9bd080000b81834282cba000000000f300f30b94b0a00000f32dd90b200000066ba2000b07dee", 0x40}], 0x1, 0x52, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendfile(r0, r0, 0x0, 0x6) 1.774975504s ago: executing program 2 (id=12): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x1108}}, 0x4010) (fail_nth: 5) 1.713667135s ago: executing program 2 (id=13): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x18}}], 0x1, 0x40000) memfd_secret(0x80000) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x200000000000000) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000e40)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="001e14"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.713309385s ago: executing program 3 (id=14): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000d00)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1.692253855s ago: executing program 3 (id=15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffff, 0xfffffffd, @loopback, 0x4e8}, 0x1c) 1.681716965s ago: executing program 3 (id=16): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054182000000000001090224000100004000090400000157e669eb092105000001220500090581030002000000"], 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0xfff, 0x4}, 0x2) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, 0x0) tgkill(r0, r0, 0x1e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x81, 0x0) close(r3) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd(0xff7ffff7) r8 = eventfd(0x40007) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r8, 0x400, 0x2, r7}) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000080)=0x8) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x63) read(r4, &(0x7f0000000280)=""/4096, 0x1000) ioctl$TUNGETDEVNETNS(r3, 0xff03, 0x0) close(0x4) r9 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x63, 0x0, &(0x7f0000000040)) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 976.579216ms ago: executing program 1 (id=17): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r3, 0x0) openat$cgroup_type(r2, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000200)='THAWED\x00', 0x7) ioctl$BLKRRPART(r0, 0x125f, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r3, 0x0) (async) openat$cgroup_type(r2, &(0x7f0000000180), 0x2, 0x0) (async) openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) (async) openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) (async) write$cgroup_freezer_state(r4, &(0x7f0000000200)='THAWED\x00', 0x7) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 905.981737ms ago: executing program 1 (id=18): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r1 = accept4$tipc(r0, 0x0, &(0x7f0000000200)=0x5f, 0xc0800) recvfrom(r1, &(0x7f0000000080)=""/188, 0xbc, 0x40000062, &(0x7f0000000140)=@can, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, 0xfffffffffffffffe) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) 905.721797ms ago: executing program 1 (id=19): r0 = add_key$fscrypt_v1(&(0x7f0000001280), &(0x7f0000000040)={'fscrypt:', @auto=[0x34, 0x62, 0x66, 0x7c, 0x31, 0x31, 0x62, 0x37, 0x63, 0x37, 0x33, 0x34, 0x38, 0x3d, 0x64, 0x30]}, &(0x7f00000000c0)={0x0, "429d0c5edbae5548a6260bce1f229942d176da275d7f9f2cdc83c409686ca79de9dce3e60cf0ea920a4ac47ef25a45db0c05a8504171f14a9da67990a57f613e", 0x1c}, 0x48, 0xfffffffffffffffc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe8000000000000000000000000000bbff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0x1a0}}, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f0000001580)={0x0, "60e59087c0bc4eecd575619bf7fe717b09a71f2ae77944bdf74658aa573ec7ec5fd9ecb3bf074000010000000070000073f7ab90557743462e2e82cc00", 0x11}, 0x48, r0) socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) unshare(0x22020600) keyctl$read(0xb, r2, &(0x7f0000000280)=""/4096, 0x1000) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000200)=0x8480, 0x4) unshare(0x4020400) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) 905.364577ms ago: executing program 1 (id=20): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f00000008c0)={0x0, 0x9, 0x22, {0x22, 0x11, "d0b87a8d8e69bd9b0801a226bd3791c7475c1c388aaefd93c4d7584187dea84a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r2) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) write(r5, &(0x7f0000000180)="01", 0x1) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000440)={[&(0x7f0000000000)='}{\x00']}, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e23, @private=0xa010100}, {0x2, 0x4e24, @local}, 0x205, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000200000000000, 0x81, 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r6, 0xff01, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x27, &(0x7f0000000000)=0x8, 0x4) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x14, r9, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4004) r10 = socket$key(0xf, 0x3, 0x2) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0000090000030097e70de8619a2e6c5813dd0ab3e844cc0976ffebebc5d13f15c19a4a11e124b7bdea665f94f11c4fa9d4fe60fc2769a91588220c12b0635a24a9b9e17448813a877e185f4ab9b83c8d64006145f62c1509a7d6e4facc00000000000000000000000000000000000000000000000000002858eafe29b9cf6a58ac4ad0922493b1cff8b2dde503fa0478713d", @ANYRES32=r12, @ANYBLOB="0c009900008000006c0000000a000600ffffffffffff000005000800000000001c00508004000600110001005f01e2ca0d5ea1820bdd0794bc0000000a0006000802110000010000"], 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x30004000) sendmsg$key(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"/4352], 0x1108}}, 0x4010) 372.175394ms ago: executing program 3 (id=21): r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, &(0x7f0000000040)="502240ac75aac8d0a7", 0x9, 0x4000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x2d, 0x4) 337.819685ms ago: executing program 3 (id=22): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x4, 0x3, 0x1000, 0xffffffffffffffff}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x100131, 0xffffffffffffffff, 0x3a8bc000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000280)="bb6c18006103910000000002004756f2c5432b2b1766a83a463b8682d681a9919219a898c61c74baf0198d3faed9dfcf9ea0752946e52371b1d1ea272b5c0cda7b6e25f9a7d8be0d12e97822ffafc4882beb6a698e48de6389c838096c4b6852ba8e9a43d2aa69a010c58811a3d938d1093a1c9f07890d2fea98f53bb5c54d79159ddf18fbc8a9d6c8695c9ff33379304e14496e17d8354f1413ac10828fea52f7eb469267d17dbf3e45b38b5ab97ed204ed6f7c34", 0xb5, 0xb, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003000000106b1d010140000102030109025f00030156c0020904000000010100000a24010101d50201020904010000010200000904010101010200000905010920009301090725018103480f090402000001020000090402010101020000090582dc20000d02040f250126080300824250dbe16d6bc4e29cca3ebc1f8e877a3783b8c48c04"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) recvfrom$inet(r2, &(0x7f0000000200)=""/8, 0x8, 0x89100120, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x80082102, &(0x7f0000000240)={r5, 0x1, r4, 0x6}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x10}}, 0x50) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0x603f) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000140)) read(r1, &(0x7f0000000040)=""/106, 0x6a) 114.150858ms ago: executing program 0 (id=23): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@private0, 0x0}, &(0x7f0000000280)=0x14) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r3, 0x0, 0x0) write$selinux_context(r3, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@private1, 0x56, r2}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f00000000c0)=""/235, 0x4000, 0x1800, 0x1, 0x1}, 0x20) getsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000200)=0x4) 57.885299ms ago: executing program 0 (id=24): r0 = socket$inet(0x2, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fsetxattr(r0, &(0x7f0000000240)=@known='security.selinux\x00', &(0x7f0000000280)=']\\\'o$!&}$]\x00', 0xb, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x0, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x3000, 0x4, 0x4, 0x8, 0x0, 0x1, 0x1, 0x20, 0x0, 0x4, 0x10}, {0x0, 0x4000, 0x8, 0x0, 0x0, 0x9, 0xfc, 0x0, 0x6, 0x2}, {0xdddd1000, 0xeee68004, 0x3, 0x1, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0xeeef0000, 0xeeeed000, 0xe, 0x0, 0x2, 0x0, 0x3, 0xfa}, {0x0, 0x5000, 0x0, 0xf8, 0x0, 0xa, 0x0, 0x0, 0x3, 0x75, 0x1}, {0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x4}, {0x10000, 0x5000, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x10}, {0xe001}, {}, 0xfdfcffdf, 0x0, 0x2000, 0x302034, 0x0, 0x500, 0x0, [0x0, 0x0, 0x1, 0xfffffffffffffffd]}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4140aecd, &(0x7f0000000040)) close(r0) r4 = socket$inet(0x2, 0x2, 0x0) shutdown(r2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240), 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_clone(0x80000000, &(0x7f0000000380)="9f96454697e78cdce3410d708cb25fb7a221c0408c565b4b5170cb7bc32cd13310d71cc35a9df5ada3364a8f77109e6cc7a34b440ffff4254be16bf452ab54c76269fd580d9e3afc2449ee604e1fd31ce1aa26330f30cd872b20648a69804fc5f08de71a7008b6230f06611c9506cbcc18ae31be62b895572aead05afa0b33ab34a73f74f91597fdb977df1d32f14b5d9a8c46e67bd744fd9a19e9396c515787dac7a1b52a22e1980e06a8b158a1ec6cf01a68ace0e91ab4a1c479088fd313bbe3000dfa14582cd69f7d76ab5674", 0xce, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000500)="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") ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000be9000/0x1000)=nil, 0x1000, 0x15) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xab, 0x1, 0x0, 0x0, 0x40000000}, {0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x101}]}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x65) 0s ago: executing program 0 (id=25): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000025c0)={{}, {0x1, 0x2}, [], {0x4, 0x6}, [], {0x10, 0x5}, {0x20, 0x9958f4666b226945}}, 0x24, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000100)="02494e78716195b7a8b6857baea2bdd21f94e59285ab2e952884e6fff99e35f6e97404040981eb94955f53af52ae5f31211ea2d29f35895d335f5c142b5a8abff3d1e6befdc42042a99ab5139c24b3ff93af6bbccce1eac377a1b345a8ac3652c1bfc2d4a9dccf92823352bdbc12d059830bdb81af8244eb35b1178171f363be05c252e047ca8a31b53ab5daee9e1a5130d9a7b8412212793d9db4cf03d4c589cf7226b8e4defd31d586c0a82ac9d1ab52be0c71988dcdf9b7646abbac5d4ea2280aed943d83e5686a5541759ee4", 0xce}, {&(0x7f0000000000)="70b841ac5f2c006a8ba75dbd", 0xc}, {&(0x7f0000000200)="a7aa5f38b9bb8ce7775dfd61783938a0d1c1f1e557f3c13fc3716936ac8c92b12a8afc37289f3363b7c732c50cfc0f2d14eeaf17c18fee0f17dd08cdec376d827e0212a7f4a288bb1ac7125199de5108af193ccc7790097832faa311ef96708664efa007fceacaa514449d09341bb8d8e195121e08503d9546c40b30bc8aeba43b3998f4a1fce6c85b172770441b", 0x8e}, {&(0x7f0000000400)="dfd68fb22f872a09809be11f02f9e5ff265902db5a1f18b5cbd0e114cf4e1df962aa560e4748a13f828923f145e88e990187e683f5ac8b152c41620c7ad610fc1ee9d4cc3728ad747510d76565adb163748f755d4f326347bb17f903c13cca36c488d9cd5537d822422ffff9d7d79b55f39215e67bd9380420cf3a5687b764c1a13185008c91a809569417840123a8d3c4631afe2f33a991e4e258557c1ede69b37d807a7d83fd3c6273186ae0f97bf9a1c3bb48d72ad0051cf3c88851943de08915cf5e990328734afbef262d26a36b2fc7bccb41a56957600ef0fc2d7d07503cb78f73873384042e1843eac5eaba212f0d", 0xf2}, {&(0x7f0000000300)="07e64ccb40b9d37a5d0a3920cc1ea0d0910f4c4116210e7912e151f7e4df119ec41c895c30ed8f7e341b03a2f8f83765b7527811dffb3b9e8f41eedf20a71a2e8af23bf5952548a4447c3e04be54c86db9242dc872ea0f43cd97d0bff293b19bcaabe1c633cde935be31bc3ef63ef8a13a68155f3d88ec667f428d88a4d0a45786ed12d71d1d9e13290775fdacd337f9f517d6b9efd20e1c1087d6e75a", 0x9d}], 0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}, @register_looper, @decrefs], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 22.135020][ T36] audit: type=1400 audit(1750433294.550:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.136433][ T282] cgroup: Unknown subsys name 'net' [ 22.157708][ T36] audit: type=1400 audit(1750433294.550:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.185266][ T36] audit: type=1400 audit(1750433294.580:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.185465][ T282] cgroup: Unknown subsys name 'devices' [ 22.354183][ T282] cgroup: Unknown subsys name 'hugetlb' [ 22.359845][ T282] cgroup: Unknown subsys name 'rlimit' [ 22.455869][ T36] audit: type=1400 audit(1750433294.870:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.479390][ T36] audit: type=1400 audit(1750433294.870:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.504614][ T36] audit: type=1400 audit(1750433294.870:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.533903][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.542901][ T36] audit: type=1400 audit(1750433294.960:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.555398][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.568708][ T36] audit: type=1400 audit(1750433294.960:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.603878][ T36] audit: type=1400 audit(1750433294.970:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.629418][ T36] audit: type=1400 audit(1750433294.970:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.841765][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.848835][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.856189][ T289] bridge_slave_0: entered allmulticast mode [ 23.862584][ T289] bridge_slave_0: entered promiscuous mode [ 23.876120][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.883261][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.890435][ T292] bridge_slave_0: entered allmulticast mode [ 23.896944][ T292] bridge_slave_0: entered promiscuous mode [ 23.903346][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.910428][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.917674][ T289] bridge_slave_1: entered allmulticast mode [ 23.924029][ T289] bridge_slave_1: entered promiscuous mode [ 23.939594][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.946725][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.954057][ T292] bridge_slave_1: entered allmulticast mode [ 23.960464][ T292] bridge_slave_1: entered promiscuous mode [ 24.005334][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.012429][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.019708][ T291] bridge_slave_0: entered allmulticast mode [ 24.026142][ T291] bridge_slave_0: entered promiscuous mode [ 24.037726][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.044848][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.051996][ T291] bridge_slave_1: entered allmulticast mode [ 24.058351][ T291] bridge_slave_1: entered promiscuous mode [ 24.071549][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.078621][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.085905][ T290] bridge_slave_0: entered allmulticast mode [ 24.092368][ T290] bridge_slave_0: entered promiscuous mode [ 24.108177][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.115268][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.122385][ T290] bridge_slave_1: entered allmulticast mode [ 24.128657][ T290] bridge_slave_1: entered promiscuous mode [ 24.285673][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.292771][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.300068][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.307144][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.339802][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.346908][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.354259][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.361668][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.371922][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.378995][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.386337][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.393401][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.405203][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.412297][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.419579][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.426848][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.452894][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.460706][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.468740][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.476063][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.484017][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.491606][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.499211][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.506657][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.528195][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.535310][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.549987][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.557102][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.583998][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.591076][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.606669][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.613770][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.642374][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.649440][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.657568][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.664655][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.672646][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.679683][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.691688][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.698760][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.724123][ T289] veth0_vlan: entered promiscuous mode [ 24.748682][ T292] veth0_vlan: entered promiscuous mode [ 24.760914][ T289] veth1_macvtap: entered promiscuous mode [ 24.770714][ T292] veth1_macvtap: entered promiscuous mode [ 24.797848][ T291] veth0_vlan: entered promiscuous mode [ 24.809338][ T290] veth0_vlan: entered promiscuous mode [ 24.836046][ T291] veth1_macvtap: entered promiscuous mode [ 24.847841][ T290] veth1_macvtap: entered promiscuous mode [ 24.856055][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.943482][ T309] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.992479][ T319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 25.013431][ T322] ======================================================= [ 25.013431][ T322] WARNING: The mand mount option has been deprecated and [ 25.013431][ T322] and is ignored by this kernel. Remove the mand [ 25.013431][ T322] option from the mount to silence this warning. [ 25.013431][ T322] ======================================================= [ 25.058693][ T322] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 25.107552][ T329] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.168750][ T336] SELinux: policydb magic number 0x65677568 does not match expected magic number 0xf97cff8c [ 25.169923][ T340] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 25.182045][ T336] SELinux: failed to load policy [ 25.186989][ T340] rust_binder: Write failure EINVAL in pid:5 [ 25.431640][ T64] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.461609][ T74] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.481656][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.592773][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.604206][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.614253][ T64] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 25.621567][ T74] usb 1-1: Using ep0 maxpacket: 32 [ 25.623474][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.629835][ T74] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 25.641686][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 25.646279][ T74] usb 1-1: config 0 has no interface number 0 [ 25.650230][ T64] usb 3-1: config 0 descriptor?? [ 25.661382][ T74] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 25.662274][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.672962][ T74] usb 1-1: config 0 interface 85 has no altsetting 0 [ 25.684388][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 25.693683][ T74] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 25.699987][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.709377][ T74] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.717981][ T45] usb 4-1: config 0 descriptor?? [ 25.725093][ T74] usb 1-1: Product: syz [ 25.733729][ T74] usb 1-1: Manufacturer: syz [ 25.738916][ T74] usb 1-1: SerialNumber: syz [ 25.744891][ T74] usb 1-1: config 0 descriptor?? [ 26.064188][ T64] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 26.071972][ T64] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 26.079414][ T64] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 26.087014][ T64] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 26.094519][ T64] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 26.102780][ T45] usb 4-1: string descriptor 0 read error: -71 [ 26.116908][ T64] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 26.129549][ T45] usb 4-1: USB disconnect, device number 2 [ 26.231571][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.263770][ T64] playstation 0003:054C:0DF2.0001: Invalid reportID received, expected 9 got 0 [ 26.272925][ T64] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -22 [ 26.283129][ T64] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 26.283129][ T74] usb 1-1: USB disconnect, device number 2 [ 26.283161][ T64] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 26.306292][ T64] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -22 [ 26.381579][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 26.387930][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.399092][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.408933][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.422251][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 26.431349][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.440410][ T31] usb 2-1: config 0 descriptor?? [ 26.468293][ T74] usb 3-1: USB disconnect, device number 2 [ 26.817543][ T373] SELinux: Context ]\'o$!&}$] is not valid (left unmapped). [ 26.825102][ T64] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 26.852788][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x2 [ 26.864401][ T31] microsoft 0003:045E:07DA.0002: unknown global tag 0xc [ 26.871511][ T31] microsoft 0003:045E:07DA.0002: item 0 0 1 12 parsing failed [ 26.879317][ T31] microsoft 0003:045E:07DA.0002: parse failed [ 26.886175][ T31] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 26.921047][ T378] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 26.921047][ T378] attempt to subtract with overflow [ 26.934332][ T378] ------------[ cut here ]------------ [ 26.939832][ T378] kernel BUG at rust/helpers/bug.c:7! [ 26.945762][ T378] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 26.952855][ T378] CPU: 0 UID: 0 PID: 378 Comm: syz.0.25 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 26.966091][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 26.976196][ T378] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 26.981556][ T378] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 fe 5d 6d fd 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 b4 99 24 71 90 90 90 90 90 90 90 90 90 [ 27.001203][ T378] RSP: 0018:ffffc9000e225a90 EFLAGS: 00010246 [ 27.007325][ T378] RAX: 0000000000000061 RBX: 1ffff92001c44b54 RCX: 94d3062738921a00 [ 27.015334][ T378] RDX: ffffc900015d1000 RSI: 0000000000002cdd RDI: 0000000000002cde [ 27.023351][ T378] RBP: ffffc9000e225a90 R08: ffffc9000e225787 R09: 1ffff92001c44af0 [ 27.031365][ T378] R10: dffffc0000000000 R11: fffff52001c44af1 R12: 0000000000000000 [ 27.039380][ T378] R13: dffffc0000000000 R14: ffffc9000e225ac0 R15: ffffc9000e225af0 [ 27.047389][ T378] FS: 00007fe7ebabd6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.056360][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.056692][ T64] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.063010][ T378] CR2: 00007fe7ebabcf98 CR3: 0000000113220000 CR4: 00000000003526b0 [ 27.063038][ T378] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.063051][ T378] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.063067][ T378] Call Trace: [ 27.063074][ T378] [ 27.084562][ T64] usb 4-1: not running at top speed; connect to a high speed hub [ 27.086673][ T378] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 27.110572][ T64] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 27.116110][ T378] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 27.116153][ T378] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 27.125690][ T361] Zero length message leads to an empty skb [ 27.132843][ T378] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 27.152363][ T64] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 27.162663][ T378] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 27.162721][ T378] ? __kasan_check_write+0x18/0x20 [ 27.188748][ T378] ? _raw_spin_lock+0x8c/0x120 [ 27.189441][ T64] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.193553][ T378] ? __cfi__raw_spin_lock+0x10/0x10 [ 27.193586][ T378] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 27.193619][ T378] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 27.193652][ T378] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 27.193680][ T378] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 27.193710][ T378] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 27.214708][ T64] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.214993][ T378] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 27.223367][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.232807][ T378] ? __kasan_check_write+0x18/0x20 [ 27.232842][ T378] ? _raw_spin_lock+0x8c/0x120 [ 27.232870][ T378] ? __cfi__raw_spin_lock+0x10/0x10 [ 27.258999][ T64] usb 4-1: Product: syz [ 27.262220][ T378] ? __kasan_check_write+0x18/0x20 [ 27.262256][ T378] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 27.283816][ T64] usb 4-1: Manufacturer: syz [ 27.285470][ T378] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 27.291424][ T64] usb 4-1: SerialNumber: syz [ 27.295597][ T378] ? is_bpf_text_address+0x17b/0x1a0 [ 27.295643][ T378] ? kernel_text_address+0xa9/0xe0 [ 27.344044][ T378] ? unwind_get_return_address+0x51/0x90 [ 27.349740][ T378] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 27.356067][ T378] ? arch_stack_walk+0x10b/0x170 [ 27.361071][ T378] ? stack_depot_save_flags+0x38/0x800 [ 27.366585][ T378] ? kasan_save_alloc_info+0x40/0x50 [ 27.371916][ T378] ? kasan_save_track+0x4f/0x80 [ 27.376814][ T378] ? kasan_save_track+0x3e/0x80 [ 27.381737][ T378] ? kasan_save_alloc_info+0x40/0x50 [ 27.387068][ T378] ? __kasan_kmalloc+0x96/0xb0 [ 27.391893][ T378] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 27.398527][ T378] ? krealloc_noprof+0x8d/0x130 [ 27.403429][ T378] ? rust_helper_krealloc+0x33/0xd0 [ 27.408691][ T378] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 27.418299][ T378] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 27.429464][ T378] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 27.439073][ T378] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 27.447813][ T378] ? __se_sys_ioctl+0x132/0x1b0 [ 27.453124][ T378] ? __x64_sys_ioctl+0x7f/0xa0 [ 27.457952][ T378] ? do_syscall_64+0x58/0xf0 [ 27.462590][ T378] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.468715][ T378] ? __kasan_kmalloc+0x96/0xb0 [ 27.473531][ T378] ? kasan_save_alloc_info+0x40/0x50 [ 27.478865][ T378] ? __kasan_kmalloc+0x96/0xb0 [ 27.483681][ T378] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 27.490321][ T378] ? __kasan_check_write+0x18/0x20 [ 27.495484][ T378] ? _raw_spin_lock+0x8c/0x120 [ 27.500325][ T378] ? __cfi__raw_spin_lock+0x10/0x10 [ 27.505673][ T378] ? __asan_memset+0x39/0x50 [ 27.510343][ T378] ? _raw_spin_unlock+0x45/0x60 [ 27.515264][ T378] ? rust_helper_spin_unlock+0x19/0x30 [ 27.520774][ T378] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440 [ 27.531333][ T378] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 27.542154][ T378] ? kvm_sched_clock_read+0x15/0x30 [ 27.547406][ T378] ? sched_clock_noinstr+0xd/0x30 [ 27.552486][ T378] ? sched_clock+0x44/0x60 [ 27.556947][ T378] ? sched_clock_cpu+0x75/0x400 [ 27.561850][ T378] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 27.567973][ T378] ? __cfi___switch_to+0x10/0x10 [ 27.572964][ T378] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 27.582140][ T378] ? finish_task_switch+0x13a/0x780 [ 27.587405][ T378] ? __switch_to_asm+0x3d/0x70 [ 27.592242][ T378] ? avc_has_extended_perms+0x7c7/0xdd0 [ 27.597851][ T378] ? __asan_memcpy+0x5a/0x80 [ 27.602600][ T378] ? avc_has_extended_perms+0x921/0xdd0 [ 27.608205][ T378] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 27.617827][ T378] ? do_vfs_ioctl+0xeda/0x1e30 [ 27.622656][ T378] ? __futex_queue+0x19a/0x340 [ 27.627577][ T378] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 27.633452][ T378] ? __cfi___futex_queue+0x10/0x10 [ 27.638646][ T378] ? futex_wait_setup+0x1bc/0x260 [ 27.643736][ T378] ? __futex_wait+0x218/0x2a0 [ 27.648477][ T378] ? ioctl_has_perm+0x384/0x4d0 [ 27.653397][ T378] ? has_cap_mac_admin+0xd0/0xd0 [ 27.658407][ T378] ? futex_wake+0x63a/0x900 [ 27.662965][ T378] ? futex_setup_timer+0xb4/0xd0 [ 27.667957][ T378] ? futex_wait+0x288/0x540 [ 27.672512][ T378] ? __cfi_futex_wait+0x10/0x10 [ 27.677425][ T378] ? selinux_file_ioctl+0x6e0/0x1360 [ 27.683042][ T378] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 27.688658][ T378] ? do_futex+0x309/0x500 [ 27.693044][ T378] ? __cfi_do_futex+0x10/0x10 [ 27.697769][ T378] ? __fget_files+0x2c5/0x340 [ 27.702502][ T378] ? __fget_files+0x2c5/0x340 [ 27.707225][ T378] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 27.715769][ T378] ? __se_sys_ioctl+0x114/0x1b0 [ 27.720680][ T378] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 27.729824][ T378] __se_sys_ioctl+0x132/0x1b0 [ 27.734558][ T378] __x64_sys_ioctl+0x7f/0xa0 [ 27.739192][ T378] x64_sys_call+0x1878/0x2ee0 [ 27.743904][ T378] do_syscall_64+0x58/0xf0 [ 27.748350][ T378] ? clear_bhb_loop+0x35/0x90 [ 27.753069][ T378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.759006][ T378] RIP: 0033:0x7fe7eab8e929 [ 27.763474][ T378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 27.783096][ T378] RSP: 002b:00007fe7ebabd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.791534][ T378] RAX: ffffffffffffffda RBX: 00007fe7eadb5fa0 RCX: 00007fe7eab8e929 [ 27.799530][ T378] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 27.807525][ T378] RBP: 00007fe7eac10b39 R08: 0000000000000000 R09: 0000000000000000 [ 27.815517][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.823522][ T378] R13: 0000000000000000 R14: 00007fe7eadb5fa0 R15: 00007ffe140995c8 [ 27.831518][ T378] [ 27.834551][ T378] Modules linked in: [ 27.838937][ T378] ---[ end trace 0000000000000000 ]--- [ 27.846179][ T348] usb 2-1: USB disconnect, device number 2 [ 27.848932][ T378] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 27.857425][ T378] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 fe 5d 6d fd 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 b4 99 24 71 90 90 90 90 90 90 90 90 90 [ 27.877479][ T378] RSP: 0018:ffffc9000e225a90 EFLAGS: 00010246 [ 27.883627][ T378] RAX: 0000000000000061 RBX: 1ffff92001c44b54 RCX: 94d3062738921a00 [ 27.891965][ T378] RDX: ffffc900015d1000 RSI: 0000000000002cdd RDI: 0000000000002cde [ 27.901305][ T378] RBP: ffffc9000e225a90 R08: ffffc9000e225787 R09: 1ffff92001c44af0 [ 27.909338][ T378] R10: dffffc0000000000 R11: fffff52001c44af1 R12: 0000000000000000 [ 27.917865][ T378] R13: dffffc0000000000 R14: ffffc9000e225ac0 R15: ffffc9000e225af0 [ 27.926024][ T378] FS: 00007fe7ebabd6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.935281][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.941926][ T378] CR2: 00007fe7ebabcf98 CR3: 0000000113220000 CR4: 00000000003526b0 [ 27.949927][ T378] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.957993][ T378] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.966025][ T378] Kernel panic - not syncing: Fatal exception [ 27.972255][ T378] Kernel Offset: disabled [ 27.976585][ T378] Rebooting in 86400 seconds..